permdock 0.1.0 → 0.2.0

package/dist/plugin-4gr7IxFJ.js

@@ -1,65 +0,0 @@
-import { t as runCollect } from "./collect-O-tOtbnk.js";
-import { n as loadConfig } from "./config-BPYmjTOp.js";
-import { watch } from "node:fs";
-import { resolve } from "node:path";
-//#region src/cli/plugin.ts
-const PHASE_BUILD = "phase-production-build";
-const PHASE_DEV = "phase-development-server";
-function report(message) {
-	if (message !== void 0) process.stderr.write(`permdock: ${message}\n`);
-}
-function describeError(error) {
-	return error instanceof Error ? error.message : String(error);
-}
-function createPermDockPlugin(options) {
-	const watching = /* @__PURE__ */ new Set();
-	return function permdockPlugin(nextConfig) {
-		return async (phase, context) => {
-			const resolved = typeof nextConfig === "function" ? await nextConfig(phase, context) : nextConfig;
-			const cwd = process.cwd();
-			if (phase === PHASE_BUILD) report(await runPluginCollect(cwd, options, process.env["PERMDOCK_COLLECT"] !== "write"));
-			else if (phase === PHASE_DEV) {
-				try {
-					report(await runPluginCollect(cwd, options, false));
-				} catch (error) {
-					report(describeError(error));
-				}
-				if (!watching.has(cwd)) {
-					watching.add(cwd);
-					startWatch(cwd, options);
-				}
-			}
-			return resolved;
-		};
-	};
-}
-async function runPluginCollect(cwd, options, check) {
-	const config = await loadConfig(cwd);
-	const collect = {
-		...config.collect,
-		...options?.collect
-	};
-	const result = await runCollect({
-		cwd,
-		config,
-		collect,
-		check,
-		now: /* @__PURE__ */ new Date()
-	});
-	if (result.code === 0) return;
-	if (check && options?.onDrift === "warn") return result.message;
-	if (check && result.code === 1) throw new Error(result.message);
-	return result.message;
-}
-function startWatch(cwd, options) {
-	const srcPath = options?.collect?.srcPath ?? ["./src"];
-	for (const entry of srcPath) try {
-		watch(resolve(cwd, entry), { recursive: true }, () => {
-			runPluginCollect(cwd, options, false).then(report, (error) => {
-				report(describeError(error));
-			});
-		});
-	} catch {}
-}
-//#endregion
-export { runPluginCollect as n, createPermDockPlugin as t };

package/dist/protected-B4K3BKoX.js

@@ -1,138 +0,0 @@
-import { n as PermDockStoreContext, t as PermDockSnapshotPromiseContext } from "./context-gtAwAILx.js";
-import { Suspense, use, useMemo, useSyncExternalStore } from "react";
-import { jsx } from "react/jsx-runtime";
-//#region src/react/hooks.ts
-function useStore() {
-	const store = use(PermDockStoreContext);
-	if (store === null) throw new Error("PermDock: hooks require <PermDockProvider>.");
-	const pending = use(PermDockSnapshotPromiseContext);
-	if (pending !== null) store.adopt(use(pending), pending);
-	return store;
-}
-function usePermDock() {
-	const store = useStore();
-	return useSyncExternalStore((listener) => store.subscribe(listener), () => store.get(), () => store.get());
-}
-function usePermission(permission, data) {
-	const store = useStore();
-	const permdock = useSyncExternalStore((listener) => store.subscribe(listener), () => store.get(), () => store.get());
-	return useMemo(() => store.permissionState(permission, data), [
-		store,
-		permdock,
-		permission,
-		data
-	]);
-}
-function usePermissions(permissions, data) {
-	const store = useStore();
-	const permdock = useSyncExternalStore((listener) => store.subscribe(listener), () => store.get(), () => store.get());
-	return useMemo(() => {
-		const granted = [];
-		const byKey = {};
-		for (const permission of permissions) {
-			const state = store.permissionState(permission, data);
-			byKey[permission.key] = state;
-			if (state.allowed) granted.push(permission);
-		}
-		return new Proxy({
-			granted,
-			get(permission) {
-				return byKey[permission.key];
-			}
-		}, { get(target, prop, receiver) {
-			if (typeof prop === "string" && Object.hasOwn(byKey, prop)) return byKey[prop];
-			return Reflect.get(target, prop, receiver);
-		} });
-	}, [
-		store,
-		permdock,
-		permissions,
-		data
-	]);
-}
-function useFilter(permission, rows) {
-	const permdock = usePermDock();
-	return useMemo(() => {
-		const result = [...permdock.filter(permission, rows)];
-		result.partial = permdock.where(permission).partial;
-		return result;
-	}, [
-		permdock,
-		permission,
-		rows
-	]);
-}
-function useTenant() {
-	const permdock = usePermDock();
-	return {
-		tenant: permdock.subject.principal?.tenant ?? null,
-		tenants: permdock.tenants(),
-		switchTo: (id) => permdock.refresh({ tenant: id }),
-		status: permdock.status()
-	};
-}
-function useMemberships() {
-	return usePermDock().memberships();
-}
-function useRoles(options = {}) {
-	const permdock = usePermDock();
-	return { roles: (options.team === void 0 ? permdock : permdock.team(options.team)).heldRoles(options.tenant === void 0 ? void 0 : { tenant: options.tenant }) };
-}
-function useAssignableRoles() {
-	return usePermDock().assignableRoles();
-}
-function useAssignablePermissions(options = {}) {
-	return usePermDock().assignablePermissions(options);
-}
-function useSubject() {
-	const permdock = usePermDock();
-	const snapshot = permdock.snapshot();
-	const simulated = typeof snapshot === "object" && snapshot !== null && "simulated" in snapshot && snapshot.simulated === true;
-	return {
-		principal: permdock.subject.principal,
-		actor: permdock.subject.actor,
-		delegation: permdock.subject.delegation,
-		expiresAt: permdock.subject.expiresAt,
-		simulated
-	};
-}
-function useApproval(decision) {
-	const store = useStore();
-	useSyncExternalStore((listener) => store.subscribe(listener), () => store.get(), () => store.get());
-	return {
-		state: store.approvalState(decision),
-		token: decision.outcome === "approval-required" ? decision.token : void 0,
-		request: (note) => store.requestApproval(decision, note)
-	};
-}
-//#endregion
-//#region src/react/protected.tsx
-function Protected(props) {
-	if (props.pending === void 0) return /* @__PURE__ */ jsx(Guard, { ...props });
-	return /* @__PURE__ */ jsx(Suspense, {
-		fallback: props.pending,
-		children: /* @__PURE__ */ jsx(Guard, { ...props })
-	});
-}
-function Guard(props) {
-	const root = usePermDock();
-	const local = usePermission(props.permission, props.data);
-	const run = (permdock) => {
-		const decision = permdock.decide(props.permission, props.data);
-		return {
-			allowed: decision.outcome === "granted",
-			status: "ready",
-			decision
-		};
-	};
-	const { allowed, status, decision } = props.tenant === void 0 ? local : run(root.tenant(props.tenant));
-	if (status === "pending") return props.pending ?? null;
-	if (!allowed || decision.outcome !== "granted") {
-		if (typeof props.fallback === "function") return props.fallback(decision);
-		return props.fallback ?? null;
-	}
-	if (typeof props.children === "function") return props.children(decision);
-	return props.children;
-}
-//#endregion
-export { useFilter as a, usePermission as c, useSubject as d, useTenant as f, useAssignableRoles as i, usePermissions as l, useApproval as n, useMemberships as o, useAssignablePermissions as r, usePermDock as s, Protected as t, useRoles as u };

