captify 0.1.17 → 0.1.19

package/dist/permissions/hooks/use-role-management.d.ts

@@ -0,0 +1,99 @@
+import type { Role } from "../permissions.schemas";
+import type { CreateRoleRequest, UpdateRoleRequest, CreateRoleAssignmentRequest, UseRolesOptions, UseRoleAssignmentsOptions } from "../permissions.interfaces";
+/** Extended assignment request with group name for UI display */
+type CreateAssignmentWithGroupName = CreateRoleAssignmentRequest & {
+    groupName: string;
+};
+/**
+ * Hook to manage roles (list, create, update, delete)
+ *
+ * @param options - Query options
+ * @returns Query data, mutations, and state
+ */
+export declare function useRoles(options?: UseRolesOptions): {
+    roles: {
+        createdAt: number;
+        updatedAt: number;
+        createdById: string;
+        roleId: string;
+        tenantId: string;
+        roleName: string;
+        isSystem: boolean;
+        modifiedById?: string | undefined;
+        description?: string | undefined;
+    }[];
+    isLoading: boolean;
+    isFetching: boolean;
+    error: Error | null;
+    refetch: (options?: import("@tanstack/react-query").RefetchOptions) => Promise<import("@tanstack/react-query").QueryObserverResult<import("../permissions.interfaces").ListRolesClientResponse, Error>>;
+    create: import("@tanstack/react-query").UseMutateAsyncFunction<import("../permissions.interfaces").RoleClientResponse, Error, CreateRoleRequest, unknown>;
+    update: import("@tanstack/react-query").UseMutateAsyncFunction<import("../permissions.interfaces").RoleClientResponse, Error, {
+        roleId: string;
+        data: UpdateRoleRequest;
+    }, unknown>;
+    delete: import("@tanstack/react-query").UseMutateAsyncFunction<void, Error, string, unknown>;
+    createMutation: import("@tanstack/react-query").UseMutationResult<import("../permissions.interfaces").RoleClientResponse, Error, CreateRoleRequest, unknown>;
+    updateMutation: import("@tanstack/react-query").UseMutationResult<import("../permissions.interfaces").RoleClientResponse, Error, {
+        roleId: string;
+        data: UpdateRoleRequest;
+    }, unknown>;
+    deleteMutation: import("@tanstack/react-query").UseMutationResult<void, Error, string, unknown>;
+};
+/**
+ * Hook to manage role assignments (list, create, delete)
+ *
+ * @param options - Query options including roleId
+ * @returns Query data, mutations, and state
+ */
+export declare function useRoleAssignments(options: UseRoleAssignmentsOptions): {
+    assignments: {
+        createdAt: number;
+        createdById: string;
+        assignmentId: string;
+        tenantId: string;
+        roleId: string;
+        roleName: string;
+        groupId: string;
+        groupName: string;
+        domain: string;
+    }[];
+    isLoading: boolean;
+    isFetching: boolean;
+    error: Error | null;
+    refetch: (options?: import("@tanstack/react-query").RefetchOptions) => Promise<import("@tanstack/react-query").QueryObserverResult<import("../permissions.interfaces").ListAssignmentsClientResponse, Error>>;
+    create: import("@tanstack/react-query").UseMutateAsyncFunction<import("../permissions.interfaces").AssignmentClientResponse, Error, CreateAssignmentWithGroupName, unknown>;
+    delete: (assignmentId: string) => Promise<void>;
+    createMutation: import("@tanstack/react-query").UseMutationResult<import("../permissions.interfaces").AssignmentClientResponse, Error, CreateAssignmentWithGroupName, unknown>;
+    deleteMutation: import("@tanstack/react-query").UseMutationResult<void, Error, {
+        roleId: string;
+        assignmentId: string;
+    }, unknown>;
+};
+/**
+ * Hook to batch fetch assignments for all roles at once
+ * Solves the N+1 query problem by fetching all assignments in parallel
+ *
+ * @param roles - Array of roles to fetch assignments for
+ * @param options - Query options
+ * @returns Map of roleId to assignments array, loading state, and error state
+ */
+export declare function useAllRoleAssignments(roles: Role[], options?: {
+    enabled?: boolean;
+}): {
+    assignmentsMap: Map<string, {
+        createdAt: number;
+        createdById: string;
+        assignmentId: string;
+        tenantId: string;
+        roleId: string;
+        roleName: string;
+        groupId: string;
+        groupName: string;
+        domain: string;
+    }[]>;
+    isLoading: boolean;
+    isFetching: boolean;
+    error: Error | null;
+};
+export {};
+//# sourceMappingURL=use-role-management.d.ts.map

