captify 0.1.18 → 1.1.0

package/dist/permissions/components/policy-data-table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-data-table.d.ts","sourceRoot":"","sources":["../../../lib/permissions/components/policy-data-table.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,0CAA0C,CAAC;AAIlD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,EAC9B,QAAQ,EACR,OAAe,EACf,KAAY,EACZ,IAAI,EACJ,KAAK,EACL,UAAU,EACV,UAAU,EACV,YAAY,EACZ,aAAa,EACb,MAAM,EACN,SAAS,EACT,MAAM,EACN,MAAM,EACN,QAAQ,EACR,cAAc,EACd,SAAS,EACT,YAAoB,GACrB,EAAE,oBAAoB,2CAwDtB"}

package/dist/permissions/components/policy-data-table.js

@@ -0,0 +1,41 @@
+"use client";
+import { jsx as _jsx } from "react/jsx-runtime";
+import { createPolicyColumns } from "./policy-columns";
+import { DataTable } from "../../shared/components/tables/data-table";
+import { useCallback, useMemo } from "react";
+/**
+ * DataTable component for displaying permission policies
+ * Wraps the shared DataTable with policy-specific column definitions and behavior
+ */
+export function PolicyDataTable({ policies, loading = false, error = null, page, limit, totalCount, totalPages, onPageChange, onLimitChange, sortBy, sortOrder, onSort, onEdit, onDelete, onToggleStatus, onRefresh, isRefreshing = false, }) {
+    // Memoize row actions
+    const rowActions = useMemo(() => ({
+        onEdit,
+        onDelete,
+        onToggleStatus,
+    }), [onEdit, onDelete, onToggleStatus]);
+    // Create columns with actions
+    const columns = useMemo(() => createPolicyColumns(rowActions), [rowActions]);
+    // Get row ID for selection and tracking
+    const getRowId = useCallback((policy) => policy.policyId, []);
+    // Convert Error to string for DataTable
+    const errorMessage = error ? error.message : null;
+    return (_jsx(DataTable, { data: policies, columns: columns, loading: loading, error: errorMessage, getRowId: getRowId, showHeader: true, headerTitle: "Permission Policies", headerDescription: totalCount > 0
+            ? `${totalCount} ${totalCount === 1 ? "policy" : "policies"} found`
+            : undefined, onRefresh: onRefresh, isRefreshing: isRefreshing, emptyMessage: "No policies found", emptyDescription: "Get started by creating your first permission policy.", pagination: {
+            mode: "server",
+            pageSize: limit,
+            currentPage: page,
+            onPageSizeChange: onLimitChange,
+            pageSizeOptions: [10, 20, 50, 100],
+            onNextPage: () => onPageChange(page + 1),
+            onPreviousPage: () => onPageChange(page - 1),
+            hasMore: page < totalPages,
+        }, sorting: {
+            mode: "multi",
+            sortColumn: sortBy,
+            sortDirection: sortOrder,
+            onSort: (column, _direction) => onSort(column),
+        } }));
+}
+//# sourceMappingURL=policy-data-table.js.map

package/dist/permissions/components/policy-data-table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-data-table.js","sourceRoot":"","sources":["../../../lib/permissions/components/policy-data-table.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAMlF,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAE7C;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,QAAQ,EACR,OAAO,GAAG,KAAK,EACf,KAAK,GAAG,IAAI,EACZ,IAAI,EACJ,KAAK,EACL,UAAU,EACV,UAAU,EACV,YAAY,EACZ,aAAa,EACb,MAAM,EACN,SAAS,EACT,MAAM,EACN,MAAM,EACN,QAAQ,EACR,cAAc,EACd,SAAS,EACT,YAAY,GAAG,KAAK,GACC;IACrB,sBAAsB;IACtB,MAAM,UAAU,GAAqB,OAAO,CAC1C,GAAG,EAAE,CAAC,CAAC;QACL,MAAM;QACN,QAAQ;QACR,cAAc;KACf,CAAC,EACF,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,CACnC,CAAC;IAEF,8BAA8B;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAE7E,wCAAwC;IACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAEtE,wCAAwC;IACxC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAElD,OAAO,CACL,KAAC,SAAS,IACR,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,IAAI,EAChB,WAAW,EAAC,qBAAqB,EACjC,iBAAiB,EACf,UAAU,GAAG,CAAC;YACZ,CAAC,CAAC,GAAG,UAAU,IAAI,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,QAAQ;YACnE,CAAC,CAAC,SAAS,EAEf,SAAS,EAAE,SAAS,EACpB,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAC,mBAAmB,EAChC,gBAAgB,EAAC,uDAAuD,EACxE,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,aAAa;YAC/B,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC;YAClC,UAAU,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC;YACxC,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC;YAC5C,OAAO,EAAE,IAAI,GAAG,UAAU;SAC3B,EACD,OAAO,EAAE;YACP,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,MAAM;YAClB,aAAa,EAAE,SAAS;YACxB,MAAM,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;SAC/C,GACD,CACH,CAAC;AACJ,CAAC"}

package/dist/permissions/components/policy-delete-dialog.d.ts

@@ -0,0 +1,6 @@
+import type { PolicyDeleteDialogProps } from "../permissions.interfaces";
+/**
+ * Confirmation dialog for deleting a policy
+ */
+export declare function PolicyDeleteDialog({ open, onOpenChange, policy, onConfirm, isDeleting, }: PolicyDeleteDialogProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=policy-delete-dialog.d.ts.map

package/dist/permissions/components/policy-delete-dialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-delete-dialog.d.ts","sourceRoot":"","sources":["../../../lib/permissions/components/policy-delete-dialog.tsx"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAExF;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,EACjC,IAAI,EACJ,YAAY,EACZ,MAAM,EACN,SAAS,EACT,UAAkB,GACnB,EAAE,uBAAuB,2CA8CzB"}

package/dist/permissions/components/policy-delete-dialog.js

@@ -0,0 +1,14 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { AlertDialog, AlertDialogAction, AlertDialogCancel, AlertDialogContent, AlertDialogDescription, AlertDialogFooter, AlertDialogHeader, AlertDialogTitle, } from "../../shared/components/ui/alert-dialog";
+import { Skeleton } from "../../shared/components/ui/skeleton";
+/**
+ * Confirmation dialog for deleting a policy
+ */
+export function PolicyDeleteDialog({ open, onOpenChange, policy, onConfirm, isDeleting = false, }) {
+    const handleConfirm = async () => {
+        await onConfirm();
+    };
+    return (_jsx(AlertDialog, { open: open, onOpenChange: onOpenChange, children: _jsxs(AlertDialogContent, { children: [_jsxs(AlertDialogHeader, { children: [_jsx(AlertDialogTitle, { children: "Delete Policy" }), _jsxs(AlertDialogDescription, { children: ["Are you sure you want to delete this policy?", policy && (_jsxs("span", { className: "mt-2 block text-sm", children: [_jsx("strong", { children: "Subject:" }), " ", policy.subject, _jsx("br", {}), _jsx("strong", { children: "Resource:" }), " ", policy.resource, _jsx("br", {}), _jsx("strong", { children: "Actions:" }), " ", policy.actions.join(", "), _jsx("br", {}), _jsx("strong", { children: "Effect:" }), " ", policy.effect] })), _jsx("span", { className: "text-destructive mt-2 block", children: "This action cannot be undone." })] })] }), _jsxs(AlertDialogFooter, { children: [_jsx(AlertDialogCancel, { disabled: isDeleting, children: "Cancel" }), _jsx(AlertDialogAction, { onClick: handleConfirm, disabled: isDeleting, className: "!bg-destructive !text-destructive-foreground hover:!bg-destructive/90", children: isDeleting ? (_jsxs(_Fragment, { children: [_jsx(Skeleton, { className: "mr-2 h-4 w-4 rounded-full", "aria-hidden": "true" }), "Deleting..."] })) : ("Delete") })] })] }) }));
+}
+//# sourceMappingURL=policy-delete-dialog.js.map

