jazz-tools 0.19.2 → 0.19.3

package/dist/inspector/register-custom-element.js

@@ -1,5 +1,5 @@
 // src/inspector/register-custom-element.ts
 if (typeof window !== "undefined" && process.env.NODE_ENV === "development") {
-  import("./custom-element-ABVPHX53.js");
+  import("./custom-element-3JAYHXWQ.js");
 }
 //# sourceMappingURL=register-custom-element.js.map

package/dist/inspector/utils/permissions.d.ts

@@ -0,0 +1,3 @@
+import { Role } from "cojson";
+export declare function isWriter(role: Role | undefined): boolean;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/inspector/utils/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/inspector/utils/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAE9B,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,CAOxD"}

package/dist/inspector/viewer/co-map-view.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"co-map-view.d.ts","sourceRoot":"","sources":["../../../src/inspector/viewer/co-map-view.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAQnC,wBAAgB,SAAS,CAAC,EACxB,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,UAAU,GACX,EAAE;IACD,OAAO,EAAE,QAAQ,CAAC;IAClB,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,CAAC;CACzC,2CAeA"}
+{"version":3,"file":"co-map-view.d.ts","sourceRoot":"","sources":["../../../src/inspector/viewer/co-map-view.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AASnC,wBAAgB,SAAS,CAAC,EACxB,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,UAAU,GACX,EAAE;IACD,OAAO,EAAE,QAAQ,CAAC;IAClB,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,CAAC;CACzC,2CAmBA"}

package/dist/inspector/viewer/grid-view.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grid-view.d.ts","sourceRoot":"","sources":["../../../src/inspector/viewer/grid-view.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAQ,SAAS,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACrD,OAAO,EAAE,UAAU,EAAa,MAAM,QAAQ,CAAC;AAI/C,OAAO,EAAE,QAAQ,EAAU,MAAM,YAAY,CAAC;AAmJ9C,wBAAgB,QAAQ,CAAC,EACvB,IAAI,EACJ,UAAU,EACV,IAAI,EACJ,OAAO,GACR,EAAE;IACD,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,CAAC;IACxC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB,2CAgBA"}
+{"version":3,"file":"grid-view.d.ts","sourceRoot":"","sources":["../../../src/inspector/viewer/grid-view.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAQ,SAAS,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACrD,OAAO,EAAE,UAAU,EAAa,MAAM,QAAQ,CAAC;AAI/C,OAAO,EAAE,QAAQ,EAAU,MAAM,YAAY,CAAC;AAoJ9C,wBAAgB,QAAQ,CAAC,EACvB,IAAI,EACJ,UAAU,EACV,IAAI,EACJ,OAAO,GACR,EAAE;IACD,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,CAAC;IACxC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB,2CAgBA"}

package/dist/testing.js

@@ -7,7 +7,7 @@ import {
   createAnonymousJazzContext,
   createJazzContext,
   randomSessionProvider
-} from "./chunk-NCNM6UDZ.js";
+} from "./chunk-JPWM4CS2.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/tools/testing.ts

package/dist/tools/implementation/zodSchema/unionUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unionUtils.d.ts","sourceRoot":"","sources":["../../../../src/tools/implementation/zodSchema/unionUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EAErB,KAAK,EACL,8BAA8B,EAE9B,2BAA2B,EAE3B,wBAAwB,EAEzB,MAAM,mBAAmB,CAAC;AAO3B,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,8BAA8B,CAAC,2BAA2B,CAAC,mCA6HpE;AAsBD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,qBAAqB,WAMtE"}
+{"version":3,"file":"unionUtils.d.ts","sourceRoot":"","sources":["../../../../src/tools/implementation/zodSchema/unionUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EAErB,KAAK,EACL,8BAA8B,EAE9B,2BAA2B,EAE3B,wBAAwB,EAEzB,MAAM,mBAAmB,CAAC;AAO3B,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,8BAA8B,CAAC,2BAA2B,CAAC,mCA4HpE;AAsBD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,qBAAqB,WAMtE"}

