@acorex/modules 21.0.0-next.37 → 21.0.0-next.40

package/fesm2022/acorex-modules-security-management.mjs

@@ -1,17 +1,16 @@
 import { AXMDeviceSessionsService, AXMDeviceSessionsServiceImpl } from '@acorex/modules/auth';
-import { createAllQueryView, AXPEntityCommandScope, AXPEntityQueryType, AXPSearchCommandProvider, createEntitySearchCommand, AXPRefreshEvent, AXP_MENU_PROVIDER, AXP_SEARCH_PROVIDER } from '@acorex/platform/common';
+import { createAllQueryView, AXPEntityCommandScope, AXPEntityQueryType, AXPStatusProvider, AXPSearchCommandProvider, createEntitySearchCommand, AXPRefreshEvent, AXPSystemStatusType, AXP_MENU_PROVIDER, AXP_SEARCH_PROVIDER, AXP_STATUS_PROVIDERS } from '@acorex/platform/common';
 import { entityMasterCrudActions, entityMasterRecordActions, AXMEntityCrudServiceImpl, AXPEntityService, AXPEntityDefinitionRegistryService, AXP_ENTITY_DEFINITION_LOADER } from '@acorex/platform/layout/entity';
 import { AXPWidgetsCatalog, AXPWidgetGroupEnum, AXPWidgetCoreModule, AXP_WIDGET_DEFINITION_PROVIDER, AXPValueWidgetComponent, AXPColumnWidgetComponent } from '@acorex/platform/layout/widget-core';
 import * as i0 from '@angular/core';
 import { NgModule, Injectable, inject, Injector, signal, input, output, computed, ViewEncapsulation, Component, ViewChild, effect, ChangeDetectionStrategy } from '@angular/core';
-import { AXDataSource } from '@acorex/cdk/common';
-import { applyFilterArray, applySortArray, applyPagination, AXP_EXPRESSION_EVALUATOR_SCOPE_PROVIDER, AXP_MODULE_MANIFEST_PROVIDER, AXP_FEATURE_DEFINITION_PROVIDER } from '@acorex/platform/core';
+import { statusPlugin, AXPWidgetsList, AXPCommonMenuKeys } from '@acorex/modules/common';
+import { AXP_EXPRESSION_EVALUATOR_SCOPE_PROVIDER, AXP_MODULE_MANIFEST_PROVIDER, AXP_FEATURE_DEFINITION_PROVIDER } from '@acorex/platform/core';
 import { AXPSessionService, AXP_PERMISSION_DEFINITION_PROVIDER, AXPPermissionDefinitionService } from '@acorex/platform/auth';
 import { AXP_USER_AVATAR_PROVIDER, AXPThemeLayoutBlockComponent, AXPStateMessageComponent } from '@acorex/platform/layout/components';
 import { provideCommandSetups } from '@acorex/platform/runtime';
 import * as i1 from '@acorex/platform/workflow';
 import { AXPWorkflowAction, AXPWorkflowModule, createWorkFlowEvent, AXPWorkflowService } from '@acorex/platform/workflow';
-import { AXPWidgetsList, AXPCommonMenuKeys } from '@acorex/modules/common';
 import { AXPopupService } from '@acorex/components/popup';
 import * as i8 from '@acorex/core/translation';
 import { AXTranslationService, AXTranslationModule } from '@acorex/core/translation';
@@ -1182,24 +1181,197 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImpor
                 }]
         }] });
 
+//#region ---- User access state ----
+/**
+ * Read-only sign-in gate from the authentication layer (distinct from account `accountState`).
+ * Persisted as the enum string value (e.g. `allowed`).
+ */
+var AXMUserAccessState;
+(function (AXMUserAccessState) {
+    AXMUserAccessState["Allowed"] = "allowed";
+    AXMUserAccessState["Blocked"] = "blocked";
+    AXMUserAccessState["Expired"] = "expired";
+})(AXMUserAccessState || (AXMUserAccessState = {}));
+//#endregion
+
+//#region ---- User effective (unified) state ----
+/**
+ * Single operational state derived from account lifecycle and sign-in gate (persisted snapshot in mock/backend).
