@zealamic/payload-auth-rbac-plugin 1.0.0-beta.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Zealamic
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,175 @@
+# @zealamic/payload-auth-rbac-plugin
+
+Centralized **role-based access control (RBAC)** for [Payload CMS](https://payloadcms.com) **v3**.
+
+![Payload Auth RBAC Plugin](https://github.com/zealamic/payload-auth-rbac-plugin/blob/main/assets/cover-photo.jpg)
+
+Permissions live in the database (feature + action), are assigned to roles, and enforced via reusable access helpers — editable in Admin without redeploying policy code.
+
+---
+
+## Documentation
+
+| Guide                                      | Read when you need to…                                                                                                   |
+| ------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------ |
+| **[COLLECTIONS](./docs/COLLECTIONS.md)**   | Understand plugin collections, users augmentation, `dataScope`, permission matrix, and **customize** fields/access/admin |
+| **[UTILS](./docs/UTILS.md)**               | Wire **access helpers** on your app collections (`getPermissionAccess`, data-scope filters, examples)                    |
+| **[TRANSLATIONS](./docs/TRANSLATIONS.md)** | Localize Admin labels, select options, and permission-matrix UI (`en`, `vi`, …)                                          |
+
+**Typical flow:** install → register plugin → seed RBAC data ([COLLECTIONS](./docs/COLLECTIONS.md)) → protect app collections ([UTILS](./docs/UTILS.md)) → translate Admin UI ([TRANSLATIONS](./docs/TRANSLATIONS.md)).
+
+Demo: `dev/rbac.ts`, `dev/collections/posts.ts`.
+
+---
+
+## Key features
+
+- **Five RBAC collections** — features, actions, permissions, roles, join table ([details](./docs/COLLECTIONS.md))
+- **Multi-role users** — union of enabled grants across assigned roles
+- **Granular permissions** — any `featureCode` + `actionCode` pair ([helpers](./docs/UTILS.md))
+- **Data scope** — per-role `own` / `hierarchy` / `all` for row-level filtering (`[dataScope` vs `isSuperAdmin](./docs/COLLECTIONS.md#what-is-datascope)`)
+- **Permission matrix** — role edit UI; syncs to `roles-permissions` on save
+- **TypeScript** — typed plugin options and exports (`/types`)
+- **i18n** — plugin-owned translations merged into Payload i18n ([guide](./docs/TRANSLATIONS.md))
+
+---
+
+## Installation
+
+```bash
+npm install @zealamic/payload-auth-rbac-plugin
+# or: yarn add / pnpm add @zealamic/payload-auth-rbac-plugin
+```
+
+---
+
+## Quick start
+
+### 1. Register the plugin
+
+```ts
+import { payloadAuthRbacPlugin } from "@zealamic/payload-auth-rbac-plugin";
+
+export default buildConfig({
+  plugins: [
+    payloadAuthRbacPlugin({
+      autoModifyUsersCollection: true, // roles, isSuperAdmin, parent, default user access
+      // collections: { ... }  → see docs/COLLECTIONS.md
+      // translations: { ... }  → see docs/TRANSLATIONS.md
+    }),
+  ],
+});
+```
+
+### 2. Seed RBAC data (Admin or script)
+
+1. **permission-features** — e.g. `posts`, `users` (`code` = `featureCode` in access helpers)
+2. **permission-actions** — e.g. `create`, `read`, `update`, `delete`
+3. **permissions** — one row per feature + action pair
+4. **roles** — set `[dataScope](./docs/COLLECTIONS.md#what-is-datascope)`; configure matrix on update screen → Save
+5. **users** — assign roles; bootstrap `[isSuperAdmin](./docs/COLLECTIONS.md#bootstrap-super-admin)` via seed/API
+
+→ Full collection reference: **[COLLECTIONS](./docs/COLLECTIONS.md)**
+
+### 3. Protect app collections
+
+```ts
+import {
+  getPermissionAccess,
+} from "@zealamic/payload-auth-rbac-plugin";
+
+export const Posts: CollectionConfig = {
+  slug: "posts",
+  access: {
+    read: getPermissionAccess({
+      featureCode: "posts",
+      actionCode: "read",
+      // read mode is inferred when options is provided
+      options: { createdByField: "createdBy" },
+    }),
+    create: getPermissionAccess({ featureCode: "posts", actionCode: "create" }),
+    update: getPermissionAccess({
+      featureCode: "posts",
+      actionCode: "update",
+      mode: "modify",
+      collectionSlug: "posts",
+      options: { createdByField: "createdBy" },
+    }),
+    delete: getPermissionAccess({
+      featureCode: "posts",
+      actionCode: "delete",
+      mode: "modify",
+      collectionSlug: "posts",
+      options: { createdByField: "createdBy" },
+    }),
+  },
+  hooks: {
+    beforeChange: [
+      ({ req, data, operation }) => {
+        if (operation === "create" && req.user?.id && !data?.createdBy) {
+          return { ...data, createdBy: req.user.id };
+        }
+        return data;
+      },
+    ],
+  },
+  fields: [
+    { name: "createdBy", type: "relationship", relationTo: "users" /* ... */ },
+  ],
+};
+```
+
+**Access order:** anonymous → deny · super admin → allow · else → matrix permission (+ data scope when using scope helpers).
+
+→ All helpers with examples: **[UTILS](./docs/UTILS.md)**
+
+---
+
+## Plugin options
+
+| Option                      | Default | Description                                                                                 |
+| --------------------------- | ------- | ------------------------------------------------------------------------------------------- |
+| `disabled`                  | `false` | Skip runtime wiring; schema still registers                                                 |
+| `autoModifyUsersCollection` | `true`  | Add RBAC fields + access on users collection                                                |
+| `translations`              | —       | Admin / matrix i18n → **[TRANSLATIONS](./docs/TRANSLATIONS.md)**                            |
+| `collections`               | —       | Per-collection overrides → **[COLLECTIONS](./docs/COLLECTIONS.md#customizing-collections)** |
+
+Types: `@zealamic/payload-auth-rbac-plugin/types`
+
+---
+
+## Exported helpers (summary)
+
+Full reference: **[UTILS](./docs/UTILS.md)**
+
+| Function                                              | Purpose                                         |
+| ----------------------------------------------------- | ----------------------------------------------- |
+| `getPermissionAccess`                                 | Unified helper: permission / read scope / modify scope |
+| `getSuperAdminAccess`                                 | Super admin only (RBAC collections default)     |
+| `canAccessDocumentByDataScope`                        | Single-document scope check                     |
+| `resolveEffectiveDataScope` / `getDataScopeReadWhere` | Scope resolution & query filters                |
+
+Constants: `CONSTANTS.ROLE.DATA_SCOPE`, etc.
+
+---
+
+## Package exports
+
+| Import                                      | Contents                              |
+| ------------------------------------------- | ------------------------------------- |
+| `@zealamic/payload-auth-rbac-plugin`        | Plugin + utils + constants            |
+| `@zealamic/payload-auth-rbac-plugin/client` | `RolePermissionMatrixClient`          |
+| `@zealamic/payload-auth-rbac-plugin/types`  | TypeScript types                      |
+| `@zealamic/payload-auth-rbac-plugin/utils`  | Access / field / localization helpers |
+
+---
+
+## License
+
+MIT
+
+---
+
+> _If this plugin helps your team ship safer access control with less friction, thank you for giving it a place in your stack._
+
+