package/package.json

@@ -187,7 +187,7 @@
   },
   "type": "module",
   "license": "MIT",
-  "version": "0.19.2",
+  "version": "0.19.3",
   "dependencies": {
     "@manuscripts/prosemirror-recreate-steps": "^0.1.4",
     "@scure/base": "1.2.1",
@@ -204,9 +204,9 @@
     "prosemirror-transform": "^1.9.0",
     "use-sync-external-store": "^1.5.0",
     "zod": "4.1.11",
-    "cojson-storage-indexeddb": "0.19.2",
-    "cojson-transport-ws": "0.19.2",
-    "cojson": "0.19.2"
+    "cojson": "0.19.3",
+    "cojson-storage-indexeddb": "0.19.3",
+    "cojson-transport-ws": "0.19.3"
   },
   "devDependencies": {
     "@scure/bip39": "^1.3.0",

package/src/inspector/tests/viewer/comap-view.test.tsx

@@ -1,5 +1,5 @@
 // @vitest-environment happy-dom
-import { afterEach, beforeAll, describe, expect, it } from "vitest";
+import { afterEach, assert, beforeAll, describe, expect, it } from "vitest";
 import { createJazzTestAccount, setupJazzTestSync } from "jazz-tools/testing";
 import { co, z } from "jazz-tools";
 import {
@@ -578,4 +578,312 @@ describe("CoMapView", async () => {
       });
     });
   });
+
+  describe("Permissions", () => {
+    it("should disable Add Property button for reader account", async () => {
+      const reader = await createJazzTestAccount();
+      const group = co.group().create({ owner: account });
+      group.addMember(reader, "reader");
+
+      const schema = co.map({
+        pet: z.string(),
+      });
+
+      const value = schema.create({ pet: "dog" }, group);
+
+      const valueOnReader = await schema.load(value.$jazz.id, {
+        loadAs: reader,
+      });
+      assert(valueOnReader.$isLoaded);
+      const data = valueOnReader.$jazz.raw.toJSON() as JsonObject;
+
+      render(
+        <CoMapView
+          coValue={valueOnReader.$jazz.raw}
+          data={data}
+          node={reader.$jazz.localNode}
+          onNavigate={() => {}}
+        />,
+      );
+
+      const addButton = screen.getByTitle("Add Property");
+      expect(addButton).toBeDefined();
+      expect((addButton as HTMLButtonElement).disabled).toBe(true);
+    });
+
+    it("should enable Add Property button for writer account", async () => {
+      const writer = await createJazzTestAccount();
+      const group = co.group().create({ owner: account });
+      group.addMember(writer, "writer");
+
+      const schema = co.map({
+        pet: z.string(),
+      });
+
+      const value = schema.create({ pet: "dog" }, group);
+
+      const valueOnWriter = await schema.load(value.$jazz.id, {
+        loadAs: writer,
+      });
+      assert(valueOnWriter.$isLoaded);
+      const data = valueOnWriter.$jazz.raw.toJSON() as JsonObject;
+
+      render(
+        <CoMapView
+          coValue={valueOnWriter.$jazz.raw}
+          data={data}
+          node={writer.$jazz.localNode}
+          onNavigate={() => {}}
+        />,
+      );
+
+      const addButton = screen.getByTitle("Add Property");
+      expect(addButton).toBeDefined();
+      expect((addButton as HTMLButtonElement).disabled).toBe(false);
+    });
+
+    it("should hide restore buttons for reader account when multiple timestamps exist", async () => {
+      const reader = await createJazzTestAccount();
+      const group = co.group().create({ owner: account });
+      group.addMember(reader, "reader");
+
+      const schema = co.map({
+        pet: z.string(),
+      });
+
+      const value = schema.create({ pet: "dog" }, group);
+      await sleep(2);
+      value.$jazz.set("pet", "cat");
+
+      const valueOnReader = await schema.load(value.$jazz.id, {
+        loadAs: reader,
+      });
+      assert(valueOnReader.$isLoaded);
+      const data = valueOnReader.$jazz.raw.toJSON() as JsonObject;
+
+      render(
+        <CoMapView
+          coValue={valueOnReader.$jazz.raw}
+          data={data}
+          node={reader.$jazz.localNode}
+          onNavigate={() => {}}
+        />,
+      );
+
+      const restoreButton = screen.getByTitle("Timeline");
+      fireEvent.click(restoreButton);
+
+      await waitFor(() => {
+        expect(screen.getByText("Select Timestamp")).toBeDefined();
+      });
+
+      expect(screen.queryByText("Restore")).toBeNull();
+      expect(screen.queryByRole("checkbox")).toBeNull();
+    });
+
+    it("should show restore buttons for writer account when multiple timestamps exist", async () => {
+      const writer = await createJazzTestAccount();
+      const group = co.group().create({ owner: account });
+      group.addMember(writer, "writer");
+
+      const schema = co.map({
+        pet: z.string(),
+      });
+
+      const value = schema.create({ pet: "dog" }, group);
+      await sleep(2);
+      value.$jazz.set("pet", "cat");
+
+      const valueOnWriter = await schema.load(value.$jazz.id, {
+        loadAs: writer,
+      });
+      assert(valueOnWriter.$isLoaded);
+      const data = valueOnWriter.$jazz.raw.toJSON() as JsonObject;
+
+      render(
+        <CoMapView
+          coValue={valueOnWriter.$jazz.raw}
+          data={data}
+          node={writer.$jazz.localNode}
+          onNavigate={() => {}}
+        />,
+      );
+
+      const restoreButton = screen.getByTitle("Timeline");
+      fireEvent.click(restoreButton);
+
+      await waitFor(() => {
+        expect(screen.getByText("Restore")).toBeDefined();
+      });
