rbac-shield 0.1.8 → 0.1.9

package/dist/ProtectedRoute.d.mts

@@ -0,0 +1,28 @@
+import { PermissionString } from './types.mjs';
+interface ProtectedRouteProps<R extends string, A extends string> {
+    children: React.ReactNode;
+    requiredPermission: PermissionString<R, A>;
+    fallbackPath?: string;
+    fallback?: React.ReactNode;
+    useHasPermission: (permission: PermissionString<R, A>) => boolean;
+    isLoading: boolean;
+}
+/**
+ * Client-side route protection component
+ * Wraps pages that require specific permissions
+ *
+ * @example
+ * ```tsx
+ * <ProtectedRoute
+ *   requiredPermission="billing:manage"
+ *   fallbackPath="/unauthorized"
+ *   useHasPermission={useHasPermission}
+ *   isLoading={isLoading}
+ * >
+ *   <BillingPage />
+ * </ProtectedRoute>
+ * ```
+ */
+export declare function ProtectedRoute<R extends string, A extends string>({ children, requiredPermission, fallbackPath, fallback, useHasPermission, isLoading, }: ProtectedRouteProps<R, A>): import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=ProtectedRoute.d.ts.map

package/dist/ProtectedRoute.d.ts

@@ -0,0 +1,28 @@
+import { PermissionString } from "./types";
+interface ProtectedRouteProps<R extends string, A extends string> {
+    children: React.ReactNode;
+    requiredPermission: PermissionString<R, A>;
+    fallbackPath?: string;
+    fallback?: React.ReactNode;
+    useHasPermission: (permission: PermissionString<R, A>) => boolean;
+    isLoading: boolean;
+}
+/**
+ * Client-side route protection component
+ * Wraps pages that require specific permissions
+ *
+ * @example
+ * ```tsx
+ * <ProtectedRoute
+ *   requiredPermission="billing:manage"
+ *   fallbackPath="/unauthorized"
+ *   useHasPermission={useHasPermission}
+ *   isLoading={isLoading}
+ * >
+ *   <BillingPage />
+ * </ProtectedRoute>
+ * ```
+ */
+export declare function ProtectedRoute<R extends string, A extends string>({ children, requiredPermission, fallbackPath, fallback, useHasPermission, isLoading, }: ProtectedRouteProps<R, A>): import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=ProtectedRoute.d.ts.map

package/dist/ProtectedRoute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProtectedRoute.d.ts","sourceRoot":"","sources":["../src/ProtectedRoute.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE3C,UAAU,mBAAmB,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM;IAC9D,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IAC3B,gBAAgB,EAAE,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC;IAClE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,EAAE,EACjE,QAAQ,EACR,kBAAkB,EAClB,YAAkB,EAClB,QAAQ,EACR,gBAAgB,EAChB,SAAS,GACV,EAAE,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,2CAgD3B"}

package/dist/checkPermission.d.mts

@@ -0,0 +1,10 @@
+/**
+ * Universal Permission Verifier
+ * Works in Browser, Node.js, and Edge Runtime (Middleware)
+ *
+ * @param heldPermissions - Array of permissions the user holds (e.g. ['projects:view', 'billing:*'])
+ * @param requiredPermission - The permission to check for (e.g. 'billing:edit')
+ * @returns boolean - True if access should be granted
+ */
+export declare function checkPermission(heldPermissions: string[], requiredPermission: string): boolean;
+//# sourceMappingURL=checkPermission.d.ts.map

package/dist/checkPermission.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Universal Permission Verifier
+ * Works in Browser, Node.js, and Edge Runtime (Middleware)
+ *
+ * @param heldPermissions - Array of permissions the user holds (e.g. ['projects:view', 'billing:*'])
+ * @param requiredPermission - The permission to check for (e.g. 'billing:edit')
+ * @returns boolean - True if access should be granted
+ */
+export declare function checkPermission(heldPermissions: string[], requiredPermission: string): boolean;
+//# sourceMappingURL=checkPermission.d.ts.map

package/dist/checkPermission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkPermission.d.ts","sourceRoot":"","sources":["../src/checkPermission.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,eAAe,EAAE,MAAM,EAAE,EACzB,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAcT"}

