datasette-acl-share 0.0.1a2__tar.gz

datasette_acl_share-0.0.1a2/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

datasette_acl_share-0.0.1a2/PKG-INFO

@@ -0,0 +1,180 @@
+Metadata-Version: 2.4
+Name: datasette-acl-share
+Version: 0.0.1a2
+Summary: Reusable Google-Docs-style share dialog for Datasette (<datasette-acl-share-dialog>)
+Author: Alex Garcia
+License-Expression: Apache-2.0
+Project-URL: Homepage, https://github.com/datasette/datasette-acl-share
+Project-URL: Changelog, https://github.com/datasette/datasette-acl-share/releases
+Project-URL: Issues, https://github.com/datasette/datasette-acl-share/issues
+Classifier: Framework :: Datasette
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: datasette>=1.0a30
+Requires-Dist: datasette-vite>=0.0.1a4
+Requires-Dist: datasette-acl>=0.5a1
+Dynamic: license-file
+
+# datasette-acl-share
+
+A reusable, Google-Docs-style **share dialog** for Datasette, shipped as a
+framework-agnostic Svelte 5 custom element: `<datasette-acl-share-dialog>`.
+
+One component, embedded by every document plugin (paper, places, sheets, …). It
+is the UI layer over the [datasette-acl](https://github.com/datasette/datasette-acl)
+JSON API — grants, roles, groups, and "general access" wildcards. If
+datasette-user-profiles is installed the dialog adds people search and avatars;
+without it, it degrades gracefully to initials chips with no People search.
+
+## Usage
+
+Drop the tag anywhere — inside a Svelte/Preact app, or in plain server-rendered
+HTML (custom elements are just DOM):
+
+```html
+<datasette-acl-share-dialog
+  resource-type="paper-doc"
+  parent="mydb"
+  child="42"
+  resource-label="Q2 Planning"
+></datasette-acl-share-dialog>
+```
+
+The element renders a compact **share-icon button**; clicking it opens a modal
+`<dialog>` (dismiss with the × button, the backdrop, or `Esc`). The resource is
+fetched lazily on first open, so a page can carry many share buttons cheaply.
+
+Once open, the dialog shows "people with access" (avatars, role dropdowns,
+remove buttons), a "General access" section, and an add-box that searches
+people (profiles) and groups (acl). Each action is its own fetch — grant /
+update / revoke — matching Google Docs' incremental behaviour. Actors who
+cannot manage the resource (`can_manage: false`) get a read-only roster: roles
+as tags, no add-box, no remove buttons.
+
+### Attributes
+
+| Attribute | Req | Purpose |
+|---|---|---|
+| `resource-type` | yes | acl resource type, e.g. `paper-doc`, `places-list`, `sheets-workbook` |
+| `parent` | yes | resource identity part 1 (e.g. database name) |
+| `child` | – | resource identity part 2 (e.g. row id); omit for parent-only resources |
+| `resource-label` | – | display title shown in the dialog header |
+| `actor-json` | – | current actor as JSON (`{"id":"alice","kind":"user"}`) — used to mark "(you)" |
+| `features` | – | comma list of sections to show (`people,groups,public`); empty/missing = all available |
+| `api-base` | – | override the acl API prefix (default `/-/acl/api`) |
+| `open` | – | when set (any value other than `false`), open the modal on mount instead of waiting for a trigger click |
+| `trigger-label` | – | text shown next to the share icon on the trigger button (icon-only if omitted) |
+| `disabled` | – | when set (any value other than `false`), disable the trigger so the dialog can't open (e.g. the actor can't share this resource) |
+
+### Events
+
+The element dispatches bubbling, composed `CustomEvent`s so hosts can react
+(e.g. paper re-running its SSE subscriber sweep after a revoke):
+
+| Event | `detail` |
+|---|---|
+| `share-granted` | `{principal, id, role}` |
+| `share-updated` | `{principal, id, role}` |
