@zealamic/payload-auth-rbac-plugin 1.0.0-beta.1 → 1.0.0-beta.10

package/dist/components/role-permission-matrix-client/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/components/role-permission-matrix-client/index.tsx"],"sourcesContent":["\"use client\";\n\nimport {\n  useConfig,\n  useDocumentInfo,\n  useField,\n  useTranslation,\n} from \"@payloadcms/ui\";\nimport { Fragment, useEffect, useId, useMemo, useRef, useState } from \"react\";\nimport type { PermissionAction } from \"../../collections/permission-actions/types.js\";\nimport type { PermissionFeature } from \"../../collections/permission-features/types.js\";\nimport type { Permission } from \"../../collections/permissions/types.js\";\nimport type { RolePermission } from \"../../collections/roles-permissions/types.js\";\nimport { STATUS as PERMISSION_STATUS } from \"../../lib/constants/permission.js\";\nimport {\n  STATUS as PERMISSION_ACTION_STATUS,\n  TYPE,\n} from \"../../lib/constants/permission-action.js\";\nimport { STATUS as PERMISSION_FEATURE_STATUS } from \"../../lib/constants/permission-feature.js\";\nimport { toID } from \"../../lib/utils/data.js\";\n\ntype ApiListResponse<T> = {\n  docs?: T[];\n};\n\nexport const RolePermissionMatrixClient = () => {\n  const checkboxId = useId();\n  const { config } = useConfig();\n  const { hasSavePermission, id } = useDocumentInfo();\n  const { setValue, value } = useField<Record<string, boolean> | null>({\n    path: \"permissionMatrixDraft\",\n  });\n  const isReadOnly = !hasSavePermission;\n\n  const [features, setFeatures] = useState<PermissionFeature[]>([]);\n  const [actions, setActions] = useState<PermissionAction[]>([]);\n  const [permissions, setPermissions] = useState<Permission[]>([]);\n  const [rolePermissions, setRolePermissions] = useState<RolePermission[]>([]);\n  const [loading, setLoading] = useState(true);\n  const { t } = useTranslation();\n  const seededForRoleIdRef = useRef<string | null>(null);\n\n  useEffect(() => {\n    const run = async () => {\n      setLoading(true);\n      try {\n        const base = config?.routes?.api || \"/api\";\n\n        const [featuresRes, actionsRes, permissionsRes, rolePermissionsRes] =\n          await Promise.all([\n            fetch(\n              `${base}/permission-features?limit=0&depth=0&where[status][equals]=${PERMISSION_FEATURE_STATUS.ACTIVE}`,\n              { credentials: \"include\" },\n            ),\n            fetch(\n              `${base}/permission-actions?limit=0&depth=0&where[status][equals]=${PERMISSION_ACTION_STATUS.ACTIVE}`,\n              { credentials: \"include\" },\n            ),\n            fetch(\n              `${base}/permissions?limit=0&depth=1&where[status][equals]=${PERMISSION_STATUS.ACTIVE}`,\n              { credentials: \"include\" },\n            ),\n            id\n              ? fetch(\n                  `${base}/roles-permissions?limit=0&depth=0&where[role][equals]=${id}`,\n                  {\n                    credentials: \"include\",\n                  },\n                )\n              : Promise.resolve(new Response(JSON.stringify({ docs: [] }))),\n          ]);\n\n        const featuresJson =\n          (await featuresRes.json()) as ApiListResponse<PermissionFeature>;\n        const actionsJson =\n          (await actionsRes.json()) as ApiListResponse<PermissionAction>;\n        const permissionsJson =\n          (await permissionsRes.json()) as ApiListResponse<Permission>;\n        const rolePermissionsJson =\n          (await rolePermissionsRes.json()) as ApiListResponse<RolePermission>;\n\n        setFeatures(\n          featuresJson.docs?.sort(\n            (a, b) => (a?.sortOrder ?? 0) - (b?.sortOrder ?? 0),\n          ) || [],\n        );\n        setActions(\n          actionsJson.docs?.sort(\n            (a, b) => (a?.sortOrder ?? 0) - (b?.sortOrder ?? 0),\n          ) || [],\n        );\n        setPermissions(permissionsJson.docs || []);\n        setRolePermissions(rolePermissionsJson.docs || []);\n      } finally {\n        setLoading(false);\n      }\n    };\n\n    void run();\n  }, [config?.routes?.api, id]);\n\n  const enabledByPermissionID = useMemo(() => {\n    const map = new Map<string, boolean>();\n    for (const row of rolePermissions) {\n      map.set(toID(row.permission), Boolean(row.enabled));\n    }\n    return map;\n  }, [rolePermissions]);\n\n  const draftValue = (\n    value && typeof value === \"object\" && !Array.isArray(value) ? value : {}\n  ) as Record<string, boolean>;\n\n  useEffect(() => {\n    if (!id || loading) {\n      return;\n    }\n\n    const roleId = String(id);\n    if (seededForRoleIdRef.current === roleId) {\n      return;\n    }\n\n    const fromRolesPermissions: Record<string, boolean> = {};\n    for (const [permissionID, enabled] of enabledByPermissionID.entries()) {\n      if (permissionID) {\n        fromRolesPermissions[permissionID] = enabled;\n      }\n    }\n\n    const fromDocument =\n      value && typeof value === \"object\" && !Array.isArray(value)\n        ? (value as Record<string, boolean>)\n        : {};\n\n    const hasRolesPermissions = Object.keys(fromRolesPermissions).length > 0;\n    const hasDocumentDraft = Object.keys(fromDocument).length > 0;\n\n    if (!hasRolesPermissions && !hasDocumentDraft) {\n      return;\n    }\n\n    seededForRoleIdRef.current = roleId;\n    setValue({\n      ...fromRolesPermissions,\n      ...fromDocument,\n    });\n  }, [enabledByPermissionID, id, loading, setValue, value]);\n\n  if (!id) {\n    return (\n      <div style={{ opacity: 0.8, padding: \"8px 0\" }}>\n        {t(\n          `components:rolePermissionMatrix:viewInUpdateScreenOnly:label` as Parameters<\n            typeof t\n          >[0],\n        )}\n      </div>\n    );\n  }\n\n  if (loading) {\n    return (\n      <div style={{ opacity: 0.8, padding: \"8px 0\" }}>\n        {t(\n          `components:rolePermissionMatrix:loading:placeholder` as Parameters<\n            typeof t\n          >[0],\n        )}\n      </div>\n    );\n  }\n\n  return (\n    <div>\n      <div style={{ fontWeight: 600, marginBottom: 8 }}>\n        {t(`components:rolePermissionMatrix:title` as Parameters<typeof t>[0])}\n      </div>\n\n      <div style={{ border: \"1px solid #333\", borderRadius: 8 }}>\n        <table\n          style={{\n            borderCollapse: \"collapse\",\n            width: \"100%\",\n          }}\n        >\n          <thead>\n            <tr>\n              <th\n                style={{\n                  padding: \"8px\",\n                  textAlign: \"left\",\n                  borderRight: \"1px solid #333\",\n                  width: \"25%\",\n                }}\n              >\n                {t(\n                  `components:rolePermissionMatrix:features:label` as Parameters<\n                    typeof t\n                  >[0],\n                )}\n              </th>\n              <th\n                style={{ padding: \"8px\", textAlign: \"left\" }}\n                colSpan={\n                  actions.filter((action) => action.type === TYPE.MAIN).length\n                }\n              >\n                {t(\n                  `components:rolePermissionMatrix:actions:label` as Parameters<\n                    typeof t\n                  >[0],\n                )}\n              </th>\n            </tr>\n          </thead>\n          <tbody>\n            {features.map((feature) => {\n              const mainActions = actions.filter(\n                (action) => action.type === TYPE.MAIN,\n              );\n              const subActions = actions.filter(\n                (action) =>\n                  action.type === TYPE.SUB &&\n                  permissions.some(\n                    (permission) =>\n                      toID(permission.permissionAction) === String(action.id) &&\n                      toID(permission.permissionFeature) === String(feature.id),\n                  ),\n              );\n              const isSubActionInPermission = subActions.length > 0;\n\n              return (\n                <Fragment key={String(feature.id)}>\n                  <tr>\n                    <td\n                      style={{\n                        borderTop: \"1px solid #333\",\n                        padding: \"0.5rem\",\n                        borderRight: \"1px solid #333\",\n                      }}\n                    >\n                      {feature.code || feature.id}\n                    </td>\n\n                    {mainActions.map((action) => {\n                      const matchedPermission = permissions.find(\n                        (permission) =>\n                          toID(permission.permissionFeature) ===\n                            String(feature.id) &&\n                          toID(permission.permissionAction) ===\n                            String(action.id),\n                      );\n\n                      if (!matchedPermission) {\n                        return (\n                          <td\n                            key={`${feature.id}-${action.id}`}\n                            style={{\n                              borderTop: \"1px solid #333\",\n                              padding: \"0.5rem\",\n                            }}\n                          >\n                            -\n                          </td>\n                        );\n                      }\n\n                      const permissionID = String(matchedPermission.id);\n                      const checked =\n                        typeof draftValue[permissionID] === \"boolean\"\n                          ? draftValue[permissionID]\n                          : (enabledByPermissionID.get(permissionID) ?? false);\n\n                      return (\n                        <td\n                          key={`${feature.id}-${action.id}`}\n                          style={{\n                            borderTop: \"1px solid #333\",\n                            padding: \"0.5rem\",\n                          }}\n                        >\n                          <div\n                            style={{\n                              display: \"flex\",\n                              alignItems: \"center\",\n                            }}\n                          >\n                            <input\n                              type=\"checkbox\"\n                              id={`permission-matrix-checkbox-${checkboxId}-${feature.id}-${action.id}`}\n                              name={`permission-matrix-checkbox-${checkboxId}-${feature.id}-${action.id}`}\n                              checked={checked}\n                              disabled={isReadOnly}\n                              onChange={(event) => {\n                                setValue({\n                                  ...draftValue,\n                                  [permissionID]: event.target.checked,\n                                });\n                              }}\n                              style={{\n                                userSelect: \"none\",\n                                cursor: \"pointer\",\n                              }}\n                            />\n                            <label\n                              htmlFor={`permission-matrix-checkbox-${checkboxId}-${feature.id}-${action.id}`}\n                              style={{\n                                display: \"inline-block\",\n                                paddingLeft: \"0.25rem\",\n                                userSelect: \"none\",\n                                cursor: \"pointer\",\n                              }}\n                            >\n                              {t(\n                                `components:rolePermissionMatrix:actions:${action.code}` as Parameters<\n                                  typeof t\n                                >[0],\n                              ) || action.id}\n                            </label>\n                          </div>\n                        </td>\n                      );\n                    })}\n                  </tr>\n\n                  {isSubActionInPermission && (\n                    <tr>\n                      <td\n                        style={{\n                          borderRight: \"1px solid #333\",\n                          padding: \"8px\",\n                          textAlign: \"right\",\n                        }}\n                      ></td>\n                      <td\n                        style={{\n                          borderTop: \"1px solid #333\",\n                          padding: \"8px\",\n                          textAlign: \"left\",\n                        }}\n                        colSpan={mainActions.length}\n                      >\n                        {subActions.map((action) => {\n                          const matchedPermission = permissions.find(\n                            (permission) =>\n                              toID(permission.permissionFeature) ===\n                                String(feature.id) &&\n                              toID(permission.permissionAction) ===\n                                String(action.id),\n                          );\n\n                          if (!matchedPermission) {\n                            return null;\n                          }\n\n                          const permissionID = String(matchedPermission.id);\n                          const checked =\n                            typeof draftValue[permissionID] === \"boolean\"\n                              ? draftValue[permissionID]\n                              : (enabledByPermissionID.get(permissionID) ??\n                                false);\n\n                          return (\n                            <div key={`${feature.id}-${action.id}-sub`}>\n                              <input\n                                type=\"checkbox\"\n                                checked={checked}\n                                disabled={isReadOnly}\n                                onChange={(event) => {\n                                  setValue({\n                                    ...draftValue,\n                                    [permissionID]: event.target.checked,\n                                  });\n                                }}\n                              />{\" \"}\n                              <span\n                                style={{\n                                  display: \"inline-block\",\n                                }}\n                              >\n                                {action.code || action.id}\n                              </span>\n                            </div>\n                          );\n                        })}\n                      </td>\n                    </tr>\n                  )}\n                </Fragment>\n              );\n            })}\n          </tbody>\n        </table>\n      </div>\n    </div>\n  );\n};\n"],"names":["useConfig","useDocumentInfo","useField","useTranslation","Fragment","useEffect","useId","useMemo","useRef","useState","STATUS","PERMISSION_STATUS","PERMISSION_ACTION_STATUS","TYPE","PERMISSION_FEATURE_STATUS","toID","RolePermissionMatrixClient","checkboxId","config","hasSavePermission","id","setValue","value","path","isReadOnly","features","setFeatures","actions","setActions","permissions","setPermissions","rolePermissions","setRolePermissions","loading","setLoading","t","seededForRoleIdRef","run","base","routes","api","featuresRes","actionsRes","permissionsRes","rolePermissionsRes","Promise","all","fetch","ACTIVE","credentials","resolve","Response","JSON","stringify","docs","featuresJson","json","actionsJson","permissionsJson","rolePermissionsJson","sort","a","b","sortOrder","enabledByPermissionID","map","Map","row","set","permission","Boolean","enabled","draftValue","Array","isArray","roleId","String","current","fromRolesPermissions","permissionID","entries","fromDocument","hasRolesPermissions","Object","keys","length","hasDocumentDraft","div","style","opacity","padding","fontWeight","marginBottom","border","borderRadius","table","borderCollapse","width","thead","tr","th","textAlign","borderRight","colSpan","filter","action","type","MAIN","tbody","feature","mainActions","subActions","SUB","some","permissionAction","permissionFeature","isSubActionInPermission","td","borderTop","code","matchedPermission","find","checked","get","display","alignItems","input","name","disabled","onChange","event","target","userSelect","cursor","label","htmlFor","paddingLeft","span"],"mappings":"AAAA;;AAEA,SACEA,SAAS,EACTC,eAAe,EACfC,QAAQ,EACRC,cAAc,QACT,iBAAiB;AACxB,SAASC,QAAQ,EAAEC,SAAS,EAAEC,KAAK,EAAEC,OAAO,EAAEC,MAAM,EAAEC,QAAQ,QAAQ,QAAQ;AAK9E,SAASC,UAAUC,iBAAiB,QAAQ,oCAAoC;AAChF,SACED,UAAUE,wBAAwB,EAClCC,IAAI,QACC,2CAA2C;AAClD,SAASH,UAAUI,yBAAyB,QAAQ,4CAA4C;AAChG,SAASC,IAAI,QAAQ,0BAA0B;AAM/C,OAAO,MAAMC,6BAA6B;IACxC,MAAMC,aAAaX;IACnB,MAAM,EAAEY,MAAM,EAAE,GAAGlB;IACnB,MAAM,EAAEmB,iBAAiB,EAAEC,EAAE,EAAE,GAAGnB;IAClC,MAAM,EAAEoB,QAAQ,EAAEC,KAAK,EAAE,GAAGpB,SAAyC;QACnEqB,MAAM;IACR;IACA,MAAMC,aAAa,CAACL;IAEpB,MAAM,CAACM,UAAUC,YAAY,GAAGjB,SAA8B,EAAE;IAChE,MAAM,CAACkB,SAASC,WAAW,GAAGnB,SAA6B,EAAE;IAC7D,MAAM,CAACoB,aAAaC,eAAe,GAAGrB,SAAuB,EAAE;IAC/D,MAAM,CAACsB,iBAAiBC,mBAAmB,GAAGvB,SAA2B,EAAE;IAC3E,MAAM,CAACwB,SAASC,WAAW,GAAGzB,SAAS;IACvC,MAAM,EAAE0B,CAAC,EAAE,GAAGhC;IACd,MAAMiC,qBAAqB5B,OAAsB;IAEjDH,UAAU;QACR,MAAMgC,MAAM;YACVH,WAAW;YACX,IAAI;gBACF,MAAMI,OAAOpB,QAAQqB,QAAQC,OAAO;gBAEpC,MAAM,CAACC,aAAaC,YAAYC,gBAAgBC,mBAAmB,GACjE,MAAMC,QAAQC,GAAG,CAAC;oBAChBC,MACE,GAAGT,KAAK,2DAA2D,EAAExB,0BAA0BkC,MAAM,EAAE,EACvG;wBAAEC,aAAa;oBAAU;oBAE3BF,MACE,GAAGT,KAAK,0DAA0D,EAAE1B,yBAAyBoC,MAAM,EAAE,EACrG;wBAAEC,aAAa;oBAAU;oBAE3BF,MACE,GAAGT,KAAK,mDAAmD,EAAE3B,kBAAkBqC,MAAM,EAAE,EACvF;wBAAEC,aAAa;oBAAU;oBAE3B7B,KACI2B,MACE,GAAGT,KAAK,uDAAuD,EAAElB,IAAI,EACrE;wBACE6B,aAAa;oBACf,KAEFJ,QAAQK,OAAO,CAAC,IAAIC,SAASC,KAAKC,SAAS,CAAC;wBAAEC,MAAM,EAAE;oBAAC;iBAC5D;gBAEH,MAAMC,eACH,MAAMd,YAAYe,IAAI;gBACzB,MAAMC,cACH,MAAMf,WAAWc,IAAI;gBACxB,MAAME,kBACH,MAAMf,eAAea,IAAI;gBAC5B,MAAMG,sBACH,MAAMf,mBAAmBY,IAAI;gBAEhC9B,YACE6B,aAAaD,IAAI,EAAEM,KACjB,CAACC,GAAGC,IAAM,AAACD,CAAAA,GAAGE,aAAa,CAAA,IAAMD,CAAAA,GAAGC,aAAa,CAAA,MAC9C,EAAE;gBAETnC,WACE6B,YAAYH,IAAI,EAAEM,KAChB,CAACC,GAAGC,IAAM,AAACD,CAAAA,GAAGE,aAAa,CAAA,IAAMD,CAAAA,GAAGC,aAAa,CAAA,MAC9C,EAAE;gBAETjC,eAAe4B,gBAAgBJ,IAAI,IAAI,EAAE;gBACzCtB,mBAAmB2B,oBAAoBL,IAAI,IAAI,EAAE;YACnD,SAAU;gBACRpB,WAAW;YACb;QACF;QAEA,KAAKG;IACP,GAAG;QAACnB,QAAQqB,QAAQC;QAAKpB;KAAG;IAE5B,MAAM4C,wBAAwBzD,QAAQ;QACpC,MAAM0D,MAAM,IAAIC;QAChB,KAAK,MAAMC,OAAOpC,gBAAiB;YACjCkC,IAAIG,GAAG,CAACrD,KAAKoD,IAAIE,UAAU,GAAGC,QAAQH,IAAII,OAAO;QACnD;QACA,OAAON;IACT,GAAG;QAAClC;KAAgB;IAEpB,MAAMyC,aACJlD,SAAS,OAAOA,UAAU,YAAY,CAACmD,MAAMC,OAAO,CAACpD,SAASA,QAAQ,CAAC;IAGzEjB,UAAU;QACR,IAAI,CAACe,MAAMa,SAAS;YAClB;QACF;QAEA,MAAM0C,SAASC,OAAOxD;QACtB,IAAIgB,mBAAmByC,OAAO,KAAKF,QAAQ;YACzC;QACF;QAEA,MAAMG,uBAAgD,CAAC;QACvD,KAAK,MAAM,CAACC,cAAcR,QAAQ,IAAIP,sBAAsBgB,OAAO,GAAI;YACrE,IAAID,cAAc;gBAChBD,oBAAoB,CAACC,aAAa,GAAGR;YACvC;QACF;QAEA,MAAMU,eACJ3D,SAAS,OAAOA,UAAU,YAAY,CAACmD,MAAMC,OAAO,CAACpD,SAChDA,QACD,CAAC;QAEP,MAAM4D,sBAAsBC,OAAOC,IAAI,CAACN,sBAAsBO,MAAM,GAAG;QACvE,MAAMC,mBAAmBH,OAAOC,IAAI,CAACH,cAAcI,MAAM,GAAG;QAE5D,IAAI,CAACH,uBAAuB,CAACI,kBAAkB;YAC7C;QACF;QAEAlD,mBAAmByC,OAAO,GAAGF;QAC7BtD,SAAS;YACP,GAAGyD,oBAAoB;YACvB,GAAGG,YAAY;QACjB;IACF,GAAG;QAACjB;QAAuB5C;QAAIa;QAASZ;QAAUC;KAAM;IAExD,IAAI,CAACF,IAAI;QACP,qBACE,KAACmE;YAAIC,OAAO;gBAAEC,SAAS;gBAAKC,SAAS;YAAQ;sBAC1CvD,EACC,CAAC,4DAA4D,CAAC;;IAMtE;IAEA,IAAIF,SAAS;QACX,qBACE,KAACsD;YAAIC,OAAO;gBAAEC,SAAS;gBAAKC,SAAS;YAAQ;sBAC1CvD,EACC,CAAC,mDAAmD,CAAC;;IAM7D;IAEA,qBACE,MAACoD;;0BACC,KAACA;gBAAIC,OAAO;oBAAEG,YAAY;oBAAKC,cAAc;gBAAE;0BAC5CzD,EAAE,CAAC,qCAAqC,CAAC;;0BAG5C,KAACoD;gBAAIC,OAAO;oBAAEK,QAAQ;oBAAkBC,cAAc;gBAAE;0BACtD,cAAA,MAACC;oBACCP,OAAO;wBACLQ,gBAAgB;wBAChBC,OAAO;oBACT;;sCAEA,KAACC;sCACC,cAAA,MAACC;;kDACC,KAACC;wCACCZ,OAAO;4CACLE,SAAS;4CACTW,WAAW;4CACXC,aAAa;4CACbL,OAAO;wCACT;kDAEC9D,EACC,CAAC,8CAA8C,CAAC;;kDAKpD,KAACiE;wCACCZ,OAAO;4CAAEE,SAAS;4CAAOW,WAAW;wCAAO;wCAC3CE,SACE5E,QAAQ6E,MAAM,CAAC,CAACC,SAAWA,OAAOC,IAAI,KAAK7F,KAAK8F,IAAI,EAAEtB,MAAM;kDAG7DlD,EACC,CAAC,6CAA6C,CAAC;;;;;sCAOvD,KAACyE;sCACEnF,SAASwC,GAAG,CAAC,CAAC4C;gCACb,MAAMC,cAAcnF,QAAQ6E,MAAM,CAChC,CAACC,SAAWA,OAAOC,IAAI,KAAK7F,KAAK8F,IAAI;gCAEvC,MAAMI,aAAapF,QAAQ6E,MAAM,CAC/B,CAACC,SACCA,OAAOC,IAAI,KAAK7F,KAAKmG,GAAG,IACxBnF,YAAYoF,IAAI,CACd,CAAC5C,aACCtD,KAAKsD,WAAW6C,gBAAgB,MAAMtC,OAAO6B,OAAOrF,EAAE,KACtDL,KAAKsD,WAAW8C,iBAAiB,MAAMvC,OAAOiC,QAAQzF,EAAE;gCAGhE,MAAMgG,0BAA0BL,WAAW1B,MAAM,GAAG;gCAEpD,qBACE,MAACjF;;sDACC,MAAC+F;;8DACC,KAACkB;oDACC7B,OAAO;wDACL8B,WAAW;wDACX5B,SAAS;wDACTY,aAAa;oDACf;8DAECO,QAAQU,IAAI,IAAIV,QAAQzF,EAAE;;gDAG5B0F,YAAY7C,GAAG,CAAC,CAACwC;oDAChB,MAAMe,oBAAoB3F,YAAY4F,IAAI,CACxC,CAACpD,aACCtD,KAAKsD,WAAW8C,iBAAiB,MAC/BvC,OAAOiC,QAAQzF,EAAE,KACnBL,KAAKsD,WAAW6C,gBAAgB,MAC9BtC,OAAO6B,OAAOrF,EAAE;oDAGtB,IAAI,CAACoG,mBAAmB;wDACtB,qBACE,KAACH;4DAEC7B,OAAO;gEACL8B,WAAW;gEACX5B,SAAS;4DACX;sEACD;2DALM,GAAGmB,QAAQzF,EAAE,CAAC,CAAC,EAAEqF,OAAOrF,EAAE,EAAE;oDASvC;oDAEA,MAAM2D,eAAeH,OAAO4C,kBAAkBpG,EAAE;oDAChD,MAAMsG,UACJ,OAAOlD,UAAU,CAACO,aAAa,KAAK,YAChCP,UAAU,CAACO,aAAa,GACvBf,sBAAsB2D,GAAG,CAAC5C,iBAAiB;oDAElD,qBACE,KAACsC;wDAEC7B,OAAO;4DACL8B,WAAW;4DACX5B,SAAS;wDACX;kEAEA,cAAA,MAACH;4DACCC,OAAO;gEACLoC,SAAS;gEACTC,YAAY;4DACd;;8EAEA,KAACC;oEACCpB,MAAK;oEACLtF,IAAI,CAAC,2BAA2B,EAAEH,WAAW,CAAC,EAAE4F,QAAQzF,EAAE,CAAC,CAAC,EAAEqF,OAAOrF,EAAE,EAAE;oEACzE2G,MAAM,CAAC,2BAA2B,EAAE9G,WAAW,CAAC,EAAE4F,QAAQzF,EAAE,CAAC,CAAC,EAAEqF,OAAOrF,EAAE,EAAE;oEAC3EsG,SAASA;oEACTM,UAAUxG;oEACVyG,UAAU,CAACC;wEACT7G,SAAS;4EACP,GAAGmD,UAAU;4EACb,CAACO,aAAa,EAAEmD,MAAMC,MAAM,CAACT,OAAO;wEACtC;oEACF;oEACAlC,OAAO;wEACL4C,YAAY;wEACZC,QAAQ;oEACV;;8EAEF,KAACC;oEACCC,SAAS,CAAC,2BAA2B,EAAEtH,WAAW,CAAC,EAAE4F,QAAQzF,EAAE,CAAC,CAAC,EAAEqF,OAAOrF,EAAE,EAAE;oEAC9EoE,OAAO;wEACLoC,SAAS;wEACTY,aAAa;wEACbJ,YAAY;wEACZC,QAAQ;oEACV;8EAEClG,EACC,CAAC,wCAAwC,EAAEsE,OAAOc,IAAI,EAAE,KAGrDd,OAAOrF,EAAE;;;;uDA1Cb,GAAGyF,QAAQzF,EAAE,CAAC,CAAC,EAAEqF,OAAOrF,EAAE,EAAE;gDA+CvC;;;wCAGDgG,yCACC,MAACjB;;8DACC,KAACkB;oDACC7B,OAAO;wDACLc,aAAa;wDACbZ,SAAS;wDACTW,WAAW;oDACb;;8DAEF,KAACgB;oDACC7B,OAAO;wDACL8B,WAAW;wDACX5B,SAAS;wDACTW,WAAW;oDACb;oDACAE,SAASO,YAAYzB,MAAM;8DAE1B0B,WAAW9C,GAAG,CAAC,CAACwC;wDACf,MAAMe,oBAAoB3F,YAAY4F,IAAI,CACxC,CAACpD,aACCtD,KAAKsD,WAAW8C,iBAAiB,MAC/BvC,OAAOiC,QAAQzF,EAAE,KACnBL,KAAKsD,WAAW6C,gBAAgB,MAC9BtC,OAAO6B,OAAOrF,EAAE;wDAGtB,IAAI,CAACoG,mBAAmB;4DACtB,OAAO;wDACT;wDAEA,MAAMzC,eAAeH,OAAO4C,kBAAkBpG,EAAE;wDAChD,MAAMsG,UACJ,OAAOlD,UAAU,CAACO,aAAa,KAAK,YAChCP,UAAU,CAACO,aAAa,GACvBf,sBAAsB2D,GAAG,CAAC5C,iBAC3B;wDAEN,qBACE,MAACQ;;8EACC,KAACuC;oEACCpB,MAAK;oEACLgB,SAASA;oEACTM,UAAUxG;oEACVyG,UAAU,CAACC;wEACT7G,SAAS;4EACP,GAAGmD,UAAU;4EACb,CAACO,aAAa,EAAEmD,MAAMC,MAAM,CAACT,OAAO;wEACtC;oEACF;;gEACC;8EACH,KAACe;oEACCjD,OAAO;wEACLoC,SAAS;oEACX;8EAECnB,OAAOc,IAAI,IAAId,OAAOrF,EAAE;;;2DAjBnB,GAAGyF,QAAQzF,EAAE,CAAC,CAAC,EAAEqF,OAAOrF,EAAE,CAAC,IAAI,CAAC;oDAqB9C;;;;;mCAxJOwD,OAAOiC,QAAQzF,EAAE;4BA8JpC;;;;;;;AAMZ,EAAE"}
