npm - @acorex-platform/module-security-management-client - Versions diffs - 0.0.32 → 0.0.33 - Mend

@acorex-platform/module-security-management-client 0.0.32 → 0.0.33

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (49) hide show

package/fesm2022/acorex-platform-module-security-management-client-contracts-entity-catalog-user-role.entity-IHUWsgjf.mjs ADDED Viewed

@@ -0,0 +1,145 @@
+import { AXPWidgetsCatalog } from '@acorex-platform/framework-shared/core';
+import { createAllQueryView, entityMasterCrudActions } from '@acorex-platform/framework-shared/entity';
+import { R as RootConfig } from './acorex-platform-module-security-management-client-contracts-entity-catalog-acorex-platform-module-security-management-client-contracts-entity-catalog-CeqvAe30.mjs';
+async function userRoleFactory() {
+    const i18n = RootConfig.config.i18n;
+    const entityDef = {
+        module: RootConfig.module.name,
+        name: RootConfig.entities.userRole.name,
+        title: RootConfig.entities.userRole.title,
+        icon: RootConfig.entities.userRole.icon,
+        formats: {
+            individual: RootConfig.entities.userRole.title,
+            plural: RootConfig.entities.userRole.titlePlural,
+        },
+        plugins: [{ name: 'history' }, { name: 'lock' }, { name: 'compare' }, { name: 'archive' }],
+        relatedEntities: [],
+        groups: [
+            {
+                id: 'basic-info',
+                title: `@general:terms.interface.basic-info`,
+            },
+            {
+                id: 'roles',
+                title: `@${i18n}:users.entities.user.fields.roles.title`,
+            },
+        ],
+        properties: [
+            {
+                name: 'id',
+                title: `@general:terms.common.id`,
+                groupId: 'basic-info',
+                schema: {
+                    dataType: 'string',
+                    visible: false,
+                    nullable: false,
+                    readonly: true,
+                    unique: {
+                        enabled: true,
+                    },
+                },
+            },
+            {
+                name: 'userId',
+                title: `@${i18n}:user-roles.entities.user-role.fields.user.title`,
+                groupId: 'basic-info',
+                schema: {
+                    dataType: 'string',
+                    nullable: false,
+                    interface: {
+                        type: AXPWidgetsCatalog.text,
+                    },
+                },
+                validations: [{ rule: 'required' }],
+            },
+            {
+                name: 'roleIds',
+                title: `@${i18n}:users.entities.user.fields.roles.title`,
+                groupId: 'roles',
+                schema: {
+                    dataType: 'object',
+                    interface: {
+                        type: AXPWidgetsCatalog.lookup,
+                        options: {
+                            entity: 'SecurityManagement.Role',
+                            multiple: true,
+                            look: 'select',
+                            expose: [
+                                { source: 'id', target: 'rolesList.{id}' },
+                                { source: 'title', target: 'rolesList.{title}' },
+                            ],
+                        },
+                    },
+                },
+                validations: [{ rule: 'required' }],
+            },
+        ],
+        columns: [
+            { name: 'userId' },