+| `share-revoked` | `{principal, id}` |
+| `share-changed` | `{}` — fired after any mutation (coarse) |
+
+`principal` is `"actor"` or `"group"`; `id` is the actor id, group id, or a
+general-access wildcard (`*` / `_signed_in`).
+
+## Including the bundle (opt-in)
+
+The bundle is built with and served via
+[datasette-vite](https://github.com/datasette/datasette-vite). It is **not**
+injected site-wide — a host plugin opts in from its own asset hooks so the
+dialog only loads on pages that use it:
+
+```python
+from datasette import hookimpl
+from datasette_acl_share import datasette_share_assets
+
+@hookimpl
+def extra_js_urls(datasette, request):
+    # gate on your own page(s) so it doesn't load everywhere
+    if not _is_my_page(request):
+        return []
+    return datasette_share_assets(datasette)["js"]
+
+@hookimpl
+def extra_css_urls(datasette, request):
+    if not _is_my_page(request):
+        return []
+    return datasette_share_assets(datasette)["css"]
+```
+
+The helper returns `{"js": [{"url": …, "module": True}], "css": [url, …]}`,
+ready for Datasette's `extra_js_urls` / `extra_css_urls` hooks. In
+datasette-vite dev mode the `js` list includes the Vite client (HMR) and `css`
+is empty — your plugin code is identical in dev and prod. Hosts that own their
+own Vite build can instead splice the URLs into their page template.
+
+## Capability probe
+
+So a host can set `features` without guessing which optional backends exist:
+
+```
+GET /-/share/capabilities  →  {"people": true, "groups": true, "public": true}
+```
+
+`people` reflects whether
+[datasette-user-profiles](https://github.com/datasette/datasette-user-profiles)
+is installed (search + avatars); `groups` and `public` are intrinsic to
+datasette-acl. `share_capabilities()` is also importable if you prefer to
+compute the `features` string server-side.
+
+## Embedding in apps
+
+A Svelte app (paper, places, sheets) renders the tag directly — attributes
+bind, and `onshare-*` props receive the events:
+
+```svelte
+<datasette-acl-share-dialog
+  resource-type="paper-doc"
+  parent={dbName}
+  child={docId}
+  resource-label={docTitle}
+  actor-json={JSON.stringify(actor)}
+  onshare-revoked={onShareRevoked}
+></datasette-acl-share-dialog>
+```
+
+Preact hosts (datasette-comments) and plain Jinja pages embed the same tag
+unchanged, wiring events with `addEventListener`.
+
+> For a full walkthrough — modelling the acl resource type / actions / roles,
+> seeding grants, gating pages, plus web-component tips and a minimal end-to-end
+> plugin — see [`docs/integration-guide.md`](docs/integration-guide.md).
+
+## Development
+
+```sh
+just frontend-install   # one-time npm install
+just frontend           # production build (writes static/gen + manifest.json)
+just dev                # datasette + the sample-docs demo at :5171
+
+# Or with Vite HMR:
+just frontend-dev       # terminal 1: vite dev server (port 5180)
+just dev-with-hmr       # terminal 2: datasette pointed at the dev server
+```
+
+`just dev` loads a throwaway demo plugin (`tests/sample_plugins`, with templates
+in `tests/templates`) plus datasette-debug-gotham / datasette-user-profiles /
+datasette-debug-bar. Visit <http://localhost:5171/sample-docs>, switch
+characters with the debug bar (Clark owns doc 1), and exercise the dialog — see
+`CLAUDE.md` for the full demo walkthrough.
+
+Built assets (`datasette_acl_share/static/`, `manifest.json`) are gitignored and
+produced by the build.
+
+### Tests
+
+```sh
+npm --prefix frontend run test    # vitest (node + browser suites)
+npm --prefix frontend run check   # svelte-check + tsc
+uv run pytest                     # Python: asset helper + capability probe
+```