package/dist/permissions/hooks/use-role-management.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-role-management.d.ts","sourceRoot":"","sources":["../../../lib/permissions/hooks/use-role-management.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,IAAI,EAAkB,MAAM,uCAAuC,CAAC;AAClF,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,2BAA2B,EAC3B,eAAe,EACf,yBAAyB,EAC1B,MAAM,0CAA0C,CAAC;AAElD,iEAAiE;AACjE,KAAK,6BAA6B,GAAG,2BAA2B,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzF;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,GAAE,eAAoB;;;;;;;;;;;;;;;;;;gBAkBT,MAAM;cAAQ,iBAAiB;;;;;gBAA/B,MAAM;cAAQ,iBAAiB;;;EAqC3E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB;;;;;;;;;;;;;;;;;2BAoCpB,MAAM;;;gBAZzC,MAAM;sBACA,MAAM;;EAgCzB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO;;;;;;;;;;;;;;;EAiCvF"}

package/dist/permissions/hooks/use-role-management.js

@@ -0,0 +1,149 @@
+"use client";
+import { useMutation, useQueries, useQuery, useQueryClient } from "@tanstack/react-query";
+import { fetchRoles, createRole, updateRole, deleteRole, fetchAssignments, createAssignment, deleteAssignment, } from "../api/permissions.client";
+import { permissionsQueryKeys, PERMISSIONS_LIMITS } from "../permissions.constants";
+/**
+ * Hook to manage roles (list, create, update, delete)
+ *
+ * @param options - Query options
+ * @returns Query data, mutations, and state
+ */
+export function useRoles(options = {}) {
+    var _a, _b;
+    const { enabled = true } = options;
+    const queryClient = useQueryClient();
+    const query = useQuery({
+        queryKey: permissionsQueryKeys.roleList(),
+        queryFn: () => fetchRoles(),
+        enabled,
+    });
+    const createMutation = useMutation({
+        mutationFn: (data) => createRole(data),
+        onSuccess: () => {
+            queryClient.invalidateQueries({ queryKey: permissionsQueryKeys.roles() });
+        },
+    });
+    const updateMutation = useMutation({
+        mutationFn: ({ roleId, data }) => updateRole(roleId, data),
+        onSuccess: (_, variables) => {
+            queryClient.invalidateQueries({ queryKey: permissionsQueryKeys.roles() });
+            queryClient.invalidateQueries({
+                queryKey: permissionsQueryKeys.roleDetail(variables.roleId),
+            });
+        },
+    });
+    const deleteMutation = useMutation({
+        mutationFn: (roleId) => deleteRole(roleId),
+        onSuccess: () => {
+            queryClient.invalidateQueries({ queryKey: permissionsQueryKeys.roles() });
+        },
+    });
+    return {
+        // Query data
+        roles: (_b = (_a = query.data) === null || _a === void 0 ? void 0 : _a.roles) !== null && _b !== void 0 ? _b : [],
+        // Query state
+        isLoading: query.isLoading,
+        isFetching: query.isFetching,
+        error: query.error,
+        refetch: query.refetch,
+        // Mutations
+        create: createMutation.mutateAsync,
+        update: updateMutation.mutateAsync,
+        delete: deleteMutation.mutateAsync,
+        // Mutation objects for advanced usage
+        createMutation,
+        updateMutation,
+        deleteMutation,
+    };
+}
+/**
+ * Hook to manage role assignments (list, create, delete)
+ *
+ * @param options - Query options including roleId
+ * @returns Query data, mutations, and state
+ */
+export function useRoleAssignments(options) {
+    var _a, _b;
+    const { roleId, enabled = true } = options;
+    const queryClient = useQueryClient();
+    const query = useQuery({
+        queryKey: permissionsQueryKeys.roleAssignments(roleId),
+        queryFn: () => fetchAssignments(roleId),
+        enabled: enabled && !!roleId,
+    });
+    const createMutation = useMutation({
+        mutationFn: (data) => createAssignment(roleId, data),
+        onSuccess: () => {
+            queryClient.invalidateQueries({
+                queryKey: permissionsQueryKeys.roleAssignments(roleId),
+            });
+        },
+    });
+    const deleteMutation = useMutation({
+        mutationFn: ({ roleId: targetRoleId, assignmentId, }) => deleteAssignment(targetRoleId, assignmentId),
+        onSuccess: (_, variables) => {
+            // Use the roleId from variables to ensure we invalidate the correct query
+            queryClient.invalidateQueries({
+                queryKey: permissionsQueryKeys.roleAssignments(variables.roleId),
+            });
+        },
+    });
+    // Wrapper to pass roleId explicitly for delete
+    const deleteAssignmentWrapper = (assignmentId) => deleteMutation.mutateAsync({ roleId, assignmentId });
+    return {
+        // Query data
+        assignments: (_b = (_a = query.data) === null || _a === void 0 ? void 0 : _a.assignments) !== null && _b !== void 0 ? _b : [],
+        // Query state
+        isLoading: query.isLoading,
+        isFetching: query.isFetching,
+        error: query.error,
+        refetch: query.refetch,
+        // Mutations
+        create: createMutation.mutateAsync,
+        delete: deleteAssignmentWrapper,
+        // Mutation objects
+        createMutation,
+        deleteMutation,
+    };
+}
+/**
+ * Hook to batch fetch assignments for all roles at once
+ * Solves the N+1 query problem by fetching all assignments in parallel
+ *
+ * @param roles - Array of roles to fetch assignments for
+ * @param options - Query options
+ * @returns Map of roleId to assignments array, loading state, and error state
+ */
+export function useAllRoleAssignments(roles, options = {}) {
+    var _a, _b;
+    const { enabled = true } = options;
+    const queries = useQueries({
+        queries: roles.map((role) => ({
+            queryKey: permissionsQueryKeys.roleAssignments(role.roleId),
+            queryFn: () => fetchAssignments(role.roleId),
+            enabled: enabled && roles.length > 0,
+            // Stale time helps reduce refetches when component re-renders
+            staleTime: PERMISSIONS_LIMITS.ROLE_ASSIGNMENTS_STALE_TIME_MS,
+        })),
+    });
+    // Build a map of roleId -> assignments
+    const assignmentsMap = new Map();
+    roles.forEach((role, index) => {
+        var _a;
+        const query = queries[index];
+        if ((_a = query === null || query === void 0 ? void 0 : query.data) === null || _a === void 0 ? void 0 : _a.assignments) {
+            assignmentsMap.set(role.roleId, query.data.assignments);
+        }
+    });
+    // Aggregate loading and error states
+    const isLoading = queries.some((q) => q.isLoading);
+    const isFetching = queries.some((q) => q.isFetching);
+    const error = (_b = (_a = queries.find((q) => q.error)) === null || _a === void 0 ? void 0 : _a.error) !== null && _b !== void 0 ? _b : null;
+    return {
+        assignmentsMap,
+        isLoading,
+        isFetching,
+        error,
+    };
+}
+//# sourceMappingURL=use-role-management.js.map