+ */
+var AXMUserEffectiveState;
+(function (AXMUserEffectiveState) {
+    AXMUserEffectiveState["Pending"] = "pending";
+    AXMUserEffectiveState["Active"] = "active";
+    AXMUserEffectiveState["Suspended"] = "suspended";
+    AXMUserEffectiveState["Inactive"] = "inactive";
+    AXMUserEffectiveState["Archived"] = "archived";
+    AXMUserEffectiveState["SignInBlocked"] = "sign-in-blocked";
+    AXMUserEffectiveState["CredentialExpired"] = "credential-expired";
+})(AXMUserEffectiveState || (AXMUserEffectiveState = {}));
+//#endregion
+
+//#region ---- Imports ----
+//#endregion
+//#region ---- Definition key ----
+/** Status provider key for `accessState` on SecurityManagement.User (transitions define editable paths in the status UI). */
+const AXM_USER_ACCESS_STATE_DEFINITION_KEY = 'security-management.access-state.user';
+//#endregion
+//#region ---- User access state provider ----
+/**
+ * Sign-in readiness from the authentication subsystem (distinct from account lifecycle / `accountState`).
+ * Transitions listed here are the only paths offered in the status UI and validated when executing a status change command.
+ */
+class AXMUserAccessStateProvider extends AXPStatusProvider {
+    constructor() {
+        super(...arguments);
+        this.key = AXM_USER_ACCESS_STATE_DEFINITION_KEY;
+        this.defaultStatus = AXMUserAccessState.Allowed;
+        this.statuses = [
+            {
+                name: AXMUserAccessState.Allowed,
+                title: '@security-management:users.entities.user.access.states.allowed',
+                description: '@security-management:users.entities.user.access.descriptions.allowed',
+                icon: 'fa-light fa-circle-check',
+                color: 'success',
+                order: 1,
+                isInitial: true,
+                isFinal: false,
+            },
+            {
+                name: AXMUserAccessState.Blocked,
+                title: '@security-management:users.entities.user.access.states.blocked',
+                description: '@security-management:users.entities.user.access.descriptions.blocked',
+                icon: 'fa-light fa-ban',
+                color: 'danger',
+                order: 2,
+                isInitial: false,
+                isFinal: false,
+            },
+            {
+                name: AXMUserAccessState.Expired,
+                title: '@security-management:users.entities.user.access.states.expired',
+                description: '@security-management:users.entities.user.access.descriptions.expired',
+                icon: 'fa-light fa-clock',
+                color: 'danger',
+                order: 3,
+                isInitial: false,
+                isFinal: true,
+                generateView: false,
+            },
+        ];
+        this.transitions = [
+            {
+                from: AXMUserAccessState.Allowed,
+                to: AXMUserAccessState.Blocked,
+                title: '@security-management:users.entities.user.access.transitions.block-sign-in',
+            },
+            {
+                from: AXMUserAccessState.Allowed,
+                to: AXMUserAccessState.Expired,
+                title: '@security-management:users.entities.user.access.transitions.require-credential-renewal',
+            },
+            {
+                from: AXMUserAccessState.Blocked,
+                to: AXMUserAccessState.Allowed,
+                title: '@security-management:users.entities.user.access.transitions.unblock-sign-in',
+            },
+            {
+                from: AXMUserAccessState.Expired,
+                to: AXMUserAccessState.Allowed,
+                title: '@security-management:users.entities.user.access.transitions.restore-after-credential-renewal',
+            },
+        ];
+    }
+}
+//#endregion
+
+//#region ---- Imports ----
+//#endregion
+//#region ---- Definition key ----
+/** Status provider key for persisted `effectiveState` on SecurityManagement.User (derived; read-only in UI). */
+const AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY = 'security-management.effective-state.user';
+//#endregion
+//#region ---- User effective state provider ----
+/**
+ * Unified operational state for lists, filters, and page chrome (derived from lifecycle + sign-in gate).