package/dist/collections/permission-actions/default-data.js

@@ -0,0 +1,35 @@
+export const permissionActionsDefaultTranslations = {
+    en: {
+        labels: {
+            singular: "Permission Action",
+            plural: "Permission Actions"
+        },
+        admin: {
+            group: "System"
+        },
+        fields: {
+            code: {
+                label: "Code",
+                placeholder: "Enter code"
+            },
+            type: {
+                label: "Type",
+                placeholder: "Select type",
+                mainLabel: "Main",
+                subLabel: "Sub"
+            },
+            sortOrder: {
+                label: "Sort Order",
+                placeholder: "Enter sort order"
+            },
+            status: {
+                label: "Status",
+                placeholder: "Select status",
+                activeLabel: "Active",
+                inactiveLabel: "Inactive"
+            }
+        }
+    }
+};
+
+//# sourceMappingURL=default-data.js.map

package/dist/collections/permission-actions/default-data.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/collections/permission-actions/default-data.ts"],"sourcesContent":["import type { PermissionActionsCollectionTranslations } from \"./types.js\";\n\nexport const permissionActionsDefaultTranslations: PermissionActionsCollectionTranslations =\n  {\n    en: {\n      labels: {\n        singular: \"Permission Action\",\n        plural: \"Permission Actions\",\n      },\n      admin: {\n        group: \"System\",\n      },\n      fields: {\n        code: {\n          label: \"Code\",\n          placeholder: \"Enter code\",\n        },\n        type: {\n          label: \"Type\",\n          placeholder: \"Select type\",\n          mainLabel: \"Main\",\n          subLabel: \"Sub\",\n        },\n        sortOrder: {\n          label: \"Sort Order\",\n          placeholder: \"Enter sort order\",\n        },\n        status: {\n          label: \"Status\",\n          placeholder: \"Select status\",\n          activeLabel: \"Active\",\n          inactiveLabel: \"Inactive\",\n        },\n      },\n    },\n  };\n"],"names":["permissionActionsDefaultTranslations","en","labels","singular","plural","admin","group","fields","code","label","placeholder","type","mainLabel","subLabel","sortOrder","status","activeLabel","inactiveLabel"],"mappings":"AAEA,OAAO,MAAMA,uCACX;IACEC,IAAI;QACFC,QAAQ;YACNC,UAAU;YACVC,QAAQ;QACV;QACAC,OAAO;YACLC,OAAO;QACT;QACAC,QAAQ;YACNC,MAAM;gBACJC,OAAO;gBACPC,aAAa;YACf;YACAC,MAAM;gBACJF,OAAO;gBACPC,aAAa;gBACbE,WAAW;gBACXC,UAAU;YACZ;YACAC,WAAW;gBACTL,OAAO;gBACPC,aAAa;YACf;YACAK,QAAQ;gBACNN,OAAO;gBACPC,aAAa;gBACbM,aAAa;gBACbC,eAAe;YACjB;QACF;IACF;AACF,EAAE"}

