qdadm 0.35.0 → 0.36.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qdadm",
-  "version": "0.35.0",
+  "version": "0.36.0",
   "description": "Vue 3 framework for admin dashboards with PrimeVue",
   "author": "quazardous",
   "license": "MIT",

package/src/debug/AuthCollector.js

@@ -36,6 +36,7 @@ export class AuthCollector extends Collector {
   constructor(options = {}) {
     super(options)
     this._authAdapter = null
+    this._securityChecker = null
     this._ctx = null
     this._signalCleanups = []
     // Activity tracking for login/logout events
@@ -58,6 +59,7 @@ export class AuthCollector extends Collector {
       // Try alternate locations
       this._authAdapter = ctx.authAdapter
     }
+    this._securityChecker = ctx.security
     this._setupSignals()
   }
 
@@ -164,6 +166,7 @@ export class AuthCollector extends Collector {
     }
     this._signalCleanups = []
     this._authAdapter = null
+    this._securityChecker = null
     this._ctx = null
   }
 
@@ -292,6 +295,29 @@ export class AuthCollector extends Collector {
       // Permissions not available
     }
 
+    // Role hierarchy & permissions (lazy fetch - securityChecker created after module connect)
+    try {
+      const securityChecker = this._securityChecker || this._ctx?.security
+      const hierarchy = securityChecker?.roleHierarchy?.map
+      if (hierarchy && Object.keys(hierarchy).length > 0) {
+        entries.push({
+          type: 'hierarchy',
+          label: 'Role Hierarchy',
+          data: hierarchy
+        })
+      }
+      const rolePermissions = securityChecker?.rolePermissions
+      if (rolePermissions && Object.keys(rolePermissions).length > 0) {
+        entries.push({
+          type: 'role-permissions',
+          label: 'Role Permissions',
+          data: rolePermissions
+        })
+      }
+    } catch (e) {
+      // Security checker not available
+    }
+
     // Adapter info
     entries.push({
       type: 'adapter',

package/src/debug/components/panels/AuthPanel.vue

@@ -23,6 +23,8 @@ function getIcon(type) {
     user: 'pi-user',
     token: 'pi-key',
     permissions: 'pi-shield',
+    hierarchy: 'pi-sitemap',
+    'role-permissions': 'pi-lock',
     adapter: 'pi-cog'
   }
   return icons[type] || 'pi-info-circle'

package/src/debug/components/panels/EntitiesPanel.vue

@@ -141,7 +141,7 @@ function getCapabilityLabel(cap) {
           <i
             v-if="entity.authSensitive"
             class="pi pi-shield perm-icon-auth-sensitive"
-            title="Auth-sensitive (auto-invalidates on auth events)"
+            title="Auth-sensitive"
           />
         </div>
         <span class="entity-label">{{ entity.label }}</span>

package/src/entity/EntityManager.js

@@ -59,7 +59,7 @@ export class EntityManager {
       localFilterThreshold = null,  // Items threshold to switch to local filtering (null = use default)
       readOnly = false,             // If true, canCreate/canUpdate/canDelete return false
       warmup = true,                // If true, cache is preloaded at boot via DeferredRegistry
-      authSensitive = false,        // If true, auto-invalidate datalayer on auth events
+      authSensitive,                // If true, auto-invalidate datalayer on auth events (auto-inferred from storage.requiresAuth if not set)
       // Scope control
       scopeWhitelist = null,        // Array of scopes/modules that can bypass restrictions
       // Relations
@@ -86,7 +86,8 @@ export class EntityManager {
     this.localFilterThreshold = localFilterThreshold
     this._readOnly = readOnly
     this._warmup = warmup
-    this._authSensitive = authSensitive
+    // Auto-infer authSensitive from storage.requiresAuth if not explicitly set
+    this._authSensitive = authSensitive ?? this._getStorageRequiresAuth()
 
     // Scope control
     this._scopeWhitelist = scopeWhitelist
@@ -1034,6 +1035,25 @@ export class EntityManager {
     return caps.supportsTotal ?? false
   }
 
+  /**
+   * Check if storage requires authentication
+   *
+   * Used to auto-infer authSensitive when not explicitly set.
+   * Checks both instance capabilities and static capabilities.
+   *
+   * @returns {boolean} - true if storage requires auth
+   * @private
+   */
+  _getStorageRequiresAuth() {
+    // Check instance capabilities first (may have dynamic requiresAuth)
+    if (this.storage?.capabilities?.requiresAuth !== undefined) {
+      return this.storage.capabilities.requiresAuth
+    }
+    // Fallback to static capabilities
+    const caps = this.storage?.constructor?.capabilities || {}
+    return caps.requiresAuth ?? false
+  }
+
   /**
    * Get searchable fields declared by storage adapter
    *

package/src/kernel/Kernel.js

@@ -39,7 +39,7 @@
 
 import { createApp, h } from 'vue'
 import { createPinia } from 'pinia'
-import { createRouter, createWebHistory, createWebHashHistory } from 'vue-router'
+import { createRouter, createWebHistory } from 'vue-router'
 import ToastService from 'primevue/toastservice'
 import ConfirmationService from 'primevue/confirmationservice'
 import Tooltip from 'primevue/tooltip'
@@ -86,7 +86,6 @@ export class Kernel {
    * @param {string} options.homeRoute - Route name for home redirect (or object { name, component })
    * @param {Array} options.coreRoutes - Additional routes as layout children (before module routes)
    * @param {string} options.basePath - Base path for router (e.g., '/dashboard/')
-   * @param {boolean} options.hashMode - Use hash-based routing (/#/path) for static hosting
    * @param {object} options.app - App config { name, shortName, version, logo, theme }
    * @param {object} options.features - Feature toggles { auth, poweredBy }
    * @param {object} options.primevue - PrimeVue config { plugin, theme, options }
@@ -520,7 +519,7 @@ export class Kernel {
    * - **Layout-only mode**: Layout at root with all routes as children
    */
   _createRouter() {
-    const { pages, homeRoute, coreRoutes, basePath, hashMode } = this.options
+    const { pages, homeRoute, coreRoutes, basePath } = this.options
 
     // Layout is required (shell is optional)
     if (!pages?.layout) {
@@ -598,7 +597,7 @@ export class Kernel {
     }
 
     this.router = createRouter({
-      history: hashMode ? createWebHashHistory(basePath) : createWebHistory(basePath),
+      history: createWebHistory(basePath),
       routes
     })
   }

package/src/kernel/KernelContext.js

@@ -121,6 +121,14 @@ export class KernelContext {
     return this._kernel.options?.authAdapter ?? null
   }
 
+  /**
+   * Get security checker (role hierarchy, permissions)
+   * @returns {import('../entity/auth/SecurityChecker.js').SecurityChecker|null}
+   */
+  get security() {
+    return this._kernel.securityChecker
+  }
+
   // ─────────────────────────────────────────────────────────────────────────────
   // Fluent registration methods (return this for chaining)
   // ─────────────────────────────────────────────────────────────────────────────