package/dist/permissions/components/policy-delete-dialog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-delete-dialog.js","sourceRoot":"","sources":["../../../lib/permissions/components/policy-delete-dialog.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAG/D;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,EACjC,IAAI,EACJ,YAAY,EACZ,MAAM,EACN,SAAS,EACT,UAAU,GAAG,KAAK,GACM;IACxB,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAC/B,MAAM,SAAS,EAAE,CAAC;IACpB,CAAC,CAAC;IAEF,OAAO,CACL,KAAC,WAAW,IAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,YACjD,MAAC,kBAAkB,eACjB,MAAC,iBAAiB,eAChB,KAAC,gBAAgB,gCAAiC,EAClD,MAAC,sBAAsB,+DAEpB,MAAM,IAAI,CACT,gBAAM,SAAS,EAAC,oBAAoB,aAClC,wCAAyB,OAAE,MAAM,CAAC,OAAO,EACzC,cAAM,EACN,yCAA0B,OAAE,MAAM,CAAC,QAAQ,EAC3C,cAAM,EACN,wCAAyB,OAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EACpD,cAAM,EACN,uCAAwB,OAAE,MAAM,CAAC,MAAM,IAClC,CACR,EACD,eAAM,SAAS,EAAC,6BAA6B,8CAAqC,IAC3D,IACP,EACpB,MAAC,iBAAiB,eAChB,KAAC,iBAAiB,IAAC,QAAQ,EAAE,UAAU,uBAA4B,EACnE,KAAC,iBAAiB,IAChB,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,UAAU,EACpB,SAAS,EAAC,uEAAuE,YAEhF,UAAU,CAAC,CAAC,CAAC,CACZ,8BACE,KAAC,QAAQ,IAAC,SAAS,EAAC,2BAA2B,iBAAa,MAAM,GAAG,mBAEpE,CACJ,CAAC,CAAC,CAAC,CACF,QAAQ,CACT,GACiB,IACF,IACD,GACT,CACf,CAAC;AACJ,CAAC"}

package/dist/permissions/components/policy-form-dialog.d.ts

@@ -0,0 +1,6 @@
+import type { PolicyFormDialogProps } from "../permissions.interfaces";
+/**
+ * Dialog component for creating and editing permission policies
+ */
+export declare function PolicyFormDialog({ open, onOpenChange, policy, defaultResource, onSubmit, isSubmitting, }: PolicyFormDialogProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=policy-form-dialog.d.ts.map

package/dist/permissions/components/policy-form-dialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-form-dialog.d.ts","sourceRoot":"","sources":["../../../lib/permissions/components/policy-form-dialog.tsx"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AA8BtF;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,IAAI,EACJ,YAAY,EACZ,MAAM,EACN,eAAe,EACf,QAAQ,EACR,YAAoB,GACrB,EAAE,qBAAqB,2CAuVvB"}

