@acorex-platform/module-security-management-client 0.0.58 → 0.0.60

package/fesm2022/acorex-platform-module-security-management-client-create-user-in-tenant.command-BFnZRmh9.mjs

@@ -0,0 +1,376 @@
+import { AXToastService } from '@acorex/components/toast';
+import { AXTranslationService, resolveMultiLanguageString } from '@acorex/core/translation';
+import { AXPSessionService } from '@acorex-platform/framework-client/auth';
+import { AXPLayoutBuilderService, resolveLayoutBuilderDialogResult } from '@acorex-platform/framework-client/layout/builder';
+import { AXPCommandService } from '@acorex-platform/framework-client/runtime';
+import { AXPWidgetsList } from '@acorex-platform/framework-shared/core';
+import { resolveEntityActionCommandInput } from '@acorex-platform/framework-shared/runtime';
+import { AXMSecurityManagementServerCommands, normalizeCreateApplicationRoleAssignments, flattenCreateApplicationRoleAssignments } from '@acorex-platform/module-security-management-client/contracts';
+export { AXM_USER_CREATE_IN_TENANT_COMMAND } from '@acorex-platform/module-security-management-client/contracts';
+import * as i0 from '@angular/core';
+import { inject, Injectable } from '@angular/core';
+import { A as AXMUserRoleGrantService } from './acorex-platform-module-security-management-client-user-role-grant.service-6U17jzjq.mjs';
+
+/** TM edition feature — multi-app create (same gate as TM invite surface). */
+const CREATE_MULTI_APPLICATION_FEATURE = 'TenantManagement:Feature:InviteMultiApplication';
+/** Tenant-wide create surface only — Application Users stay app-scoped. */
+const TENANT_USER_ENTITY = 'TenantManagement.TenantUser';
+const TENANT_USER_ENTITY_NAME = 'TenantUser';
+//#endregion
+//#region ----- Create user in tenant command -----
+class AXPCreateUserInTenantCommand {
+    constructor() {
+        this.layoutBuilder = inject(AXPLayoutBuilderService);
+        this.commandService = inject(AXPCommandService);
+        this.toastService = inject(AXToastService);
+        this.translationService = inject(AXTranslationService);
+        this.sessionService = inject(AXPSessionService);
+        this.userRoleGrantService = inject(AXMUserRoleGrantService);
+    }
+    async execute(input) {
+        const actionInput = resolveEntityActionCommandInput(input);
+        const form = await this.openCreateDialog(actionInput);
+        if (!form) {
+            return { success: true, kind: 'object', data: { outcome: 'cancelled' } };
+        }
+        const tenantMembershipCreate = this.allowsMultiApplicationCreate(actionInput);
+        const remotePayload = this.toCreateRemotePayload(form, tenantMembershipCreate);
+        // Nested server call must skip toast middleware — this command owns UX toasts.
+        const result = await this.commandService.executeRemote(AXMSecurityManagementServerCommands.CreateUserInTenant, remotePayload);
+        if (result?.success) {
+            const [toastTitle, toastContent] = await Promise.all([
+                this.translationService
+                    .translateAsync('@security-management:users.entities.user.actions.create-in-tenant.success.title')
+                    .catch(() => 'User Created'),
+                this.translationService
+                    .translateAsync('@security-management:users.entities.user.actions.create-in-tenant.success.description')
+                    .catch(() => 'The user was created and is ready to sign in.'),
+            ]);
+            this.toastService.show({ color: 'success', title: toastTitle, content: toastContent, timeOut: 3000 });
+            return { success: true, kind: 'object', data: result.data };
+        }
+        const [toastTitle, fallback] = await Promise.all([
+            this.translationService
+                .translateAsync('@security-management:users.entities.user.actions.create-in-tenant.error.title')
+                .catch(() => 'Create Failed'),
+            this.translationService
+                .translateAsync('@security-management:users.entities.user.actions.create-in-tenant.error.description')
+                .catch(() => 'Failed to create user.'),
+        ]);
+        const toastContent = (typeof result?.message?.text === 'string' && result.message.text) || fallback;
+        this.toastService.show({ color: 'danger', title: toastTitle, content: toastContent, timeOut: 4000 });
+        return { success: false, message: { text: toastContent } };
+    }
+    /**
+     * Multi-app repeater only for TM → Tenant Users create (ADR D-05 surface).
+     * Security → Users stays current-application only.
+     */
+    allowsMultiApplicationCreate(actionInput) {
+        if (!this.sessionService.isFeatureEnabled(CREATE_MULTI_APPLICATION_FEATURE)) {
+            return false;
+        }
+        const entity = actionInput.entity ?? '';
+        const name = actionInput.entityInfo?.name ?? '';
+        return entity === TENANT_USER_ENTITY || name === TENANT_USER_ENTITY_NAME;
+    }
+    toCreateRemotePayload(form, tenantMembershipCreate) {
+        const base = {
+            email: form.email,
+            username: form.username,
+            displayName: form.displayName,
+            password: form.password,
+            tenantMembershipCreate,
+        };
+        if (!tenantMembershipCreate) {
+            const current = this.sessionService.application?.id?.trim();
+            return {
+                ...base,
+                applicationIds: current ? [current] : undefined,
+                roleIds: form.roleIds,
+            };
+        }
+        const assignments = normalizeCreateApplicationRoleAssignments(form.applicationRoleRows);
+        const flat = flattenCreateApplicationRoleAssignments(assignments);
+        return {
+            ...base,
+            applicationIds: flat.applicationIds,
+            roleIds: flat.roleIds.length > 0 ? flat.roleIds : undefined,
+            applicationRoleAssignments: assignments,
+        };
+    }
+    async loadCreateEntitledApplicationOptions() {
+        const result = await this.commandService.executeRemote(AXMSecurityManagementServerCommands.ListTenantEntitledApplications, {});
+        if (!result?.success) {
+            return [];
+        }
+        const payload = result?.data;
+        const items = Array.isArray(payload?.items) ? payload.items : [];
+        const locale = this.translationService.getActiveLang?.() ?? 'en-US';
+        return items
+            .map((item) => {
+            const id = String(item?.id ?? '').trim();
+            if (!id) {
+                return null;
+            }
+            const title = resolveMultiLanguageString(item.title, locale).trim() || id;
+            return { id, title };
+        })
+            .filter((row) => row != null);
+    }
+    async loadCreateAssignableRoleOptions(applicationId) {
+        const result = await this.commandService.executeRemote(AXMSecurityManagementServerCommands.ListInviteAssignableRoles, applicationId ? { applicationId } : {});
+        if (!result?.success) {
+            return [];
+        }
+        const payload = result?.data;
+        const items = Array.isArray(payload?.items) ? payload.items : [];
+        const locale = this.translationService.getActiveLang?.() ?? 'en-US';
+        return items
+            .map((item) => {
+            const id = String(item?.id ?? '').trim();
+            const appId = String(item?.applicationId ?? '').trim();
+            if (!id || !appId) {
+                return null;
+            }
+            const title = resolveMultiLanguageString(item.title, locale).trim() || id;
+            return { id, title, applicationId: appId };
+        })
+            .filter((row) => row != null);
+    }
+    /**
+     * Per-row Application + Roles for create-in-tenant. Duplicate apps allowed in UI;
+     * submit merges via `normalizeCreateApplicationRoleAssignments`.