+{"version":3,"sources":["../../../src/components/role-permission-matrix-client/index.tsx"],"sourcesContent":["\"use client\";\n\nimport {\n  useConfig,\n  useDocumentInfo,\n  useField,\n  useTranslation,\n} from \"@payloadcms/ui\";\nimport { Fragment, useEffect, useId, useMemo, useRef, useState } from \"react\";\nimport type { PermissionAction } from \"../../collections/permission-actions/types.js\";\nimport type { PermissionFeature } from \"../../collections/permission-features/types.js\";\nimport type { Permission } from \"../../collections/permissions/types.js\";\nimport type { RolePermission } from \"../../collections/roles-permissions/types.js\";\nimport { STATUS as PERMISSION_STATUS } from \"../../lib/constants/permission.js\";\nimport {\n  STATUS as PERMISSION_ACTION_STATUS,\n  TYPE,\n} from \"../../lib/constants/permission-action.js\";\nimport { STATUS as PERMISSION_FEATURE_STATUS } from \"../../lib/constants/permission-feature.js\";\nimport { toID } from \"../../lib/utils/data.js\";\n\nimport styles from \"./matrix.module.scss\";\n\nconst RBAC_PREFIX = \"rbac\";\n\ntype ApiListResponse<T> = {\n  docs?: T[];\n};\n\nexport const RolePermissionMatrixClient = () => {\n  const checkboxId = useId();\n  const { config } = useConfig();\n  const { hasSavePermission, id } = useDocumentInfo();\n  const { setValue, value } = useField<Record<string, boolean> | null>({\n    path: \"permissionMatrixDraft\",\n  });\n  const isReadOnly = !hasSavePermission;\n\n  const [features, setFeatures] = useState<PermissionFeature[]>([]);\n  const [actions, setActions] = useState<PermissionAction[]>([]);\n  const [permissions, setPermissions] = useState<Permission[]>([]);\n  const [rolePermissions, setRolePermissions] = useState<RolePermission[]>([]);\n  const [loading, setLoading] = useState(true);\n  const { t } = useTranslation();\n  const seededForRoleIdRef = useRef<string | null>(null);\n\n  useEffect(() => {\n    const run = async () => {\n      setLoading(true);\n      try {\n        const base = config?.routes?.api || \"/api\";\n\n        const [featuresRes, actionsRes, permissionsRes, rolePermissionsRes] =\n          await Promise.all([\n            fetch(\n              `${base}/permission-features?limit=0&depth=0&where[status][equals]=${PERMISSION_FEATURE_STATUS.ACTIVE}`,\n              { credentials: \"include\" },\n            ),\n            fetch(\n              `${base}/permission-actions?limit=0&depth=0&where[status][equals]=${PERMISSION_ACTION_STATUS.ACTIVE}`,\n              { credentials: \"include\" },\n            ),\n            fetch(\n              `${base}/permissions?limit=0&depth=1&where[status][equals]=${PERMISSION_STATUS.ACTIVE}`,\n              { credentials: \"include\" },\n            ),\n            id\n              ? fetch(\n                  `${base}/roles-permissions?limit=0&depth=0&where[role][equals]=${id}`,\n                  {\n                    credentials: \"include\",\n                  },\n                )\n              : Promise.resolve(new Response(JSON.stringify({ docs: [] }))),\n          ]);\n\n        const featuresJson =\n          (await featuresRes.json()) as ApiListResponse<PermissionFeature>;\n        const actionsJson =\n          (await actionsRes.json()) as ApiListResponse<PermissionAction>;\n        const permissionsJson =\n          (await permissionsRes.json()) as ApiListResponse<Permission>;\n        const rolePermissionsJson =\n          (await rolePermissionsRes.json()) as ApiListResponse<RolePermission>;\n\n        setFeatures(\n          featuresJson.docs?.sort(\n            (a, b) => (a?.sortOrder ?? 0) - (b?.sortOrder ?? 0),\n          ) || [],\n        );\n        setActions(\n          actionsJson.docs?.sort(\n            (a, b) => (a?.sortOrder ?? 0) - (b?.sortOrder ?? 0),\n          ) || [],\n        );\n        setPermissions(permissionsJson.docs || []);\n        setRolePermissions(rolePermissionsJson.docs || []);\n      } finally {\n        setLoading(false);\n      }\n    };\n\n    void run();\n  }, [config?.routes?.api, id]);\n\n  const enabledByPermissionID = useMemo(() => {\n    const map = new Map<string, boolean>();\n    for (const row of rolePermissions) {\n      map.set(toID(row.permission), Boolean(row.enabled));\n    }\n    return map;\n  }, [rolePermissions]);\n\n  const draftValue = (\n    value && typeof value === \"object\" && !Array.isArray(value) ? value : {}\n  ) as Record<string, boolean>;\n\n  useEffect(() => {\n    if (!id || loading) {\n      return;\n    }\n\n    const roleId = String(id);\n    if (seededForRoleIdRef.current === roleId) {\n      return;\n    }\n\n    const fromRolesPermissions: Record<string, boolean> = {};\n    for (const [permissionID, enabled] of enabledByPermissionID.entries()) {\n      if (permissionID) {\n        fromRolesPermissions[permissionID] = enabled;\n      }\n    }\n\n    const fromDocument =\n      value && typeof value === \"object\" && !Array.isArray(value)\n        ? (value as Record<string, boolean>)\n        : {};\n\n    const hasRolesPermissions = Object.keys(fromRolesPermissions).length > 0;\n    const hasDocumentDraft = Object.keys(fromDocument).length > 0;\n\n    if (!hasRolesPermissions && !hasDocumentDraft) {\n      return;\n    }\n\n    seededForRoleIdRef.current = roleId;\n    setValue({\n      ...fromRolesPermissions,\n      ...fromDocument,\n    });\n  }, [enabledByPermissionID, id, loading, setValue, value]);\n\n  if (!id) {\n    return (\n      <div className={styles[`${RBAC_PREFIX}-component-placeholder`]}>\n        {t(\n          `components:rolePermissionMatrix:viewInUpdateScreenOnly:label` as Parameters<\n            typeof t\n          >[0],\n        )}\n      </div>\n    );\n  }\n\n  if (loading) {\n    return (\n      <div className={styles[`${RBAC_PREFIX}-component-placeholder`]}>\n        {t(\n          `components:rolePermissionMatrix:loading:placeholder` as Parameters<\n            typeof t\n          >[0],\n        )}\n      </div>\n    );\n  }\n\n  return (\n    <div>\n      <div className={styles[`${RBAC_PREFIX}-component-title`]}>\n        {t(`components:rolePermissionMatrix:title` as Parameters<typeof t>[0])}\n      </div>\n\n      <div className={styles[`${RBAC_PREFIX}-table-container`]}>\n        <table className={styles[`${RBAC_PREFIX}-table`]}>\n          <thead>\n            <tr>\n              <th className={styles[`${RBAC_PREFIX}-table-th-feature`]}>\n                {t(\n                  `components:rolePermissionMatrix:features:label` as Parameters<\n                    typeof t\n                  >[0],\n                )}\n              </th>\n              <th\n                className={styles[`${RBAC_PREFIX}-table-th-action`]}\n                colSpan={\n                  actions.filter((action) => action.type === TYPE.MAIN).length\n                }\n              >\n                {t(\n                  `components:rolePermissionMatrix:actions:label` as Parameters<\n                    typeof t\n                  >[0],\n                )}\n              </th>\n            </tr>\n          </thead>\n          <tbody>\n            {features.map((feature) => {\n              const mainActions = actions.filter(\n                (action) => action.type === TYPE.MAIN,\n              );\n              const subActions = actions.filter(\n                (action) =>\n                  action.type === TYPE.SUB &&\n                  permissions.some(\n                    (permission) =>\n                      toID(permission.permissionAction) === String(action.id) &&\n                      toID(permission.permissionFeature) === String(feature.id),\n                  ),\n              );\n              const isSubActionInPermission = subActions.length > 0;\n\n              return (\n                <Fragment key={String(feature.id)}>\n                  <tr>\n                    <td className={styles[`${RBAC_PREFIX}-table-td-feature`]}>\n                      {t(\n                        `components:rolePermissionMatrix:features:${feature.code}` as Parameters<\n                          typeof t\n                        >[0],\n                      ) || feature.id}\n                    </td>\n\n                    {mainActions.map((action) => {\n                      const matchedPermission = permissions.find(\n                        (permission) =>\n                          toID(permission.permissionFeature) ===\n                            String(feature.id) &&\n                          toID(permission.permissionAction) ===\n                            String(action.id),\n                      );\n\n                      if (!matchedPermission) {\n                        return (\n                          <td\n                            key={`${feature.id}-${action.id}`}\n                            className={styles[`${RBAC_PREFIX}-table-td-action`]}\n                          >\n                            -\n                          </td>\n                        );\n                      }\n\n                      const permissionID = String(matchedPermission.id);\n                      const checked =\n                        typeof draftValue[permissionID] === \"boolean\"\n                          ? draftValue[permissionID]\n                          : (enabledByPermissionID.get(permissionID) ?? false);\n\n                      return (\n                        <td\n                          key={`${feature.id}-${action.id}`}\n                          className={styles[`${RBAC_PREFIX}-table-td-action`]}\n                        >\n                          <div\n                            className={\n                              styles[`${RBAC_PREFIX}-table-td-action-container`]\n                            }\n                          >\n                            <input\n                              type=\"checkbox\"\n                              id={`permission-matrix-checkbox-${checkboxId}-${feature.id}-${action.id}`}\n                              name={`permission-matrix-checkbox-${checkboxId}-${feature.id}-${action.id}`}\n                              checked={checked}\n                              disabled={isReadOnly}\n                              onChange={(event) => {\n                                setValue({\n                                  ...draftValue,\n                                  [permissionID]: event.target.checked,\n                                });\n                              }}\n                              className={\n                                styles[`${RBAC_PREFIX}-table-td-action-input`]\n                              }\n                            />\n                            <label\n                              htmlFor={`permission-matrix-checkbox-${checkboxId}-${feature.id}-${action.id}`}\n                              className={\n                                styles[`${RBAC_PREFIX}-table-td-action-label`]\n                              }\n                            >\n                              {t(\n                                `components:rolePermissionMatrix:actions:${action.code}` as Parameters<\n                                  typeof t\n                                >[0],\n                              ) || action.id}\n                            </label>\n                          </div>\n                        </td>\n                      );\n                    })}\n                  </tr>\n\n                  {isSubActionInPermission && (\n                    <tr>\n                      <td\n                        className={styles[`${RBAC_PREFIX}-table-td-feature`]}\n                      ></td>\n                      <td\n                        className={styles[`${RBAC_PREFIX}-table-td-action`]}\n                        colSpan={mainActions.length}\n                      >\n                        {subActions.map((action) => {\n                          const matchedPermission = permissions.find(\n                            (permission) =>\n                              toID(permission.permissionFeature) ===\n                                String(feature.id) &&\n                              toID(permission.permissionAction) ===\n                                String(action.id),\n                          );\n\n                          if (!matchedPermission) {\n                            return null;\n                          }\n\n                          const permissionID = String(matchedPermission.id);\n                          const checked =\n                            typeof draftValue[permissionID] === \"boolean\"\n                              ? draftValue[permissionID]\n                              : (enabledByPermissionID.get(permissionID) ??\n                                false);\n\n                          return (\n                            <div key={`${feature.id}-${action.id}-sub`}>\n                              <input\n                                type=\"checkbox\"\n                                checked={checked}\n                                disabled={isReadOnly}\n                                onChange={(event) => {\n                                  setValue({\n                                    ...draftValue,\n                                    [permissionID]: event.target.checked,\n                                  });\n                                }}\n                              />{\" \"}\n                              <span\n                                style={{\n                                  display: \"inline-block\",\n                                }}\n                              >\n                                {action.code || action.id}\n                              </span>\n                            </div>\n                          );\n                        })}\n                      </td>\n                    </tr>\n                  )}\n                </Fragment>\n              );\n            })}\n          </tbody>\n        </table>\n      </div>\n    </div>\n  );\n};\n"],"names":["useConfig","useDocumentInfo","useField","useTranslation","Fragment","useEffect","useId","useMemo","useRef","useState","STATUS","PERMISSION_STATUS","PERMISSION_ACTION_STATUS","TYPE","PERMISSION_FEATURE_STATUS","toID","styles","RBAC_PREFIX","RolePermissionMatrixClient","checkboxId","config","hasSavePermission","id","setValue","value","path","isReadOnly","features","setFeatures","actions","setActions","permissions","setPermissions","rolePermissions","setRolePermissions","loading","setLoading","t","seededForRoleIdRef","run","base","routes","api","featuresRes","actionsRes","permissionsRes","rolePermissionsRes","Promise","all","fetch","ACTIVE","credentials","resolve","Response","JSON","stringify","docs","featuresJson","json","actionsJson","permissionsJson","rolePermissionsJson","sort","a","b","sortOrder","enabledByPermissionID","map","Map","row","set","permission","Boolean","enabled","draftValue","Array","isArray","roleId","String","current","fromRolesPermissions","permissionID","entries","fromDocument","hasRolesPermissions","Object","keys","length","hasDocumentDraft","div","className","table","thead","tr","th","colSpan","filter","action","type","MAIN","tbody","feature","mainActions","subActions","SUB","some","permissionAction","permissionFeature","isSubActionInPermission","td","code","matchedPermission","find","checked","get","input","name","disabled","onChange","event","target","label","htmlFor","span","style","display"],"mappings":"AAAA;;AAEA,SACEA,SAAS,EACTC,eAAe,EACfC,QAAQ,EACRC,cAAc,QACT,iBAAiB;AACxB,SAASC,QAAQ,EAAEC,SAAS,EAAEC,KAAK,EAAEC,OAAO,EAAEC,MAAM,EAAEC,QAAQ,QAAQ,QAAQ;AAK9E,SAASC,UAAUC,iBAAiB,QAAQ,oCAAoC;AAChF,SACED,UAAUE,wBAAwB,EAClCC,IAAI,QACC,2CAA2C;AAClD,SAASH,UAAUI,yBAAyB,QAAQ,4CAA4C;AAChG,SAASC,IAAI,QAAQ,0BAA0B;AAE/C,OAAOC,YAAY,uBAAuB;AAE1C,MAAMC,cAAc;AAMpB,OAAO,MAAMC,6BAA6B;IACxC,MAAMC,aAAab;IACnB,MAAM,EAAEc,MAAM,EAAE,GAAGpB;IACnB,MAAM,EAAEqB,iBAAiB,EAAEC,EAAE,EAAE,GAAGrB;IAClC,MAAM,EAAEsB,QAAQ,EAAEC,KAAK,EAAE,GAAGtB,SAAyC;QACnEuB,MAAM;IACR;IACA,MAAMC,aAAa,CAACL;IAEpB,MAAM,CAACM,UAAUC,YAAY,GAAGnB,SAA8B,EAAE;IAChE,MAAM,CAACoB,SAASC,WAAW,GAAGrB,SAA6B,EAAE;IAC7D,MAAM,CAACsB,aAAaC,eAAe,GAAGvB,SAAuB,EAAE;IAC/D,MAAM,CAACwB,iBAAiBC,mBAAmB,GAAGzB,SAA2B,EAAE;IAC3E,MAAM,CAAC0B,SAASC,WAAW,GAAG3B,SAAS;IACvC,MAAM,EAAE4B,CAAC,EAAE,GAAGlC;IACd,MAAMmC,qBAAqB9B,OAAsB;IAEjDH,UAAU;QACR,MAAMkC,MAAM;YACVH,WAAW;YACX,IAAI;gBACF,MAAMI,OAAOpB,QAAQqB,QAAQC,OAAO;gBAEpC,MAAM,CAACC,aAAaC,YAAYC,gBAAgBC,mBAAmB,GACjE,MAAMC,QAAQC,GAAG,CAAC;oBAChBC,MACE,GAAGT,KAAK,2DAA2D,EAAE1B,0BAA0BoC,MAAM,EAAE,EACvG;wBAAEC,aAAa;oBAAU;oBAE3BF,MACE,GAAGT,KAAK,0DAA0D,EAAE5B,yBAAyBsC,MAAM,EAAE,EACrG;wBAAEC,aAAa;oBAAU;oBAE3BF,MACE,GAAGT,KAAK,mDAAmD,EAAE7B,kBAAkBuC,MAAM,EAAE,EACvF;wBAAEC,aAAa;oBAAU;oBAE3B7B,KACI2B,MACE,GAAGT,KAAK,uDAAuD,EAAElB,IAAI,EACrE;wBACE6B,aAAa;oBACf,KAEFJ,QAAQK,OAAO,CAAC,IAAIC,SAASC,KAAKC,SAAS,CAAC;wBAAEC,MAAM,EAAE;oBAAC;iBAC5D;gBAEH,MAAMC,eACH,MAAMd,YAAYe,IAAI;gBACzB,MAAMC,cACH,MAAMf,WAAWc,IAAI;gBACxB,MAAME,kBACH,MAAMf,eAAea,IAAI;gBAC5B,MAAMG,sBACH,MAAMf,mBAAmBY,IAAI;gBAEhC9B,YACE6B,aAAaD,IAAI,EAAEM,KACjB,CAACC,GAAGC,IAAM,AAACD,CAAAA,GAAGE,aAAa,CAAA,IAAMD,CAAAA,GAAGC,aAAa,CAAA,MAC9C,EAAE;gBAETnC,WACE6B,YAAYH,IAAI,EAAEM,KAChB,CAACC,GAAGC,IAAM,AAACD,CAAAA,GAAGE,aAAa,CAAA,IAAMD,CAAAA,GAAGC,aAAa,CAAA,MAC9C,EAAE;gBAETjC,eAAe4B,gBAAgBJ,IAAI,IAAI,EAAE;gBACzCtB,mBAAmB2B,oBAAoBL,IAAI,IAAI,EAAE;YACnD,SAAU;gBACRpB,WAAW;YACb;QACF;QAEA,KAAKG;IACP,GAAG;QAACnB,QAAQqB,QAAQC;QAAKpB;KAAG;IAE5B,MAAM4C,wBAAwB3D,QAAQ;QACpC,MAAM4D,MAAM,IAAIC;QAChB,KAAK,MAAMC,OAAOpC,gBAAiB;YACjCkC,IAAIG,GAAG,CAACvD,KAAKsD,IAAIE,UAAU,GAAGC,QAAQH,IAAII,OAAO;QACnD;QACA,OAAON;IACT,GAAG;QAAClC;KAAgB;IAEpB,MAAMyC,aACJlD,SAAS,OAAOA,UAAU,YAAY,CAACmD,MAAMC,OAAO,CAACpD,SAASA,QAAQ,CAAC;IAGzEnB,UAAU;QACR,IAAI,CAACiB,MAAMa,SAAS;YAClB;QACF;QAEA,MAAM0C,SAASC,OAAOxD;QACtB,IAAIgB,mBAAmByC,OAAO,KAAKF,QAAQ;YACzC;QACF;QAEA,MAAMG,uBAAgD,CAAC;QACvD,KAAK,MAAM,CAACC,cAAcR,QAAQ,IAAIP,sBAAsBgB,OAAO,GAAI;YACrE,IAAID,cAAc;gBAChBD,oBAAoB,CAACC,aAAa,GAAGR;YACvC;QACF;QAEA,MAAMU,eACJ3D,SAAS,OAAOA,UAAU,YAAY,CAACmD,MAAMC,OAAO,CAACpD,SAChDA,QACD,CAAC;QAEP,MAAM4D,sBAAsBC,OAAOC,IAAI,CAACN,sBAAsBO,MAAM,GAAG;QACvE,MAAMC,mBAAmBH,OAAOC,IAAI,CAACH,cAAcI,MAAM,GAAG;QAE5D,IAAI,CAACH,uBAAuB,CAACI,kBAAkB;YAC7C;QACF;QAEAlD,mBAAmByC,OAAO,GAAGF;QAC7BtD,SAAS;YACP,GAAGyD,oBAAoB;YACvB,GAAGG,YAAY;QACjB;IACF,GAAG;QAACjB;QAAuB5C;QAAIa;QAASZ;QAAUC;KAAM;IAExD,IAAI,CAACF,IAAI;QACP,qBACE,KAACmE;YAAIC,WAAW1E,MAAM,CAAC,GAAGC,YAAY,sBAAsB,CAAC,CAAC;sBAC3DoB,EACC,CAAC,4DAA4D,CAAC;;IAMtE;IAEA,IAAIF,SAAS;QACX,qBACE,KAACsD;YAAIC,WAAW1E,MAAM,CAAC,GAAGC,YAAY,sBAAsB,CAAC,CAAC;sBAC3DoB,EACC,CAAC,mDAAmD,CAAC;;IAM7D;IAEA,qBACE,MAACoD;;0BACC,KAACA;gBAAIC,WAAW1E,MAAM,CAAC,GAAGC,YAAY,gBAAgB,CAAC,CAAC;0BACrDoB,EAAE,CAAC,qCAAqC,CAAC;;0BAG5C,KAACoD;gBAAIC,WAAW1E,MAAM,CAAC,GAAGC,YAAY,gBAAgB,CAAC,CAAC;0BACtD,cAAA,MAAC0E;oBAAMD,WAAW1E,MAAM,CAAC,GAAGC,YAAY,MAAM,CAAC,CAAC;;sCAC9C,KAAC2E;sCACC,cAAA,MAACC;;kDACC,KAACC;wCAAGJ,WAAW1E,MAAM,CAAC,GAAGC,YAAY,iBAAiB,CAAC,CAAC;kDACrDoB,EACC,CAAC,8CAA8C,CAAC;;kDAKpD,KAACyD;wCACCJ,WAAW1E,MAAM,CAAC,GAAGC,YAAY,gBAAgB,CAAC,CAAC;wCACnD8E,SACElE,QAAQmE,MAAM,CAAC,CAACC,SAAWA,OAAOC,IAAI,KAAKrF,KAAKsF,IAAI,EAAEZ,MAAM;kDAG7DlD,EACC,CAAC,6CAA6C,CAAC;;;;;sCAOvD,KAAC+D;sCACEzE,SAASwC,GAAG,CAAC,CAACkC;gCACb,MAAMC,cAAczE,QAAQmE,MAAM,CAChC,CAACC,SAAWA,OAAOC,IAAI,KAAKrF,KAAKsF,IAAI;gCAEvC,MAAMI,aAAa1E,QAAQmE,MAAM,CAC/B,CAACC,SACCA,OAAOC,IAAI,KAAKrF,KAAK2F,GAAG,IACxBzE,YAAY0E,IAAI,CACd,CAAClC,aACCxD,KAAKwD,WAAWmC,gBAAgB,MAAM5B,OAAOmB,OAAO3E,EAAE,KACtDP,KAAKwD,WAAWoC,iBAAiB,MAAM7B,OAAOuB,QAAQ/E,EAAE;gCAGhE,MAAMsF,0BAA0BL,WAAWhB,MAAM,GAAG;gCAEpD,qBACE,MAACnF;;sDACC,MAACyF;;8DACC,KAACgB;oDAAGnB,WAAW1E,MAAM,CAAC,GAAGC,YAAY,iBAAiB,CAAC,CAAC;8DACrDoB,EACC,CAAC,yCAAyC,EAAEgE,QAAQS,IAAI,EAAE,KAGvDT,QAAQ/E,EAAE;;gDAGhBgF,YAAYnC,GAAG,CAAC,CAAC8B;oDAChB,MAAMc,oBAAoBhF,YAAYiF,IAAI,CACxC,CAACzC,aACCxD,KAAKwD,WAAWoC,iBAAiB,MAC/B7B,OAAOuB,QAAQ/E,EAAE,KACnBP,KAAKwD,WAAWmC,gBAAgB,MAC9B5B,OAAOmB,OAAO3E,EAAE;oDAGtB,IAAI,CAACyF,mBAAmB;wDACtB,qBACE,KAACF;4DAECnB,WAAW1E,MAAM,CAAC,GAAGC,YAAY,gBAAgB,CAAC,CAAC;sEACpD;2DAFM,GAAGoF,QAAQ/E,EAAE,CAAC,CAAC,EAAE2E,OAAO3E,EAAE,EAAE;oDAMvC;oDAEA,MAAM2D,eAAeH,OAAOiC,kBAAkBzF,EAAE;oDAChD,MAAM2F,UACJ,OAAOvC,UAAU,CAACO,aAAa,KAAK,YAChCP,UAAU,CAACO,aAAa,GACvBf,sBAAsBgD,GAAG,CAACjC,iBAAiB;oDAElD,qBACE,KAAC4B;wDAECnB,WAAW1E,MAAM,CAAC,GAAGC,YAAY,gBAAgB,CAAC,CAAC;kEAEnD,cAAA,MAACwE;4DACCC,WACE1E,MAAM,CAAC,GAAGC,YAAY,0BAA0B,CAAC,CAAC;;8EAGpD,KAACkG;oEACCjB,MAAK;oEACL5E,IAAI,CAAC,2BAA2B,EAAEH,WAAW,CAAC,EAAEkF,QAAQ/E,EAAE,CAAC,CAAC,EAAE2E,OAAO3E,EAAE,EAAE;oEACzE8F,MAAM,CAAC,2BAA2B,EAAEjG,WAAW,CAAC,EAAEkF,QAAQ/E,EAAE,CAAC,CAAC,EAAE2E,OAAO3E,EAAE,EAAE;oEAC3E2F,SAASA;oEACTI,UAAU3F;oEACV4F,UAAU,CAACC;wEACThG,SAAS;4EACP,GAAGmD,UAAU;4EACb,CAACO,aAAa,EAAEsC,MAAMC,MAAM,CAACP,OAAO;wEACtC;oEACF;oEACAvB,WACE1E,MAAM,CAAC,GAAGC,YAAY,sBAAsB,CAAC,CAAC;;8EAGlD,KAACwG;oEACCC,SAAS,CAAC,2BAA2B,EAAEvG,WAAW,CAAC,EAAEkF,QAAQ/E,EAAE,CAAC,CAAC,EAAE2E,OAAO3E,EAAE,EAAE;oEAC9EoE,WACE1E,MAAM,CAAC,GAAGC,YAAY,sBAAsB,CAAC,CAAC;8EAG/CoB,EACC,CAAC,wCAAwC,EAAE4D,OAAOa,IAAI,EAAE,KAGrDb,OAAO3E,EAAE;;;;uDAlCb,GAAG+E,QAAQ/E,EAAE,CAAC,CAAC,EAAE2E,OAAO3E,EAAE,EAAE;gDAuCvC;;;wCAGDsF,yCACC,MAACf;;8DACC,KAACgB;oDACCnB,WAAW1E,MAAM,CAAC,GAAGC,YAAY,iBAAiB,CAAC,CAAC;;8DAEtD,KAAC4F;oDACCnB,WAAW1E,MAAM,CAAC,GAAGC,YAAY,gBAAgB,CAAC,CAAC;oDACnD8E,SAASO,YAAYf,MAAM;8DAE1BgB,WAAWpC,GAAG,CAAC,CAAC8B;wDACf,MAAMc,oBAAoBhF,YAAYiF,IAAI,CACxC,CAACzC,aACCxD,KAAKwD,WAAWoC,iBAAiB,MAC/B7B,OAAOuB,QAAQ/E,EAAE,KACnBP,KAAKwD,WAAWmC,gBAAgB,MAC9B5B,OAAOmB,OAAO3E,EAAE;wDAGtB,IAAI,CAACyF,mBAAmB;4DACtB,OAAO;wDACT;wDAEA,MAAM9B,eAAeH,OAAOiC,kBAAkBzF,EAAE;wDAChD,MAAM2F,UACJ,OAAOvC,UAAU,CAACO,aAAa,KAAK,YAChCP,UAAU,CAACO,aAAa,GACvBf,sBAAsBgD,GAAG,CAACjC,iBAC3B;wDAEN,qBACE,MAACQ;;8EACC,KAAC0B;oEACCjB,MAAK;oEACLe,SAASA;oEACTI,UAAU3F;oEACV4F,UAAU,CAACC;wEACThG,SAAS;4EACP,GAAGmD,UAAU;4EACb,CAACO,aAAa,EAAEsC,MAAMC,MAAM,CAACP,OAAO;wEACtC;oEACF;;gEACC;8EACH,KAACU;oEACCC,OAAO;wEACLC,SAAS;oEACX;8EAEC5B,OAAOa,IAAI,IAAIb,OAAO3E,EAAE;;;2DAjBnB,GAAG+E,QAAQ/E,EAAE,CAAC,CAAC,EAAE2E,OAAO3E,EAAE,CAAC,IAAI,CAAC;oDAqB9C;;;;;mCAnIOwD,OAAOuB,QAAQ/E,EAAE;4BAyIpC;;;;;;;AAMZ,EAAE"}