+            { name: 'roleIds', options: { dataPath: 'rolesList' } },
+        ],
+        interfaces: {
+            master: {
+                create: {
+                    sections: [
+                        {
+                            id: 'basic-info',
+                            order: 1,
+                            layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
+                        },
+                        {
+                            id: 'roles',
+                            order: 2,
+                            layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
+                        },
+                    ],
+                    properties: [
+                        { name: 'userId', layout: { positions: { lg: { colSpan: 12 } } } },
+                        { name: 'roleIds', layout: { positions: { lg: { colSpan: 12 } } } },
+                    ],
+                },
+                update: {
+                    sections: [
+                        {
+                            id: 'basic-info',
+                            order: 1,
+                            layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
+                        },
+                        {
+                            id: 'roles',
+                            order: 2,
+                            layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
+                        },
+                    ],
+                    properties: [
+                        { name: 'userId', layout: { positions: { lg: { colSpan: 12 } } } },
+                        { name: 'roleIds', layout: { positions: { lg: { colSpan: 12 } } } },
+                    ],
+                },
+                single: {
+                    title: '{{userId}}',
+                    sections: [
+                        {
+                            id: 'basic-info',
+                            order: 1,
+                            layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
+                        },
+                    ],
+                    properties: [
+                        { name: 'userId', layout: { positions: { lg: { colSpan: 12 } } } },
+                        { name: 'roleIds', layout: { positions: { lg: { colSpan: 12 } } } },
+                    ],
+                },
+                list: {
+                    actions: [...entityMasterCrudActions()],
+                    views: [createAllQueryView()],
+                },
+            },
+        },
+    };
+    return entityDef;
+}
+export { userRoleFactory };
+//# sourceMappingURL=acorex-platform-module-security-management-client-contracts-entity-catalog-user-role.entity-IHUWsgjf.mjs.map

package/fesm2022/acorex-platform-module-security-management-client-contracts-entity-catalog-user-role.entity-IHUWsgjf.mjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"acorex-platform-module-security-management-client-contracts-entity-catalog-user-role.entity-IHUWsgjf.mjs","sources":["../../../../libs/modules/security-management/contracts/src/entities/user-role/user-role.entity.ts"],"sourcesContent":["import { AXPWidgetsCatalog } from '@acorex-platform/framework-shared/core';\nimport {\n AXPEntity,\n createAllQueryView,\n entityMasterCrudActions,\n} from '@acorex-platform/framework-shared/entity';\nimport { RootConfig } from '../../root-config';\n\nexport async function userRoleFactory(): Promise<AXPEntity | null> {\n const i18n = RootConfig.config.i18n;\n\n const entityDef: AXPEntity = {\n module: RootConfig.module.name,\n name: RootConfig.entities.userRole.name,\n title: RootConfig.entities.userRole.title,\n icon: RootConfig.entities.userRole.icon,\n formats: {\n individual: RootConfig.entities.userRole.title,\n plural: RootConfig.entities.userRole.titlePlural,\n },\n plugins: [{ name: 'history' }, { name: 'lock' }, { name: 'compare' }, { name: 'archive' }],\n relatedEntities: [],\n groups: [\n {\n id: 'basic-info',\n title: `@general:terms.interface.basic-info`,\n },\n {\n id: 'roles',\n title: `@${i18n}:users.entities.user.fields.roles.title`,\n },\n ],\n properties: [\n {\n name: 'id',\n title: `@general:terms.common.id`,\n groupId: 'basic-info',\n schema: {\n dataType: 'string',\n visible: false,\n nullable: false,\n readonly: true,\n unique: {\n enabled: true,\n },\n },\n },\n {\n name: 'userId',\n title: `@${i18n}:user-roles.entities.user-role.fields.user.title`,\n groupId: 'basic-info',\n schema: {\n dataType: 'string',\n nullable: false,\n interface: {\n type: AXPWidgetsCatalog.text,\n },\n },\n validations: [{ rule: 'required' }],\n },\n {\n name: 'roleIds',\n title: `@${i18n}:users.entities.user.fields.roles.title`,\n groupId: 'roles',\n schema: {\n dataType: 'object',\n interface: {\n type: AXPWidgetsCatalog.lookup,\n options: {\n entity: 'SecurityManagement.Role',\n multiple: true,\n look: 'select',\n expose: [\n { source: 'id', target: 'rolesList.{id}' },\n { source: 'title', target: 'rolesList.{title}' },\n ],\n },\n },\n },\n validations: [{ rule: 'required' }],\n },\n ],\n columns: [\n { name: 'userId' },\n { name: 'roleIds', options: { dataPath: 'rolesList' } },\n ],\n interfaces: {\n master: {\n create: {\n sections: [\n {\n id: 'basic-info',\n order: 1,\n layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },\n },\n {\n id: 'roles',\n order: 2,\n layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },\n },\n ],\n properties: [\n { name: 'userId', layout: { positions: { lg: { colSpan: 12 } } } },\n { name: 'roleIds', layout: { positions: { lg: { colSpan: 12 } } } },\n ],\n },\n update: {\n sections: [\n {\n id: 'basic-info',\n order: 1,\n layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },\n },\n {\n id: 'roles',\n order: 2,\n layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },\n },\n ],\n properties: [\n { name: 'userId', layout: { positions: { lg: { colSpan: 12 } } } },\n { name: 'roleIds', layout: { positions: { lg: { colSpan: 12 } } } },\n ],\n },\n single: {\n title: '{{userId}}',\n sections: [\n {\n id: 'basic-info',\n order: 1,\n layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },\n },\n ],\n properties: [\n { name: 'userId', layout: { positions: { lg: { colSpan: 12 } } } },\n { name: 'roleIds', layout: { positions: { lg: { colSpan: 12 } } } },\n ],\n },\n list: {\n actions: [...entityMasterCrudActions()],\n views: [createAllQueryView()],\n },\n },\n },\n };\n\n return entityDef;\n}\n"],"names":[],"mappings":";;;;AAQO,eAAe,eAAe,GAAA;AACnC,IAAA,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI;AAEnC,IAAA,MAAM,SAAS,GAAc;AAC3B,QAAA,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI;AAC9B,QAAA,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI;AACvC,QAAA,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK;AACzC,QAAA,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI;AACvC,QAAA,OAAO,EAAE;AACP,YAAA,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK;AAC9C,YAAA,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW;AACjD,SAAA;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC1F,QAAA,eAAe,EAAE,EAAE;AACnB,QAAA,MAAM,EAAE;AACN,YAAA;AACE,gBAAA,EAAE,EAAE,YAAY;AAChB,gBAAA,KAAK,EAAE,CAAA,mCAAA,CAAqC;AAC7C,aAAA;AACD,YAAA;AACE,gBAAA,EAAE,EAAE,OAAO;gBACX,KAAK,EAAE,CAAA,CAAA,EAAI,IAAI,CAAA,uCAAA,CAAyC;AACzD,aAAA;AACF,SAAA;AACD,QAAA,UAAU,EAAE;AACV,YAAA;AACE,gBAAA,IAAI,EAAE,IAAI;AACV,gBAAA,KAAK,EAAE,CAAA,wBAAA,CAA0B;AACjC,gBAAA,OAAO,EAAE,YAAY;AACrB,gBAAA,MAAM,EAAE;AACN,oBAAA,QAAQ,EAAE,QAAQ;AAClB,oBAAA,OAAO,EAAE,KAAK;AACd,oBAAA,QAAQ,EAAE,KAAK;AACf,oBAAA,QAAQ,EAAE,IAAI;AACd,oBAAA,MAAM,EAAE;AACN,wBAAA,OAAO,EAAE,IAAI;AACd,qBAAA;AACF,iBAAA;AACF,aAAA;AACD,YAAA;AACE,gBAAA,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,CAAA,CAAA,EAAI,IAAI,CAAA,gDAAA,CAAkD;AACjE,gBAAA,OAAO,EAAE,YAAY;AACrB,gBAAA,MAAM,EAAE;AACN,oBAAA,QAAQ,EAAE,QAAQ;AAClB,oBAAA,QAAQ,EAAE,KAAK;AACf,oBAAA,SAAS,EAAE;wBACT,IAAI,EAAE,iBAAiB,CAAC,IAAI;AAC7B,qBAAA;AACF,iBAAA;AACD,gBAAA,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACpC,aAAA;AACD,YAAA;AACE,gBAAA,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,CAAA,CAAA,EAAI,IAAI,CAAA,uCAAA,CAAyC;AACxD,gBAAA,OAAO,EAAE,OAAO;AAChB,gBAAA,MAAM,EAAE;AACN,oBAAA,QAAQ,EAAE,QAAQ;AAClB,oBAAA,SAAS,EAAE;wBACT,IAAI,EAAE,iBAAiB,CAAC,MAAM;AAC9B,wBAAA,OAAO,EAAE;AACP,4BAAA,MAAM,EAAE,yBAAyB;AACjC,4BAAA,QAAQ,EAAE,IAAI;AACd,4BAAA,IAAI,EAAE,QAAQ;AACd,4BAAA,MAAM,EAAE;AACN,gCAAA,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE;AAC1C,gCAAA,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE;AACjD,6BAAA;AACF,yBAAA;AACF,qBAAA;AACF,iBAAA;AACD,gBAAA,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACpC,aAAA;AACF,SAAA;AACD,QAAA,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;AACxD,SAAA;AACD,QAAA,UAAU,EAAE;AACV,YAAA,MAAM,EAAE;AACN,gBAAA,MAAM,EAAE;AACN,oBAAA,QAAQ,EAAE;AACR,wBAAA;AACE,4BAAA,EAAE,EAAE,YAAY;AAChB,4BAAA,KAAK,EAAE,CAAC;AACR,4BAAA,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;AAC5D,yBAAA;AACD,wBAAA;AACE,4BAAA,EAAE,EAAE,OAAO;AACX,4BAAA,KAAK,EAAE,CAAC;AACR,4BAAA,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;AAC5D,yBAAA;AACF,qBAAA;AACD,oBAAA,UAAU,EAAE;AACV,wBAAA,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;AAClE,wBAAA,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;AACpE,qBAAA;AACF,iBAAA;AACD,gBAAA,MAAM,EAAE;AACN,oBAAA,QAAQ,EAAE;AACR,wBAAA;AACE,4BAAA,EAAE,EAAE,YAAY;AAChB,4BAAA,KAAK,EAAE,CAAC;AACR,4BAAA,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;AAC5D,yBAAA;AACD,wBAAA;AACE,4BAAA,EAAE,EAAE,OAAO;AACX,4BAAA,KAAK,EAAE,CAAC;AACR,4BAAA,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;AAC5D,yBAAA;AACF,qBAAA;AACD,oBAAA,UAAU,EAAE;AACV,wBAAA,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;AAClE,wBAAA,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;AACpE,qBAAA;AACF,iBAAA;AACD,gBAAA,MAAM,EAAE;AACN,oBAAA,KAAK,EAAE,YAAY;AACnB,oBAAA,QAAQ,EAAE;AACR,wBAAA;AACE,4BAAA,EAAE,EAAE,YAAY;AAChB,4BAAA,KAAK,EAAE,CAAC;AACR,4BAAA,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;AAC5D,yBAAA;AACF,qBAAA;AACD,oBAAA,UAAU,EAAE;AACV,wBAAA,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;AAClE,wBAAA,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;AACpE,qBAAA;AACF,iBAAA;AACD,gBAAA,IAAI,EAAE;AACJ,oBAAA,OAAO,EAAE,CAAC,GAAG,uBAAuB,EAAE,CAAC;AACvC,oBAAA,KAAK,EAAE,CAAC,kBAAkB,EAAE,CAAC;AAC9B,iBAAA;AACF,aAAA;AACF,SAAA;KACF;AAED,IAAA,OAAO,SAAS;AAClB;;;;"}

package/fesm2022/acorex-platform-module-security-management-client-contracts-entity-catalog-users.entity-DmVp5gj1.mjs ADDED Viewed

@@ -0,0 +1,486 @@
+import { AXPWidgetsCatalog, AXPWidgetsList } from '@acorex-platform/framework-shared/core';