package/dist/collections/permission-actions/index.js

@@ -0,0 +1,96 @@
+import { STATUS, TYPE } from "../../lib/constants/permission-action.js";
+import { getArrayOfMergedFieldAffectingData, getSuperAdminAccess, toLocaleRecord, toSelectPlaceholder } from "../../lib/utils/index.js";
+export const getPermissionActionsCollection = (params)=>{
+    const { translations = {}, access = {}, fields = [], labels = {}, admin = {} } = params || {};
+    const arrTranslationsKeys = Object.keys(translations);
+    const permissionActions = {
+        slug: "permission-actions",
+        labels: {
+            singular: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.labels?.singular),
+            plural: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.labels?.plural),
+            ...labels
+        },
+        admin: {
+            group: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.admin?.group),
+            useAsTitle: "code",
+            defaultColumns: [
+                "code",
+                "type",
+                "status",
+                "updatedAt"
+            ],
+            ...admin
+        },
+        access: {
+            create: getSuperAdminAccess,
+            update: getSuperAdminAccess,
+            delete: getSuperAdminAccess,
+            read: getSuperAdminAccess,
+            readVersions: getSuperAdminAccess,
+            unlock: getSuperAdminAccess,
+            admin: ({ req })=>{
+                return getSuperAdminAccess({
+                    req
+                });
+            },
+            ...access
+        },
+        fields: getArrayOfMergedFieldAffectingData({
+            fields,
+            defaultFields: [
+                {
+                    name: "code",
+                    type: "text",
+                    required: true,
+                    unique: true,
+                    index: true,
+                    label: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.code?.label),
+                    admin: {
+                        placeholder: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.code?.placeholder)
+                    }
+                },
+                {
+                    name: "type",
+                    type: "select",
+                    required: true,
+                    label: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.type?.label),
+                    options: Object.values(TYPE).map((type)=>({
+                            label: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.type?.[`${type}Label`]),
+                            value: type
+                        })),
+                    admin: {
+                        placeholder: toSelectPlaceholder(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.type?.placeholder)
+                    }
+                },
+                {
+                    name: "sortOrder",
+                    type: "number",
+                    required: false,
+                    defaultValue: 0,
+                    label: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.sortOrder?.label),
+                    admin: {
+                        placeholder: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.sortOrder?.placeholder)
+                    }
+                },
+                {
+                    name: "status",
+                    type: "select",
+                    required: true,
+                    label: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.status?.label),
+                    defaultValue: STATUS.ACTIVE,
+                    options: Object.values(STATUS).map((status)=>({
+                            label: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.status?.[`${status}Label`]),
+                            value: status
+                        })),
+                    admin: {
+                        placeholder: toSelectPlaceholder(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.status?.placeholder)
+                    }
+                }
+            ]
+        }),
+        timestamps: true
+    };
+    return permissionActions;
+};
+
+//# sourceMappingURL=index.js.map