+ */
+class AXMUserEffectiveStateProvider extends AXPStatusProvider {
+    constructor() {
+        super(...arguments);
+        this.key = AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY;
+        this.defaultStatus = AXMUserEffectiveState.Active;
+        this.statuses = [
+            {
+                name: AXMUserEffectiveState.Pending,
+                title: '@security-management:users.entities.user.effective.states.pending',
+                description: '@security-management:users.entities.user.effective.descriptions.pending',
+                icon: 'fa-light fa-hourglass-half',
+                color: 'warning',
+                order: 1,
+                generateView: true,
+            },
+            {
+                name: AXMUserEffectiveState.Active,
+                title: '@security-management:users.entities.user.effective.states.active',
+                description: '@security-management:users.entities.user.effective.descriptions.active',
+                icon: 'fa-light fa-circle-check',
+                color: 'success',
+                order: 2,
+                generateView: true,
+            },
+            {
+                name: AXMUserEffectiveState.SignInBlocked,
+                title: '@security-management:users.entities.user.effective.states.sign-in-blocked',
+                description: '@security-management:users.entities.user.effective.descriptions.sign-in-blocked',
+                icon: 'fa-light fa-shield-halved',
+                color: 'danger',
+                order: 3,
+                generateView: true,
+            },
+            {
+                name: AXMUserEffectiveState.CredentialExpired,
+                title: '@security-management:users.entities.user.effective.states.credential-expired',
+                description: '@security-management:users.entities.user.effective.descriptions.credential-expired',
+                icon: 'fa-light fa-key',
+                color: 'danger',
+                order: 4,
+                generateView: true,
+            },
+            {
+                name: AXMUserEffectiveState.Suspended,
+                title: '@security-management:users.entities.user.effective.states.suspended',
+                description: '@security-management:users.entities.user.effective.descriptions.suspended',
+                icon: 'fa-light fa-pause-circle',
+                color: 'warning',
+                order: 5,
+                generateView: true,
+            },
+            {
+                name: AXMUserEffectiveState.Inactive,
+                title: '@security-management:users.entities.user.effective.states.inactive',
+                description: '@security-management:users.entities.user.effective.descriptions.inactive',
+                icon: 'fa-light fa-user-slash',
+                color: 'danger',
+                order: 6,
+                generateView: true,
+            },
+            {
+                name: AXMUserEffectiveState.Archived,
+                title: '@security-management:users.entities.user.effective.states.archived',
+                description: '@security-management:users.entities.user.effective.descriptions.archived',
+                icon: 'fa-light fa-box-archive',
+                color: 'danger',
+                order: 7,
+                generateView: true,
+            },
+        ];
+        this.transitions = [];
+    }
+}
+//#endregion
+
 async function usersFactory() {
     const i18n = RootConfig.config.i18n;
-    const countries = [
-        { id: 'IR', title: 'Iran' },
-        { id: 'TR', title: 'Turkey' },
-        { id: 'AE', title: 'United Arab Emirates' },
-    ];
-    const provinces = [
-        { id: 'TEH', countryId: 'IR', title: 'Tehran' },
-        { id: 'ISF', countryId: 'IR', title: 'Isfahan' },
-        { id: 'FRS', countryId: 'IR', title: 'Fars' },
-        { id: 'IST', countryId: 'TR', title: 'Istanbul' },
-        { id: 'ANK', countryId: 'TR', title: 'Ankara' },
-        { id: 'IZM', countryId: 'TR', title: 'Izmir' },
-        { id: 'DXB', countryId: 'AE', title: 'Dubai' },
-        { id: 'AUH', countryId: 'AE', title: 'Abu Dhabi' },
-        { id: 'SHJ', countryId: 'AE', title: 'Sharjah' },
-    ];
     const entityDef = {
         module: RootConfig.module.name,
         name: RootConfig.entities.users.name,
@@ -1213,7 +1385,49 @@ async function usersFactory() {
                 description: `@security-management:users.entities.user.search-result-description`,
             },
         },
-        plugins: [{ name: 'history' }, { name: 'lock' }, { name: 'compare' }],
+        plugins: [
+            {
+                ...statusPlugin,
+                options: {
+                    definition: 'security-management.account-state.user',
+                    field: 'accountState',
+                    isPrimary: false,
+                    groupId: 'user-account-access',
+                    title: '@security-management:users.entities.user.fields.account-lifecycle.title',
+                    showInCreate: false,
+                    generate: { views: { enabled: false } },
+                },
+            },
+            {
+                ...statusPlugin,
+                options: {
+                    field: 'accessState',
+                    definition: AXM_USER_ACCESS_STATE_DEFINITION_KEY,
+                    isPrimary: false,
+                    groupId: 'user-account-access',
+                    title: '@security-management:users.entities.user.fields.access-state.title',
+                    showInCreate: false,
+                    readonly: false,
+                    generate: { views: { enabled: false } },
+                },
+            },
+            {