+import { createAllQueryView, entityMasterCrudActions, AXPEntityCommandScope, entityMasterRecordActions } from '@acorex-platform/framework-shared/entity';
+import { R as RootConfig } from './acorex-platform-module-security-management-client-contracts-entity-catalog-acorex-platform-module-security-management-client-contracts-entity-catalog-CeqvAe30.mjs';
+/** Status provider key for `accessState` on SecurityManagement.User (transitions define editable paths in the status UI). */
+const AXM_USER_ACCESS_STATE_DEFINITION_KEY = 'security-management.access-state.user';
+/** Status provider key for persisted `effectiveState` on SecurityManagement.User (derived; read-only in UI). */
+const AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY = 'security-management.effective-state.user';
+//#region ---- Security management server command keys ----
+const AXMSecurityManagementServerCommands = {
+    SendPasswordResetEmail: 'SecurityManagement:Server:SendPasswordResetEmail',
+    CompletePasswordReset: 'SecurityManagement:Server:CompletePasswordReset',
+    ChangeOwnPassword: 'SecurityManagement:Server:ChangeOwnPassword',
+};
+/** Stable codes for self-service password change (client maps to i18n). */
+const AXM_CHANGE_OWN_PASSWORD_ERROR_CODES = {
+    NotSignedIn: 'CHANGE_OWN_PASSWORD_NOT_SIGNED_IN',
+    IncorrectCurrent: 'CHANGE_OWN_PASSWORD_INCORRECT_CURRENT',
+    SameAsCurrent: 'CHANGE_OWN_PASSWORD_SAME_AS_CURRENT',
+    InvalidInput: 'CHANGE_OWN_PASSWORD_INVALID_INPUT',
+};
+/** Client/UI action key (confirm dialog → server send). */
+const AXM_USER_SEND_PASSWORD_RESET_COMMAND = 'SecurityManagement:User:SendPasswordResetEmail';
+//#endregion
+const USER_ROLES_PAGE_COMPONENT_KEY = 'user-roles-page';
+async function usersFactory() {
+    const entityDef = {
+        module: RootConfig.module.name,
+        name: RootConfig.entities.users.name,
+        title: RootConfig.entities.users.title,
+        icon: RootConfig.entities.users.icon,
+        formats: {
+            individual: RootConfig.entities.users.title,
+            plural: RootConfig.entities.users.titlePlural,
+            searchResult: {
+                title: '{{ displayName }}',
+                description: '{{ context.eval("lastSignInAt", { pipes: ["timeleft"] }) || "@security-management:users.entities.user.fields.last-sign-in-at.never" }}',
+            },
+        },
+        plugins: [
+            {
+                name: 'status',
+                options: {
+                    definition: 'security-management.account-state.user',
+                    field: 'accountState',
+                    isPrimary: false,
+                    groupId: 'user-account-access',
+                    title: '@security-management:users.entities.user.fields.account-lifecycle.title',
+                    showInCreate: false,
+                    generate: { views: { enabled: false } },
+                },
+            },
+            {
+                name: 'status',
+                options: {
+                    field: 'accessState',
+                    definition: AXM_USER_ACCESS_STATE_DEFINITION_KEY,
+                    isPrimary: false,
+                    groupId: 'user-account-access',
+                    title: '@security-management:users.entities.user.fields.access-state.title',
+                    showInCreate: false,
+                    // Platform-scoped sign-in gate: display-only on User detail (tenant must not change).
+                    // Platform mutations should go through a dedicated ops path once client isPlatform is available.