package/dist/collections/permission-actions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/collections/permission-actions/index.ts"],"sourcesContent":["import type { CollectionConfig } from \"payload\";\nimport { STATUS, TYPE } from \"../../lib/constants/permission-action.js\";\nimport {\n  getArrayOfMergedFieldAffectingData,\n  getSuperAdminAccess,\n  toLocaleRecord,\n  toSelectPlaceholder,\n} from \"../../lib/utils/index.js\";\nimport type { PermissionActionsCollectionParams } from \"./types.js\";\n\nexport const getPermissionActionsCollection = (\n  params: PermissionActionsCollectionParams,\n) => {\n  const {\n    translations = {},\n    access = {},\n    fields = [],\n    labels = {},\n    admin = {},\n  } = params || {};\n  const arrTranslationsKeys = Object.keys(translations);\n  const permissionActions: CollectionConfig = {\n    slug: \"permission-actions\",\n    labels: {\n      singular: toLocaleRecord(\n        arrTranslationsKeys,\n        (locale) => translations[locale]?.labels?.singular,\n      ),\n      plural: toLocaleRecord(\n        arrTranslationsKeys,\n        (locale) => translations[locale]?.labels?.plural,\n      ),\n      ...labels,\n    },\n    admin: {\n      group: toLocaleRecord(\n        arrTranslationsKeys,\n        (locale) => translations[locale]?.admin?.group,\n      ),\n      useAsTitle: \"code\",\n      defaultColumns: [\"code\", \"type\", \"status\", \"updatedAt\"],\n      ...admin,\n    },\n    access: {\n      create: getSuperAdminAccess,\n      update: getSuperAdminAccess,\n      delete: getSuperAdminAccess,\n      read: getSuperAdminAccess,\n      readVersions: getSuperAdminAccess,\n      unlock: getSuperAdminAccess,\n      admin: ({ req }) => {\n        return getSuperAdminAccess({ req });\n      },\n      ...access,\n    },\n    fields: getArrayOfMergedFieldAffectingData({\n      fields,\n      defaultFields: [\n        {\n          name: \"code\",\n          type: \"text\",\n          required: true,\n          unique: true,\n          index: true,\n          label: toLocaleRecord(\n            arrTranslationsKeys,\n            (locale) => translations[locale]?.fields?.code?.label,\n          ),\n          admin: {\n            placeholder: toLocaleRecord(\n              arrTranslationsKeys,\n              (locale) => translations[locale]?.fields?.code?.placeholder,\n            ),\n          },\n        },\n        {\n          name: \"type\",\n          type: \"select\",\n          required: true,\n          label: toLocaleRecord(\n            arrTranslationsKeys,\n            (locale) => translations[locale]?.fields?.type?.label,\n          ),\n          options: Object.values(TYPE).map((type) => ({\n            label: toLocaleRecord(\n              arrTranslationsKeys,\n              (locale) => translations[locale]?.fields?.type?.[`${type}Label`],\n            ),\n            value: type,\n          })),\n          admin: {\n            placeholder: toSelectPlaceholder(\n              arrTranslationsKeys,\n              (locale) => translations[locale]?.fields?.type?.placeholder,\n            ),\n          },\n        },\n        {\n          name: \"sortOrder\",\n          type: \"number\",\n          required: false,\n          defaultValue: 0,\n          label: toLocaleRecord(\n            arrTranslationsKeys,\n            (locale) => translations[locale]?.fields?.sortOrder?.label,\n          ),\n          admin: {\n            placeholder: toLocaleRecord(\n              arrTranslationsKeys,\n              (locale) => translations[locale]?.fields?.sortOrder?.placeholder,\n            ),\n          },\n        },\n        {\n          name: \"status\",\n          type: \"select\",\n          required: true,\n          label: toLocaleRecord(\n            arrTranslationsKeys,\n            (locale) => translations[locale]?.fields?.status?.label,\n          ),\n          defaultValue: STATUS.ACTIVE,\n          options: Object.values(STATUS).map((status) => ({\n            label: toLocaleRecord(\n              arrTranslationsKeys,\n              (locale) =>\n                translations[locale]?.fields?.status?.[`${status}Label`],\n            ),\n            value: status,\n          })),\n          admin: {\n            placeholder: toSelectPlaceholder(\n              arrTranslationsKeys,\n              (locale) => translations[locale]?.fields?.status?.placeholder,\n            ),\n          },\n        },\n      ],\n    }),\n    timestamps: true,\n  };\n\n  return permissionActions;\n};\n"],"names":["STATUS","TYPE","getArrayOfMergedFieldAffectingData","getSuperAdminAccess","toLocaleRecord","toSelectPlaceholder","getPermissionActionsCollection","params","translations","access","fields","labels","admin","arrTranslationsKeys","Object","keys","permissionActions","slug","singular","locale","plural","group","useAsTitle","defaultColumns","create","update","delete","read","readVersions","unlock","req","defaultFields","name","type","required","unique","index","label","code","placeholder","options","values","map","value","defaultValue","sortOrder","status","ACTIVE","timestamps"],"mappings":"AACA,SAASA,MAAM,EAAEC,IAAI,QAAQ,2CAA2C;AACxE,SACEC,kCAAkC,EAClCC,mBAAmB,EACnBC,cAAc,EACdC,mBAAmB,QACd,2BAA2B;AAGlC,OAAO,MAAMC,iCAAiC,CAC5CC;IAEA,MAAM,EACJC,eAAe,CAAC,CAAC,EACjBC,SAAS,CAAC,CAAC,EACXC,SAAS,EAAE,EACXC,SAAS,CAAC,CAAC,EACXC,QAAQ,CAAC,CAAC,EACX,GAAGL,UAAU,CAAC;IACf,MAAMM,sBAAsBC,OAAOC,IAAI,CAACP;IACxC,MAAMQ,oBAAsC;QAC1CC,MAAM;QACNN,QAAQ;YACNO,UAAUd,eACRS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAER,QAAQO;YAE5CE,QAAQhB,eACNS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAER,QAAQS;YAE5C,GAAGT,MAAM;QACX;QACAC,OAAO;YACLS,OAAOjB,eACLS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAEP,OAAOS;YAE3CC,YAAY;YACZC,gBAAgB;gBAAC;gBAAQ;gBAAQ;gBAAU;aAAY;YACvD,GAAGX,KAAK;QACV;QACAH,QAAQ;YACNe,QAAQrB;YACRsB,QAAQtB;YACRuB,QAAQvB;YACRwB,MAAMxB;YACNyB,cAAczB;YACd0B,QAAQ1B;YACRS,OAAO,CAAC,EAAEkB,GAAG,EAAE;gBACb,OAAO3B,oBAAoB;oBAAE2B;gBAAI;YACnC;YACA,GAAGrB,MAAM;QACX;QACAC,QAAQR,mCAAmC;YACzCQ;YACAqB,eAAe;gBACb;oBACEC,MAAM;oBACNC,MAAM;oBACNC,UAAU;oBACVC,QAAQ;oBACRC,OAAO;oBACPC,OAAOjC,eACLS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQ4B,MAAMD;oBAElDzB,OAAO;wBACL2B,aAAanC,eACXS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQ4B,MAAMC;oBAEpD;gBACF;gBACA;oBACEP,MAAM;oBACNC,MAAM;oBACNC,UAAU;oBACVG,OAAOjC,eACLS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQuB,MAAMI;oBAElDG,SAAS1B,OAAO2B,MAAM,CAACxC,MAAMyC,GAAG,CAAC,CAACT,OAAU,CAAA;4BAC1CI,OAAOjC,eACLS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQuB,MAAM,CAAC,GAAGA,KAAK,KAAK,CAAC,CAAC;4BAElEU,OAAOV;wBACT,CAAA;oBACArB,OAAO;wBACL2B,aAAalC,oBACXQ,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQuB,MAAMM;oBAEpD;gBACF;gBACA;oBACEP,MAAM;oBACNC,MAAM;oBACNC,UAAU;oBACVU,cAAc;oBACdP,OAAOjC,eACLS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQmC,WAAWR;oBAEvDzB,OAAO;wBACL2B,aAAanC,eACXS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQmC,WAAWN;oBAEzD;gBACF;gBACA;oBACEP,MAAM;oBACNC,MAAM;oBACNC,UAAU;oBACVG,OAAOjC,eACLS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQoC,QAAQT;oBAEpDO,cAAc5C,OAAO+C,MAAM;oBAC3BP,SAAS1B,OAAO2B,MAAM,CAACzC,QAAQ0C,GAAG,CAAC,CAACI,SAAY,CAAA;4BAC9CT,OAAOjC,eACLS,qBACA,CAACM,SACCX,YAAY,CAACW,OAAO,EAAET,QAAQoC,QAAQ,CAAC,GAAGA,OAAO,KAAK,CAAC,CAAC;4BAE5DH,OAAOG;wBACT,CAAA;oBACAlC,OAAO;wBACL2B,aAAalC,oBACXQ,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQoC,QAAQP;oBAEtD;gBACF;aACD;QACH;QACAS,YAAY;IACd;IAEA,OAAOhC;AACT,EAAE"}