datasette_acl_share-0.0.1a2/README.md

@@ -0,0 +1,162 @@
+# datasette-acl-share
+
+A reusable, Google-Docs-style **share dialog** for Datasette, shipped as a
+framework-agnostic Svelte 5 custom element: `<datasette-acl-share-dialog>`.
+
+One component, embedded by every document plugin (paper, places, sheets, …). It
+is the UI layer over the [datasette-acl](https://github.com/datasette/datasette-acl)
+JSON API — grants, roles, groups, and "general access" wildcards. If
+datasette-user-profiles is installed the dialog adds people search and avatars;
+without it, it degrades gracefully to initials chips with no People search.
+
+## Usage
+
+Drop the tag anywhere — inside a Svelte/Preact app, or in plain server-rendered
+HTML (custom elements are just DOM):
+
+```html
+<datasette-acl-share-dialog
+  resource-type="paper-doc"
+  parent="mydb"
+  child="42"
+  resource-label="Q2 Planning"
+></datasette-acl-share-dialog>
+```
+
+The element renders a compact **share-icon button**; clicking it opens a modal
+`<dialog>` (dismiss with the × button, the backdrop, or `Esc`). The resource is
+fetched lazily on first open, so a page can carry many share buttons cheaply.
+
+Once open, the dialog shows "people with access" (avatars, role dropdowns,
+remove buttons), a "General access" section, and an add-box that searches
+people (profiles) and groups (acl). Each action is its own fetch — grant /
+update / revoke — matching Google Docs' incremental behaviour. Actors who
+cannot manage the resource (`can_manage: false`) get a read-only roster: roles
+as tags, no add-box, no remove buttons.
+
+### Attributes
+
+| Attribute | Req | Purpose |
+|---|---|---|
+| `resource-type` | yes | acl resource type, e.g. `paper-doc`, `places-list`, `sheets-workbook` |
+| `parent` | yes | resource identity part 1 (e.g. database name) |
+| `child` | – | resource identity part 2 (e.g. row id); omit for parent-only resources |
+| `resource-label` | – | display title shown in the dialog header |
+| `actor-json` | – | current actor as JSON (`{"id":"alice","kind":"user"}`) — used to mark "(you)" |
+| `features` | – | comma list of sections to show (`people,groups,public`); empty/missing = all available |
+| `api-base` | – | override the acl API prefix (default `/-/acl/api`) |
+| `open` | – | when set (any value other than `false`), open the modal on mount instead of waiting for a trigger click |
+| `trigger-label` | – | text shown next to the share icon on the trigger button (icon-only if omitted) |
+| `disabled` | – | when set (any value other than `false`), disable the trigger so the dialog can't open (e.g. the actor can't share this resource) |
+
+### Events
+
+The element dispatches bubbling, composed `CustomEvent`s so hosts can react
+(e.g. paper re-running its SSE subscriber sweep after a revoke):
+
+| Event | `detail` |
+|---|---|
+| `share-granted` | `{principal, id, role}` |
+| `share-updated` | `{principal, id, role}` |
+| `share-revoked` | `{principal, id}` |
+| `share-changed` | `{}` — fired after any mutation (coarse) |
+
+`principal` is `"actor"` or `"group"`; `id` is the actor id, group id, or a
+general-access wildcard (`*` / `_signed_in`).
+
+## Including the bundle (opt-in)
+
+The bundle is built with and served via
+[datasette-vite](https://github.com/datasette/datasette-vite). It is **not**
+injected site-wide — a host plugin opts in from its own asset hooks so the
+dialog only loads on pages that use it:
+
+```python
+from datasette import hookimpl
+from datasette_acl_share import datasette_share_assets
+
+@hookimpl
+def extra_js_urls(datasette, request):
+    # gate on your own page(s) so it doesn't load everywhere
+    if not _is_my_page(request):
+        return []
+    return datasette_share_assets(datasette)["js"]
+
+@hookimpl
+def extra_css_urls(datasette, request):
+    if not _is_my_page(request):
+        return []
+    return datasette_share_assets(datasette)["css"]
+```
+
+The helper returns `{"js": [{"url": …, "module": True}], "css": [url, …]}`,
+ready for Datasette's `extra_js_urls` / `extra_css_urls` hooks. In
+datasette-vite dev mode the `js` list includes the Vite client (HMR) and `css`
+is empty — your plugin code is identical in dev and prod. Hosts that own their
+own Vite build can instead splice the URLs into their page template.
+
+## Capability probe
+
+So a host can set `features` without guessing which optional backends exist:
+
+```
+GET /-/share/capabilities  →  {"people": true, "groups": true, "public": true}
+```
+
+`people` reflects whether
+[datasette-user-profiles](https://github.com/datasette/datasette-user-profiles)
+is installed (search + avatars); `groups` and `public` are intrinsic to
+datasette-acl. `share_capabilities()` is also importable if you prefer to
+compute the `features` string server-side.
+
+## Embedding in apps
+
+A Svelte app (paper, places, sheets) renders the tag directly — attributes
+bind, and `onshare-*` props receive the events:
+
+```svelte
+<datasette-acl-share-dialog
+  resource-type="paper-doc"
+  parent={dbName}
+  child={docId}
+  resource-label={docTitle}
+  actor-json={JSON.stringify(actor)}
+  onshare-revoked={onShareRevoked}
+></datasette-acl-share-dialog>
+```
+
+Preact hosts (datasette-comments) and plain Jinja pages embed the same tag
+unchanged, wiring events with `addEventListener`.
+
+> For a full walkthrough — modelling the acl resource type / actions / roles,
+> seeding grants, gating pages, plus web-component tips and a minimal end-to-end
+> plugin — see [`docs/integration-guide.md`](docs/integration-guide.md).
+
+## Development
+
+```sh
+just frontend-install   # one-time npm install
+just frontend           # production build (writes static/gen + manifest.json)
+just dev                # datasette + the sample-docs demo at :5171
+
+# Or with Vite HMR:
+just frontend-dev       # terminal 1: vite dev server (port 5180)
+just dev-with-hmr       # terminal 2: datasette pointed at the dev server
+```
+
+`just dev` loads a throwaway demo plugin (`tests/sample_plugins`, with templates
+in `tests/templates`) plus datasette-debug-gotham / datasette-user-profiles /
+datasette-debug-bar. Visit <http://localhost:5171/sample-docs>, switch
+characters with the debug bar (Clark owns doc 1), and exercise the dialog — see
+`CLAUDE.md` for the full demo walkthrough.
+
+Built assets (`datasette_acl_share/static/`, `manifest.json`) are gitignored and
+produced by the build.
+
+### Tests
+
+```sh
+npm --prefix frontend run test    # vitest (node + browser suites)
+npm --prefix frontend run check   # svelte-check + tsc
+uv run pytest                     # Python: asset helper + capability probe
+```