package/dist/permissions/components/policy-form-dialog.js

@@ -0,0 +1,209 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useCognitoGroups } from "../../groups/hooks";
+import { useRoles } from "../hooks/use-role-management";
+import { POLICY_EFFECT, PROTECTED_RESOURCES, RESOURCE, STANDARD_ACTIONS, SUBJECT_TYPE, getActionsForResource, } from "../permissions.constants";
+import { policyFormSchema } from "../permissions.schemas";
+import { FormBuilder } from "../../shared/components/form-builder";
+import { MultiSelect } from "../../shared/components/multi-select";
+import { Button } from "../../shared/components/ui/button";
+import { Command, CommandEmpty, CommandGroup, CommandInput, CommandItem, CommandList, } from "../../shared/components/ui/command";
+import { Dialog, DialogContent, DialogDescription, DialogHeader, DialogTitle, } from "../../shared/components/ui/dialog";
+import { Popover, PopoverContent, PopoverTrigger } from "../../shared/components/ui/popover";
+import { Skeleton } from "../../shared/components/ui/skeleton";
+import { cn } from "../../shared/utilities/cn";
+import { useAllCognitoUsers } from "../../users/hooks/use-cognito-users";
+import { zodResolver } from "@hookform/resolvers/zod";
+import { AlertCircle, Check, ChevronsUpDown } from "lucide-react";
+import { useCallback, useEffect, useState } from "react";
+import { useForm } from "react-hook-form";
+/**
+ * Dialog component for creating and editing permission policies
+ */
+export function PolicyFormDialog({ open, onOpenChange, policy, defaultResource, onSubmit, isSubmitting = false, }) {
+    const isEditMode = !!policy;
+    const [comboboxOpen, setComboboxOpen] = useState(false);
+    // Use defaultResource from props, falling back to AGENTS
+    const initialResource = defaultResource !== null && defaultResource !== void 0 ? defaultResource : RESOURCE.AGENTS;
+    // Fetch data for subject selection based on type
+    const { roles, isLoading: isLoadingRoles, error: rolesError } = useRoles();
+    const { users, isLoading: isLoadingUsers, error: usersError } = useAllCognitoUsers();
+    const { groups, isLoading: isLoadingGroups, error: groupsError } = useCognitoGroups();
+    const form = useForm({
+        resolver: zodResolver(policyFormSchema),
+        defaultValues: {
+            subject: "",
+            subjectType: SUBJECT_TYPE.ROLE,
+            resource: initialResource,
+            actions: [],
+            effect: POLICY_EFFECT.ALLOW,
+        },
+    });
+    // Watch resource and subject type to update UI dynamically
+    // eslint-disable-next-line react-hooks/incompatible-library -- Required for form field updates
+    const selectedResource = form.watch("resource");
+    const selectedSubjectType = form.watch("subjectType");
+    const selectedSubject = form.watch("subject");
+    const selectedActions = form.watch("actions");
+    const availableActions = getActionsForResource(selectedResource);
+    // Determine loading and error state based on selected subject type
+    const isLoadingSubjects = selectedSubjectType === SUBJECT_TYPE.ROLE
+        ? isLoadingRoles
+        : selectedSubjectType === SUBJECT_TYPE.USER
+            ? isLoadingUsers
+            : isLoadingGroups;
+    const subjectsError = selectedSubjectType === SUBJECT_TYPE.ROLE
+        ? rolesError
+        : selectedSubjectType === SUBJECT_TYPE.USER
+            ? usersError
+            : groupsError;
+    // Reset subject when subject type changes (but not in edit mode)
+    useEffect(() => {
+        if (!isEditMode) {
+            form.setValue("subject", "");
+            setComboboxOpen(false);
+        }
+    }, [selectedSubjectType, form, isEditMode]);
+    // Reset actions when resource changes - remove any actions not available for new resource
+    useEffect(() => {
+        if (!isEditMode && selectedActions.length > 0) {
+            const validActions = selectedActions.filter((action) => availableActions.includes(action));
+            if (validActions.length !== selectedActions.length) {
+                form.setValue("actions", validActions);
+            }
+        }
+    }, [selectedResource, availableActions, selectedActions, form, isEditMode]);
+    // Reset form when policy or defaultResource changes
+    useEffect(() => {
+        if (policy) {
+            form.reset({
+                subject: policy.subject,
+                subjectType: policy.subjectType,
+                resource: policy.resource,
+                actions: policy.actions,
+                effect: policy.effect,
+            });
+        }
+        else {
+            form.reset({
+                subject: "",
+                subjectType: SUBJECT_TYPE.ROLE,
+                resource: initialResource,
+                actions: [],
+                effect: POLICY_EFFECT.ALLOW,
+            });
+        }
+    }, [policy, form, initialResource]);
+    const handleSubmit = useCallback(async (values) => {
+        await onSubmit(values);
+        form.reset();
+    }, [onSubmit, form]);
+    const handleCancel = useCallback(() => {
+        form.reset();
+        setComboboxOpen(false);
+        onOpenChange(false);
+    }, [form, onOpenChange]);
+    // Handle subject selection from combobox
+    const handleSubjectSelect = useCallback((value) => {
+        form.setValue("subject", value);
+        setComboboxOpen(false);
+    }, [form]);
+    // Get display label for current subject
+    const getSubjectDisplayLabel = () => {
+        if (!selectedSubject)
+            return null;
+        if (selectedSubjectType === SUBJECT_TYPE.ROLE) {
+            const role = roles.find((r) => r.roleName === selectedSubject);
+            return role === null || role === void 0 ? void 0 : role.roleName;
+        }
+        if (selectedSubjectType === SUBJECT_TYPE.USER) {
+            const user = users.find((u) => u.username === selectedSubject);
+            return (user === null || user === void 0 ? void 0 : user.email) || (user === null || user === void 0 ? void 0 : user.username);
+        }
+        if (selectedSubjectType === SUBJECT_TYPE.GROUP) {
+            const group = groups.find((g) => g.groupName === selectedSubject);
+            return group === null || group === void 0 ? void 0 : group.groupName;
+        }
+        return selectedSubject;
+    };
+    // Define form fields using FormBuilder pattern
+    const fields = [
+        {
+            name: "subjectType",
+            label: "Subject Type",
+            type: "select",
+            description: "Who this policy applies to",
+            disabled: isEditMode || isSubmitting,
+            options: [
+                { label: "Role", value: SUBJECT_TYPE.ROLE },