package/dist/collections/permission-actions/types.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=types.js.map

package/dist/collections/permission-actions/types.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/collections/permission-actions/types.ts"],"sourcesContent":["import type { CollectionConfig, Field } from \"payload\";\nimport { STATUS, TYPE } from \"../../lib/constants/permission-action.js\";\n\nexport type PermissionActionsCollectionTranslations = {\n  [locale: string]: {\n    labels?: {\n      singular?: string;\n      plural?: string;\n    };\n    admin?: {\n      group?: string;\n    };\n    fields?: {\n      code?: {\n        label?: string;\n        placeholder?: string;\n      };\n      type?: {\n        label?: string;\n        placeholder?: string;\n        mainLabel?: string;\n        subLabel?: string;\n      };\n      sortOrder?: {\n        label?: string;\n        placeholder?: string;\n      };\n      status?: {\n        label?: string;\n        placeholder?: string;\n        activeLabel?: string;\n        inactiveLabel?: string;\n      };\n    };\n  };\n};\n\nexport type PermissionActionsCollectionParams = {\n  translations?: PermissionActionsCollectionTranslations;\n  fields?: Field[];\n  access?: CollectionConfig[\"access\"];\n  labels?: CollectionConfig[\"labels\"];\n  admin?: CollectionConfig[\"admin\"];\n};\n\nexport type PermissionActionStatus = (typeof STATUS)[keyof typeof STATUS];\n\nexport type PermissionActionType = (typeof TYPE)[keyof typeof TYPE];\n\nexport type PermissionAction = {\n  id: string | number;\n  code?: string | null;\n  sortOrder?: number | null;\n  type?: PermissionActionType | null;\n  status?: PermissionActionStatus | null;\n};\n"],"names":[],"mappings":"AAiDA,WAME"}

package/dist/collections/permission-features/default-data.js

@@ -0,0 +1,29 @@
+export const permissionFeaturesDefaultTranslations = {
+    en: {
+        labels: {
+            singular: "Permission Feature",
+            plural: "Permission Features"
+        },
+        admin: {
+            group: "System"
+        },
+        fields: {
+            code: {
+                label: "Code",
+                placeholder: "Enter code"
+            },
+            sortOrder: {
+                label: "Sort Order",
+                placeholder: "Enter sort order"
+            },
+            status: {
+                label: "Status",
+                placeholder: "Select status",
+                activeLabel: "Active",
+                inactiveLabel: "Inactive"
+            }
+        }
+    }
+};
+
+//# sourceMappingURL=default-data.js.map

package/dist/collections/permission-features/default-data.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/collections/permission-features/default-data.ts"],"sourcesContent":["import type { PermissionFeaturesCollectionTranslations } from \"./types.js\";\n\nexport const permissionFeaturesDefaultTranslations: PermissionFeaturesCollectionTranslations =\n  {\n    en: {\n      labels: {\n        singular: \"Permission Feature\",\n        plural: \"Permission Features\",\n      },\n      admin: {\n        group: \"System\",\n      },\n      fields: {\n        code: {\n          label: \"Code\",\n          placeholder: \"Enter code\",\n        },\n        sortOrder: {\n          label: \"Sort Order\",\n          placeholder: \"Enter sort order\",\n        },\n        status: {\n          label: \"Status\",\n          placeholder: \"Select status\",\n          activeLabel: \"Active\",\n          inactiveLabel: \"Inactive\",\n        },\n      },\n    },\n  };\n"],"names":["permissionFeaturesDefaultTranslations","en","labels","singular","plural","admin","group","fields","code","label","placeholder","sortOrder","status","activeLabel","inactiveLabel"],"mappings":"AAEA,OAAO,MAAMA,wCACX;IACEC,IAAI;QACFC,QAAQ;YACNC,UAAU;YACVC,QAAQ;QACV;QACAC,OAAO;YACLC,OAAO;QACT;QACAC,QAAQ;YACNC,MAAM;gBACJC,OAAO;gBACPC,aAAa;YACf;YACAC,WAAW;gBACTF,OAAO;gBACPC,aAAa;YACf;YACAE,QAAQ;gBACNH,OAAO;gBACPC,aAAa;gBACbG,aAAa;gBACbC,eAAe;YACjB;QACF;IACF;AACF,EAAE"}