+                    readonly: true,
+                    generate: { views: { enabled: false } },
+                },
+            },
+            {
+                name: 'status',
+                options: {
+                    field: 'effectiveState',
+                    definition: AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY,
+                    isPrimary: true,
+                    groupId: 'user-account-access',
+                    title: '@security-management:users.entities.user.fields.effective-state.title',
+                    showInCreate: false,
+                    readonly: true,
+                    generate: { views: { enabled: true } },
+                },
+            },
+            { name: 'unique-fields', options: { fields: 'email', scope: 'global' } },
+            { name: 'history' },
+            { name: 'lock' },
+            { name: 'compare' },
+            { name: 'reports' },
+        ],
+        pages: [
+            {
+                componentKey: USER_ROLES_PAGE_COMPONENT_KEY,
+                title: '@security-management:users.entities.user.pages.roles.title',
+                icon: 'fa-light fa-user-tag',
+                layout: { order: 1, position: 'after' },
+                appearOn: { create: true, update: true },
+            },
+        ],
+        groups: [
+            {
+                id: 'basic-info',
+                title: '@general:terms.interface.basic-info',
+            },
+            {
+                id: 'avatar',
+                title: '@general:terms.common.avatar',
+                icon: 'fa-light fa-image',
+            },
+            {
+                id: 'user-account-access',
+                title: '@security-management:users.entities.user.groups.account-access',
+            },
+        ],
+        properties: [
+            {
+                name: 'username',
+                title: '@general:terms.contact.username',
+                groupId: 'basic-info',
+                options: {
+                    filter: {
+                        advance: {
+                            enabled: true,
+                        },
+                        inline: {
+                            enabled: true,
+                        },
+                    },
+                    sort: {
+                        enabled: true,
+                    },
+                },
+                schema: {
+                    dataType: 'string',
+                    readonly: '{{ !!context.eval("id") }}',
+                    interface: {
+                        type: AXPWidgetsCatalog.text,
+                        options: {},
+                    },
+                },
+                validations: [
+                    {
+                        rule: 'required',
+                    },
+                ],
+            },
+            {
+                name: 'displayName',
+                title: `@general:terms.common.display-name`,
+                groupId: 'basic-info',
+                options: {
+                    sort: {
+                        enabled: true,
+                    },
+                    filter: {
+                        advance: {
+                            enabled: true,
+                        },
+                        inline: {
+                            enabled: true,
+                        },
+                    },
+                },
+                schema: {
+                    dataType: 'string',
+                    interface: {
+                        type: AXPWidgetsCatalog.text,
+                    },
+                },
+                validations: [
+                    {
+                        rule: 'required',
+                    },
+                ],
+            },
+            {
+                name: 'email',
+                title: '@general:terms.communication.email',
+                groupId: 'basic-info',
+                options: {
+                    filter: {
+                        advance: { enabled: true },
+                        inline: { enabled: true },
+                    },
+                    sort: { enabled: true },
+                },
+                schema: {
+                    dataType: 'string',
+                    interface: {
+                        type: AXPWidgetsCatalog.text,
+                        options: {},
+                    },
+                },
+                validations: [{ rule: 'required' }],
+            },
+            {
+                name: 'rolesList',
+                title: '@security-management:users.entities.user.fields.roles.title',
+                groupId: 'basic-info',
+                schema: {
+                    dataType: 'array',
+                    /**
+                     * Display-only Role snapshots. Not a stored FK — source of truth is
+                     * scoped SecurityManagement.UserRole. Name must not end in Id/Ids so
+                     * the query planner does not join Role from this User document.