+                { label: "Group", value: SUBJECT_TYPE.GROUP },
+                { label: "User", value: SUBJECT_TYPE.USER },
+            ],
+        },
+        // Custom field for subject combobox
+        {
+            name: "subject",
+            label: "Subject",
+            type: "custom",
+            description: selectedSubjectType === SUBJECT_TYPE.USER
+                ? "Select the user this policy applies to"
+                : selectedSubjectType === SUBJECT_TYPE.ROLE
+                    ? "Select the role this policy applies to"
+                    : "Select the group this policy applies to",
+            render: ({ field }) => {
+                if (subjectsError) {
+                    return (_jsxs("div", { className: "border-destructive bg-destructive/10 text-destructive flex items-center gap-2 rounded-md border p-3 text-sm", children: [_jsx(AlertCircle, { className: "h-4 w-4", "aria-hidden": "true" }), _jsxs("span", { children: ["Failed to load ", selectedSubjectType, "s. Please try again."] })] }));
+                }
+                return (_jsxs(Popover, { open: comboboxOpen, onOpenChange: setComboboxOpen, children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs(Button, { variant: "outline", role: "combobox", "aria-expanded": comboboxOpen, className: cn("w-full justify-between", !field.value && "text-muted-foreground"), disabled: isEditMode || isLoadingSubjects || isSubmitting, children: [isLoadingSubjects ? (_jsxs(_Fragment, { children: [_jsx(Skeleton, { className: "mr-2 h-4 w-4 rounded-full", "aria-hidden": "true" }), "Loading ", selectedSubjectType, "s..."] })) : field.value ? (getSubjectDisplayLabel()) : (`Search and select a ${selectedSubjectType}...`), _jsx(ChevronsUpDown, { className: "ml-2 h-4 w-4 shrink-0 opacity-50", "aria-hidden": "true" })] }) }), _jsx(PopoverContent, { className: "w-[450px] p-0", align: "start", children: _jsxs(Command, { children: [_jsx(CommandInput, { placeholder: `Search ${selectedSubjectType}s...` }), _jsxs(CommandList, { children: [_jsxs(CommandEmpty, { children: ["No ", selectedSubjectType, "s found."] }), _jsxs(CommandGroup, { children: [selectedSubjectType === SUBJECT_TYPE.ROLE &&
+                                                        [...roles]
+                                                            .sort((a, b) => a.roleName.localeCompare(b.roleName))
+                                                            .map((role) => (_jsxs(CommandItem, { value: role.roleName, onSelect: () => handleSubjectSelect(role.roleName), children: [_jsx(Check, { className: cn("mr-2 h-4 w-4", selectedSubject === role.roleName ? "opacity-100" : "opacity-0"), "aria-hidden": "true" }), _jsxs("div", { className: "flex flex-col", children: [_jsx("span", { children: role.roleName }), role.description && (_jsx("span", { className: "text-muted-foreground text-xs", children: role.description }))] })] }, role.roleId))), selectedSubjectType === SUBJECT_TYPE.USER &&
+                                                        users.map((user) => (_jsxs(CommandItem, { value: `${user.username} ${user.email || ""}`, onSelect: () => handleSubjectSelect(user.username), children: [_jsx(Check, { className: cn("mr-2 h-4 w-4", selectedSubject === user.username ? "opacity-100" : "opacity-0"), "aria-hidden": "true" }), _jsxs("div", { className: "flex flex-col", children: [_jsx("span", { children: user.email || user.username }), user.email && user.username !== user.email && (_jsx("span", { className: "text-muted-foreground text-xs", children: user.username }))] })] }, user.username))), selectedSubjectType === SUBJECT_TYPE.GROUP &&
+                                                        groups.map((group) => (_jsxs(CommandItem, { value: group.groupName, onSelect: () => handleSubjectSelect(group.groupName), children: [_jsx(Check, { className: cn("mr-2 h-4 w-4", selectedSubject === group.groupName ? "opacity-100" : "opacity-0"), "aria-hidden": "true" }), _jsxs("div", { className: "flex flex-col", children: [_jsx("span", { children: group.groupName }), group.description && (_jsx("span", { className: "text-muted-foreground text-xs", children: group.description }))] })] }, group.groupName)))] })] })] }) })] }));
+            },
+        },
+        {
+            name: "resource",
+            label: "Resource",
+            type: "select",
+            description: "The resource this policy applies to",
+            disabled: isEditMode || isSubmitting,
+            options: PROTECTED_RESOURCES.map((resource) => ({
+                label: resource.displayName,
+                value: resource.name,
+            })),
+        },
+        // Custom field for actions (dynamic based on resource)
+        {
+            name: "actions",
+            label: "Actions",
+            type: "custom",
+            description: "Select one or more actions to permit or deny",
+            render: ({ field }) => {
+                const actionOptions = availableActions.map((actionName) => {
+                    var _a, _b;
+                    return ({
+                        label: (_b = (_a = STANDARD_ACTIONS[actionName]) === null || _a === void 0 ? void 0 : _a.displayName) !== null && _b !== void 0 ? _b : actionName,
+                        value: actionName,
+                    });
+                });
+                return (_jsx(MultiSelect, { options: actionOptions, value: field.value, onChange: field.onChange, placeholder: "Select actions...", emptyMessage: "No actions available.", disabled: isSubmitting }));
+            },
+        },
+        {
+            name: "effect",
+            label: "Effect",
+            type: "select",
+            description: "Whether to allow or deny the action",
+            disabled: isSubmitting,
+            options: [
+                { label: "Allow", value: POLICY_EFFECT.ALLOW },
+                { label: "Deny", value: POLICY_EFFECT.DENY },
+            ],
+        },
+    ];
+    return (_jsx(Dialog, { open: open, onOpenChange: onOpenChange, children: _jsxs(DialogContent, { className: "sm:max-w-[500px]", children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: isEditMode ? "Edit Policy" : "Create Policy" }), _jsx(DialogDescription, { children: isEditMode
+                                ? "Update the policy configuration below."
+                                : "Create a new permission policy to control access to resources." })] }), _jsx(FormBuilder, { form: form, fields: fields, onSubmit: handleSubmit, onCancel: handleCancel, submitLabel: isEditMode ? "Update Policy" : "Create Policy", isEditing: isEditMode, schema: policyFormSchema })] }) }));
+}
+//# sourceMappingURL=policy-form-dialog.js.map