package/dist/factory.d.mts

@@ -0,0 +1,47 @@
+import React from "react";
+import { RBACState, TenantAuth, PermissionString } from './types.mjs';
+export interface CanProps<R extends string, A extends string> {
+    /** Single permission or array of permissions to check */
+    permission: PermissionString<R, A> | PermissionString<R, A>[];
+    children: React.ReactNode;
+    /** Content to render if permission is denied */
+    fallback?: React.ReactNode;
+    /** If true, requires ALL permissions. If false (default), requires ANY. */
+    requireAll?: boolean;
+}
+export interface ProtectedRouteProps<R extends string, A extends string> {
+    children: React.ReactNode;
+    /** Single permission or array of permissions to check */
+    permission: PermissionString<R, A> | PermissionString<R, A>[];
+    /** Path to redirect to if access denied (if redirect is true) */
+    fallbackPath?: string;
+    /** Content to render if access denied (or while redirecting) */
+    fallback?: React.ReactNode;
+    /** If true, requires ALL permissions. If false (default), requires ANY. */
+    requireAll?: boolean;
+    /** Custom component to show while loading permissions */
+    loadingComponent?: React.ReactNode;
+    /** Whether to redirect on access denial. Default: true */
+    redirect?: boolean;
+}
+export interface RBACProviderProps {
+    children: React.ReactNode;
+    debug?: boolean;
+}
+export interface RBACFactory<R extends string, A extends string> {
+    RBACProvider: (props: RBACProviderProps) => React.JSX.Element;
+    useStore: () => RBACState<R, A> & {
+        setAuth: (authArray: TenantAuth<R, A>[]) => void;
+        switchTenant: (tenantId: string) => void;
+        reset: () => void;
+    };
+    useHasPermission: (permission: PermissionString<R, A>) => boolean;
+    useHasAnyPermission: (permissions: PermissionString<R, A>[]) => boolean;
+    useHasAllPermissions: (permissions: PermissionString<R, A>[]) => boolean;
+    usePermissions: () => PermissionString<R, A>[];
+    Can: (props: CanProps<R, A>) => React.JSX.Element;
+    RBACErrorBoundary: typeof React.Component;
+    ProtectedRoute: (props: ProtectedRouteProps<R, A>) => React.JSX.Element;
+}
+export declare function createRBAC<R extends string, A extends string>(): RBACFactory<R, A>;
+//# sourceMappingURL=factory.d.ts.map

package/dist/factory.d.ts

@@ -0,0 +1,47 @@
+import React from "react";
+import { RBACState, TenantAuth, PermissionString } from "./types";
+export interface CanProps<R extends string, A extends string> {
+    /** Single permission or array of permissions to check */
+    permission: PermissionString<R, A> | PermissionString<R, A>[];
+    children: React.ReactNode;
+    /** Content to render if permission is denied */
+    fallback?: React.ReactNode;
+    /** If true, requires ALL permissions. If false (default), requires ANY. */
+    requireAll?: boolean;
+}
+export interface ProtectedRouteProps<R extends string, A extends string> {
+    children: React.ReactNode;
+    /** Single permission or array of permissions to check */
+    permission: PermissionString<R, A> | PermissionString<R, A>[];
+    /** Path to redirect to if access denied (if redirect is true) */
+    fallbackPath?: string;
+    /** Content to render if access denied (or while redirecting) */
+    fallback?: React.ReactNode;
+    /** If true, requires ALL permissions. If false (default), requires ANY. */
+    requireAll?: boolean;
+    /** Custom component to show while loading permissions */
+    loadingComponent?: React.ReactNode;
+    /** Whether to redirect on access denial. Default: true */
+    redirect?: boolean;
+}
+export interface RBACProviderProps {
+    children: React.ReactNode;
+    debug?: boolean;
+}
+export interface RBACFactory<R extends string, A extends string> {
+    RBACProvider: (props: RBACProviderProps) => React.JSX.Element;
+    useStore: () => RBACState<R, A> & {
+        setAuth: (authArray: TenantAuth<R, A>[]) => void;
+        switchTenant: (tenantId: string) => void;
+        reset: () => void;
+    };
+    useHasPermission: (permission: PermissionString<R, A>) => boolean;
+    useHasAnyPermission: (permissions: PermissionString<R, A>[]) => boolean;
+    useHasAllPermissions: (permissions: PermissionString<R, A>[]) => boolean;
+    usePermissions: () => PermissionString<R, A>[];
+    Can: (props: CanProps<R, A>) => React.JSX.Element;
+    RBACErrorBoundary: typeof React.Component;
+    ProtectedRoute: (props: ProtectedRouteProps<R, A>) => React.JSX.Element;
+}
+export declare function createRBAC<R extends string, A extends string>(): RBACFactory<R, A>;
+//# sourceMappingURL=factory.d.ts.map