package/dist/permissions/hooks/use-role-management.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-role-management.js","sourceRoot":"","sources":["../../../lib/permissions/hooks/use-role-management.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EACL,UAAU,EACV,UAAU,EACV,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAanG;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,UAA2B,EAAE;;IACpD,MAAM,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IACnC,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IAErC,MAAM,KAAK,GAAG,QAAQ,CAAC;QACrB,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;QACzC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QAC3B,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,WAAW,CAAC;QACjC,UAAU,EAAE,CAAC,IAAuB,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QACzD,SAAS,EAAE,GAAG,EAAE;YACd,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,WAAW,CAAC;QACjC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAA+C,EAAE,EAAE,CAC5E,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;QAC1B,SAAS,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE;YAC1B,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1E,WAAW,CAAC,iBAAiB,CAAC;gBAC5B,QAAQ,EAAE,oBAAoB,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC;aAC5D,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,WAAW,CAAC;QACjC,UAAU,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAClD,SAAS,EAAE,GAAG,EAAE;YACd,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,aAAa;QACb,KAAK,EAAE,MAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,KAAK,mCAAI,EAAE;QAE9B,cAAc;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QAEtB,YAAY;QACZ,MAAM,EAAE,cAAc,CAAC,WAAW;QAClC,MAAM,EAAE,cAAc,CAAC,WAAW;QAClC,MAAM,EAAE,cAAc,CAAC,WAAW;QAElC,sCAAsC;QACtC,cAAc;QACd,cAAc;QACd,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAkC;;IACnE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC3C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IAErC,MAAM,KAAK,GAAG,QAAQ,CAAC;QACrB,QAAQ,EAAE,oBAAoB,CAAC,eAAe,CAAC,MAAM,CAAC;QACtD,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC;QACvC,OAAO,EAAE,OAAO,IAAI,CAAC,CAAC,MAAM;KAC7B,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,WAAW,CAAC;QACjC,UAAU,EAAE,CAAC,IAAmC,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;QACnF,SAAS,EAAE,GAAG,EAAE;YACd,WAAW,CAAC,iBAAiB,CAAC;gBAC5B,QAAQ,EAAE,oBAAoB,CAAC,eAAe,CAAC,MAAM,CAAC;aACvD,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,WAAW,CAAC;QACjC,UAAU,EAAE,CAAC,EACX,MAAM,EAAE,YAAY,EACpB,YAAY,GAIb,EAAE,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE,YAAY,CAAC;QAClD,SAAS,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE;YAC1B,0EAA0E;YAC1E,WAAW,CAAC,iBAAiB,CAAC;gBAC5B,QAAQ,EAAE,oBAAoB,CAAC,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC;aACjE,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IAEH,+CAA+C;IAC/C,MAAM,uBAAuB,GAAG,CAAC,YAAoB,EAAE,EAAE,CACvD,cAAc,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAEvD,OAAO;QACL,aAAa;QACb,WAAW,EAAE,MAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,WAAW,mCAAI,EAAE;QAE1C,cAAc;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QAEtB,YAAY;QACZ,MAAM,EAAE,cAAc,CAAC,WAAW;QAClC,MAAM,EAAE,uBAAuB;QAE/B,mBAAmB;QACnB,cAAc;QACd,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,UAAiC,EAAE;;IACtF,MAAM,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEnC,MAAM,OAAO,GAAG,UAAU,CAAC;QACzB,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5B,QAAQ,EAAE,oBAAoB,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;YAC3D,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5C,OAAO,EAAE,OAAO,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YACpC,8DAA8D;YAC9D,SAAS,EAAE,kBAAkB,CAAC,8BAA8B;SAC7D,CAAC,CAAC;KACJ,CAAC,CAAC;IAEH,uCAAuC;IACvC,MAAM,cAAc,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC3D,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,0CAAE,WAAW,EAAE,CAAC;YAC7B,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAA,MAAA,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,0CAAE,KAAK,mCAAI,IAAI,CAAC;IAE1D,OAAO;QACL,cAAc;QACd,SAAS;QACT,UAAU;QACV,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/permissions/hooks/use-user-permissions.d.ts