package/dist/components/role-permission-matrix-client/matrix.module.scss

@@ -0,0 +1,69 @@
+// Import Payload compile-time SCSS vars ($breakpoint-s-width, etc.).
+// Note: @payloadcms/ui/scss/vars is not a published export — use dist/scss/vars.
+@use "../../../node_modules/@payloadcms/ui/dist/scss/vars" as payload-vars;
+@use "../../styles/variables" as rbac-vars;
+
+$local-prefix: rbac-vars.$rbac-prefix;
+
+.#{$local-prefix}-component {
+  &-label {
+    opacity: 0.8;
+    padding: 0.5rem 0;
+  }
+  &-placeholder {
+    opacity: 0.8;
+    padding: 0.5rem 0;
+  }
+  &-title {
+    font-weight: 600;
+    margin-bottom: 0.5rem;
+  }
+}
+
+.#{$local-prefix}-table {
+  border-collapse: collapse;
+  width: 100%;
+  &-container {
+    border-radius: var(--style-radius-m);
+    border: 1px solid var(--theme-border-color);
+    @media only screen and (min-width: payload-vars.$breakpoint-s-width) {
+      border-radius: var(--style-radius-l);
+    }
+  }
+  &-th {
+    &-feature {
+      padding: 0.5rem;
+      text-align: left;
+      border-right: 1px solid var(--theme-border-color);
+      width: 25%;
+    }
+    &-action {
+      padding: 0.5rem;
+    }
+  }
+  &-td {
+    &-feature {
+      border-right: 1px solid var(--theme-border-color);
+      border-top: 1px solid var(--theme-border-color);
+      padding: 0.5rem;
+    }
+    &-action {
+      border-top: 1px solid var(--theme-border-color);
+      padding: 0.5rem;
+      &-container {
+        display: flex;
+        align-items: center;
+      }
+      &-input {
+        user-select: none;
+        cursor: pointer;
+      }
+      &-label {
+        display: inline-block;
+        padding-left: 0.25rem;
+        user-select: none;
+        cursor: pointer;
+      }
+    }
+  }
+}

package/dist/components/role-permission-matrix-client/types.d.ts

@@ -0,0 +1,18 @@
+export type RolePermissionMatrixClientTranslations = {
+    [locale: string]: {
+        viewInUpdateScreenOnly?: {
+            label?: string;
+            placeholder?: string;
+        };
+        loading?: {
+            placeholder?: string;
+        };
+        title?: string;
+        features?: {
+            label?: string;
+        } | Record<string, string>;
+        actions?: {
+            label?: string;
+        } | Record<string, string>;
+    };
+};

package/dist/endpoints/customEndpointHandler.d.ts

@@ -0,0 +1,2 @@
+import type { PayloadHandler } from "payload";
+export declare const customEndpointHandler: PayloadHandler;

package/dist/exports/client.d.ts

@@ -0,0 +1 @@
+export { RolePermissionMatrixClient } from "../components/role-permission-matrix-client/index.js";

package/dist/exports/rsc.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+import type { Config } from "payload";
+import type { PayloadAuthRbacPluginConfig } from "./types.js";
+export * from "./lib/constants/index.js";
+export * from "./lib/utils/index.js";
+export declare const payloadAuthRbacPlugin: (pluginOptions: PayloadAuthRbacPluginConfig) => (config: Config) => Config;

package/dist/lib/constants/general.d.ts

@@ -0,0 +1 @@
+export declare const NAMESPACE: "plugin-rbac";

package/dist/lib/constants/index.d.ts

@@ -0,0 +1,14 @@
+import * as general from "./general.js";
+import * as permission from "./permission.js";
+import * as permissionAction from "./permission-action.js";
+import * as permissionFeature from "./permission-feature.js";
+import * as role from "./role.js";
+import * as user from "./user.js";
+export declare const CONSTANTS: {
+    readonly GENERAL: typeof general;
+    readonly PERMISSION: typeof permission;
+    readonly PERMISSION_FEATURE: typeof permissionFeature;
+    readonly PERMISSION_ACTION: typeof permissionAction;
+    readonly ROLE: typeof role;
+    readonly USER: typeof user;
+};

package/dist/lib/constants/permission-action.d.ts

@@ -0,0 +1,8 @@
+export declare const STATUS: {
+    readonly ACTIVE: "active";
+    readonly INACTIVE: "inactive";
+};
+export declare const TYPE: {
+    readonly MAIN: "main";
+    readonly SUB: "sub";
+};

package/dist/lib/constants/permission-feature.d.ts

@@ -0,0 +1,4 @@
+export declare const STATUS: {
+    readonly ACTIVE: "active";
+    readonly INACTIVE: "inactive";
+};

package/dist/lib/constants/permission.d.ts

@@ -0,0 +1,4 @@
+export declare const STATUS: {
+    readonly ACTIVE: "active";
+    readonly INACTIVE: "inactive";
+};