+     */
+    buildCreateApplicationRoleRepeaterChildren(entitledApps, roleOptions) {
+        return [
+            {
+                type: AXPWidgetsList.Layouts.FlexLayout,
+                mode: 'edit',
+                options: {
+                    flexDirection: 'row',
+                    gap: '12px',
+                    alignItems: 'flex-end',
+                    wrap: 'nowrap',
+                },
+                children: [
+                    {
+                        type: AXPWidgetsList.Layouts.FlexItemLayout,
+                        mode: 'edit',
+                        options: { grow: '1', shrink: '1', basis: '0' },
+                        children: [
+                            {
+                                type: AXPWidgetsList.Layouts.FormField,
+                                mode: 'edit',
+                                options: {
+                                    label: '@security-management:users.entities.user.actions.create-in-tenant.fields.application',
+                                    showLabel: true,
+                                },
+                                children: [
+                                    {
+                                        type: AXPWidgetsList.Editors.SelectBox,
+                                        mode: 'edit',
+                                        path: 'applicationId',
+                                        name: 'applicationId',
+                                        options: {
+                                            dataSource: entitledApps,
+                                            valueField: 'id',
+                                            textField: 'title',
+                                            allowSearch: true,
+                                            validations: [{ rule: 'required' }],
+                                        },
+                                    },
+                                ],
+                            },
+                        ],
+                    },
+                    {
+                        type: AXPWidgetsList.Layouts.FlexItemLayout,
+                        mode: 'edit',
+                        options: { grow: '1', shrink: '1', basis: '0' },
+                        children: [
+                            {
+                                type: AXPWidgetsList.Layouts.FormField,
+                                mode: 'edit',
+                                options: {
+                                    label: '@security-management:users.entities.user.actions.create-in-tenant.fields.roles',
+                                    showLabel: true,
+                                },
+                                children: [
+                                    {
+                                        type: AXPWidgetsList.Editors.SelectBox,
+                                        mode: 'edit',
+                                        path: 'roleIds',
+                                        name: 'roleIds',
+                                        options: {
+                                            dataSource: roleOptions,
+                                            valueField: 'id',
+                                            textField: 'title',
+                                            multiple: true,
+                                            allowSearch: true,
+                                            disabled: "{{ !context.eval('>applicationId') }}",
+                                            filter: {
+                                                field: 'applicationId',
+                                                operator: { type: 'equal' },
+                                                value: "{{ context.eval('>applicationId') }}",
+                                            },
+                                        },
+                                        triggers: [
+                                            {
+                                                event: "{{ events.context('>applicationId') }}",
+                                                action: '{{ widget.setValue([]); widget.refresh(); }}',
+                                            },
+                                        ],
+                                    },
+                                ],
+                            },
+                        ],
+                    },
+                ],
+            },
+        ];
+    }
+    async openCreateDialog(actionInput) {
+        const multiApp = this.allowsMultiApplicationCreate(actionInput);
+        const [entitledApps, createRoleOptions, productRoleOptions] = await Promise.all([
+            multiApp
+                ? this.loadCreateEntitledApplicationOptions()
+                : Promise.resolve([]),
+            multiApp
+                ? this.loadCreateAssignableRoleOptions()
+                : Promise.resolve([]),
+            multiApp
+                ? Promise.resolve([])
+                : this.userRoleGrantService.listInviteRoleOptions('application'),
+        ]);
+        const appsWithRoles = new Set(createRoleOptions.map((row) => row.applicationId));
+        const selectableApps = appsWithRoles.size > 0
+            ? entitledApps.filter((app) => appsWithRoles.has(app.id))
+            : entitledApps;
+        const result = await this.layoutBuilder
+            .create()
+            .dialog((dialog) => {
+            dialog
+                .setTitle('@security-management:users.entities.user.actions.create-in-tenant.dialog.title')
+                .setSize(multiApp ? 'lg' : 'md')
+                .setCloseButton(true)
+                .setContext(multiApp
+                ? {
+                    email: '',
+                    username: '',
+                    displayName: '',
+                    password: '',
+                    applicationRoleRows: [{ applicationId: '', roleIds: [] }],
+                }
+                : {
+                    email: '',
+                    username: '',
+                    displayName: '',
+                    password: '',
+                    roleIds: [],
+                })
+                .content((flex) => {
+                flex
+                    .setDirection('column')
+                    .setGap('12px')
+                    .formField('@security-management:users.entities.user.actions.create-in-tenant.fields.email', (field) => {
+                    field.path('email');
+                    field.textBox({ validations: [{ rule: 'email' }] });
+                })
+                    .formField('@security-management:users.entities.user.actions.create-in-tenant.fields.username', (field) => {
+                    field.path('username');
+                    field.textBox({});
+                })
+                    .formField('@security-management:users.entities.user.actions.create-in-tenant.fields.display-name', (field) => {
+                    field.path('displayName');
+                    field.textBox({});
+                })
+                    .formField('@security-management:users.entities.user.actions.create-in-tenant.fields.password', (field) => {
+                    field.path('password');
+                    field.passwordBox({
+                        revealToggle: true,
+                        validations: [{ rule: 'required' }, { rule: 'minLength', options: { value: 6 } }],
+                    });
+                });