package/dist/permissions/components/policy-form-dialog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-form-dialog.js","sourceRoot":"","sources":["../../../lib/permissions/components/policy-form-dialog.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,6CAA6C,CAAC;AACvE,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,qBAAqB,GACtB,MAAM,yCAAyC,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAA6B,MAAM,uCAAuC,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAEnE,OAAO,EAAE,WAAW,EAA0B,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAC;AAC3D,OAAO,EACL,OAAO,EACP,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,MAAM,EACN,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,WAAW,GACZ,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAC7F,OAAO,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAE,MAAM,2BAA2B,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,IAAI,EACJ,YAAY,EACZ,MAAM,EACN,eAAe,EACf,QAAQ,EACR,YAAY,GAAG,KAAK,GACE;IACtB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAExD,yDAAyD;IACzD,MAAM,eAAe,GAAG,eAAe,aAAf,eAAe,cAAf,eAAe,GAAI,QAAQ,CAAC,MAAM,CAAC;IAE3D,iDAAiD;IACjD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC3E,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,kBAAkB,EAAE,CAAC;IACrF,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEtF,MAAM,IAAI,GAAG,OAAO,CAAuB;QACzC,QAAQ,EAAE,WAAW,CAAC,gBAAgB,CAAC;QACvC,aAAa,EAAE;YACb,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,YAAY,CAAC,IAAI;YAC9B,QAAQ,EAAE,eAAe;YACzB,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,aAAa,CAAC,KAAK;SAC5B;KACF,CAAC,CAAC;IAEH,2DAA2D;IAC3D,+FAA+F;IAC/F,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAEjE,mEAAmE;IACnE,MAAM,iBAAiB,GACrB,mBAAmB,KAAK,YAAY,CAAC,IAAI;QACvC,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,mBAAmB,KAAK,YAAY,CAAC,IAAI;YACzC,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,eAAe,CAAC;IAExB,MAAM,aAAa,GACjB,mBAAmB,KAAK,YAAY,CAAC,IAAI;QACvC,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,mBAAmB,KAAK,YAAY,CAAC,IAAI;YACzC,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,WAAW,CAAC;IAEpB,iEAAiE;IACjE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC7B,eAAe,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,EAAE,CAAC,mBAAmB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAE5C,0FAA0F;IAC1F,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3F,IAAI,YAAY,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;gBACnD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAE5E,oDAAoD;IACpD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,CAAC;gBACT,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC;gBACT,OAAO,EAAE,EAAE;gBACX,WAAW,EAAE,YAAY,CAAC,IAAI;gBAC9B,QAAQ,EAAE,eAAe;gBACzB,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,aAAa,CAAC,KAAK;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;IAEpC,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,MAA4B,EAAE,EAAE;QACrC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC,EACD,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,eAAe,CAAC,KAAK,CAAC,CAAC;QACvB,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IAEzB,yCAAyC;IACzC,MAAM,mBAAmB,GAAG,WAAW,CACrC,CAAC,KAAa,EAAE,EAAE;QAChB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAChC,eAAe,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,EACD,CAAC,IAAI,CAAC,CACP,CAAC;IAEF,wCAAwC;IACxC,MAAM,sBAAsB,GAAG,GAAG,EAAE;QAClC,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAElC,IAAI,mBAAmB,KAAK,YAAY,CAAC,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC;YAC/D,OAAO,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,CAAC;QACxB,CAAC;QACD,IAAI,mBAAmB,KAAK,YAAY,CAAC,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC;YAC/D,OAAO,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,MAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,CAAA,CAAC;QACvC,CAAC;QACD,IAAI,mBAAmB,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,eAAe,CAAC,CAAC;YAClE,OAAO,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,SAAS,CAAC;QAC1B,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC,CAAC;IAEF,+CAA+C;IAC/C,MAAM,MAAM,GAA4C;QACtD;YACE,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,cAAc;YACrB,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,4BAA4B;YACzC,QAAQ,EAAE,UAAU,IAAI,YAAY;YACpC,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE;gBAC3C,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE;gBAC7C,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE;aAC5C;SACF;QACD,oCAAoC;QACpC;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,mBAAmB,KAAK,YAAY,CAAC,IAAI;gBACvC,CAAC,CAAC,wCAAwC;gBAC1C,CAAC,CAAC,mBAAmB,KAAK,YAAY,CAAC,IAAI;oBACzC,CAAC,CAAC,wCAAwC;oBAC1C,CAAC,CAAC,yCAAyC;YACjD,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;gBACpB,IAAI,aAAa,EAAE,CAAC;oBAClB,OAAO,CACL,eAAK,SAAS,EAAC,6GAA6G,aAC1H,KAAC,WAAW,IAAC,SAAS,EAAC,SAAS,iBAAa,MAAM,GAAG,EACtD,8CAAsB,mBAAmB,4BAA4B,IACjE,CACP,CAAC;gBACJ,CAAC;gBAED,OAAO,CACL,MAAC,OAAO,IAAC,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,aACxD,KAAC,cAAc,IAAC,OAAO,kBACrB,MAAC,MAAM,IACL,OAAO,EAAC,SAAS,EACjB,IAAI,EAAC,UAAU,mBACA,YAAY,EAC3B,SAAS,EAAE,EAAE,CAAC,wBAAwB,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,uBAAuB,CAAC,EAChF,QAAQ,EAAE,UAAU,IAAI,iBAAiB,IAAI,YAAY,aAExD,iBAAiB,CAAC,CAAC,CAAC,CACnB,8BACE,KAAC,QAAQ,IAAC,SAAS,EAAC,2BAA2B,iBAAa,MAAM,GAAG,cAC5D,mBAAmB,YAC3B,CACJ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAChB,sBAAsB,EAAE,CACzB,CAAC,CAAC,CAAC,CACF,uBAAuB,mBAAmB,KAAK,CAChD,EACD,KAAC,cAAc,IAAC,SAAS,EAAC,kCAAkC,iBAAa,MAAM,GAAG,IAC3E,GACM,EACjB,KAAC,cAAc,IAAC,SAAS,EAAC,eAAe,EAAC,KAAK,EAAC,OAAO,YACrD,MAAC,OAAO,eACN,KAAC,YAAY,IAAC,WAAW,EAAE,UAAU,mBAAmB,MAAM,GAAI,EAClE,MAAC,WAAW,eACV,MAAC,YAAY,sBAAK,mBAAmB,gBAAwB,EAC7D,MAAC,YAAY,eACV,mBAAmB,KAAK,YAAY,CAAC,IAAI;wDACxC,CAAC,GAAG,KAAK,CAAC;6DACP,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;6DACpD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACb,MAAC,WAAW,IAEV,KAAK,EAAE,IAAI,CAAC,QAAQ,EACpB,QAAQ,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,aAElD,KAAC,KAAK,IACJ,SAAS,EAAE,EAAE,CACX,cAAc,EACd,eAAe,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAChE,iBACW,MAAM,GAClB,EACF,eAAK,SAAS,EAAC,eAAe,aAC5B,yBAAO,IAAI,CAAC,QAAQ,GAAQ,EAC3B,IAAI,CAAC,WAAW,IAAI,CACnB,eAAM,SAAS,EAAC,+BAA+B,YAC5C,IAAI,CAAC,WAAW,GACZ,CACR,IACG,KAlBD,IAAI,CAAC,MAAM,CAmBJ,CACf,CAAC,EACL,mBAAmB,KAAK,YAAY,CAAC,IAAI;wDACxC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAClB,MAAC,WAAW,IAEV,KAAK,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,EAC7C,QAAQ,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,aAElD,KAAC,KAAK,IACJ,SAAS,EAAE,EAAE,CACX,cAAc,EACd,eAAe,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAChE,iBACW,MAAM,GAClB,EACF,eAAK,SAAS,EAAC,eAAe,aAC5B,yBAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,GAAQ,EACzC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,IAAI,CAC7C,eAAM,SAAS,EAAC,+BAA+B,YAAE,IAAI,CAAC,QAAQ,GAAQ,CACvE,IACG,KAhBD,IAAI,CAAC,QAAQ,CAiBN,CACf,CAAC,EACH,mBAAmB,KAAK,YAAY,CAAC,KAAK;wDACzC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACpB,MAAC,WAAW,IAEV,KAAK,EAAE,KAAK,CAAC,SAAS,EACtB,QAAQ,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,aAEpD,KAAC,KAAK,IACJ,SAAS,EAAE,EAAE,CACX,cAAc,EACd,eAAe,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAClE,iBACW,MAAM,GAClB,EACF,eAAK,SAAS,EAAC,eAAe,aAC5B,yBAAO,KAAK,CAAC,SAAS,GAAQ,EAC7B,KAAK,CAAC,WAAW,IAAI,CACpB,eAAM,SAAS,EAAC,+BAA+B,YAC5C,KAAK,CAAC,WAAW,GACb,CACR,IACG,KAlBD,KAAK,CAAC,SAAS,CAmBR,CACf,CAAC,IACS,IACH,IACN,GACK,IACT,CACX,CAAC;YACJ,CAAC;SACF;QACD;YACE,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,qCAAqC;YAClD,QAAQ,EAAE,UAAU,IAAI,YAAY;YACpC,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC9C,KAAK,EAAE,QAAQ,CAAC,WAAW;gBAC3B,KAAK,EAAE,QAAQ,CAAC,IAAI;aACrB,CAAC,CAAC;SACJ;QACD,uDAAuD;QACvD;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,8CAA8C;YAC3D,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;gBACpB,MAAM,aAAa,GAAwB,gBAAgB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;;oBAAC,OAAA,CAAC;wBAC/E,KAAK,EAAE,MAAA,MAAA,gBAAgB,CAAC,UAAU,CAAC,0CAAE,WAAW,mCAAI,UAAU;wBAC9D,KAAK,EAAE,UAAU;qBAClB,CAAC,CAAA;iBAAA,CAAC,CAAC;gBAEJ,OAAO,CACL,KAAC,WAAW,IACV,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,KAAK,CAAC,KAAiB,EAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ,EACxB,WAAW,EAAC,mBAAmB,EAC/B,YAAY,EAAC,uBAAuB,EACpC,QAAQ,EAAE,YAAY,GACtB,CACH,CAAC;YACJ,CAAC;SACF;QACD;YACE,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,qCAAqC;YAClD,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE;gBAC9C,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE;aAC7C;SACF;KACF,CAAC;IAEF,OAAO,CACL,KAAC,MAAM,IAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,YAC5C,MAAC,aAAa,IAAC,SAAS,EAAC,kBAAkB,aACzC,MAAC,YAAY,eACX,KAAC,WAAW,cAAE,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,GAAe,EACzE,KAAC,iBAAiB,cACf,UAAU;gCACT,CAAC,CAAC,wCAAwC;gCAC1C,CAAC,CAAC,gEAAgE,GAClD,IACP,EAEf,KAAC,WAAW,IACV,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,YAAY,EACtB,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,EAC3D,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE,gBAAgB,GACxB,IACY,GACT,CACV,CAAC;AACJ,CAAC"}