+                ...statusPlugin,
+                options: {
+                    field: 'effectiveState',
+                    definition: AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY,
+                    isPrimary: true,
+                    groupId: 'user-account-access',
+                    title: '@security-management:users.entities.user.fields.effective-state.title',
+                    showInCreate: false,
+                    readonly: true,
+                    generate: { views: { enabled: true } },
+                },
+            },
+            { name: 'history' },
+            { name: 'lock' },
+            { name: 'compare' },
+        ],
         pages: [],
         groups: [
             {
@@ -1224,6 +1438,10 @@ async function usersFactory() {
                 id: 'authorizations',
                 title: `@${i18n}:users.entities.user.groups.authorizations`,
             },
+            {
+                id: 'user-account-access',
+                title: '@security-management:users.entities.user.groups.account-access',
+            },
         ],
         properties: [
             {
@@ -1249,7 +1467,6 @@ async function usersFactory() {
                         type: AXPWidgetsCatalog.text,
                         options: {},
                     },
-                    // hidden: "{{  context.eval('displayName') != 'arash'  }}",
                 },
                 validations: [
                     {
@@ -1286,133 +1503,6 @@ async function usersFactory() {
                     },
                 ],
             },
-            {
-                name: 'countryId',
-                title: '@general:terms.address.country',
-                groupId: 'basic-info',
-                options: {
-                    sort: {
-                        enabled: true,
-                    },
-                    filter: {
-                        advance: {
-                            enabled: true,
-                        },
-                        inline: {
-                            enabled: true,
-                        },
-                    },
-                },
-                schema: {
-                    dataType: 'string',
-                    interface: {
-                        type: AXPWidgetsCatalog.select,
-                        options: {
-                            valueField: 'id',
-                            textField: 'title',
-                            dataSource: new AXDataSource({
-                                key: 'id',
-                                pageSize: 1000,
-                                load: async (query) => {
-                                    let items = [...countries];
-                                    if (query?.filter) {
-                                        items = applyFilterArray(items, [query.filter]);
-                                    }
-                                    const rawSort = Array.isArray(query?.sort) ? query.sort : query?.sort ? [query.sort] : [];
-                                    if (rawSort.length > 0) {
-                                        items = applySortArray(items, rawSort);
-                                    }
-                                    const skip = query?.skip ?? 0;
-                                    const take = query?.take ?? items.length;
-                                    items = applyPagination(items, skip, take);
-                                    return { items, total: countries.length };
-                                },
-                                byKey: async (key) => {
-                                    const k = String(key);
-                                    const item = countries.find((c) => c.id === k);
-                                    if (!item)
-                                        throw new Error(`Country not found: ${k}`);
-                                    return item;
-                                },
-                            }),
-                            hasClearButton: true,
-                        },
-                    },
-                },
-            },
-            {
-                name: 'provinceId',
-                title: '@general:terms.address.province',
-                groupId: 'basic-info',
-                options: {
-                    sort: {
-                        enabled: true,
-                    },
-                    filter: {
-                        advance: {
-                            enabled: true,
-                        },
-                        inline: {
-                            enabled: true,
-                        },
-                    },
-                },
-                schema: {
-                    dataType: 'string',
-                    interface: {
-                        type: AXPWidgetsCatalog.select,
-                        options: {
-                            valueField: 'id',
-                            textField: 'title',
-                            disabled: '{{ !context.eval("countryId") }}',
-                            dataSource: new AXDataSource({
-                                key: 'id',
-                                pageSize: 1000,
-                                load: async (query) => {
-                                    let items = [...provinces];
-                                    if (query?.filter) {
-                                        items = applyFilterArray(items, [query.filter]);
-                                    }
-                                    const rawSort = Array.isArray(query?.sort) ? query.sort : query?.sort ? [query.sort] : [];
-                                    if (rawSort.length > 0) {