package/dist/collections/permission-features/index.js

@@ -0,0 +1,82 @@
+import { STATUS } from "../../lib/constants/permission-feature.js";
+import { getArrayOfMergedFieldAffectingData, getSuperAdminAccess, toLocaleRecord, toSelectPlaceholder } from "../../lib/utils/index.js";
+export const getPermissionFeaturesCollection = (params)=>{
+    const { translations = {}, access = {}, fields = [], labels = {}, admin = {} } = params || {};
+    const arrTranslationsKeys = Object.keys(translations);
+    const permissionFeatures = {
+        slug: "permission-features",
+        labels: {
+            singular: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.labels?.singular),
+            plural: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.labels?.plural),
+            ...labels
+        },
+        admin: {
+            group: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.admin?.group),
+            useAsTitle: "code",
+            defaultColumns: [
+                "code",
+                "status",
+                "updatedAt"
+            ],
+            ...admin
+        },
+        access: {
+            create: getSuperAdminAccess,
+            update: getSuperAdminAccess,
+            delete: getSuperAdminAccess,
+            read: getSuperAdminAccess,
+            readVersions: getSuperAdminAccess,
+            unlock: getSuperAdminAccess,
+            admin: ({ req })=>{
+                return getSuperAdminAccess({
+                    req
+                });
+            },
+            ...access
+        },
+        fields: getArrayOfMergedFieldAffectingData({
+            fields,
+            defaultFields: [
+                {
+                    name: "code",
+                    type: "text",
+                    required: true,
+                    unique: true,
+                    index: true,
+                    label: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.code?.label),
+                    admin: {
+                        placeholder: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.code?.placeholder)
+                    }
+                },
+                {
+                    name: "sortOrder",
+                    type: "number",
+                    required: false,
+                    defaultValue: 0,
+                    label: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.sortOrder?.label),
+                    admin: {
+                        placeholder: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.sortOrder?.placeholder)
+                    }
+                },
+                {
+                    name: "status",
+                    type: "select",
+                    required: true,
+                    label: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.status?.label),
+                    defaultValue: STATUS.ACTIVE,
+                    options: Object.values(STATUS).map((status)=>({
+                            label: toLocaleRecord(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.status?.[`${status}Label`]),
+                            value: status
+                        })),
+                    admin: {
+                        placeholder: toSelectPlaceholder(arrTranslationsKeys, (locale)=>translations[locale]?.fields?.status?.placeholder)
+                    }
+                }
+            ]
+        }),
+        timestamps: true
+    };
+    return permissionFeatures;
+};
+
+//# sourceMappingURL=index.js.map