package/dist/permissions/components/policy-help-sheet.d.ts

@@ -0,0 +1,10 @@
+import type { PolicyHelpSheetProps, PolicyHelpButtonProps } from "../permissions.interfaces";
+/**
+ * Help sheet component that explains how permission policies work
+ */
+export declare function PolicyHelpSheet({ open, onOpenChange }: PolicyHelpSheetProps): import("react/jsx-runtime").JSX.Element;
+/**
+ * Help button that opens the policy help sheet
+ */
+export declare function PolicyHelpButton({ onClick }: PolicyHelpButtonProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=policy-help-sheet.d.ts.map

package/dist/permissions/components/policy-help-sheet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-help-sheet.d.ts","sourceRoot":"","sources":["../../../lib/permissions/components/policy-help-sheet.tsx"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,0CAA0C,CAAC;AAElD;;GAEG;AACH,wBAAgB,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,oBAAoB,2CAuV3E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,OAAO,EAAE,EAAE,qBAAqB,2CAiBlE"}

package/dist/permissions/components/policy-help-sheet.js

@@ -0,0 +1,21 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { HelpCircle, ShieldCheck, ShieldX, Users, User, UserCog, Info } from "lucide-react";
+import { Button } from "../../shared/components/ui/button";
+import { Sheet, SheetContent, SheetHeader, SheetTitle, SheetDescription, } from "../../shared/components/ui/sheet";
+import { Badge } from "../../shared/components/ui/badge";
+import { Separator } from "../../shared/components/ui/separator";
+import { Tooltip, TooltipContent, TooltipTrigger } from "../../shared/components/ui/tooltip";
+/**
+ * Help sheet component that explains how permission policies work
+ */
+export function PolicyHelpSheet({ open, onOpenChange }) {
+    return (_jsx(Sheet, { open: open, onOpenChange: onOpenChange, children: _jsxs(SheetContent, { side: "right", className: "flex w-full flex-col p-0 sm:max-w-lg", children: [_jsxs(SheetHeader, { className: "shrink-0 px-6 pt-6 pb-2", children: [_jsxs(SheetTitle, { className: "flex items-center gap-2", children: [_jsx(HelpCircle, { className: "h-5 w-5", "aria-hidden": "true" }), "Understanding Policies"] }), _jsx(SheetDescription, { children: "Learn how permission policies control access to resources" })] }), _jsx("div", { className: "flex-1 overflow-y-auto px-6 pb-6", children: _jsxs("div", { className: "space-y-6", children: [_jsxs("section", { children: [_jsx("h3", { className: "mb-2 text-base font-semibold", children: "What are Policies?" }), _jsxs("p", { className: "text-muted-foreground text-sm", children: ["Policies define who can do what within the system. Each policy specifies a", " ", _jsx("strong", { children: "subject" }), " (who), a ", _jsx("strong", { children: "resource" }), " (what), one or more", " ", _jsx("strong", { children: "actions" }), " (how), and an ", _jsx("strong", { children: "effect" }), " (allow or deny)."] })] }), _jsx(Separator, {}), _jsx("section", { className: "border-destructive/50 bg-destructive/10 rounded-lg border p-4", children: _jsxs("div", { className: "flex gap-3", children: [_jsx(ShieldX, { className: "text-destructive mt-0.5 h-5 w-5 shrink-0", "aria-hidden": "true" }), _jsxs("div", { children: [_jsx("h4", { className: "text-destructive font-semibold", children: "Deny Takes Precedence" }), _jsxs("p", { className: "text-muted-foreground mt-1 text-sm", children: ["If a user has both Allow and Deny policies for the same action, the", " ", _jsx("strong", { children: "Deny policy always wins" }), ". This ensures that explicit denials cannot be overridden by other permissions."] })] })] }) }), _jsx(Separator, {}), _jsxs("section", { children: [_jsx("h3", { className: "mb-3 text-base font-semibold", children: "Subject Types" }), _jsxs("div", { className: "space-y-3", children: [_jsxs("div", { className: "bg-muted/30 flex gap-3 rounded-lg border p-3", children: [_jsx(User, { className: "mt-0.5 h-5 w-5 shrink-0 text-blue-500", "aria-hidden": "true" }), _jsxs("div", { children: [_jsx("h4", { className: "font-medium", children: "User" }), _jsx("p", { className: "text-muted-foreground text-sm", children: "Applies to a specific individual user. Use this for granting or restricting permissions to a single person." })] })] }), _jsxs("div", { className: "bg-muted/30 flex gap-3 rounded-lg border p-3", children: [_jsx(UserCog, { className: "mt-0.5 h-5 w-5 shrink-0 text-purple-500", "aria-hidden": "true" }), _jsxs("div", { children: [_jsx("h4", { className: "font-medium", children: "Role" }), _jsx("p", { className: "text-muted-foreground text-sm", children: "Applies to all users assigned to a role. Roles are assigned to groups, so anyone in a group with that role gets these permissions." })] })] }), _jsxs("div", { className: "bg-muted/30 flex gap-3 rounded-lg border p-3", children: [_jsx(Users, { className: "mt-0.5 h-5 w-5 shrink-0 text-green-500", "aria-hidden": "true" }), _jsxs("div", { children: [_jsx("h4", { className: "font-medium", children: "Group" }), _jsx("p", { className: "text-muted-foreground text-sm", children: "Applies to all members of a specific group. Use this when you want to grant permissions to a team or department." })] })] })] })] }), _jsx(Separator, {}), _jsxs("section", { children: [_jsx("h3", { className: "mb-3 text-base font-semibold", children: "Policy Effects" }), _jsxs("div", { className: "space-y-3", children: [_jsxs("div", { className: "bg-muted/30 flex gap-3 rounded-lg border p-3", children: [_jsx(ShieldCheck, { className: "mt-0.5 h-5 w-5 shrink-0 text-green-500", "aria-hidden": "true" }), _jsxs("div", { children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx("h4", { className: "font-medium", children: "Allow" }), _jsx(Badge, { variant: "default", className: "text-xs", children: "allow" })] }), _jsx("p", { className: "text-muted-foreground mt-1 text-sm", children: "Grants permission to perform the specified actions on the resource." })] })] }), _jsxs("div", { className: "bg-muted/30 flex gap-3 rounded-lg border p-3", children: [_jsx(ShieldX, { className: "mt-0.5 h-5 w-5 shrink-0 text-red-500", "aria-hidden": "true" }), _jsxs("div", { children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx("h4", { className: "font-medium", children: "Deny" }), _jsx(Badge, { variant: "destructive", className: "text-xs", children: "deny" })] }), _jsx("p", { className: "text-muted-foreground mt-1 text-sm", children: "Explicitly blocks the specified actions, even if other policies allow them." })] })] })] })] }), _jsx(Separator, {}), _jsxs("section", { children: [_jsx("h3", { className: "mb-3 text-base font-semibold", children: "Common Actions" }), _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsx(Badge, { variant: "outline", className: "font-mono", children: "* (all)" }), _jsx(Badge, { variant: "outline", className: "font-mono", children: "read" }), _jsx(Badge, { variant: "outline", className: "font-mono", children: "list" }), _jsx(Badge, { variant: "outline", className: "font-mono", children: "create" }), _jsx(Badge, { variant: "outline", className: "font-mono", children: "update" }), _jsx(Badge, { variant: "outline", className: "font-mono", children: "delete" }), _jsx(Badge, { variant: "outline", className: "font-mono", children: "enable" }), _jsx(Badge, { variant: "outline", className: "font-mono", children: "disable" })] }), _jsxs("p", { className: "text-muted-foreground mt-2 