-                                        items = applySortArray(items, rawSort);
-                                    }
-                                    const skip = query?.skip ?? 0;
-                                    const take = query?.take ?? items.length;
-                                    items = applyPagination(items, skip, take);
-                                    return { items, total: items.length };
-                                },
-                                byKey: async (key) => {
-                                    const k = String(key);
-                                    const item = provinces.find((p) => p.id === k);
-                                    if (!item)
-                                        throw new Error(`Province not found: ${k}`);
-                                    return item;
-                                },
-                            }),
-                            filter: {
-                                logic: 'and',
-                                filters: [
-                                    {
-                                        field: 'countryId',
-                                        operator: {
-                                            type: 'equal',
-                                        },
-                                        value: '{{ context.eval("countryId") }}',
-                                    },
-                                ],
-                            },
-                            hasClearButton: true,
-                        },
-                        triggers: [
-                            {
-                                event: "{{ events.context('countryId') }}",
-                                action: '{{ widget.clear() }}',
-                            },
-                        ],
-                    },
-                },
-            },
             {
                 name: 'password',
                 title: '@security-management:users.entities.user.fields.password.title',
@@ -1440,6 +1530,13 @@ async function usersFactory() {
                                 { source: 'id', target: 'roles.{id}' },
                                 { source: 'title', target: 'roles.{title}' },
                             ],
+                            columnResolve: {
+                                strategy: 'countOnly',
+                                countFieldPath: 'roles.length',
+                                queryKey: 'SecurityManagement:User:RolesForListColumn',
+                                queryParams: { userId: 'id' },
+                                queryResultItemsPath: 'items',
+                            },
                         },
                     },
                 },
@@ -1483,26 +1580,6 @@ async function usersFactory() {
                                 },
                             },
                         },
-                        {
-                            name: 'countryId',
-                            layout: {
-                                positions: {
-                                    lg: {
-                                        colSpan: 6,
-                                    },
-                                },
-                            },
-                        },
-                        {
-                            name: 'provinceId',
-                            layout: {
-                                positions: {
-                                    lg: {
-                                        colSpan: 6,
-                                    },
-                                },
-                            },
-                        },
                         {
                             name: 'roleIds',
                             layout: {
@@ -1533,6 +1610,9 @@ async function usersFactory() {
                         {
                             id: 'authorizations',
                         },
+                        {
+                            id: 'user-account-access',
+                        },
                     ],
                     properties: [
                         {
@@ -1556,41 +1636,51 @@ async function usersFactory() {
                             },
                         },
                         {
-                            name: 'nationalCode',
+                            name: 'roleIds',
                             layout: {
                                 positions: {
                                     lg: {
-                                        colSpan: 6,
+                                        colSpan: 12,
+                                    },
+                                },
+                            },
+                        },
+                        {
+                            name: 'password',
+                            layout: {
+                                positions: {
+                                    lg: {
+                                        colSpan: 12,
                                     },
                                 },
                             },
                         },
                         {
-                            name: 'mobile',
+                            name: 'accountState',
                             layout: {
                                 positions: {
                                     lg: {
-                                        colSpan: 6,
+                                        colSpan: 4,
                                     },
                                 },
                             },
                         },
                         {
-                            name: 'roleIds',
+                            name: 'accessState',