+
+      expect(screen.getByRole("checkbox")).toBeDefined();
+    });
+
+    it("should hide edit buttons in GridView for reader account", async () => {
+      const reader = await createJazzTestAccount();
+      const group = co.group().create({ owner: account });
+      group.addMember(reader, "reader");
+
+      const schema = co.map({
+        pet: z.string(),
+        age: z.number(),
+      });
+
+      const value = schema.create({ pet: "dog", age: 10 }, group);
+
+      const valueOnReader = await schema.load(value.$jazz.id, {
+        loadAs: reader,
+      });
+      assert(valueOnReader.$isLoaded);
+      const data = valueOnReader.$jazz.raw.toJSON() as JsonObject;
+
+      render(
+        <CoMapView
+          coValue={valueOnReader.$jazz.raw}
+          data={data}
+          node={reader.$jazz.localNode}
+          onNavigate={() => {}}
+        />,
+      );
+
+      expect(screen.getByText("pet")).toBeDefined();
+      expect(screen.getByText("age")).toBeDefined();
+
+      const editButtons = screen.queryAllByLabelText("Edit");
+      const deleteButtons = screen.queryAllByLabelText("Delete");
+
+      expect(editButtons).toHaveLength(0);
+      expect(deleteButtons).toHaveLength(0);
+    });
+
+    it("should show edit buttons in GridView for writer account", async () => {
+      const writer = await createJazzTestAccount();
+      const group = co.group().create({ owner: account });
+      group.addMember(writer, "writer");
+
+      const schema = co.map({
+        pet: z.string(),
+        age: z.number(),
+      });
+
+      const value = schema.create({ pet: "dog", age: 10 }, group);
+
+      const valueOnWriter = await schema.load(value.$jazz.id, {
+        loadAs: writer,
+      });
+      assert(valueOnWriter.$isLoaded);
+      const data = valueOnWriter.$jazz.raw.toJSON() as JsonObject;
+
+      render(
+        <CoMapView
+          coValue={valueOnWriter.$jazz.raw}
+          data={data}
+          node={writer.$jazz.localNode}
+          onNavigate={() => {}}
+        />,
+      );
+
+      expect(screen.getByText("pet")).toBeDefined();
+      expect(screen.getByText("age")).toBeDefined();
+
+      const editButtons = screen.queryAllByLabelText("Edit");
+      const deleteButtons = screen.queryAllByLabelText("Delete");
+
+      expect(editButtons.length).toBeGreaterThan(0);
+      expect(deleteButtons.length).toBeGreaterThan(0);
+    });
+
+    it("should enable Add Property button for admin account", async () => {
+      const admin = await createJazzTestAccount();
+      const group = co.group().create({ owner: account });
+      group.addMember(admin, "admin");
+
+      const schema = co.map({
+        pet: z.string(),
+      });
+
+      const value = schema.create({ pet: "dog" }, group);
+
+      const valueOnAdmin = await schema.load(value.$jazz.id, {
+        loadAs: admin,
+      });
+      assert(valueOnAdmin.$isLoaded);
+      const data = valueOnAdmin.$jazz.raw.toJSON() as JsonObject;
+
+      render(
+        <CoMapView
+          coValue={valueOnAdmin.$jazz.raw}
+          data={data}
+          node={admin.$jazz.localNode}
+          onNavigate={() => {}}
+        />,
+      );
+
+      const addButton = screen.getByTitle("Add Property");
+      expect(addButton).toBeDefined();
+      expect((addButton as HTMLButtonElement).disabled).toBe(false);
+    });
+
+    it("should enable Add Property button for manager account", async () => {
+      const manager = await createJazzTestAccount();
+      const group = co.group().create({ owner: account });
+      group.addMember(manager, "manager");
+
+      const schema = co.map({
+        pet: z.string(),
+      });
+
+      const value = schema.create({ pet: "dog" }, group);
+
+      const valueOnManager = await schema.load(value.$jazz.id, {
+        loadAs: manager,
+      });
+      assert(valueOnManager.$isLoaded);
+      const data = valueOnManager.$jazz.raw.toJSON() as JsonObject;
+
+      render(
+        <CoMapView
+          coValue={valueOnManager.$jazz.raw}
+          data={data}
+          node={manager.$jazz.localNode}
+          onNavigate={() => {}}
+        />,
+      );
+
+      const addButton = screen.getByTitle("Add Property");
+      expect(addButton).toBeDefined();
+      expect((addButton as HTMLButtonElement).disabled).toBe(false);
+    });
+
+    it("should enable Add Property button for writeOnly account", async () => {
+      const writeOnly = await createJazzTestAccount();
+      const group = co.group().create({ owner: account });
+      group.addMember(writeOnly, "writeOnly");
+
+      const schema = co.map({
+        pet: z.string(),
+      });
+
+      const value = schema.create({ pet: "dog" }, group);
+
+      const valueOnWriteOnly = await schema.load(value.$jazz.id, {
+        loadAs: writeOnly,
+      });
+      assert(valueOnWriteOnly.$isLoaded);
+      const data = valueOnWriteOnly.$jazz.raw.toJSON() as JsonObject;
+
+      render(
+        <CoMapView
+          coValue={valueOnWriteOnly.$jazz.raw}
+          data={data}
+          node={writeOnly.$jazz.localNode}
+          onNavigate={() => {}}
+        />,
+      );
+
+      const addButton = screen.getByTitle("Add Property");
+      expect(addButton).toBeDefined();
+      expect((addButton as HTMLButtonElement).disabled).toBe(false);
+    });
+  });
 });