@@ -0,0 +1,19 @@
+import type { UseUserPermissionsReturn } from "../permissions.interfaces";
+/**
+ * Convenience hook for checking user management permissions
+ *
+ * Provides typed boolean properties for each user permission.
+ *
+ * @returns User permission state
+ *
+ * @example
+ * ```typescript
+ * const { canCreate, canDelete, canEnable, isLoading } = useUserPermissions();
+ *
+ * if (canCreate) {
+ *   // Show create user button
+ * }
+ * ```
+ */
+export declare function useUserPermissions(): UseUserPermissionsReturn;
+//# sourceMappingURL=use-user-permissions.d.ts.map

package/dist/permissions/hooks/use-user-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-user-permissions.d.ts","sourceRoot":"","sources":["../../../lib/permissions/hooks/use-user-permissions.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAEzF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,IAAI,wBAAwB,CAe7D"}

package/dist/permissions/hooks/use-user-permissions.js

@@ -0,0 +1,35 @@
+"use client";
+import { ACTION, RESOURCE } from "../permissions.constants";
+import { usePermissions } from "./use-permissions";
+/**
+ * Convenience hook for checking user management permissions
+ *
+ * Provides typed boolean properties for each user permission.
+ *
+ * @returns User permission state
+ *
+ * @example
+ * ```typescript
+ * const { canCreate, canDelete, canEnable, isLoading } = useUserPermissions();
+ *
+ * if (canCreate) {
+ *   // Show create user button
+ * }
+ * ```
+ */
+export function useUserPermissions() {
+    const { can, isLoading } = usePermissions();
+    return {
+        canList: can(RESOURCE.USERS, ACTION.LIST),
+        canRead: can(RESOURCE.USERS, ACTION.READ),
+        canCreate: can(RESOURCE.USERS, ACTION.CREATE),
+        canUpdate: can(RESOURCE.USERS, ACTION.UPDATE),
+        canDelete: can(RESOURCE.USERS, ACTION.DELETE),
+        canEnable: can(RESOURCE.USERS, ACTION.ENABLE),
+        canDisable: can(RESOURCE.USERS, ACTION.DISABLE),
+        canAddToGroup: can(RESOURCE.USERS, ACTION.ADD_TO_GROUP),
+        canRemoveFromGroup: can(RESOURCE.USERS, ACTION.REMOVE_FROM_GROUP),
+        isLoading,
+    };
+}
+//# sourceMappingURL=use-user-permissions.js.map

package/dist/permissions/hooks/use-user-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-user-permissions.js","sourceRoot":"","sources":["../../../lib/permissions/hooks/use-user-permissions.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAGzE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IAE5C,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;QACzC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;QACzC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QAC7C,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QAC7C,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QAC7C,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QAC7C,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC;QACvD,kBAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACjE,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/permissions/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Permissions Module
+ * Public API for permission management
+ *
+ * This module provides Casbin-based RBAC+ABAC permission management including:
+ * - Policy CRUD operations
+ * - Role management
+ * - Role-to-group assignments
+ * - Permission enforcement
+ */
+export * from "./permissions.interfaces";
+export * from "./permissions.schemas";
+export * from "./permissions.constants";
+export * from "./permissions.errors";
+export * from "./permissions.utilities";
+//# sourceMappingURL=index.d.ts.map

package/dist/permissions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../lib/permissions/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,cAAc,0BAA0B,CAAC;AAGzC,cAAc,uBAAuB,CAAC;AAGtC,cAAc,yBAAyB,CAAC;AAGxC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,yBAAyB,CAAC"}

package/dist/permissions/index.js

@@ -0,0 +1,21 @@
+/**
+ * Permissions Module
+ * Public API for permission management
+ *
+ * This module provides Casbin-based RBAC+ABAC permission management including:
+ * - Policy CRUD operations
+ * - Role management
+ * - Role-to-group assignments
+ * - Permission enforcement
+ */
+// Types
+export * from "./permissions.interfaces";
+// Validation Schemas
+export * from "./permissions.schemas";
+// Constants
+export * from "./permissions.constants";
+// Error Classes
+export * from "./permissions.errors";
+// Utilities
+export * from "./permissions.utilities";
+//# sourceMappingURL=index.js.map

package/dist/permissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../lib/permissions/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,QAAQ;AACR,cAAc,0BAA0B,CAAC;AAEzC,qBAAqB;AACrB,cAAc,uBAAuB,CAAC;AAEtC,YAAY;AACZ,cAAc,yBAAyB,CAAC;AAExC,gBAAgB;AAChB,cAAc,sBAAsB,CAAC;AAErC,YAAY;AACZ,cAAc,yBAAyB,CAAC"}