                             layout: {
                                 positions: {
                                     lg: {
-                                        colSpan: 12,
+                                        colSpan: 4,
                                     },
                                 },
                             },
                         },
                         {
-                            name: 'password',
+                            name: 'effectiveState',
                             layout: {
                                 positions: {
                                     lg: {
-                                        colSpan: 12,
+                                        colSpan: 4,
                                     },
                                 },
                             },
@@ -1620,6 +1710,16 @@ async function usersFactory() {
                                 },
                             },
                         },
+                        {
+                            id: 'user-account-access',
+                            layout: {
+                                positions: {
+                                    lg: {
+                                        colSpan: 12,
+                                    },
+                                },
+                            },
+                        },
                     ],
                     properties: [
                         {
@@ -1662,6 +1762,36 @@ async function usersFactory() {
                                 },
                             },
                         },
+                        {
+                            name: 'accountState',
+                            layout: {
+                                positions: {
+                                    lg: {
+                                        colSpan: 4,
+                                    },
+                                },
+                            },
+                        },
+                        {
+                            name: 'accessState',
+                            layout: {
+                                positions: {
+                                    lg: {
+                                        colSpan: 4,
+                                    },
+                                },
+                            },
+                        },
+                        {
+                            name: 'effectiveState',
+                            layout: {
+                                positions: {
+                                    lg: {
+                                        colSpan: 4,
+                                    },
+                                },
+                            },
+                        },
                     ],
                     actions: [...entityMasterRecordActions()],
                 },
@@ -2181,7 +2311,7 @@ const AXPPermissionsWidget = {
     type: 'view',
     categories: [],
     groups: [AXPWidgetGroupEnum.EntityWidget],
-    icon: "fa-solid fa-user-shield",
+    icon: "fa-light fa-user-shield",
     properties: [
         AXP_NAME_PROPERTY,
         AXP_DATA_PATH_PROPERTY,
@@ -2562,6 +2692,141 @@ const AXPSessionTerminateWorkflow = {
     },
 };
 
+//#region ----   Imports   ----
+//#endregion
+//#region ----   User account status provider   ----
+/**
+ * Account-level state for SecurityManagement.User (lifecycle / admin).
+ * Sign-in lockout is expressed as `accessState === blocked`, not as `accountState`.
+ */
+class AXMUserStatusProvider extends AXPStatusProvider {
+    constructor() {
+        super(...arguments);
+        this.key = 'security-management.account-state.user';
+        this.defaultStatus = AXPSystemStatusType.Active;
+        this.statuses = [
+            {
+                name: AXPSystemStatusType.Pending,
+                title: '@security-management:users.entities.user.states.pending',
+                description: '@security-management:users.entities.user.account.descriptions.pending',
+                icon: 'fa-light fa-envelope-open-text',
+                color: 'warning',
+                order: 1,
+                isInitial: true,
+                isFinal: false,
+                generateView: true,
+            },
+            {
+                name: AXPSystemStatusType.Active,
+                title: '@security-management:users.entities.user.states.active',
+                description: '@security-management:users.entities.user.account.descriptions.active',
+                icon: 'fa-light fa-user-check',
+                color: 'success',
+                order: 1,
+                isInitial: false,
+                isFinal: false,
+                generateView: true,
+            },
+            {
+                name: AXPSystemStatusType.Suspended,
+                title: '@security-management:users.entities.user.states.suspended',
+                description: '@security-management:users.entities.user.account.descriptions.suspended',
+                icon: 'fa-light fa-pause-circle',
+                color: 'warning',
+                order: 5,
+                isInitial: false,
+                isFinal: false,
+                generateView: true,
+            },
+            {
+                name: AXPSystemStatusType.Inactive,
+                title: '@security-management:users.entities.user.states.inactive',
+                description: '@security-management:users.entities.user.account.descriptions.inactive',
+                icon: 'fa-light fa-user-slash',
+                color: 'danger',
+                order: 2,
+                isInitial: false,
+                isFinal: false,