+                if (multiApp) {
+                    flex.formField('@security-management:users.entities.user.actions.create-in-tenant.fields.application-roles', (field) => {
+                        field.path('applicationRoleRows');
+                        field.setShowLabel(true);
+                        field.customWidget(AXPWidgetsList.Layouts.RepeaterLayout, {
+                            hasControls: true,
+                            inlineAddControl: true,
+                            defaultItem: { applicationId: '', roleIds: [] },
+                            children: this.buildCreateApplicationRoleRepeaterChildren(selectableApps, createRoleOptions),
+                        });
+                    });
+                }
+                else {
+                    flex.formField('@security-management:users.entities.user.actions.create-in-tenant.fields.roles', (field) => {
+                        field.path('roleIds');
+                        field.selectBox({
+                            dataSource: productRoleOptions,
+                            valueField: 'id',
+                            textField: 'title',
+                            multiple: true,
+                            validations: [{ rule: 'required' }],
+                        });
+                    });
+                }
+            })
+                .setActions((actions) => {
+                actions.cancel('@general:actions.cancel.title');
+                actions.submit('@security-management:users.entities.user.actions.create-in-tenant.dialog.submit');
+            })
+                .onAction(async (dialogRef) => {
+                if (dialogRef.action() === 'cancel') {
+                    return null;
+                }
+                const ctx = dialogRef.context();
+                const email = (ctx.email ?? '').trim() || undefined;
+                const username = (ctx.username ?? '').trim() || undefined;
+                if (!email && !username) {
+                    throw new Error('@security-management:users.entities.user.actions.create-in-tenant.errors.identity-required');
+                }
+                if (multiApp) {
+                    const assignments = normalizeCreateApplicationRoleAssignments(ctx.applicationRoleRows);
+                    if (assignments.length === 0) {
+                        throw new Error('@security-management:users.entities.user.actions.create-in-tenant.errors.application-required');
+                    }
+                    if (assignments.some((row) => row.roleIds.length === 0)) {
+                        throw new Error('@security-management:users.entities.user.actions.create-in-tenant.errors.roles-required');
+                    }
+                    return {
+                        email,
+                        username,
+                        displayName: (ctx.displayName ?? '').trim() || undefined,
+                        password: (ctx.password ?? '').trim() || undefined,
+                        applicationRoleRows: assignments,
+                    };
+                }
+                const roleIds = Array.isArray(ctx.roleIds)
+                    ? [...new Set(ctx.roleIds.map((id) => String(id).trim()).filter(Boolean))]
+                    : [];
+                if (roleIds.length === 0) {
+                    throw new Error('@security-management:users.entities.user.actions.create-in-tenant.errors.roles-required');
+                }
+                return {
+                    email,
+                    username,
+                    displayName: (ctx.displayName ?? '').trim() || undefined,
+                    password: (ctx.password ?? '').trim() || undefined,
+                    roleIds,
+                };
+            });
+        })
+            .show();
+        return resolveLayoutBuilderDialogResult(result);
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.0.8", ngImport: i0, type: AXPCreateUserInTenantCommand, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "22.0.8", ngImport: i0, type: AXPCreateUserInTenantCommand, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.8", ngImport: i0, type: AXPCreateUserInTenantCommand, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }] });
+
+export { AXPCreateUserInTenantCommand };
+//# sourceMappingURL=acorex-platform-module-security-management-client-create-user-in-tenant.command-BFnZRmh9.mjs.map

package/fesm2022/acorex-platform-module-security-management-client-create-user-in-tenant.command-BFnZRmh9.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"acorex-platform-module-security-management-client-create-user-in-tenant.command-BFnZRmh9.mjs","sources":["../../../../libs/modules/security-management/client/src/lib/commands/create-user-in-tenant.command.ts"],"sourcesContent":["import { AXToastService } from '@acorex/components/toast';\nimport { AXTranslationService, resolveMultiLanguageString } from '@acorex/core/translation';\nimport { AXPSessionService } from '@acorex-platform/framework-client/auth';\nimport {\n  AXPLayoutBuilderService,\n  resolveLayoutBuilderDialogResult,\n} from '@acorex-platform/framework-client/layout/builder';\nimport { AXPCommandService } from '@acorex-platform/framework-client/runtime';\nimport { AXPWidgetsList } from '@acorex-platform/framework-shared/core';\nimport type {\n  AXPCommand,\n  AXPCommandExecuteResultPromise,\n  AXPEntityActionCommandInput,\n} from '@acorex-platform/framework-shared/runtime';\nimport { resolveEntityActionCommandInput } from '@acorex-platform/framework-shared/runtime';\nimport {\n  AXM_USER_CREATE_IN_TENANT_COMMAND,\n  AXMSecurityManagementServerCommands,\n  flattenCreateApplicationRoleAssignments,\n  normalizeCreateApplicationRoleAssignments,\n  type AXMListInviteAssignableRolesResult,\n  type AXMListTenantEntitledApplicationsResult,\n} from '@acorex-platform/module-security-management-client/contracts';\nimport { inject, Injectable } from '@angular/core';\nimport { AXMUserRoleGrantService } from '../features/user-roles/user-role-grant.service';\nimport type { UserRoleOption } from '../features/user-roles/user-role-grant.types';\n\n//#region ----- Types -----\n\ninterface CreateApplicationRoleRow {\n  id?: string;\n  applicationId?: string;\n  roleIds?: string[];\n}\n\ninterface CreateInTenantFormResult {\n  email?: string;\n  username?: string;\n  displayName?: string;\n  password?: string;\n  roleIds?: string[];\n  applicationRoleRows?: CreateApplicationRoleRow[];\n}\n\ninterface EntitledApplicationOption {\n  id: string;\n  title: string;\n}\n\ninterface CreateRoleOption {\n  id: string;\n  title: string;\n  applicationId: string;\n}\n\ninterface CreateRemotePayload {\n  email?: string;\n  username?: string;\n  displayName?: string;\n  password?: string;\n  applicationIds?: string[];\n  roleIds?: string[];\n  applicationRoleAssignments?: Array<{ applicationId: string; roleIds: string[] }>;\n  tenantMembershipCreate: boolean;\n}\n\n/** TM edition feature — multi-app create (same gate as TM invite surface). */\nconst CREATE_MULTI_APPLICATION_FEATURE = 'TenantManagement:Feature:InviteMultiApplication';\n\n/** Tenant-wide create surface only — Application Users stay app-scoped. */\nconst TENANT_USER_ENTITY = 'TenantManagement.TenantUser';\nconst TENANT_USER_ENTITY_NAME = 'TenantUser';\n\n//#endregion\n\n//#region ----- Create user in tenant command -----\n\n@Injectable({ providedIn: 'root' })\nexport class AXPCreateUserInTenantCommand implements AXPCommand {\n  private readonly layoutBuilder = inject(AXPLayoutBuilderService);\n  private readonly commandService = inject(AXPCommandService);\n  private readonly toastService = inject(AXToastService);\n  private readonly translationService = inject(AXTranslationService);\n  private readonly sessionService = inject(AXPSessionService);\n  private readonly userRoleGrantService = inject(AXMUserRoleGrantService);\n\n  async execute(input?: unknown): AXPCommandExecuteResultPromise {\n    const actionInput = resolveEntityActionCommandInput(input);\n    const form = await this.openCreateDialog(actionInput);\n    if (!form) {\n      return { success: true, kind: 'object', data: { outcome: 'cancelled' } };\n    }\n\n    const tenantMembershipCreate = this.allowsMultiApplicationCreate(actionInput);\n    const remotePayload = this.toCreateRemotePayload(form, tenantMembershipCreate);\n\n    // Nested server call must skip toast middleware — this command owns UX toasts.