package/dist/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.tsx"],"names":[],"mappings":"AAEA,OAAO,KAON,MAAM,OAAO,CAAC;AAEf,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAWlE,MAAM,WAAW,QAAQ,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM;IAC1D,yDAAyD;IACzD,UAAU,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC9D,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,gDAAgD;IAChD,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IAC3B,2EAA2E;IAC3E,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM;IACrE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,yDAAyD;IACzD,UAAU,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC9D,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IAC3B,2EAA2E;IAC3E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yDAAyD;IACzD,gBAAgB,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IACnC,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM;IAC7D,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;IAC9D,QAAQ,EAAE,MAAM,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;QAChC,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC;QACjD,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;QACzC,KAAK,EAAE,MAAM,IAAI,CAAC;KACnB,CAAC;IACF,gBAAgB,EAAE,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC;IAClE,mBAAmB,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC;IACxE,oBAAoB,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC;IACzE,cAAc,EAAE,MAAM,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC/C,GAAG,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;IAClD,iBAAiB,EAAE,OAAO,KAAK,CAAC,SAAS,CAAC;IAC1C,cAAc,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;CACzE;AAED,wBAAgB,UAAU,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,KAAK,WAAW,CAC3E,CAAC,EACD,CAAC,CACF,CA4cA"}

package/dist/index.d.mts

@@ -0,0 +1,4 @@
+export * from './types.mjs';
+export { checkPermission } from './checkPermission.mjs';
+export { createRBAC } from './factory.mjs';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./types";
+export { checkPermission } from "./checkPermission";
+export { createRBAC } from "./factory";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.tsx"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC"}

package/dist/types.d.mts

@@ -0,0 +1,14 @@
+export type PermissionString<R extends string, A extends string> = `${R}:${A}` | '*' | `routes:${string}`;
+export interface TenantAuth<R extends string, A extends string> {
+    tenantId: string;
+    permissions: PermissionString<R, A>[];
+}
+export interface RBACState<R extends string, A extends string> {
+    activeTenantId: string | null;
+    tenants: Record<string, {
+        permissions: PermissionString<R, A>[];
+        map: Record<string, boolean>;
+    }>;
+    isLoading: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts

@@ -0,0 +1,14 @@
+export type PermissionString<R extends string, A extends string> = `${R}:${A}` | '*' | `routes:${string}`;
+export interface TenantAuth<R extends string, A extends string> {
+    tenantId: string;
+    permissions: PermissionString<R, A>[];
+}
+export interface RBACState<R extends string, A extends string> {
+    activeTenantId: string | null;
+    tenants: Record<string, {
+        permissions: PermissionString<R, A>[];
+        map: Record<string, boolean>;
+    }>;
+    isLoading: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,IAC3D,GAAG,CAAC,IAAI,CAAC,EAAE,GACX,GAAG,GACH,UAAU,MAAM,EAAE,CAAC;AAEvB,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,SAAS,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM;IAC3D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACtB,WAAW,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC9B,CAAC,CAAC;IACH,SAAS,EAAE,OAAO,CAAC;CACpB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rbac-shield",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "A production-ready, type-safe Role-Based Access Control (RBAC) system for Next.js applications with multi-tenant support",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -36,7 +36,7 @@
     "build": "npm run clean && npm run build:esm && npm run build:cjs && npm run build:types",
     "build:esm": "tsc --module esnext --outDir dist/esm && node scripts/rename-esm.js",
     "build:cjs": "tsc --module commonjs --outDir dist/cjs && node scripts/copy-cjs.js",
-    "build:types": "tsc --declaration --emitDeclarationOnly --outDir dist && node scripts/copy-dts.js",
+    "build:types": "tsc -b tsconfig.types.json --force && node scripts/copy-dts.js",
     "prepublishOnly": "npm run build"
   },
   "keywords": [