+                     */
+                    readonly: true,
+                    visible: false,
+                    interface: {
+                        type: AXPWidgetsList.Editors.LookupBox,
+                        options: {
+                            entity: `${RootConfig.module.name}.${RootConfig.entities.roles.name}`,
+                            textField: 'title',
+                            valueField: 'id',
+                            multiple: true,
+                            look: 'select',
+                        },
+                    },
+                },
+            },
+            {
+                name: 'homeTenantId',
+                title: '@security-management:users.entities.user.fields.home-tenant.title',
+                groupId: 'basic-info',
+                schema: {
+                    dataType: 'string',
+                    /** Stamped on create from session; not shown on User forms. */
+                    readonly: true,
+                    visible: false,
+                    interface: {
+                        type: AXPWidgetsCatalog.text,
+                        options: {},
+                    },
+                },
+            },
+            {
+                name: 'password',
+                title: '@security-management:users.entities.user.fields.password.title',
+                groupId: 'basic-info',
+                schema: {
+                    dataType: 'string',
+                    visible: false,
+                    interface: {
+                        type: AXPWidgetsCatalog.text,
+                    },
+                },
+            },
+            {
+                name: 'avatar',
+                title: '@general:terms.common.avatar',
+                groupId: 'avatar',
+                schema: {
+                    dataType: 'string',
+                    nullable: true,
+                    interface: {
+                        type: AXPWidgetsList.Advanced.Image,
+                        options: {
+                            type: 'profile-photo',
+                        },
+                    },
+                },
+            },
+            {
+                name: 'pinCode',
+                title: '@security-management:users.entities.user.fields.pin-code.title',
+                groupId: 'basic-info',
+                schema: {
+                    dataType: 'string',
+                    readonly: true,
+                    visible: false,
+                    interface: {
+                        type: AXPWidgetsCatalog.text,
+                    },
+                },
+            },
+            {
+                name: 'passwordChangedAt',
+                title: '@security-management:users.entities.user.fields.password-changed-at.title',
+                groupId: 'user-account-access',
+                schema: {
+                    dataType: 'date',
+                    readonly: true,
+                    visible: false,
+                    nullable: true,
+                    interface: {
+                        type: AXPWidgetsCatalog.dateTime,
+                    },
+                },
+            },
+            {
+                name: 'pinChangedAt',
+                title: '@security-management:users.entities.user.fields.pin-changed-at.title',
+                groupId: 'user-account-access',
+                schema: {
+                    dataType: 'date',
+                    readonly: true,
+                    visible: false,
+                    nullable: true,
+                    interface: {
+                        type: AXPWidgetsCatalog.dateTime,
+                    },
+                },
+            },
+            {
+                name: 'lastSignInAt',
+                title: '@security-management:users.entities.user.fields.last-sign-in-at.title',
+                groupId: 'user-account-access',
+                schema: {
+                    dataType: 'date',
+                    readonly: true,
+                    visible: false,
+                    nullable: true,
+                    interface: {
+                        type: AXPWidgetsCatalog.dateTime,
+                    },
+                },
+            },
+            {
+                name: 'passwordReset',
+                title: '@security-management:users.entities.user.fields.password-reset.title',
+                groupId: 'user-account-access',
+                schema: {
+                    dataType: 'object',
+                    readonly: true,
+                    visible: false,
+                    nullable: true,
+                    interface: {
+                        type: AXPWidgetsCatalog.text,
+                    },
+                },
+            },
+        ],
+        columns: [
+            { name: 'username' },
+            { name: 'displayName' },
+            { name: 'email' },
+            { name: 'rolesList' },
+            { name: 'lastSignInAt', options: { visible: false } },
+        ],
+        interfaces: {
+            master: {
+                create: {
+                    sections: [
+                        {
+                            id: 'basic-info',
+                            order: 1,
+                            layout: { positions: { lg: { colSpan: 8, colStart: 1 } } },
+                        },
+                        {
+                            id: 'avatar',
+                            order: 2,
+                            layout: { positions: { lg: { colSpan: 4, colStart: 9 } } },
+                        },
+                    ],
+                    properties: [
+                        {
+                            name: 'username',
+                            layout: { positions: { lg: { colSpan: 6 } } },
+                        },
+                        {
+                            name: 'displayName',
+                            layout: { positions: { lg: { colSpan: 6 } } },
+                        },
+                        {