text-sm", children: ["The ", _jsx("code", { className: "bg-muted rounded px-1", children: "*" }), " action grants full access to all actions on a resource."] })] }), _jsx(Separator, {}), _jsxs("section", { children: [_jsx("h3", { className: "mb-3 text-base font-semibold", children: "Example Policies" }), _jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "space-y-2 rounded-lg border p-4", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Info, { className: "h-4 w-4 text-blue-500", "aria-hidden": "true" }), _jsx("span", { className: "text-sm font-medium", children: "Grant full admin access" })] }), _jsxs("div", { className: "bg-muted space-y-1 rounded p-3 font-mono text-sm", children: [_jsxs("div", { children: ["Subject: ", _jsx("span", { className: "text-purple-500", children: "admin" }), " (Role)"] }), _jsxs("div", { children: ["Resource: ", _jsx("span", { className: "text-blue-500", children: "permissions" })] }), _jsxs("div", { children: ["Actions: ", _jsx("span", { className: "text-green-500", children: "*" })] }), _jsxs("div", { children: ["Effect: ", _jsx("span", { className: "text-green-500", children: "Allow" })] })] }), _jsx("p", { className: "text-muted-foreground text-xs", children: "Users with the admin role can perform all actions on permissions." })] }), _jsxs("div", { className: "space-y-2 rounded-lg border p-4", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Info, { className: "h-4 w-4 text-blue-500", "aria-hidden": "true" }), _jsx("span", { className: "text-sm font-medium", children: "Read-only access for support team" })] }), _jsxs("div", { className: "bg-muted space-y-1 rounded p-3 font-mono text-sm", children: [_jsxs("div", { children: ["Subject: ", _jsx("span", { className: "text-purple-500", children: "support" }), " (Role)"] }), _jsxs("div", { children: ["Resource: ", _jsx("span", { className: "text-blue-500", children: "users" })] }), _jsxs("div", { children: ["Actions: ", _jsx("span", { className: "text-green-500", children: "read, list" })] }), _jsxs("div", { children: ["Effect: ", _jsx("span", { className: "text-green-500", children: "Allow" })] })] }), _jsx("p", { className: "text-muted-foreground text-xs", children: "Support role members can view users but cannot modify them." })] }), _jsxs("div", { className: "space-y-2 rounded-lg border p-4", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Info, { className: "h-4 w-4 text-red-500", "aria-hidden": "true" }), _jsx("span", { className: "text-sm font-medium", children: "Block a specific user from deleting" })] }), _jsxs("div", { className: "bg-muted space-y-1 rounded p-3 font-mono text-sm", children: [_jsxs("div", { children: ["Subject: ", _jsx("span", { className: "text-blue-500", children: "john.doe" }), " (User)"] }), _jsxs("div", { children: ["Resource: ", _jsx("span", { className: "text-blue-500", children: "documents" })] }), _jsxs("div", { children: ["Actions: ", _jsx("span", { className: "text-red-500", children: "delete" })] }), _jsxs("div", { children: ["Effect: ", _jsx("span", { className: "text-red-500", children: "Deny" })] })] }), _jsx("p", { className: "text-muted-foreground text-xs", children: "Even if john.doe has delete permission through a role, this explicit deny prevents them from deleting documents." })] }), _jsxs("div", { className: "space-y-2 rounded-lg border p-4", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Info, { className: "h-4 w-4 text-blue-500", "aria-hidden": "true" }), _jsx("span", { className: "text-sm font-medium", children: "Group-based permissions" })] }), _jsxs("div", { className: "bg-muted space-y-1 rounded p-3 font-mono text-sm", children: [_jsxs("div", { children: ["Subject: ", _jsx("span", { className: "text-green-500", children: "Engineering" }), " (Group)"] }), _jsxs("div", { children: ["Resource: ", _jsx("span", { className: "text-blue-500", children: "agents" })] }), _jsxs("div", { children: ["Actions: ", _jsx("span", { className: "text-green-500", children: "read, list, create, update" })] }), _jsxs("div", { children: ["Effect: ", _jsx("span", { className: "text-green-500", children: "Allow" })] })] }), _jsx("p", { className: "text-muted-foreground text-xs", children: "All members of the Engineering group can manage agents." })] })] })] }), _jsx(Separator, {}), _jsxs("section", { children: [_jsx("h3", { className: "mb-3 text-base font-semibold", children: "Best Practices" }), _jsxs("ul", { className: "text-muted-foreground space-y-2 text-sm", children: [_jsxs("li", { className: "flex gap-2", children: [_jsx("span", { className: "text-primary", children: "1." }), _jsxs("span", { children: [_jsx("strong", { children: "Use roles for common permissions" }), " - Instead of creating individual user policies, assign permissions to roles and assign roles to groups."] })] }), _jsxs("li", { className: "flex gap-2", children: [_jsx("span", { className: "text-primary", children: "2." }), _jsxs("span", { children: [_jsx("strong", { children: "Use deny sparingly" }), " - Deny policies are powerful but can be confusing. Use them only when you need to explicitly block access that would otherwise be granted."] })] }), _jsxs("li", { className: "flex gap-2", children: [_jsx("span", { className: "text-primary", children: "3." }), _jsxs("span", { children: [_jsx("strong", { children: "Principle of least privilege" }), " - Grant only the minimum permissions needed. Start restrictive and add permissions as needed."] })] }), _jsxs("li", { className: "flex gap-2", children: [_jsx("span", { className: "text-primary", children: "4." }), _jsxs("span", { children: [_jsx("strong", { children: "Disable instead of delete" }), " - When testing or temporarily revoking access, disable policies instead of deleting them."] })] }), _jsxs("li", { className: "flex gap-2", children: [_jsx("span", { className: "text-primary", children: "5." }), _jsxs("span", { children: [_jsx("strong", { children: "Document your policies" }), " - Keep track of why policies exist, especially deny policies, to avoid confusion later."] })] })] })] }), _jsx(Separator, {}), _jsxs("section", { children: [_jsx("h3", { className: "mb-3 text-base font-semibold", children: "How Policies Are Evaluated" }), _jsxs("div", { className: "text-muted-foreground space-y-2 text-sm", children: [_jsx("p", { children: "When a user attempts an action, the system:" }), _jsxs("ol", { className: "ml-2 list-inside list-decimal space-y-1", children: [_jsxs("li", { children: ["Checks for any ", _jsx("strong", { children: "Deny" }), " policies that match the user, their groups, or their roles"] }), _jsx("li", { children: "If a Deny is found, access is blocked immediately" }), _jsxs("li", { children: ["If no Deny is found, checks for ", _jsx("strong", { children: "Allow" }), " policies"] }), _jsx("li", { children: "If an Allow is found, access is granted" }), _jsx("li", { children: "If no matching policy is found, access is denied by default" })] })] })] })] }) })] }) }));
+}
+/**
+ * Help button that opens the policy help sheet
+ */
+export function PolicyHelpButton({ onClick }) {
+    return (_jsxs(Tooltip, { children: [_jsx(TooltipTrigger, { asChild: true, children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7", onClick: onClick, "aria-label": "Policy help", children: _jsx(HelpCircle, { className: "h-4 w-4" }) }) }), _jsx(TooltipContent, { children: "Learn how policies work" })] }));
+}
+//# sourceMappingURL=policy-help-sheet.js.map