package/src/inspector/utils/permissions.ts

@@ -0,0 +1,10 @@
+import { Role } from "cojson";
+
+export function isWriter(role: Role | undefined): boolean {
+  return (
+    role === "writer" ||
+    role === "admin" ||
+    role === "manager" ||
+    role === "writeOnly"
+  );
+}

package/src/inspector/viewer/co-map-view.tsx

@@ -6,6 +6,7 @@ import { Button, Icon, Input, Modal } from "../ui";
 import { styled } from "goober";
 import { restoreCoMapToTimestamp } from "../utils/history";
 import { CoValueEditor } from "./co-value-editor.js";
+import { isWriter } from "../utils/permissions";
 
 export function CoMapView({
   coValue,
@@ -27,7 +28,11 @@ export function CoMapView({
         coValue={coValue}
       />
       <div>
-        <AddPropertyModal coValue={coValue} node={node} />{" "}
+        <AddPropertyModal
+          disabled={!isWriter(coValue.group.myRole())}
+          coValue={coValue}
+          node={node}
+        />{" "}
         <RestoreSnapshotModal coValue={coValue} />
       </div>
     </>
@@ -37,9 +42,11 @@ export function CoMapView({
 function AddPropertyModal({
   coValue,
   node,
+  disabled,
 }: {
   coValue: RawCoMap;
   node: LocalNode;
+  disabled: boolean;
 }) {
   const [isAddPropertyModalOpen, setIsAddPropertyModalOpen] = useState(false);
   const [propertyName, setPropertyName] = useState("");
@@ -59,9 +66,10 @@ function AddPropertyModal({
       <Button
         title="Add Property"
         variant="secondary"
+        disabled={disabled}
         onClick={openAddPropertyModal}
       >
-        <Icon name="edit" />
+        <Icon name="add" />
       </Button>
 