package/dist/collections/permission-features/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/collections/permission-features/index.ts"],"sourcesContent":["import type { CollectionConfig } from \"payload\";\nimport { STATUS } from \"../../lib/constants/permission-feature.js\";\nimport {\n  getArrayOfMergedFieldAffectingData,\n  getSuperAdminAccess,\n  toLocaleRecord,\n  toSelectPlaceholder,\n} from \"../../lib/utils/index.js\";\nimport type { PermissionFeaturesCollectionParams } from \"./types.js\";\n\nexport const getPermissionFeaturesCollection = (\n  params: PermissionFeaturesCollectionParams,\n) => {\n  const {\n    translations = {},\n    access = {},\n    fields = [],\n    labels = {},\n    admin = {},\n  } = params || {};\n  const arrTranslationsKeys = Object.keys(translations);\n  const permissionFeatures: CollectionConfig = {\n    slug: \"permission-features\",\n    labels: {\n      singular: toLocaleRecord(\n        arrTranslationsKeys,\n        (locale) => translations[locale]?.labels?.singular,\n      ),\n      plural: toLocaleRecord(\n        arrTranslationsKeys,\n        (locale) => translations[locale]?.labels?.plural,\n      ),\n      ...labels,\n    },\n    admin: {\n      group: toLocaleRecord(\n        arrTranslationsKeys,\n        (locale) => translations[locale]?.admin?.group,\n      ),\n      useAsTitle: \"code\",\n      defaultColumns: [\"code\", \"status\", \"updatedAt\"],\n      ...admin,\n    },\n    access: {\n      create: getSuperAdminAccess,\n      update: getSuperAdminAccess,\n      delete: getSuperAdminAccess,\n      read: getSuperAdminAccess,\n      readVersions: getSuperAdminAccess,\n      unlock: getSuperAdminAccess,\n      admin: ({ req }) => {\n        return getSuperAdminAccess({ req });\n      },\n      ...access,\n    },\n    fields: getArrayOfMergedFieldAffectingData({\n      fields,\n      defaultFields: [\n        {\n          name: \"code\",\n          type: \"text\",\n          required: true,\n          unique: true,\n          index: true,\n          label: toLocaleRecord(\n            arrTranslationsKeys,\n            (locale) => translations[locale]?.fields?.code?.label,\n          ),\n          admin: {\n            placeholder: toLocaleRecord(\n              arrTranslationsKeys,\n              (locale) => translations[locale]?.fields?.code?.placeholder,\n            ),\n          },\n        },\n        {\n          name: \"sortOrder\",\n          type: \"number\",\n          required: false,\n          defaultValue: 0,\n          label: toLocaleRecord(\n            arrTranslationsKeys,\n            (locale) => translations[locale]?.fields?.sortOrder?.label,\n          ),\n          admin: {\n            placeholder: toLocaleRecord(\n              arrTranslationsKeys,\n              (locale) => translations[locale]?.fields?.sortOrder?.placeholder,\n            ),\n          },\n        },\n        {\n          name: \"status\",\n          type: \"select\",\n          required: true,\n          label: toLocaleRecord(\n            arrTranslationsKeys,\n            (locale) => translations[locale]?.fields?.status?.label,\n          ),\n          defaultValue: STATUS.ACTIVE,\n          options: Object.values(STATUS).map((status) => ({\n            label: toLocaleRecord(\n              arrTranslationsKeys,\n              (locale) =>\n                translations[locale]?.fields?.status?.[`${status}Label`],\n            ),\n            value: status,\n          })),\n          admin: {\n            placeholder: toSelectPlaceholder(\n              arrTranslationsKeys,\n              (locale) => translations[locale]?.fields?.status?.placeholder,\n            ),\n          },\n        },\n      ],\n    }),\n    timestamps: true,\n  };\n\n  return permissionFeatures;\n};\n"],"names":["STATUS","getArrayOfMergedFieldAffectingData","getSuperAdminAccess","toLocaleRecord","toSelectPlaceholder","getPermissionFeaturesCollection","params","translations","access","fields","labels","admin","arrTranslationsKeys","Object","keys","permissionFeatures","slug","singular","locale","plural","group","useAsTitle","defaultColumns","create","update","delete","read","readVersions","unlock","req","defaultFields","name","type","required","unique","index","label","code","placeholder","defaultValue","sortOrder","status","ACTIVE","options","values","map","value","timestamps"],"mappings":"AACA,SAASA,MAAM,QAAQ,4CAA4C;AACnE,SACEC,kCAAkC,EAClCC,mBAAmB,EACnBC,cAAc,EACdC,mBAAmB,QACd,2BAA2B;AAGlC,OAAO,MAAMC,kCAAkC,CAC7CC;IAEA,MAAM,EACJC,eAAe,CAAC,CAAC,EACjBC,SAAS,CAAC,CAAC,EACXC,SAAS,EAAE,EACXC,SAAS,CAAC,CAAC,EACXC,QAAQ,CAAC,CAAC,EACX,GAAGL,UAAU,CAAC;IACf,MAAMM,sBAAsBC,OAAOC,IAAI,CAACP;IACxC,MAAMQ,qBAAuC;QAC3CC,MAAM;QACNN,QAAQ;YACNO,UAAUd,eACRS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAER,QAAQO;YAE5CE,QAAQhB,eACNS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAER,QAAQS;YAE5C,GAAGT,MAAM;QACX;QACAC,OAAO;YACLS,OAAOjB,eACLS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAEP,OAAOS;YAE3CC,YAAY;YACZC,gBAAgB;gBAAC;gBAAQ;gBAAU;aAAY;YAC/C,GAAGX,KAAK;QACV;QACAH,QAAQ;YACNe,QAAQrB;YACRsB,QAAQtB;YACRuB,QAAQvB;YACRwB,MAAMxB;YACNyB,cAAczB;YACd0B,QAAQ1B;YACRS,OAAO,CAAC,EAAEkB,GAAG,EAAE;gBACb,OAAO3B,oBAAoB;oBAAE2B;gBAAI;YACnC;YACA,GAAGrB,MAAM;QACX;QACAC,QAAQR,mCAAmC;YACzCQ;YACAqB,eAAe;gBACb;oBACEC,MAAM;oBACNC,MAAM;oBACNC,UAAU;oBACVC,QAAQ;oBACRC,OAAO;oBACPC,OAAOjC,eACLS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQ4B,MAAMD;oBAElDzB,OAAO;wBACL2B,aAAanC,eACXS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQ4B,MAAMC;oBAEpD;gBACF;gBACA;oBACEP,MAAM;oBACNC,MAAM;oBACNC,UAAU;oBACVM,cAAc;oBACdH,OAAOjC,eACLS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQ+B,WAAWJ;oBAEvDzB,OAAO;wBACL2B,aAAanC,eACXS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQ+B,WAAWF;oBAEzD;gBACF;gBACA;oBACEP,MAAM;oBACNC,MAAM;oBACNC,UAAU;oBACVG,OAAOjC,eACLS,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQgC,QAAQL;oBAEpDG,cAAcvC,OAAO0C,MAAM;oBAC3BC,SAAS9B,OAAO+B,MAAM,CAAC5C,QAAQ6C,GAAG,CAAC,CAACJ,SAAY,CAAA;4BAC9CL,OAAOjC,eACLS,qBACA,CAACM,SACCX,YAAY,CAACW,OAAO,EAAET,QAAQgC,QAAQ,CAAC,GAAGA,OAAO,KAAK,CAAC,CAAC;4BAE5DK,OAAOL;wBACT,CAAA;oBACA9B,OAAO;wBACL2B,aAAalC,oBACXQ,qBACA,CAACM,SAAWX,YAAY,CAACW,OAAO,EAAET,QAAQgC,QAAQH;oBAEtD;gBACF;aACD;QACH;QACAS,YAAY;IACd;IAEA,OAAOhC;AACT,EAAE"}