package/dist/permissions/components/policy-help-sheet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-help-sheet.js","sourceRoot":"","sources":["../../../lib/permissions/components/policy-help-sheet.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAC5F,OAAO,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAC;AAC3D,OAAO,EACL,KAAK,EACL,YAAY,EACZ,WAAW,EACX,UAAU,EACV,gBAAgB,GACjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,kCAAkC,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAM7F;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAwB;IAC1E,OAAO,CACL,KAAC,KAAK,IAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,YAC3C,MAAC,YAAY,IAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,sCAAsC,aACzE,MAAC,WAAW,IAAC,SAAS,EAAC,yBAAyB,aAC9C,MAAC,UAAU,IAAC,SAAS,EAAC,yBAAyB,aAC7C,KAAC,UAAU,IAAC,SAAS,EAAC,SAAS,iBAAa,MAAM,GAAG,8BAE1C,EACb,KAAC,gBAAgB,4EAEE,IACP,EAEd,cAAK,SAAS,EAAC,kCAAkC,YAC/C,eAAK,SAAS,EAAC,WAAW,aAExB,8BACE,aAAI,SAAS,EAAC,8BAA8B,mCAAwB,EACpE,aAAG,SAAS,EAAC,+BAA+B,2FACiC,GAAG,EAC9E,uCAAwB,gBAAU,wCAAyB,0BAAqB,GAAG,EACnF,uCAAwB,qBAAe,sCAAuB,yBAC5D,IACI,EAEV,KAAC,SAAS,KAAG,EAGb,kBAAS,SAAS,EAAC,+DAA+D,YAChF,eAAK,SAAS,EAAC,YAAY,aACzB,KAAC,OAAO,IAAC,SAAS,EAAC,0CAA0C,iBAAa,MAAM,GAAG,EACnF,0BACE,aAAI,SAAS,EAAC,gCAAgC,sCAA2B,EACzE,aAAG,SAAS,EAAC,oCAAoC,oFACqB,GAAG,EACvE,uDAAwC,uFAEtC,IACA,IACF,GACE,EAEV,KAAC,SAAS,KAAG,EAGb,8BACE,aAAI,SAAS,EAAC,8BAA8B,8BAAmB,EAC/D,eAAK,SAAS,EAAC,WAAW,aACxB,eAAK,SAAS,EAAC,8CAA8C,aAC3D,KAAC,IAAI,IAAC,SAAS,EAAC,uCAAuC,iBAAa,MAAM,GAAG,EAC7E,0BACE,aAAI,SAAS,EAAC,aAAa,qBAAU,EACrC,YAAG,SAAS,EAAC,+BAA+B,4HAGxC,IACA,IACF,EAEN,eAAK,SAAS,EAAC,8CAA8C,aAC3D,KAAC,OAAO,IAAC,SAAS,EAAC,yCAAyC,iBAAa,MAAM,GAAG,EAClF,0BACE,aAAI,SAAS,EAAC,aAAa,qBAAU,EACrC,YAAG,SAAS,EAAC,+BAA+B,mJAGxC,IACA,IACF,EAEN,eAAK,SAAS,EAAC,8CAA8C,aAC3D,KAAC,KAAK,IAAC,SAAS,EAAC,wCAAwC,iBAAa,MAAM,GAAG,EAC/E,0BACE,aAAI,SAAS,EAAC,aAAa,sBAAW,EACtC,YAAG,SAAS,EAAC,+BAA+B,iIAGxC,IACA,IACF,IACF,IACE,EAEV,KAAC,SAAS,KAAG,EAGb,8BACE,aAAI,SAAS,EAAC,8BAA8B,+BAAoB,EAChE,eAAK,SAAS,EAAC,WAAW,aACxB,eAAK,SAAS,EAAC,8CAA8C,aAC3D,KAAC,WAAW,IACV,SAAS,EAAC,wCAAwC,iBACtC,MAAM,GAClB,EACF,0BACE,eAAK,SAAS,EAAC,yBAAyB,aACtC,aAAI,SAAS,EAAC,aAAa,sBAAW,EACtC,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,SAAS,sBAEpC,IACJ,EACN,YAAG,SAAS,EAAC,oCAAoC,oFAE7C,IACA,IACF,EAEN,eAAK,SAAS,EAAC,8CAA8C,aAC3D,KAAC,OAAO,IAAC,SAAS,EAAC,sCAAsC,iBAAa,MAAM,GAAG,EAC/E,0BACE,eAAK,SAAS,EAAC,yBAAyB,aACtC,aAAI,SAAS,EAAC,aAAa,qBAAU,EACrC,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,EAAC,SAAS,EAAC,SAAS,qBAExC,IACJ,EACN,YAAG,SAAS,EAAC,oCAAoC,4FAE7C,IACA,IACF,IACF,IACE,EAEV,KAAC,SAAS,KAAG,EAGb,8BACE,aAAI,SAAS,EAAC,8BAA8B,+BAAoB,EAChE,eAAK,SAAS,EAAC,sBAAsB,aACnC,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,WAAW,wBAEtC,EACR,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,WAAW,qBAEtC,EACR,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,WAAW,qBAEtC,EACR,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,WAAW,uBAEtC,EACR,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,WAAW,uBAEtC,EACR,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,WAAW,uBAEtC,EACR,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,WAAW,uBAEtC,EACR,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,WAAW,wBAEtC,IACJ,EACN,aAAG,SAAS,EAAC,oCAAoC,qBAC3C,eAAM,SAAS,EAAC,uBAAuB,kBAAS,gEAElD,IACI,EAEV,KAAC,SAAS,KAAG,EAGb,8BACE,aAAI,SAAS,EAAC,8BAA8B,iCAAsB,EAClE,eAAK,SAAS,EAAC,WAAW,aAExB,eAAK,SAAS,EAAC,iCAAiC,aAC9C,eAAK,SAAS,EAAC,yBAAyB,aACtC,KAAC,IAAI,IAAC,SAAS,EAAC,uBAAuB,iBAAa,MAAM,GAAG,EAC7D,eAAM,SAAS,EAAC,qBAAqB,wCAA+B,IAChE,EACN,eAAK,SAAS,EAAC,kDAAkD,aAC/D,uCACW,eAAM,SAAS,EAAC,iBAAiB,sBAAa,eACnD,EACN,wCACY,eAAM,SAAS,EAAC,eAAe,4BAAmB,IACxD,EACN,uCACW,eAAM,SAAS,EAAC,gBAAgB,kBAAS,IAC9C,EACN,sCACU,eAAM,SAAS,EAAC,gBAAgB,sBAAa,IACjD,IACF,EACN,YAAG,SAAS,EAAC,+BAA+B,kFAExC,IACA,EAGN,eAAK,SAAS,EAAC,iCAAiC,aAC9C,eAAK,SAAS,EAAC,yBAAyB,aACtC,KAAC,IAAI,IAAC,SAAS,EAAC,uBAAuB,iBAAa,MAAM,GAAG,EAC7D,eAAM,SAAS,EAAC,qBAAqB,kDAAyC,IAC1E,EACN,eAAK,SAAS,EAAC,kDAAkD,aAC/D,uCACW,eAAM,SAAS,EAAC,iBAAiB,wBAAe,eACrD,EACN,wCACY,eAAM,SAAS,EAAC,eAAe,sBAAa,IAClD,EACN,uCACW,eAAM,SAAS,EAAC,gBAAgB,2BAAkB,IACvD,EACN,sCACU,eAAM,SAAS,EAAC,gBAAgB,sBAAa,IACjD,IACF,EACN,YAAG,SAAS,EAAC,+BAA+B,4EAExC,IACA,EAGN,eAAK,SAAS,EAAC,iCAAiC,aAC9C,eAAK,SAAS,EAAC,yBAAyB,aACtC,KAAC,IAAI,IAAC,SAAS,EAAC,sBAAsB,iBAAa,MAAM,GAAG,EAC5D,eAAM,SAAS,EAAC,qBAAqB,oDAA2C,IAC5E,EACN,eAAK,SAAS,EAAC,kDAAkD,aAC/D,uCACW,eAAM,SAAS,EAAC,eAAe,yBAAgB,eACpD,EACN,wCACY,eAAM,SAAS,EAAC,eAAe,0BAAiB,IACtD,EACN,uCACW,eAAM,SAAS,EAAC,cAAc,uBAAc,IACjD,EACN,sCACU,eAAM,SAAS,EAAC,cAAc,qBAAY,IAC9C,IACF,EACN,YAAG,SAAS,EAAC,+BAA+B,iIAGxC,IACA,EAGN,eAAK,SAAS,EAAC,iCAAiC,aAC9C,eAAK,SAAS,EAAC,yBAAyB,aACtC,KAAC,IAAI,IAAC,SAAS,EAAC,uBAAuB,iBAAa,MAAM,GAAG,EAC7D,eAAM,SAAS,EAAC,qBAAqB,wCAA+B,IAChE,EACN,eAAK,SAAS,EAAC,kDAAkD,aAC/D,uCACW,eAAM,SAAS,EAAC,gBAAgB,4BAAmB,gBACxD,EACN,wCACY,eAAM,SAAS,EAAC,eAAe,uBAAc,IACnD,EACN,uCACW,eAAM,SAAS,EAAC,gBAAgB,2CAAkC,IACvE,EACN,sCACU,eAAM,SAAS,EAAC,gBAAgB,sBAAa,IACjD,IACF,EACN,YAAG,SAAS,EAAC,+BAA+B,wEAExC,IACA,IACF,IACE,EAEV,KAAC,SAAS,KAAG,EAGb,8BACE,aAAI,SAAS,EAAC,8BAA8B,+BAAoB,EAChE,cAAI,SAAS,EAAC,yCAAyC,aACrD,cAAI,SAAS,EAAC,YAAY,aACxB,eAAM,SAAS,EAAC,cAAc,mBAAU,EACxC,2BACE,gEAAiD,gHAG5C,IACJ,EACL,cAAI,SAAS,EAAC,YAAY,aACxB,eAAM,SAAS,EAAC,cAAc,mBAAU,EACxC,2BACE,kDAAmC,mJAG9B,IACJ,EACL,cAAI,SAAS,EAAC,YAAY,aACxB,eAAM,SAAS,EAAC,cAAc,mBAAU,EACxC,2BACE,4DAA6C,sGAExC,IACJ,EACL,cAAI,SAAS,EAAC,YAAY,aACxB,eAAM,SAAS,EAAC,cAAc,mBAAU,EACxC,2BACE,yDAA0C,kGAErC,IACJ,EACL,cAAI,SAAS,EAAC,YAAY,aACxB,eAAM,SAAS,EAAC,cAAc,mBAAU,EACxC,2BACE,sDAAuC,gGAElC,IACJ,IACF,IACG,EAEV,KAAC,SAAS,KAAG,EAGb,8BACE,aAAI,SAAS,EAAC,8BAA8B,2CAAgC,EAC5E,eAAK,SAAS,EAAC,yCAAyC,aACtD,sEAAkD,EAClD,cAAI,SAAS,EAAC,yCAAyC,aACrD,4CACiB,oCAAqB,mEAEjC,EACL,6EAA0D,EAC1D,6DACkC,qCAAsB,iBACnD,EACL,mEAAgD,EAChD,uFAAoE,IACjE,IACD,IACE,IACN,GACF,IACO,GACT,CACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAE,OAAO,EAAyB;IACjE,OAAO,CACL,MAAC,OAAO,eACN,KAAC,cAAc,IAAC,OAAO,kBACrB,KAAC,MAAM,IACL,OAAO,EAAC,OAAO,EACf,IAAI,EAAC,MAAM,EACX,SAAS,EAAC,SAAS,EACnB,OAAO,EAAE,OAAO,gBACL,aAAa,YAExB,KAAC,UAAU,IAAC,SAAS,EAAC,SAAS,GAAG,GAC3B,GACM,EACjB,KAAC,cAAc,0CAAyC,IAChD,CACX,CAAC;AACJ,CAAC"}

package/dist/permissions/components/policy-management.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Policy management component
+ *
+ * Container component that handles policy CRUD operations:
+ * - List policies with search, filtering, sorting, and pagination
+ * - Create/edit/delete policies
+ * - Enable/disable policies
+ * - Filter by resource, subject type, effect, and status
+ */
+export declare function PolicyManagement(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=policy-management.d.ts.map

package/dist/permissions/components/policy-management.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-management.d.ts","sourceRoot":"","sources":["../../../lib/permissions/components/policy-management.tsx"],"names":[],"mappings":"AAoCA;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,4CA8a/B"}