\n    const result = await this.commandService.executeRemote(\n      AXMSecurityManagementServerCommands.CreateUserInTenant,\n      remotePayload,\n    );\n\n    if (result?.success) {\n      const [toastTitle, toastContent] = await Promise.all([\n        this.translationService\n          .translateAsync('@security-management:users.entities.user.actions.create-in-tenant.success.title')\n          .catch(() => 'User Created'),\n        this.translationService\n          .translateAsync(\n            '@security-management:users.entities.user.actions.create-in-tenant.success.description',\n          )\n          .catch(() => 'The user was created and is ready to sign in.'),\n      ]);\n      this.toastService.show({ color: 'success', title: toastTitle, content: toastContent, timeOut: 3000 });\n      return { success: true, kind: 'object', data: result.data };\n    }\n\n    const [toastTitle, fallback] = await Promise.all([\n      this.translationService\n        .translateAsync('@security-management:users.entities.user.actions.create-in-tenant.error.title')\n        .catch(() => 'Create Failed'),\n      this.translationService\n        .translateAsync(\n          '@security-management:users.entities.user.actions.create-in-tenant.error.description',\n        )\n        .catch(() => 'Failed to create user.'),\n    ]);\n    const toastContent =\n      (typeof result?.message?.text === 'string' && result.message.text) || fallback;\n    this.toastService.show({ color: 'danger', title: toastTitle, content: toastContent, timeOut: 4000 });\n    return { success: false, message: { text: toastContent } };\n  }\n\n  /**\n   * Multi-app repeater only for TM → Tenant Users create (ADR D-05 surface).\n   * Security → Users stays current-application only.\n   */\n  private allowsMultiApplicationCreate(actionInput: AXPEntityActionCommandInput): boolean {\n    if (!this.sessionService.isFeatureEnabled(CREATE_MULTI_APPLICATION_FEATURE)) {\n      return false;\n    }\n    const entity = actionInput.entity ?? '';\n    const name = actionInput.entityInfo?.name ?? '';\n    return entity === TENANT_USER_ENTITY || name === TENANT_USER_ENTITY_NAME;\n  }\n\n  private toCreateRemotePayload(\n    form: CreateInTenantFormResult,\n    tenantMembershipCreate: boolean,\n  ): CreateRemotePayload {\n    const base: CreateRemotePayload = {\n      email: form.email,\n      username: form.username,\n      displayName: form.displayName,\n      password: form.password,\n      tenantMembershipCreate,\n    };\n\n    if (!tenantMembershipCreate) {\n      const current = this.sessionService.application?.id?.trim();\n      return {\n        ...base,\n        applicationIds: current ? [current] : undefined,\n        roleIds: form.roleIds,\n      };\n    }\n\n    const assignments = normalizeCreateApplicationRoleAssignments(form.applicationRoleRows);\n    const flat = flattenCreateApplicationRoleAssignments(assignments);\n    return {\n      ...base,\n      applicationIds: flat.applicationIds,\n      roleIds: flat.roleIds.length > 0 ? flat.roleIds : undefined,\n      applicationRoleAssignments: assignments,\n    };\n  }\n\n  private async loadCreateEntitledApplicationOptions(): Promise<EntitledApplicationOption[]> {\n    const result = await this.commandService.executeRemote(\n      AXMSecurityManagementServerCommands.ListTenantEntitledApplications,\n      {},\n    );\n    if (!result?.success) {\n      return [];\n    }\n    const payload = (result as { data?: AXMListTenantEntitledApplicationsResult })?.data;\n    const items = Array.isArray(payload?.items) ? payload.items : [];\n    const locale = this.translationService.getActiveLang?.() ?? 'en-US';\n    return items\n      .map((item) => {\n        const id = String(item?.id ?? '').trim();\n        if (!id) {\n          return null;\n        }\n        const title =\n          resolveMultiLanguageString(item.title as never, locale).trim() || id;\n        return { id, title };\n      })\n      .filter((row): row is EntitledApplicationOption => row != null);\n  }\n\n  private async loadCreateAssignableRoleOptions(applicationId?: string): Promise<CreateRoleOption[]> {\n    const result = await this.commandService.executeRemote(\n      AXMSecurityManagementServerCommands.ListInviteAssignableRoles,\n      applicationId ? { applicationId } : {},\n    );\n    if (!result?.success) {\n      return [];\n    }\n    const payload = (result as { data?: AXMListInviteAssignableRolesResult })?.data;\n    const items = Array.isArray(payload?.items) ? payload.items : [];\n    const locale = this.translationService.getActiveLang?.() ?? 'en-US';\n    return items\n      .map((item) => {\n        const id = String(item?.id ?? '').trim();\n        const appId = String(item?.applicationId ?? '').trim();\n        if (!id || !appId) {\n          return null;\n        }\n        const title =\n          resolveMultiLanguageString(item.title as never, locale).trim() || id;\n        return { id, title, applicationId: appId };\n      })\n      .filter((row): row is CreateRoleOption => row != null);\n  }\n\n  /**\n   * Per-row Application + Roles for create-in-tenant. Duplicate apps allowed in UI;\n   * submit merges via `normalizeCreateApplicationRoleAssignments`.\n   */\n  private buildCreateApplicationRoleRepeaterChildren(\n    entitledApps: EntitledApplicationOption[],\n    roleOptions: CreateRoleOption[],\n  ): Record<string, unknown>[] {\n    return [\n      {\n        type: AXPWidgetsList.Layouts.FlexLayout,\n        mode: 'edit' as const,\n        options: {\n          flexDirection: 'row',\n          gap: '12px',\n          alignItems: 'flex-end',\n          wrap: 'nowrap',\n        },\n        children: [\n          {\n            type: AXPWidgetsList.Layouts.FlexItemLayout,\n            mode: 'edit' as const,\n            options: { grow: '1', shrink: '1', basis: '0' },\n            children: [\n              {\n                type: AXPWidgetsList.Layouts.FormField,\n                mode: 'edit' as const,\n                options: {\n                  label:\n                    '@security-management:users.entities.user.actions.create-in-tenant.fields.application',\n                  showLabel: true,\n                },\n                children: [\n                  {\n                    type: AXPWidgetsList.Editors.SelectBox,\n                    mode: 'edit' as const,\n                    path: 'applicationId',\n                    name: 'applicationId',\n                    options: {\n                      dataSource: entitledApps,\n                      valueField: 'id',\n                      textField: 'title',\n                      allowSearch: true,\n                      validations: [{ rule: 'required' }],\n                    },\n                  },\n                ],\n              },\n            ],\n          },\n          {\n            type: AXPWidgetsList.Layouts.FlexItemLayout,\n            mode: 'edit' as const,\n            options: { grow: '1', shrink: '1', basis: '0' },\n            children: [\n              {\n                type: AXPWidgetsList.Layouts.FormField,\n                mode: 'edit' as const,\n                options: {\n                  label:\n                    '@security-management:users.entities.user.actions.create-in-tenant.fields.roles',\n                  showLabel: true,\n                },\n                children: [\n                  {\n                    type: AXPWidgetsList.Editors.SelectBox,\n                    mode: 'edit' as const,\n                    path: 'roleIds',\n                    name: 'roleIds',\n                    options: {\n                      dataSource: roleOptions,\n                      valueField: 'id',\n                      textField: 'title',\n                      multiple: true,\n                      allowSearch: true,\n                      disabled: \"{{ !context.eval('>applicationId') }}\",\n                      filter: {\n                        field: 'applicationId',\n                        operator: { type: 'equal' },\n                        value: \"{{ context.eval('>applicationId') }}\",\n                      },\n                    },\n                    triggers: [\n                      {\n                        event: \"{{ events.context('>applicationId') }}\",\n                        action: '{{ widget.setValue([]); widget.refresh(); }}',\n                      },\n                    ],\n                  },\n                ],\n              },\n            ],\n          },\n        ],\n      },\n    ];\n  }\n\n  private async openCreateDialog(\n    actionInput: AXPEntityActionCommandInput,\n  ): Promise<CreateInTenantFormResult | null> {\n    const multiApp = this.allowsMultiApplicationCreate(actionInput);\n    const [entitledApps, createRoleOptions, productRoleOptions] = await Promise.all([\n      multiApp\n        ? this.loadCreateEntitledApplicationOptions()\n        : Promise.resolve([] as EntitledApplicationOption[]),\n      multiApp\n        ? this.loadCreateAssignableRoleOptions()\n        : Promise.resolve([] as CreateRoleOption[]),\n      multiApp\n        ? Promise.resolve([] as UserRoleOption[])\n        : this.userRoleGrantService.listInviteRoleOptions('application'),\n    ]);\n    const appsWithRoles = new Set(createRoleOptions.map((row) => row.applicationId));\n    const selectableApps =\n      appsWithRoles.size > 0\n        ? entitledApps.filter((app) => appsWithRoles.has(app.id))\n        : entitledApps;\n\n    const result = await this.layoutBuilder\n      .create()\n      .dialog<CreateInTenantFormResult | null>((dialog) => {\n        dialog\n          .setTitle('@security-management:users.entities.user.actions.create-in-tenant.dialog.title')\n          .setSize(multiApp ? 'lg' : 'md')\n          .setCloseButton(true)\n          .setContext(\n            multiApp\n              ? {\n                  email: '',\n                  username: '',\n                  displayName: '',\n                  password: '',\n                  applicationRoleRows: [{ applicationId: '', roleIds: [] }],\n                }\n              : {\n                  email: '',\n                  username: '',\n                  displayName: '',\n                  password: '',\n                  roleIds: [],\n                },\n          )\n          .content((flex) => {\n            flex\n              .setDirection('column')\n              .setGap('12px')\n              .formField(\n                '@security-management:users.entities.user.actions.create-in-tenant.fields.email',\n                (field) => {\n                  field.path('email');\n                  field.textBox({ validations: [{ rule: 'email' }] });\n                },\n              )\n              .formField(\n                '@security-management:users.entities.user.actions.create-in-tenant.fields.username',\n                (field) => {\n                  field.path('username');\n                  field.textBox({});\n                },\n              )\n              .formField(\n                '@security-management:users.entities.user.actions.create-in-tenant.fields.display-name',\n                (field) => {\n                  field.path('displayName');\n                  field.textBox({});\n                },\n              )\n              .formField(\n                '@security-management:users.entities.user.actions.create-in-tenant.fields.password',\n                (field) => {\n                  field.path('password');\n                  field.passwordBox({\n                    revealToggle: true,\n                    validations: [{ rule: 'required' }, { rule: 'minLength', options: { value: 6 } }],\n                  });\n                },\n              );\n\n            if (multiApp) {\n              flex.formField(\n                '@security-management:users.entities.user.actions.create-in-tenant.fields.application-roles',\n                (field) => {\n                  field.path('applicationRoleRows');\n                  field.setShowLabel(true);\n                  field.customWidget(AXPWidgetsList.Layouts.RepeaterLayout, {\n                    hasControls: true,\n                    inlineAddControl: true,\n                    defaultItem: { applicationId: '', roleIds: [] },\n                    children: this.buildCreateApplicationRoleRepeaterChildren(\n                      selectableApps,\n                      createRoleOptions,\n                    ),\n                  });\n                },\n              );\n            } else {\n              flex.formField(\n                '@security-management:users.entities.user.actions.create-in-tenant.fields.roles',\n                (field) => {\n                  field.path('roleIds');\n                  field.selectBox({\n                    dataSource: productRoleOptions as UserRoleOption[],\n                    valueField: 'id',\n                    textField: 'title',\n                    multiple: true,\n                    validations: [{ rule: 'required' }],\n                  });\n                },\n              );\n            }\n          })\n          .setActions((actions) => {\n            actions.cancel('@general:actions.cancel.title');\n            actions.submit(\n              '@security-management:users.entities.user.actions.create-in-tenant.dialog.submit',\n            );\n          })\n          .onAction(async (dialogRef) => {\n            if (dialogRef.action() === 'cancel') {\n              return null;\n            }\n            const ctx = dialogRef.context() as CreateInTenantFormResult;\n            const email = (ctx.email ?? '').trim() || undefined;\n            const username = (ctx.username ?? '').trim() || undefined;\n            if (!email && !username) {\n              throw new Error(\n                '@security-management:users.entities.user.actions.create-in-tenant.errors.identity-required',\n              );\n            }\n\n            if (multiApp) {\n              const assignments = normalizeCreateApplicationRoleAssignments(ctx.applicationRoleRows);\n              if (assignments.length === 0) {\n                throw new Error(\n                  '@security-management:users.entities.user.actions.create-in-tenant.errors.application-required',\n                );\n              }\n              if (assignments.some((row) => row.roleIds.length === 0)) {\n                throw new Error(\n                  '@security-management:users.entities.user.actions.create-in-tenant.errors.roles-required',\n                );\n              }\n              return {\n                email,\n                username,\n                displayName: (ctx.displayName ?? '').trim() || undefined,\n                password: (ctx.password ?? '').trim() || undefined,\n                applicationRoleRows: assignments,\n              };\n            }\n\n            const roleIds = Array.isArray(ctx.roleIds)\n              ? [...new Set(ctx.roleIds.map((id) => String(id).trim()).filter(Boolean))]\n              : [];\n            if (roleIds.length === 0) {\n              throw new Error(\n                '@security-management:users.entities.user.actions.create-in-tenant.errors.roles-required',\n              );\n            }\n            return {\n              email,\n              username,\n              displayName: (ctx.displayName ?? '').trim() || undefined,\n              password: (ctx.password ?? '').trim() || undefined,\n              roleIds,\n            };\n          });\n      })\n      .show();\n\n    return resolveLayoutBuilderDialogResult<CreateInTenantFormResult>(result);\n  }\n}\n\nexport { AXM_USER_CREATE_IN_TENANT_COMMAND };\n\n//#endregion\n"],"names":[],"mappings":";;;;;;;;;;;;;AAkEA;AACA,MAAM,gCAAgC,GAAG,iDAAiD;AAE1F;AACA,MAAM,kBAAkB,GAAG,6BAA6B;AACxD,MAAM,uBAAuB,GAAG,YAAY;AAE5C;AAEA;MAGa,4BAA4B,CAAA;AADzC,IAAA,WAAA,GAAA;AAEmB,QAAA,IAAA,CAAA,aAAa,GAAG,MAAM,CAAC,uBAAuB,CAAC;AAC/C,QAAA,IAAA,CAAA,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC;AAC1C,QAAA,IAAA,CAAA,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC;AACrC,QAAA,IAAA,CAAA,kBAAkB,GAAG,MAAM,CAAC,oBAAoB,CAAC;AACjD,QAAA,IAAA,CAAA,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC;AAC1C,QAAA,IAAA,CAAA,oBAAoB,GAAG,MAAM,CAAC,uBAAuB,CAAC;AA+ZxE,IAAA;IA7ZC,MAAM,OAAO,CAAC,KAAe,EAAA;AAC3B,QAAA,MAAM,WAAW,GAAG,+BAA+B,CAAC,KAAK,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE;AACT,YAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE;QAC1E;QAEA,MAAM,sBAAsB,GAAG,IAAI,CAAC,4BAA4B,CAAC,WAAW,CAAC;QAC7E,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,sBAAsB,CAAC;;AAG9E,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CACpD,mCAAmC,CAAC,kBAAkB,EACtD,aAAa,CACd;AAED,QAAA,IAAI,MAAM,EAAE,OAAO,EAAE;YACnB,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AACnD,gBAAA,IAAI,CAAC;qBACF,cAAc,CAAC,iFAAiF;AAChG,qBAAA,KAAK,CAAC,MAAM,cAAc,CAAC;AAC9B,gBAAA,IAAI,CAAC;qBACF,cAAc,CACb,uFAAuF;AAExF,qBAAA,KAAK,CAAC,MAAM,+CAA+C,CAAC;AAChE,aAAA,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACrG,YAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;QAC7D;QAEA,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAC/C,YAAA,IAAI,CAAC;iBACF,cAAc,CAAC,+EAA+E;AAC9F,iBAAA,KAAK,CAAC,MAAM,eAAe,CAAC;AAC/B,YAAA,IAAI,CAAC;iBACF,cAAc,CACb,qFAAqF;AAEtF,iBAAA,KAAK,CAAC,MAAM,wBAAwB,CAAC;AACzC,SAAA,CAAC;QACF,MAAM,YAAY,GAChB,CAAC,OAAO,MAAM,EAAE,OAAO,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACpG,QAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;IAC5D;AAEA;;;AAGG;AACK,IAAA,4BAA4B,CAAC,WAAwC,EAAA;QAC3E,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,EAAE;AAC3E,YAAA,OAAO,KAAK;QACd;AACA,QAAA,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,EAAE;QACvC,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE;AAC/C,QAAA,OAAO,MAAM,KAAK,kBAAkB,IAAI,IAAI,KAAK,uBAAuB;IAC1E;IAEQ,qBAAqB,CAC3B,IAA8B,EAC9B,sBAA+B,EAAA;AAE/B,QAAA,MAAM,IAAI,GAAwB;YAChC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,sBAAsB;SACvB;QAED,IAAI,CAAC,sBAAsB,EAAE;AAC3B,YAAA,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE;YAC3D,OAAO;AACL,gBAAA,GAAG,IAAI;gBACP,cAAc,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,SAAS;gBAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB;QACH;QAEA,MAAM,WAAW,GAAG,yCAAyC,CAAC,IAAI,CAAC,mBAAmB,CAAC;AACvF,QAAA,MAAM,IAAI,GAAG,uCAAuC,CAAC,WAAW,CAAC;QACjE,OAAO;AACL,YAAA,GAAG,IAAI;YACP,cAAc,EAAE,IAAI,CAAC,cAAc;AACnC,YAAA,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,SAAS;AAC3D,YAAA,0BAA0B,EAAE,WAAW;SACxC;IACH;AAEQ,IAAA,MAAM,oCAAoC,GAAA;AAChD,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CACpD,mCAAmC,CAAC,8BAA8B,EAClE,EAAE,CACH;AACD,QAAA,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE;AACpB,YAAA,OAAO,EAAE;QACX;AACA,QAAA,MAAM,OAAO,GAAI,MAA6D,EAAE,IAAI;QACpF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,IAAI,IAAI,OAAO;AACnE,QAAA,OAAO;AACJ,aAAA,GAAG,CAAC,CAAC,IAAI,KAAI;AACZ,YAAA,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACxC,IAAI,CAAC,EAAE,EAAE;AACP,gBAAA,OAAO,IAAI;YACb;AACA,YAAA,MAAM,KAAK,GACT,0BAA0B,CAAC,IAAI,CAAC,KAAc,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE;AACtE,YAAA,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE;AACtB,QAAA,CAAC;aACA,MAAM,CAAC,CAAC,GAAG,KAAuC,GAAG,IAAI,IAAI,CAAC;IACnE;IAEQ,MAAM,+BAA+B,CAAC,aAAsB,EAAA;QAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CACpD,mCAAmC,CAAC,yBAAyB,EAC7D,aAAa,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,CACvC;AACD,QAAA,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE;AACpB,YAAA,OAAO,EAAE;QACX;AACA,QAAA,MAAM,OAAO,GAAI,MAAwD,EAAE,IAAI;QAC/E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,IAAI,IAAI,OAAO;AACnE,QAAA,OAAO;AACJ,aAAA,GAAG,CAAC,CAAC,IAAI,KAAI;AACZ,YAAA,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;AACxC,YAAA,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;AACtD,YAAA,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE;AACjB,gBAAA,OAAO,IAAI;YACb;AACA,YAAA,MAAM,KAAK,GACT,0BAA0B,CAAC,IAAI,CAAC,KAAc,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE;YACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;AAC5C,QAAA,CAAC;aACA,MAAM,CAAC,CAAC,GAAG,KAA8B,GAAG,IAAI,IAAI,CAAC;IAC1D;AAEA;;;AAGG;IACK,0CAA0C,CAChD,YAAyC,EACzC,WAA+B,EAAA;QAE/B,OAAO;AACL,YAAA;AACE,gBAAA,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,UAAU;AACvC,gBAAA,IAAI,EAAE,MAAe;AACrB,gBAAA,OAAO,EAAE;AACP,oBAAA,aAAa,EAAE,KAAK;AACpB,oBAAA,GAAG,EAAE,MAAM;AACX,oBAAA,UAAU,EAAE,UAAU;AACtB,oBAAA,IAAI,EAAE,QAAQ;AACf,iBAAA;AACD,gBAAA,QAAQ,EAAE;AACR,oBAAA;AACE,wBAAA,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,cAAc;AAC3C,wBAAA,IAAI,EAAE,MAAe;AACrB,wBAAA,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;AAC/C,wBAAA,QAAQ,EAAE;AACR,4BAAA;AACE,gCAAA,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,SAAS;AACtC,gCAAA,IAAI,EAAE,MAAe;AACrB,gCAAA,OAAO,EAAE;AACP,oCAAA,KAAK,EACH,sFAAsF;AACxF,oCAAA,SAAS,EAAE,IAAI;AAChB,iCAAA;AACD,gCAAA,QAAQ,EAAE;AACR,oCAAA;AACE,wCAAA,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,SAAS;AACtC,wCAAA,IAAI,EAAE,MAAe;AACrB,wCAAA,IAAI,EAAE,eAAe;AACrB,wCAAA,IAAI,EAAE,eAAe;AACrB,wCAAA,OAAO,EAAE;AACP,4CAAA,UAAU,EAAE,YAAY;AACxB,4CAAA,UAAU,EAAE,IAAI;AAChB,4CAAA,SAAS,EAAE,OAAO;AAClB,4CAAA,WAAW,EAAE,IAAI;AACjB,4CAAA,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACpC,yCAAA;AACF,qCAAA;AACF,iCAAA;AACF,6BAAA;AACF,yBAAA;AACF,qBAAA;AACD,oBAAA;AACE,wBAAA,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,cAAc;AAC3C,wBAAA,IAAI,EAAE,MAAe;AACrB,wBAAA,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;AAC/C,wBAAA,QAAQ,EAAE;AACR,4BAAA;AACE,gCAAA,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,SAAS;AACtC,gCAAA,IAAI,EAAE,MAAe;AACrB,gCAAA,OAAO,EAAE;AACP,oCAAA,KAAK,EACH,gFAAgF;AAClF,oCAAA,SAAS,EAAE,IAAI;AAChB,iCAAA;AACD,gCAAA,QAAQ,EAAE;AACR,oCAAA;AACE,wCAAA,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,SAAS;AACtC,wCAAA,IAAI,EAAE,MAAe;AACrB,wCAAA,IAAI,EAAE,SAAS;AACf,wCAAA,IAAI,EAAE,SAAS;AACf,wCAAA,OAAO,EAAE;AACP,4CAAA,UAAU,EAAE,WAAW;AACvB,4CAAA,UAAU,EAAE,IAAI;AAChB,4CAAA,SAAS,EAAE,OAAO;AAClB,4CAAA,QAAQ,EAAE,IAAI;AACd,4CAAA,WAAW,EAAE,IAAI;AACjB,4CAAA,QAAQ,EAAE,uCAAuC;AACjD,4CAAA,MAAM,EAAE;AACN,gDAAA,KAAK,EAAE,eAAe;AACtB,gDAAA,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;AAC3B,gDAAA,KAAK,EAAE,sCAAsC;AAC9C,6CAAA;AACF,yCAAA;AACD,wCAAA,QAAQ,EAAE;AACR,4CAAA;AACE,gDAAA,KAAK,EAAE,wCAAwC;AAC/C,gDAAA,MAAM,EAAE,8CAA8C;AACvD,6CAAA;AACF,yCAAA;AACF,qCAAA;AACF,iCAAA;AACF,6BAAA;AACF,yBAAA;AACF,qBAAA;AACF,iBAAA;AACF,aAAA;SACF;IACH;IAEQ,MAAM,gBAAgB,CAC5B,WAAwC,EAAA;QAExC,MAAM,QAAQ,GAAG,IAAI,CAAC,4BAA4B,CAAC,WAAW,CAAC;AAC/D,QAAA,MAAM,CAAC,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9E;AACE,kBAAE,IAAI,CAAC,oCAAoC;AAC3C,kBAAE,OAAO,CAAC,OAAO,CAAC,EAAiC,CAAC;YACtD;AACE,kBAAE,IAAI,CAAC,+BAA+B;AACtC,kBAAE,OAAO,CAAC,OAAO,CAAC,EAAwB,CAAC;YAC7C;AACE,kBAAE,OAAO,CAAC,OAAO,CAAC,EAAsB;kBACtC,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,aAAa,CAAC;AACnE,SAAA,CAAC;AACF,QAAA,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,aAAa,CAAC,CAAC;AAChF,QAAA,MAAM,cAAc,GAClB,aAAa,CAAC,IAAI,GAAG;AACnB,cAAE,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;cACtD,YAAY;AAElB,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;AACvB,aAAA,MAAM;AACN,aAAA,MAAM,CAAkC,CAAC,MAAM,KAAI;YAClD;iBACG,QAAQ,CAAC,gFAAgF;iBACzF,OAAO,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI;iBAC9B,cAAc,CAAC,IAAI;AACnB,iBAAA,UAAU,CACT;AACE,kBAAE;AACE,oBAAA,KAAK,EAAE,EAAE;AACT,oBAAA,QAAQ,EAAE,EAAE;AACZ,oBAAA,WAAW,EAAE,EAAE;AACf,oBAAA,QAAQ,EAAE,EAAE;oBACZ,mBAAmB,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAC1D;AACH,kBAAE;AACE,oBAAA,KAAK,EAAE,EAAE;AACT,oBAAA,QAAQ,EAAE,EAAE;AACZ,oBAAA,WAAW,EAAE,EAAE;AACf,oBAAA,QAAQ,EAAE,EAAE;AACZ,oBAAA,OAAO,EAAE,EAAE;iBACZ;AAEN,iBAAA,OAAO,CAAC,CAAC,IAAI,KAAI;gBAChB;qBACG,YAAY,CAAC,QAAQ;qBACrB,MAAM,CAAC,MAAM;AACb,qBAAA,SAAS,CACR,gFAAgF,EAChF,CAAC,KAAK,KAAI;AACR,oBAAA,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;AACnB,oBAAA,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACrD,gBAAA,CAAC;AAEF,qBAAA,SAAS,CACR,mFAAmF,EACnF,CAAC,KAAK,KAAI;AACR,oBAAA,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;AACtB,oBAAA,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AACnB,gBAAA,CAAC;AAEF,qBAAA,SAAS,CACR,uFAAuF,EACvF,CAAC,KAAK,KAAI;AACR,oBAAA,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;AACzB,oBAAA,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AACnB,gBAAA,CAAC;AAEF,qBAAA,SAAS,CACR,mFAAmF,EACnF,CAAC,KAAK,KAAI;AACR,oBAAA,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;oBACtB,KAAK,CAAC,WAAW,CAAC;AAChB,wBAAA,YAAY,EAAE,IAAI;wBAClB,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;AAClF,qBAAA,CAAC;AACJ,gBAAA,CAAC,CACF;gBAEH,IAAI,QAAQ,EAAE;oBACZ,IAAI,CAAC,SAAS,CACZ,4FAA4F,EAC5F,CAAC,KAAK,KAAI;AACR,wBAAA,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC;AACjC,wBAAA,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC;wBACxB,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE;AACxD,4BAAA,WAAW,EAAE,IAAI;AACjB,4BAAA,gBAAgB,EAAE,IAAI;4BACtB,WAAW,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;4BAC/C,QAAQ,EAAE,IAAI,CAAC,0CAA0C,CACvD,cAAc,EACd,iBAAiB,CAClB;AACF,yBAAA,CAAC;AACJ,oBAAA,CAAC,CACF;gBACH;qBAAO;oBACL,IAAI,CAAC,SAAS,CACZ,gFAAgF,EAChF,CAAC,KAAK,KAAI;AACR,wBAAA,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;wBACrB,KAAK,CAAC,SAAS,CAAC;AACd,4BAAA,UAAU,EAAE,kBAAsC;AAClD,4BAAA,UAAU,EAAE,IAAI;AAChB,4BAAA,SAAS,EAAE,OAAO;AAClB,4BAAA,QAAQ,EAAE,IAAI;AACd,4BAAA,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACpC,yBAAA,CAAC;AACJ,oBAAA,CAAC,CACF;gBACH;AACF,YAAA,CAAC;AACA,iBAAA,UAAU,CAAC,CAAC,OAAO,KAAI;AACtB,gBAAA,OAAO,CAAC,MAAM,CAAC,+BAA+B,CAAC;AAC/C,gBAAA,OAAO,CAAC,MAAM,CACZ,iFAAiF,CAClF;AACH,YAAA,CAAC;AACA,iBAAA,QAAQ,CAAC,OAAO,SAAS,KAAI;AAC5B,gBAAA,IAAI,SAAS,CAAC,MAAM,EAAE,KAAK,QAAQ,EAAE;AACnC,oBAAA,OAAO,IAAI;gBACb;AACA,gBAAA,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAA8B;AAC3D,gBAAA,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS;AACnD,gBAAA,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS;AACzD,gBAAA,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE;AACvB,oBAAA,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F;gBACH;gBAEA,IAAI,QAAQ,EAAE;oBACZ,MAAM,WAAW,GAAG,yCAAyC,CAAC,GAAG,CAAC,mBAAmB,CAAC;AACtF,oBAAA,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE;AAC5B,wBAAA,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG;oBACH;AACA,oBAAA,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE;AACvD,wBAAA,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F;oBACH;oBACA,OAAO;wBACL,KAAK;wBACL,QAAQ;AACR,wBAAA,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS;AACxD,wBAAA,QAAQ,EAAE,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS;AAClD,wBAAA,mBAAmB,EAAE,WAAW;qBACjC;gBACH;gBAEA,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO;AACvC,sBAAE,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;sBACvE,EAAE;AACN,gBAAA,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;AACxB,oBAAA,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F;gBACH;gBACA,OAAO;oBACL,KAAK;oBACL,QAAQ;AACR,oBAAA,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS;AACxD,oBAAA,QAAQ,EAAE,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS;oBAClD,OAAO;iBACR;AACH,YAAA,CAAC,CAAC;AACN,QAAA,CAAC;AACA,aAAA,IAAI,EAAE;AAET,QAAA,OAAO,gCAAgC,CAA2B,MAAM,CAAC;IAC3E;8GApaW,4BAA4B,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAA5B,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,4BAA4B,cADf,MAAM,EAAA,CAAA,CAAA;;2FACnB,4BAA4B,EAAA,UAAA,EAAA,CAAA;kBADxC,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;"}

package/fesm2022/{acorex-platform-module-security-management-client-index-DKk9lEIl.mjs → acorex-platform-module-security-management-client-index-B6qo6qLT.mjs}

@@ -8,164 +8,13 @@ import * as i12 from '@acorex/core/translation';
 import { AXTranslationModule } from '@acorex/core/translation';
 import { AsyncPipe } from '@angular/common';
 import * as i0 from '@angular/core';
-import { inject, Injectable, input, signal, computed, effect, untracked, ChangeDetectionStrategy, Component } from '@angular/core';
+import { input, inject, signal, computed, effect, untracked, ChangeDetectionStrategy, Component, Injectable } from '@angular/core';
 import * as i2 from '@angular/forms';
 import { FormsModule } from '@angular/forms';
 import { isEqual } from 'lodash-es';
-import { r as resolvePersistedEntityId } from './acorex-platform-module-security-management-client-acorex-platform-module-security-management-client-BSGZRsGz.mjs';
-import { AXPSessionService } from '@acorex-platform/framework-client/auth';
-import { AXPEntityBroadcastService } from '@acorex-platform/framework-client/core';
-import { AXPEntityDefinitionRegistryService, AXPEntityService, dispatchEntityModifiedSideEffects } from '@acorex-platform/framework-client/layout/entity';
-import { RootConfig, USER_ROLES_PAGE_COMPONENT_KEY } from '@acorex-platform/module-security-management-client/contracts';
-
-//#region ----- Imports -----
-//#endregion
-//#region ----- Service -----
-/**
- * Loads and persists scoped UserRole assignments for a user.