+                generateView: true,
+            },
+            {
+                name: AXPSystemStatusType.Archived,
+                title: '@security-management:users.entities.user.states.archived',
+                description: '@security-management:users.entities.user.account.descriptions.archived',
+                icon: 'fa-light fa-box-archive',
+                color: 'danger',
+                order: 5,
+                isInitial: false,
+                isFinal: true,
+                generateView: true,
+            },
+        ];
+        this.transitions = [
+            {
+                from: AXPSystemStatusType.Pending,
+                to: AXPSystemStatusType.Active,
+                title: '@security-management:users.entities.user.transitions.activate',
+            },
+            {
+                from: AXPSystemStatusType.Pending,
+                to: AXPSystemStatusType.Inactive,
+                title: '@security-management:users.entities.user.transitions.cancel-invitation',
+            },
+            {
+                from: AXPSystemStatusType.Active,
+                to: AXPSystemStatusType.Suspended,
+                title: '@security-management:users.entities.user.transitions.suspend',
+            },
+            {
+                from: AXPSystemStatusType.Suspended,
+                to: AXPSystemStatusType.Active,
+                title: '@security-management:users.entities.user.transitions.restore',
+            },
+            {
+                from: AXPSystemStatusType.Active,
+                to: AXPSystemStatusType.Inactive,
+                title: '@security-management:users.entities.user.transitions.disable',
+            },
+            {
+                from: AXPSystemStatusType.Inactive,
+                to: AXPSystemStatusType.Active,
+                title: '@security-management:users.entities.user.transitions.enable',
+            },
+            {
+                from: AXPSystemStatusType.Suspended,
+                to: AXPSystemStatusType.Inactive,
+                title: '@security-management:users.entities.user.transitions.disable',
+            },
+            {
+                from: AXPSystemStatusType.Active,
+                to: AXPSystemStatusType.Archived,
+                title: '@security-management:users.entities.user.transitions.archive',
+            },
+            {
+                from: AXPSystemStatusType.Suspended,
+                to: AXPSystemStatusType.Archived,
+                title: '@security-management:users.entities.user.transitions.archive',
+            },
+            {
+                from: AXPSystemStatusType.Inactive,
+                to: AXPSystemStatusType.Archived,
+                title: '@security-management:users.entities.user.transitions.archive',
+            },
+            {
+                from: AXPSystemStatusType.Pending,
+                to: AXPSystemStatusType.Archived,
+                title: '@security-management:users.entities.user.transitions.archive',
+            },
+            {
+                from: AXPSystemStatusType.Archived,
+                to: AXPSystemStatusType.Active,
+                title: '@security-management:users.entities.user.transitions.restore-archived',
+            },
+        ];
+    }
+}
+//#endregion
+
 class AXMSecurityManagementModule {
     static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMSecurityManagementModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule }); }
     static { this.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "21.2.9", ngImport: i0, type: AXMSecurityManagementModule, imports: [AXMSecurityManagementDeviceSessionsEntityModule,
@@ -2616,6 +2881,21 @@ class AXMSecurityManagementModule {
                 useClass: AXMSecurityManagementFeatureDefinitionProvider,
                 multi: true,
             },
+            {
+                provide: AXP_STATUS_PROVIDERS,
+                useClass: AXMUserStatusProvider,
+                multi: true,
+            },
+            {
+                provide: AXP_STATUS_PROVIDERS,
+                useClass: AXMUserAccessStateProvider,
+                multi: true,
+            },
+            {
+                provide: AXP_STATUS_PROVIDERS,
+                useClass: AXMUserEffectiveStateProvider,
+                multi: true,
+            },
             provideCommandSetups([
                 {
                     key: 'Session:Terminate',
@@ -2705,6 +2985,21 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImpor
                             useClass: AXMSecurityManagementFeatureDefinitionProvider,
                             multi: true,
                         },
+                        {
+                            provide: AXP_STATUS_PROVIDERS,
+                            useClass: AXMUserStatusProvider,
+                            multi: true,
+                        },
+                        {
+                            provide: AXP_STATUS_PROVIDERS,
+                            useClass: AXMUserAccessStateProvider,
+                            multi: true,
+                        },
+                        {
+                            provide: AXP_STATUS_PROVIDERS,
+                            useClass: AXMUserEffectiveStateProvider,
+                            multi: true,
+                        },
                         provideCommandSetups([
                             {
                                 key: 'Session:Terminate',
@@ -3226,9 +3521,42 @@ var permissionsWidgetColumn_component = /*#__PURE__*/Object.freeze({
 
 // Permission Editor Components
 
+//#region ---- Imports ----
+/**
+ * Derives the unified operational state from account lifecycle and sign-in gate.