package/dist/permissions/permissions.constants.d.ts

@@ -0,0 +1,147 @@
+/**
+ * Permissions module constants
+ */
+import type { ActionName, Resource, ResourceName } from "./permissions.interfaces";
+export declare const PERMISSIONS_API_ROUTES: {
+    readonly BASE: "/api/permissions";
+    readonly BULK_DELETE: "/api/permissions/bulk-delete";
+    readonly DETAIL: (policyId: string) => string;
+    readonly STATUS: (policyId: string) => string;
+    readonly CHECK: "/api/permissions/check";
+    readonly ROLES: "/api/permissions/roles";
+    readonly ROLE_DETAIL: (roleId: string) => string;
+    readonly ROLE_ASSIGNMENTS: (roleId: string) => string;
+    readonly ROLE_ASSIGNMENT_DETAIL: (roleId: string, assignmentId: string) => string;
+    readonly RESOURCES: "/api/permissions/resources";
+};
+export declare const PERMISSIONS_ERROR_MESSAGES: {
+    readonly SELF_LOCKOUT: "Cannot delete: this would lock you out of permissions management";
+};
+export declare const PERMISSIONS_LIMITS: {
+    /** Default page size for policy listing */
+    readonly PAGE_SIZE: 20;
+    /** Maximum page size allowed */
+    readonly MAX_PAGE_SIZE: 100;
+    /** Maximum policies to load for Casbin enforcer */
+    readonly MAX_POLICIES_LOAD: 10000;
+    /** Debounce delay for search input (ms) */
+    readonly SEARCH_DEBOUNCE_MS: 300;
+    /** Cache TTL for Casbin enforcer (ms) - 5 minutes */
+    readonly ENFORCER_CACHE_TTL_MS: number;
+    /** Stale time for role assignments queries (ms) - 30 seconds */
+    readonly ROLE_ASSIGNMENTS_STALE_TIME_MS: number;
+};
+export declare const VALID_SORT_ORDERS: readonly ["asc", "desc"];
+export type SortOrder = (typeof VALID_SORT_ORDERS)[number];
+export declare const VALID_POLICY_SORT_COLUMNS: readonly ["subject", "resource", "action", "effect", "status", "createdAt"];
+export declare const SUBJECT_TYPE: {
+    readonly USER: "user";
+    readonly ROLE: "role";
+    readonly GROUP: "group";
+};
+/** Valid subject types derived from SUBJECT_TYPE */
+export declare const VALID_SUBJECT_TYPES: ("role" | "group" | "user")[];
+export declare const POLICY_EFFECT: {
+    readonly ALLOW: "allow";
+    readonly DENY: "deny";
+};
+/** Valid policy effects derived from POLICY_EFFECT */
+export declare const VALID_POLICY_EFFECTS: ("allow" | "deny")[];
+export declare const VALID_POLICY_STATUSES: readonly ["enabled", "disabled"];
+export declare const DEFAULT_DOMAIN = "default";
+/**
+ * The base role automatically assigned to all authenticated users.
+ * Permissions assigned to this role apply to everyone who is logged in,
+ * without requiring any group assignment.
+ *
+ * Other roles (e.g., "support", "admin") can extend this base role
+ * through role hierarchy: g, support, authenticated, domain
+ */
+export declare const BASE_AUTHENTICATED_ROLE = "user";
+export declare const RESOURCE: {
+    readonly AGENTS: "agents";
+    readonly DOCUMENTS: "documents";
+    readonly LLM_PROVIDERS: "llm-providers";
+    readonly LLM_BUDGETS: "llm-budgets";
+    readonly LLM_USAGE: "llm-usage";
+    readonly USERS: "users";
+    readonly GROUPS: "groups";
+    readonly PERMISSIONS: "permissions";
+    readonly ONTOLOGY: "ontology";
+    readonly FEEDBACKS: "feedbacks";
+    readonly SEARCH: "search";
+    readonly SEARCH_INDICES: "search-indices";
+    readonly COLLABORATIVE_DOCS: "collaborative-docs";
+};