- * Shared by the User roles detail page.
- */
-class AXMUserRoleGrantService {
-    constructor() {
-        //#region ----- Services & Dependencies -----
-        this.entityRegistry = inject(AXPEntityDefinitionRegistryService);
-        this.entityService = inject(AXPEntityService);
-        this.sessionService = inject(AXPSessionService);
-        this.entityEvents = inject(AXPEntityBroadcastService);
-    }
-    //#endregion
-    //#region ----- Scope -----
-    resolveSessionScope() {
-        const tenantId = this.sessionService.tenant?.id;
-        if (!tenantId) {
-            return null;
-        }
-        return {
-            tenantId,
-            applicationId: this.sessionService.application?.id,
-        };
-    }
-    //#endregion
-    //#region ----- Query -----
-    userRoleData() {
-        return this.entityService
-            .withEntity(RootConfig.module.name, RootConfig.entities.userRole.name)
-            .data();
-    }
-    /**
-     * Roles available to assign in the current workspace.
-     * Also loads any already-assigned role ids that list queries hide (`stateInfo.isHidden`).
-     */
-    async listRoleOptions(includeRoleIds = []) {
-        const roleData = this.entityService
-            .withEntity(RootConfig.module.name, RootConfig.entities.roles.name)
-            .data();
-        const result = await roleData.query({
-            skip: 0,
-            take: 500,
-        });
-        const byId = new Map();
-        const items = (result?.items ?? []);
-        for (const item of items) {
-            const id = String(item['id'] ?? '');
-            if (!id) {
-                continue;
-            }
-            byId.set(id, {
-                id,
-                title: String(item['title'] ?? item['name'] ?? ''),
-                name: typeof item['name'] === 'string' ? item['name'] : undefined,
-            });
-        }
-        const missingIds = includeRoleIds.filter((id) => id && !byId.has(id));
-        await Promise.all(missingIds.map(async (id) => {
-            try {
-                const row = (await roleData.byKey(id));
-                if (!row?.['id']) {
-                    return;
-                }
-                byId.set(String(row['id']), {
-                    id: String(row['id']),
-                    title: String(row['title'] ?? row['name'] ?? row['id']),
-                    name: typeof row['name'] === 'string' ? row['name'] : undefined,
-                });
-            }
-            catch {
-                /* role missing or inaccessible */
-            }
-        }));
-        return [...byId.values()].sort((a, b) => a.title.localeCompare(b.title));
-    }
-    async findGrant(userId, tenantId, applicationId) {
-        const result = await this.userRoleData().query({
-            skip: 0,
-            take: 50,
-            filter: {
-                logic: 'and',
-                filters: [
-                    { field: 'userId', operator: { type: 'equal' }, value: userId },
-                    { field: 'scopeInfo.tenantId', operator: { type: 'equal' }, value: tenantId },
-                ],
-            },
-        });
-        const items = (result?.items ?? []);
-        if (items.length === 0) {
-            return null;
-        }
-        if (applicationId) {
-            const appMatch = items.find((item) => item.scopeInfo?.applicationId === applicationId);
-            if (appMatch) {
-                return appMatch;
-            }
-        }
-        const tenantWide = items.find((item) => !item.scopeInfo?.applicationId);
-        return tenantWide ?? items[0] ?? null;
-    }
-    //#endregion
-    //#region ----- Persist -----
-    async saveGrant(options) {
-        const existingState = options.existing?.stateInfo;
-        if (existingState?.isSystem === true || existingState?.isImmutable === true) {
-            throw new Error('System user role grants are readonly.');
-        }
-        const entityKey = `${RootConfig.module.name}.${RootConfig.entities.userRole.name}`;
-        const [moduleName, entityName] = entityKey.split('.');
-        const entityRef = await this.entityRegistry.resolve(moduleName, entityName);
-        const scopeInfo = {
-            tenantId: options.tenantId,
-            ...(options.existing?.scopeInfo?.applicationId
-                ? { applicationId: options.existing.scopeInfo.applicationId }
-                : options.applicationId
-                    ? { applicationId: options.applicationId }
-                    : {}),
-        };
-        if (options.existing?.id) {
-            const updatePayload = {
-                ...options.existing,
-                userId: options.userId,
-                roleIds: options.roleIds,
-                scopeInfo,
-            };
-            return (entityRef.commands?.update?.execute)(updatePayload);
-        }
-        const createPayload = {
-            userId: options.userId,
-            roleIds: options.roleIds,
-            scopeInfo,
-        };
-        return (entityRef.commands?.create?.execute)(createPayload);
-    }
-    notifyGrantModified(saved) {
-        const entityKey = `${RootConfig.module.name}.${RootConfig.entities.userRole.name}`;
-        dispatchEntityModifiedSideEffects(this.entityEvents, entityKey, saved);
-    }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.0.8", ngImport: i0, type: AXMUserRoleGrantService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
-    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "22.0.8", ngImport: i0, type: AXMUserRoleGrantService, providedIn: 'root' }); }
-}
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.8", ngImport: i0, type: AXMUserRoleGrantService, decorators: [{
-            type: Injectable,
-            args: [{ providedIn: 'root' }]
-        }] });
+import { r as resolvePersistedEntityId } from './acorex-platform-module-security-management-client-acorex-platform-module-security-management-client-B61j_cJF.mjs';
+import { A as AXMUserRoleGrantService } from './acorex-platform-module-security-management-client-user-role-grant.service-6U17jzjq.mjs';
+import { USER_ROLES_PAGE_COMPONENT_KEY } from '@acorex-platform/module-security-management-client/contracts';
 
 //#endregion
 //#region ----- Constants -----
@@ -459,4 +308,4 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.8", ngImpor
         }] });
 
 export { AXMUserRolesPageComponent, AXMUserRolesPageComponentProvider };
-//# sourceMappingURL=acorex-platform-module-security-management-client-index-DKk9lEIl.mjs.map
+//# sourceMappingURL=acorex-platform-module-security-management-client-index-B6qo6qLT.mjs.map