datasette_acl_share-0.0.1a2/datasette_acl_share/__init__.py

@@ -0,0 +1,71 @@
+"""Python side of the ``<datasette-acl-share-dialog>`` share dialog.
+
+Ships :func:`datasette_share_assets` (opt-in asset helper for hosts) and the
+``GET /-/share/capabilities`` probe. See the README for embedding details.
+"""
+
+from datasette import hookimpl, Response
+from datasette_vite import vite_js_urls, vite_css_urls
+
+# Vite manifest key for the bundle entrypoint; importing the bundle registers
+# the custom element.
+ENTRYPOINT = "src/main.ts"
+PLUGIN_PACKAGE = "datasette_acl_share"
+
+# Optional backend that lights up People search + avatars.
+PROFILES_PLUGIN = "datasette-user-profiles"
+
+
+def datasette_share_assets(datasette):
+    """Return ``{"js": [...], "css": [...]}`` for the built bundle.
+
+    Hosts return these from their own ``extra_js_urls`` / ``extra_css_urls``
+    hooks (gated on their pages) so the dialog loads only where used — the
+    plugin deliberately registers no site-wide assets. In datasette-vite dev
+    mode the URLs point at the dev server and ``css`` is empty (Vite injects
+    CSS via JS).
+    """
+    return {
+        "js": vite_js_urls(
+            datasette=datasette,
+            entrypoint=ENTRYPOINT,
+            plugin_package=PLUGIN_PACKAGE,
+        ),
+        "css": vite_css_urls(
+            datasette=datasette,
+            entrypoint=ENTRYPOINT,
+            plugin_package=PLUGIN_PACKAGE,
+        ),
+    }
+
+
+def share_capabilities():
+    """Report which dialog sections the installed backends can support.
+
+    ``people`` requires datasette-user-profiles; ``groups`` and ``public`` are
+    intrinsic to datasette-acl. Never raises — a missing plugin just yields
+    ``false``.
+    """
+    try:
+        from datasette.plugins import get_plugins
+
+        installed = {p.get("name") for p in get_plugins()}
+    except Exception:
+        installed = set()
+    return {
+        "people": PROFILES_PLUGIN in installed,
+        "groups": True,
+        "public": True,
+    }
+
+
+async def capabilities_view():
+    """GET /-/share/capabilities → the capability probe as JSON (read-only)."""
+    return Response.json(share_capabilities())
+
+
+@hookimpl
+def register_routes():
+    return [
+        ("^/-/share/capabilities$", capabilities_view),
+    ]

datasette_acl_share-0.0.1a2/datasette_acl_share/manifest.json

@@ -0,0 +1,8 @@
+{
+  "src/main.ts": {
+    "file": "static/gen/main-CnabIi8c.js",
+    "name": "main",
+    "src": "src/main.ts",
+    "isEntry": true
+  }
+}