+export declare const ACTION: {
+    readonly ALL: "*";
+    readonly READ: "read";
+    readonly LIST: "list";
+    readonly CREATE: "create";
+    readonly UPDATE: "update";
+    readonly DELETE: "delete";
+    readonly GENERATE: "generate";
+    readonly CHAT: "chat";
+    readonly UPLOAD: "upload";
+    readonly DOWNLOAD: "download";
+    readonly ENABLE: "enable";
+    readonly DISABLE: "disable";
+    readonly ADD_TO_GROUP: "add-to-group";
+    readonly REMOVE_FROM_GROUP: "remove-from-group";
+    readonly LIST_OTHER_USERS: "list-other-users";
+    readonly SHARE: "share";
+    readonly COMMENT: "comment";
+};
+export declare const STANDARD_ACTIONS: Record<ActionName, {
+    displayName: string;
+    description: string;
+}>;
+export declare const PROTECTED_RESOURCES: Resource[];
+/**
+ * Get resource by name
+ */
+export declare function getResourceByName(name: ResourceName): Resource | undefined;
+/**
+ * Get all resource names
+ */
+export declare function getAllResourceNames(): ResourceName[];
+/**
+ * Get actions for a specific resource
+ * Always includes the wildcard "*" action which represents all actions
+ */
+export declare function getActionsForResource(resourceName: ResourceName): ActionName[];
+export declare const SYSTEM_ROLES: readonly [{
+    readonly roleName: "admin";
+    readonly description: "Full administrative access to all resources";
+}, {
+    readonly roleName: "editor";
+    readonly description: "Can read and write all resources";
+}, {
+    readonly roleName: "viewer";
+    readonly description: "Read-only access to all resources";
+}];
+/**
+ * Casbin RBAC model with domains and deny-override effect.
+ * Embedded as a string constant to work when published as an npm package.
+ *
+ * Model explanation:
+ * - request_definition: subject, domain, object (resource), action
+ * - policy_definition: subject, domain, object, action, effect (allow/deny)
+ * - role_definition: role inheritance with domain support (g = _, _, _)
+ * - policy_effect: allow if any allow exists AND no deny exists (deny-override)
+ * - matchers: checks role inheritance, domain, resource, and action (with wildcard support)
+ */
+export declare const CASBIN_MODEL = "\n[request_definition]\nr = sub, dom, obj, act\n\n[policy_definition]\np = sub, dom, obj, act, eft\n\n[role_definition]\ng = _, _, _\n\n[policy_effect]\ne = some(where (p.eft == allow)) && !some(where (p.eft == deny))\n\n[matchers]\nm = g(r.sub, p.sub, r.dom) && r.dom == p.dom && r.obj == p.obj && (r.act == p.act || p.act == \"*\")\n";
+export declare const permissionsQueryKeys: {
+    all: readonly ["permissions"];
+    policies: () => readonly ["permissions", "policies"];
+    policyList: (params?: object) => readonly ["permissions", "policies", "list", object];
+    policyDetail: (policyId: string) => readonly ["permissions", "policies", "detail", string];
+    roles: () => readonly ["permissions", "roles"];
+    roleList: () => readonly ["permissions", "roles", "list"];
+    roleDetail: (roleId: string) => readonly ["permissions", "roles", "detail", string];
+    roleAssignments: (roleId: string) => readonly ["permissions", "roles", string, "assignments"];
+    resources: () => readonly ["permissions", "resources"];
+    userPermissions: () => readonly ["permissions", "user-permissions"];
+};
+//# sourceMappingURL=permissions.constants.d.ts.map