+                            name: 'email',
+                            layout: { positions: { lg: { colSpan: 12 } } },
+                        },
+                        {
+                            name: 'avatar',
+                            layout: {
+                                label: { visible: false },
+                                positions: { lg: { colSpan: 12, order: 1 } },
+                            },
+                        },
+                    ],
+                },
+                update: {
+                    sections: [
+                        {
+                            id: 'basic-info',
+                            order: 1,
+                            layout: { positions: { lg: { colSpan: 8, colStart: 1 } } },
+                        },
+                        {
+                            id: 'avatar',
+                            order: 2,
+                            layout: { positions: { lg: { colSpan: 4, colStart: 9 } } },
+                        },
+                        {
+                            id: 'user-account-access',
+                            order: 3,
+                            layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
+                        },
+                    ],
+                    properties: [
+                        { name: 'username', layout: { positions: { lg: { colSpan: 6 } } } },
+                        { name: 'displayName', layout: { positions: { lg: { colSpan: 6 } } } },
+                        { name: 'email', layout: { positions: { lg: { colSpan: 6 } } } },
+                        {
+                            name: 'avatar',
+                            layout: {
+                                label: { visible: false },
+                                positions: { lg: { colSpan: 12, order: 1 } },
+                            },
+                        },
+                        { name: 'accountState', layout: { positions: { lg: { colSpan: 4 } } } },
+                        { name: 'accessState', layout: { positions: { lg: { colSpan: 4 } } } },
+                        { name: 'effectiveState', layout: { positions: { lg: { colSpan: 4 } } } },
+                    ],
+                },
+                single: {
+                    title: '{{ context.eval("displayName") ?? context.eval("username") }}',
+                    description: '{{ context.eval("lastSignInAt", { pipes: ["timeleft"] }) || "@security-management:users.entities.user.fields.last-sign-in-at.never" }}',
+                    sections: [
+                        {
+                            id: 'basic-info',
+                            order: 1,
+                            layout: { positions: { lg: { colSpan: 8, colStart: 1 } } },
+                        },
+                        {
+                            id: 'avatar',
+                            order: 2,
+                            layout: { positions: { lg: { colSpan: 4, colStart: 9 } } },
+                        },
+                        {
+                            id: 'user-account-access',
+                            order: 3,
+                            layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
+                        },
+                    ],
+                    properties: [
+                        { name: 'username', layout: { positions: { lg: { colSpan: 6 } } } },
+                        { name: 'displayName', layout: { positions: { lg: { colSpan: 6 } } } },
+                        { name: 'email', layout: { positions: { lg: { colSpan: 6 } } } },
+                        {
+                            name: 'avatar',
+                            layout: {
+                                label: { visible: false },
+                                positions: { lg: { colSpan: 12, order: 1 } },
+                            },
+                        },
+                        { name: 'accountState', layout: { positions: { lg: { colSpan: 4 } } } },
+                        { name: 'accessState', layout: { positions: { lg: { colSpan: 4 } } } },
+                        { name: 'effectiveState', layout: { positions: { lg: { colSpan: 4 } } } },
+                    ],
+                    actions: [
+                        {
+                            title: '@security-management:users.entities.user.actions.send-password-reset.title',
+                            icon: 'fa-light fa-envelope',
+                            command: AXM_USER_SEND_PASSWORD_RESET_COMMAND,
+                            priority: 'secondary',
+                            type: 'view',
+                            scope: AXPEntityCommandScope.Individual,
+                        },
+                        ...entityMasterRecordActions(),
+                    ],
+                },
+                list: {
+                    actions: [...entityMasterCrudActions()],
+                    views: [
+                        createAllQueryView({
+                            sorts: [{ name: 'displayName', dir: 'asc' }],
+                        }),
+                    ],
+                },
+                card: {
+                    enabled: true,
+                    header: {
+                        title: 'displayName',
+                        description: '{{ context.eval("lastSignInAt", { pipes: ["timeleft"] }) || "@security-management:users.entities.user.fields.last-sign-in-at.never" }}',
+                        avatar: 'avatar',
+                    },
+                    fields: [
+                        { name: 'username', display: 'meta' },
+                        { name: 'email', display: 'meta' },
+                        { name: 'rolesList', display: 'simple' },
+                    ],
+                },
+            },
+        },
+    };
+    return entityDef;
+}
+export { usersFactory };
+//# sourceMappingURL=acorex-platform-module-security-management-client-contracts-entity-catalog-users.entity-DmVp5gj1.mjs.map