package/dist/protected-wY7nXhY9.d.ts

@@ -1,23 +0,0 @@
-import { Mn as Decision } from "./policy-CInmNGkM.js";
-import { d as Permission } from "./permissions-B4apnahQ.js";
-import { i as ClientStatus } from "./types-DbWdEfcm.js";
-import { t as ClientStore } from "./store-Bq90395i.js";
-import { Snippet } from "svelte";
-//#region src/svelte/protected.d.ts
-type ProtectedProps = {
-  readonly permission: Permission;
-  readonly data?: unknown;
-  readonly tenant?: string;
-  readonly children?: Snippet<[Decision]>;
-  readonly pending?: Snippet;
-  readonly fallback?: Snippet<[Decision]>;
-};
-type ProtectedView = {
-  readonly allowed: boolean;
-  readonly status: ClientStatus;
-  readonly decision: Decision;
-  readonly slot: "pending" | "fallback" | "default";
-};
-declare function protectedView(store: ClientStore, reference: Permission, data?: unknown, tenant?: string, _generation?: number): ProtectedView;
-//#endregion
-export { protectedView as n, ProtectedProps as t };

package/dist/provider-_wx46HpB.js

@@ -1,48 +0,0 @@
-import { t as compact } from "./compact-y6vfu2_f.js";
-import { t as emptySnapshot } from "./from-snapshot-BMGnhmgv.js";
-import { n as PermDockStoreContext, t as PermDockSnapshotPromiseContext } from "./context-gtAwAILx.js";
-import { t as createClientStore } from "./store-C6hFW6ta.js";
-import { useMemo } from "react";
-import { jsx } from "react/jsx-runtime";
-//#region src/react/provider.tsx
-/** One hint per provider: the first check `endpoint: false` turns into a `server-only` denial. */
-function hintOnce() {
-	let shown = false;
-	return (permission) => {
-		if (shown) return;
-		shown = true;
-		console.info(`PermDock: ${permission.key} needs the server (a closure, graph relation or period grant) and endpoint is false, so it is denied with reason server-only; check it with getPermission instead`);
-	};
-}
-function PermDockProvider(props) {
-	const promise = props.snapshotPromise ?? null;
-	const store = useMemo(() => createClientStore(compact({
-		snapshot: props.snapshot ?? emptySnapshot(),
-		endpoint: props.endpoint === false ? void 0 : props.endpoint,
-		onServerOnly: props.endpoint === false ? hintOnce() : void 0,
-		approvals: props.approvals,
-		tenant: props.tenant,
-		fetch: props.fetch,
-		headers: props.headers,
-		maxAge: props.maxAge,
-		verifier: props.verifier
-	})), [
-		props.snapshot,
-		props.endpoint,
-		props.approvals,
-		props.tenant,
-		props.fetch,
-		props.headers,
-		props.maxAge,
-		props.verifier
-	]);
-	return /* @__PURE__ */ jsx(PermDockStoreContext, {
-		value: store,
-		children: /* @__PURE__ */ jsx(PermDockSnapshotPromiseContext, {
-			value: promise,
-			children: props.children
-		})
-	});
-}
-//#endregion
-export { PermDockProvider as t };