package/dist/permissions/permissions.constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.constants.d.ts","sourceRoot":"","sources":["../../lib/permissions/permissions.constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,UAAU,EAEV,QAAQ,EACR,YAAY,EAEb,MAAM,0CAA0C,CAAC;AAMlD,eAAO,MAAM,sBAAsB;;;gCAGd,MAAM;gCACN,MAAM;;;mCAGH,MAAM;wCACD,MAAM;8CAEA,MAAM,gBAAgB,MAAM;;CAGrD,CAAC;AAMX,eAAO,MAAM,0BAA0B;;CAE7B,CAAC;AAMX,eAAO,MAAM,kBAAkB;IAC7B,2CAA2C;;IAE3C,gCAAgC;;IAEhC,mDAAmD;;IAEnD,2CAA2C;;IAE3C,qDAAqD;;IAErD,gEAAgE;;CAExD,CAAC;AAMX,eAAO,MAAM,iBAAiB,0BAA2B,CAAC;AAC1D,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAM3D,eAAO,MAAM,yBAAyB,6EAO5B,CAAC;AAMX,eAAO,MAAM,YAAY;;;;CAIuB,CAAC;AAEjD,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,+BAA8B,CAAC;AAM/D,eAAO,MAAM,aAAa;;;CAGuB,CAAC;AAElD,sDAAsD;AACtD,eAAO,MAAM,oBAAoB,sBAA+B,CAAC;AAMjE,eAAO,MAAM,qBAAqB,kCAAmC,CAAC;AAMtE,eAAO,MAAM,cAAc,YAAY,CAAC;AAMxC;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,SAAS,CAAC;AAM9C,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;CAc4B,CAAC;AAMlD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;CAkB4B,CAAC;AAMhD,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,UAAU,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAqE7F,CAAC;AAMF,eAAO,MAAM,mBAAmB,EAAE,QAAQ,EAoLzC,CAAC;AAEF;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,QAAQ,GAAG,SAAS,CAE1E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,YAAY,EAAE,CAEpD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,YAAY,GAAG,UAAU,EAAE,CAK9E;AAMD,eAAO,MAAM,YAAY;;;;;;;;;EAaf,CAAC;AAMX;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,oVAexB,CAAC;AAMF,eAAO,MAAM,oBAAoB;;;0BAGV,MAAM;6BAEF,MAAM;;;yBAIV,MAAM;8BACD,MAAM;;;CAIjC,CAAC"}