+ * Precedence: archived → pending → inactive → suspended → access expired → access blocked → lifecycle active.
+ */
+function resolveAXMUserEffectiveState(input) {
+    const lifecycle = input.accountState;
+    const auth = input.accessState ?? AXMUserAccessState.Allowed;
+    if (lifecycle === AXPSystemStatusType.Archived) {
+        return AXMUserEffectiveState.Archived;
+    }
+    if (lifecycle === AXPSystemStatusType.Pending) {
+        return AXMUserEffectiveState.Pending;
+    }
+    if (lifecycle === AXPSystemStatusType.Inactive) {
+        return AXMUserEffectiveState.Inactive;
+    }
+    if (lifecycle === AXPSystemStatusType.Suspended) {
+        return AXMUserEffectiveState.Suspended;
+    }
+    if (auth === AXMUserAccessState.Expired) {
+        return AXMUserEffectiveState.CredentialExpired;
+    }
+    if (auth === AXMUserAccessState.Blocked) {
+        return AXMUserEffectiveState.SignInBlocked;
+    }
+    if (lifecycle === AXPSystemStatusType.Active) {
+        return AXMUserEffectiveState.Active;
+    }
+    return AXMUserEffectiveState.Active;
+}
+//#endregion
+
 /**
  * Generated bundle index. Do not edit.
  */
 
-export { AXMPermissionsModule, AXMPolicyService, AXMPolicyServiceImpl, AXMSecurityManagementDeviceSessionsEntityModule, AXMSecurityManagementModule, AXMSecurityManagementRolesEntityModule, AXMSecurityManagementRolesEntityService, AXMSecurityManagementRolesEntityServiceImpl, AXMSecurityManagementUsersEntityModule, AXMUsersEntityService, AXMUsersEntityServiceImpl, AXPPermissionsEditorComponent, AXPPermissionsEditorPopupComponent, AXPPermissionsWidget, AXPPermissionsWidgetColumnComponent, AXPPermissionsWidgetEditComponent, AXPPermissionsWidgetViewComponent, AXPSecurityManagementFeatureKeys, AXPSecurityManagementMenuKeys, AXPSecurityManagementPermissionKeys, RootConfig, deviceSessionsFactory, policyFactory, rolesFactory, usersFactory };
+export { AXMPermissionsModule, AXMPolicyService, AXMPolicyServiceImpl, AXMSecurityManagementDeviceSessionsEntityModule, AXMSecurityManagementModule, AXMSecurityManagementRolesEntityModule, AXMSecurityManagementRolesEntityService, AXMSecurityManagementRolesEntityServiceImpl, AXMSecurityManagementUsersEntityModule, AXMUserAccessState, AXMUserEffectiveState, AXMUsersEntityService, AXMUsersEntityServiceImpl, AXPPermissionsEditorComponent, AXPPermissionsEditorPopupComponent, AXPPermissionsWidget, AXPPermissionsWidgetColumnComponent, AXPPermissionsWidgetEditComponent, AXPPermissionsWidgetViewComponent, AXPSecurityManagementFeatureKeys, AXPSecurityManagementMenuKeys, AXPSecurityManagementPermissionKeys, RootConfig, deviceSessionsFactory, policyFactory, resolveAXMUserEffectiveState, rolesFactory, usersFactory };
 //# sourceMappingURL=acorex-modules-security-management.mjs.map