       <Modal
@@ -132,6 +140,8 @@ function RestoreSnapshotModal({ coValue }: { coValue: RawCoMap }) {
     setIsRestoreModalOpen(false);
   };
 
+  const canRestore = isWriter(coValue.group.myRole());
+
   return (
     <>
       <Button title="Timeline" variant="secondary" onClick={openRestoreModal}>
@@ -146,7 +156,7 @@ function RestoreSnapshotModal({ coValue }: { coValue: RawCoMap }) {
         cancelText="Cancel"
         onConfirm={handleRestore}
         onCancel={handleClose}
-        showButtons={timestamps.length > 1}
+        showButtons={timestamps.length > 1 && canRestore}
       >
         {timestamps.length > 1 && (
           <>
@@ -167,18 +177,20 @@ function RestoreSnapshotModal({ coValue }: { coValue: RawCoMap }) {
               </TimestampDisplay>
             </RangeContainer>
 
-            <CheckboxContainer>
-              <CheckboxInput
-                type="checkbox"
-                id="remove-unknown-properties"
-                checked={removeUnknownProperties}
-                onChange={(e) => setRemoveUnknownProperties(e.target.checked)}
-              />
-              <CheckboxLabel htmlFor="remove-unknown-properties">
-                Remove unknown properties (properties that don't exist in the
-                selected snapshot)
-              </CheckboxLabel>
-            </CheckboxContainer>
+            {canRestore && (
+              <CheckboxContainer>
+                <CheckboxInput
+                  type="checkbox"
+                  id="remove-unknown-properties"
+                  checked={removeUnknownProperties}
+                  onChange={(e) => setRemoveUnknownProperties(e.target.checked)}
+                />
+                <CheckboxLabel htmlFor="remove-unknown-properties">
+                  Remove unknown properties (properties that don't exist in the
+                  selected snapshot)
+                </CheckboxLabel>
+              </CheckboxContainer>
+            )}
           </>
         )}
 

package/src/inspector/viewer/grid-view.tsx

@@ -12,6 +12,7 @@ import { Card, CardBody, CardHeader } from "../ui/card.js";
 import { Grid } from "../ui/grid.js";
 import { Icon } from "../ui/icon.js";
 import { Text } from "../ui/text.js";
+import { isWriter } from "../utils/permissions.js";
 
 function GridItem({
   entry,
@@ -115,7 +116,7 @@ function GridItem({
             <Text strong>{key}</Text>
           )}
         </div>
-        {coValue && (
+        {coValue && isWriter(coValue.group.myRole()) && (
           <ActionButtons>
             <EditButton
               onClick={handleEditClick}

package/src/inspector/viewer/history-view.tsx

@@ -115,7 +115,9 @@ function getTransactionChanges(
   if (tx.isValid === false && tx.tx.privacy === "private") {
     const readKey = coValue.core.getReadKey(tx.tx.keyUsed);
     if (!readKey) {
-      throw new Error("Read key not found");
+      return [
+        `Unable to decrypt transaction: read key ${tx.tx.keyUsed} not found.`,
+      ];
     }
 
     return (

package/src/tools/implementation/zodSchema/unionUtils.ts

@@ -108,10 +108,9 @@ export function schemaUnionDiscriminatorFor(
           const coValueSchema = hydrateCoreCoValueSchema(option as any);
           const coValueClass = coValueSchema.getCoValueClass() as typeof CoMap;
 
-          const dummyFieldNames = allNestedRefKeys
-            .keys()
-            .filter((key) => !optionDef.shape[key])
-            .toArray();
+          const dummyFieldNames = Array.from(allNestedRefKeys).filter(
+            (key) => !optionDef.shape[key],
+          );
 
           if (dummyFieldNames.length === 0) {
             return coValueClass;