package/dist/lib/constants/role.d.ts

@@ -0,0 +1,9 @@
+export declare const STATUS: {
+    readonly ACTIVE: "active";
+    readonly INACTIVE: "inactive";
+};
+export declare const DATA_SCOPE: {
+    readonly ALL: "all";
+    readonly OWN: "own";
+    readonly HIERARCHY: "hierarchy";
+};

package/dist/lib/constants/user.d.ts

@@ -0,0 +1 @@
+export declare const PARENT_PATH_SEPARATOR: ",";

package/dist/lib/utils/access.d.ts

@@ -0,0 +1,76 @@
+import { Access, type PayloadRequest, type Where } from "payload";
+import type { DataScope } from "../../collections/roles/types.js";
+export type DataScopeOptions = {
+    /** Field on business collections storing the creator user id. Default: `createdBy`. */
+    createdByField?: string;
+    /** Users collection slug. Default: `users`. */
+    usersCollectionSlug?: string;
+};
+/**
+ * Access helper: allow only super admins.
+ * Check session first, then persisted users data.
+ */
+export declare const getSuperAdminAccess: ({ req }: {
+    req: PayloadRequest;
+}) => Promise<boolean>;
+/**
+ * Access helper: allow current document owner or super admin.
+ */
+export declare const getAuthenticatedOrSuperAdminAccess: Access | Promise<boolean>;
+/**
+ * Resolve effective data scope from active roles.
+ * Widest scope wins: `all` > `hierarchy` > `own`.
+ */
+export declare const resolveEffectiveDataScope: (req: PayloadRequest, options?: DataScopeOptions) => Promise<DataScope>;
+/**
+ * Collect visible user IDs for hierarchy scope:
+ * current user + direct/indirect descendants from `parent` / `parentPath`.
+ */
+export declare const getHierarchyVisibleUserIds: (req: PayloadRequest, options?: DataScopeOptions) => Promise<string[]>;
+/**
+ * Build a read `Where` filter from data scope.
+ * Returns `true` when no extra filtering is required (`all` scope / super admin).
+ */
+export declare const getDataScopeReadWhere: (req: PayloadRequest, options?: DataScopeOptions) => Promise<Where | true>;
+/**
+ * Guard for privileged user documents.
+ * Non-super-admins cannot mutate users where `isSuperAdmin === true`.
+ */
+export declare const isProtectedSuperAdminUserDoc: (doc: Record<string, unknown>) => boolean;
+/**
+ * Document-level access check:
+ * RBAC permission (`featureCode` + `actionCode`) + data-scope evaluation.
+ * Super admins bypass.
+ */
+export declare const canAccessDocumentByDataScope: ({ req, doc, featureCode, actionCode, collectionSlug, options, }: {
+    req: PayloadRequest;
+    doc: Record<string, unknown>;
+    featureCode: string;
+    actionCode: string;
+    collectionSlug: string;
+    options?: DataScopeOptions;
+}) => Promise<boolean>;
+/**
+ * Merge an existing `where` with scope-derived constraints.
+ */
+export declare const mergeDataScopeWhere: (base: Where | undefined, scopeWhere: Where | true) => Where;
+/**
+ * Unified access entrypoint.
+ *
+ * Modes:
+ * - `none`: permission-only (boolean)
+ * - `modify`: per-document mutation check (requires `collectionSlug` + runtime `id`)
+ * - implicit read mode: pass `options` to get a read `Where` filter after permission check
+ */
+export declare const getPermissionAccess: ({ featureCode, actionCode, mode, collectionSlug, options, }: {
+    featureCode: string;
+    actionCode: string;
+    mode?: "none" | "modify";
+    collectionSlug?: string;
+    options?: DataScopeOptions;
+}) => (({ req }: {
+    req: PayloadRequest;
+}) => Promise<boolean | Where>) | (({ req, id }: {
+    req: PayloadRequest;
+    id?: string | number;
+}) => Promise<boolean>);

package/dist/lib/utils/data.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Converts a value to an ID string.
+ * @param value - The value to convert.
+ * @returns The ID string.
+ */
+export declare const toID: (value?: ItemRef) => string;

package/dist/lib/utils/fields.d.ts

@@ -0,0 +1,18 @@
+import type { Field } from "payload";
+/**
+ * Merges one plugin default field with a host override that shares the same `name`.
+ * Custom properties win (`{ ...defaultField, ...customField }`). Non-data fields
+ * (e.g. tabs, unnamed layout fields) are returned unchanged.
+ */
+export declare const getMergedFieldAffectingData: ({ fields, defaultField, }: {
+    fields: Field[];
+    defaultField: Field;
+}) => Field;
+/**
+ * Builds the final `fields` array for a collection: each default is merged by name,
+ * then host-only fields are appended (data fields with new names, plus layout fields).
+ */
+export declare const getArrayOfMergedFieldAffectingData: ({ fields, defaultFields, }: {
+    fields: Field[];
+    defaultFields: Field[];
+}) => Field[];

package/dist/lib/utils/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./access.js";
+export * from "./data.js";
+export * from "./fields.js";
+export * from "./localization.js";

package/dist/lib/utils/localization.d.ts

@@ -0,0 +1,27 @@
+import type { SelectField } from "payload";
+/** Builds `{ [locale]: string }` from `getValue`, skipping empty values. */
+export declare const toLocaleRecord: (locales: string[], getValue: (locale: string) => string | undefined) => Record<string, string>;
+/**
+ * Select placeholder as per-locale strings (not `LabelFunction`) so it survives
+ * Next.js server → client serialization; Payload resolves it at render time.
+ */
+export declare const toSelectPlaceholder: (locales: string[], getValue: (locale: string) => string | undefined) => NonNullable<SelectField["admin"]>["placeholder"];
+type TranslationObject = {
+    [key: string]: TranslationValue;
+};
+type TranslationValue = TranslationObject | string | undefined;
+/** Plugin defaults merged with host `translations` overrides. */
+export declare const getMergedTranslations: <T extends Record<string, TranslationValue>>({ defaultTranslations, translations, }: {
+    defaultTranslations: T;
+    translations: Partial<T>;
+}) => T;
+/**
+ * Picks a nested branch from each locale, e.g. path `"collections.roles"`.
+ * Use `locales: "all"` or `["en", "vi"]`.
+ */
+export declare const getAllTranslationsOfSpecificObject: <T = unknown>({ translations, path, locales, }: {
+    translations: Record<string, Record<string, unknown>>;
+    path: string;
+    locales?: "all" | string[];
+}) => Record<string, T>;
+export {};

package/dist/styles/variables.scss

@@ -0,0 +1 @@
+$rbac-prefix: "rbac";

package/dist/types.d.ts

@@ -0,0 +1,38 @@
+import type * as PermissionActionTypes from "./collections/permission-actions/types.js";
+import type * as PermissionFeatureTypes from "./collections/permission-features/types.js";
+import type * as PermissionTypes from "./collections/permissions/types.js";
+import type * as RoleTypes from "./collections/roles/types.js";
+import type * as RolePermissionTypes from "./collections/roles-permissions/types.js";
+import type * as UsersTypes from "./collections/users/types.js";
+import type * as RolePermissionMatrixClientTypes from "./components/role-permission-matrix-client/types.js";
+export * from "./collections/permission-actions/types.js";
+export * from "./collections/permission-features/types.js";
+export * from "./collections/permissions/types.js";
+export * from "./collections/roles/types.js";
+export * from "./collections/roles-permissions/types.js";
+export * from "./collections/users/types.js";
+export * from "./components/role-permission-matrix-client/types.js";
+export type RBACTranslations = {
+    [locale: string]: {
+        collections?: {
+            permissionActions?: PermissionActionTypes.PermissionActionsCollectionTranslations[string];
+            permissionFeatures?: PermissionFeatureTypes.PermissionFeaturesCollectionTranslations[string];
+            permissions?: PermissionTypes.PermissionsCollectionTranslations[string];
+            roles?: RoleTypes.RolesCollectionTranslations[string];
+            rolesPermissions?: RolePermissionTypes.RolesPermissionsCollectionTranslations[string];
+            users?: UsersTypes.UsersModificationTranslations[string];
+        };
+        components?: {
+            rolePermissionMatrix?: RolePermissionMatrixClientTypes.RolePermissionMatrixClientTranslations[string];
+        };
+    };
+};
+export type PayloadAuthRbacPluginConfig = {
+    /**
+     * Collection slugs to augment (may include plugin-only collections absent from generated `CollectionSlug`).
+     */
+    collections?: Partial<Record<string, Omit<PermissionActionTypes.PermissionActionsCollectionParams, "translations"> | Omit<PermissionFeatureTypes.PermissionFeaturesCollectionParams, "translations"> | Omit<PermissionTypes.PermissionsCollectionParams, "translations"> | Omit<RoleTypes.RolesCollectionParams, "translations"> | Omit<RolePermissionTypes.RolesPermissionsCollectionParams, "translations">>>;
+    disabled?: boolean;
+    translations?: RBACTranslations;
+    autoModifyUsersCollection?: boolean;
+};