package/dist/collections/permission-features/types.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=types.js.map

package/dist/collections/permission-features/types.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/collections/permission-features/types.ts"],"sourcesContent":["import type { CollectionConfig, Field } from \"payload\";\nimport { STATUS } from \"../../lib/constants/permission-feature.js\";\n\nexport type PermissionFeaturesCollectionTranslations = {\n  [locale: string]: {\n    labels?: {\n      singular?: string;\n      plural?: string;\n    };\n    admin?: {\n      group?: string;\n    };\n    fields?: {\n      code?: {\n        label?: string;\n        placeholder?: string;\n      };\n      sortOrder?: {\n        label?: string;\n        placeholder?: string;\n      };\n      status?: {\n        label?: string;\n        placeholder?: string;\n        activeLabel?: string;\n        inactiveLabel?: string;\n      };\n    };\n  };\n};\n\nexport type PermissionFeaturesCollectionParams = {\n  translations?: PermissionFeaturesCollectionTranslations;\n  fields?: Field[];\n  access?: CollectionConfig[\"access\"];\n  labels?: CollectionConfig[\"labels\"];\n  admin?: CollectionConfig[\"admin\"];\n};\n\nexport type PermissionFeatureStatus = (typeof STATUS)[keyof typeof STATUS];\n\nexport type PermissionFeature = {\n  id: string | number;\n  code?: string | null;\n  sortOrder?: number | null;\n  status?: PermissionFeatureStatus | null;\n};\n"],"names":[],"mappings":"AAyCA,WAKE"}

package/dist/collections/permissions/default-data.js

@@ -0,0 +1,37 @@
+export const permissionsDefaultTranslations = {
+    en: {
+        labels: {
+            singular: "Permission",
+            plural: "Permissions"
+        },
+        admin: {
+            group: "System"
+        },
+        fields: {
+            name: {
+                label: "Name",
+                placeholder: "Enter name"
+            },
+            permissionFeature: {
+                label: "Permission Feature",
+                placeholder: "Select permission feature"
+            },
+            permissionAction: {
+                label: "Permission Action",
+                placeholder: "Select permission action"
+            },
+            sortOrder: {
+                label: "Sort Order",
+                placeholder: "Enter sort order"
+            },
+            status: {
+                label: "Status",
+                placeholder: "Select status",
+                activeLabel: "Active",
+                inactiveLabel: "Inactive"
+            }
+        }
+    }
+};
+
+//# sourceMappingURL=default-data.js.map

package/dist/collections/permissions/default-data.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/collections/permissions/default-data.ts"],"sourcesContent":["import type { PermissionsCollectionTranslations } from \"./types.js\";\n\nexport const permissionsDefaultTranslations: PermissionsCollectionTranslations =\n  {\n    en: {\n      labels: {\n        singular: \"Permission\",\n        plural: \"Permissions\",\n      },\n      admin: {\n        group: \"System\",\n      },\n      fields: {\n        name: {\n          label: \"Name\",\n          placeholder: \"Enter name\",\n        },\n        permissionFeature: {\n          label: \"Permission Feature\",\n          placeholder: \"Select permission feature\",\n        },\n        permissionAction: {\n          label: \"Permission Action\",\n          placeholder: \"Select permission action\",\n        },\n        sortOrder: {\n          label: \"Sort Order\",\n          placeholder: \"Enter sort order\",\n        },\n        status: {\n          label: \"Status\",\n          placeholder: \"Select status\",\n          activeLabel: \"Active\",\n          inactiveLabel: \"Inactive\",\n        },\n      },\n    },\n  };\n"],"names":["permissionsDefaultTranslations","en","labels","singular","plural","admin","group","fields","name","label","placeholder","permissionFeature","permissionAction","sortOrder","status","activeLabel","inactiveLabel"],"mappings":"AAEA,OAAO,MAAMA,iCACX;IACEC,IAAI;QACFC,QAAQ;YACNC,UAAU;YACVC,QAAQ;QACV;QACAC,OAAO;YACLC,OAAO;QACT;QACAC,QAAQ;YACNC,MAAM;gBACJC,OAAO;gBACPC,aAAa;YACf;YACAC,mBAAmB;gBACjBF,OAAO;gBACPC,aAAa;YACf;YACAE,kBAAkB;gBAChBH,OAAO;gBACPC,aAAa;YACf;YACAG,WAAW;gBACTJ,OAAO;gBACPC,aAAa;YACf;YACAI,QAAQ;gBACNL,OAAO;gBACPC,aAAa;gBACbK,aAAa;gBACbC,eAAe;YACjB;QACF;IACF;AACF,EAAE"}