@aerokit/sdk 14.89.0 → 14.91.0

package/dist/cjs/security/index.js

@@ -34,7 +34,8 @@ __export(security_exports, {
 module.exports = __toCommonJS(security_exports);
 __reExport(security_exports, require("./user"), module.exports);
 var import_user = require("./user");
+__reExport(security_exports, require("./tenants"), module.exports);
 __reExport(security_exports, require("./oauth"), module.exports);
 __reExport(security_exports, require("./decorators"), module.exports);
 var decorators = __toESM(require("./decorators"));
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,ewogICJ2ZXJzaW9uIjogMywKICAic291cmNlcyI6IFsiLi4vLi4vLi4vc3JjL3NlY3VyaXR5L2luZGV4LnRzIl0sCiAgInNvdXJjZXNDb250ZW50IjogWyIvKipcbiAqIEBtb2R1bGUgc2VjdXJpdHkvaW5kZXhcbiAqIEBwYWNrYWdlIEBhZXJva2l0L3Nkay9zZWN1cml0eVxuICogQG92ZXJ2aWV3XG4gKlxuICogUHJvdmlkZXMgc2VjdXJpdHkgaGVscGVycyBmb3IgdXNlciBhdXRoZW50aWNhdGlvbiwgT0F1dGggZmxvd3MsIGFuZCBtZXRhZGF0YSBkZWNvcmF0b3JzLlxuICogSXQgZXhwb3NlcyB1c2VyIG1hbmFnZW1lbnQgdXRpbGl0aWVzLCBPQXV0aCBpbnRlZ3JhdGlvbiwgYW5kIHVzZWZ1bCBzZWN1cml0eSBkZWNvcmF0b3JzXG4gKiBmb3IgcHJvdGVjdGVkIHJvdXRlIGhhbmRsaW5nIGFuZCByb2xlLWJhc2VkIGFjY2VzcyBjb250cm9sLlxuICpcbiAqIFRoZSBtYWluIGNvbXBvbmVudHMgb2YgdGhpcyBtb2R1bGUgYXJlOlxuICogLSBVc2VyOiBVc2VyIGlkZW50aXR5IGFuZCBhdXRoZW50aWNhdGlvbiB1dGlsaXRpZXMuXG4gKiAtIFRlbmFudHM6IFRoZSB0ZW5hbnRzIHRoZSB1c2VyIGhvbGRzIGEgcm9sZSBpbiwgYW5kIHJ1bnMgYWNyb3NzIHRoZW0uXG4gKiAtIE9BdXRoOiBPQXV0aDIgaW50ZWdyYXRpb24gaGVscGVycyBmb3IgYXV0aGVudGljYXRpb24gZmxvd3MuXG4gKiAtIERlY29yYXRvcnM6IFNlY3VyaXR5IGRlY29yYXRvcnMgZm9yIGVuZHBvaW50IGFjY2VzcyBjb250cm9sLlxuICovXG5cbmV4cG9ydCAqIGZyb20gXCIuL3VzZXJcIjtcbmV4cG9ydCB7IFVzZXIgYXMgdXNlciB9IGZyb20gXCIuL3VzZXJcIjtcbmV4cG9ydCAqIGZyb20gXCIuL3RlbmFudHNcIjtcbmV4cG9ydCAqIGZyb20gXCIuL29hdXRoXCI7XG5leHBvcnQgKiBmcm9tIFwiLi9kZWNvcmF0b3JzXCI7XG5leHBvcnQgKiBhcyBkZWNvcmF0b3JzIGZyb20gXCIuL2RlY29yYXRvcnNcIjtcbiJdLAogICJtYXBwaW5ncyI6ICI7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUE7QUFnQkEsNkJBQWMsbUJBaEJkO0FBaUJBLGtCQUE2QjtBQUM3Qiw2QkFBYyxzQkFsQmQ7QUFtQkEsNkJBQWMsb0JBbkJkO0FBb0JBLDZCQUFjLHlCQXBCZDtBQXFCQSxpQkFBNEI7IiwKICAibmFtZXMiOiBbXQp9Cg==

package/dist/cjs/security/tenants.js

@@ -0,0 +1,63 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var tenants_exports = {};
+__export(tenants_exports, {
+  Tenants: () => Tenants
+});
+module.exports = __toCommonJS(tenants_exports);
+const TenantsFacade = Java.type("org.eclipse.dirigible.components.api.security.TenantsFacade");
+class Tenants {
+  /**
+   * Whether runs across tenants are available on this instance.
+   *
+   * @returns True with the token-groups tenant resolution.
+   */
+  static isAvailable() {
+    return TenantsFacade.isAvailable();
+  }
+  /**
+   * The tenants the current user holds a role in and can enter now.
+   *
+   * @returns The tenants, with the roles held in each.
+   */
+  static getGrantedTenants() {
+    return JSON.parse(TenantsFacade.getGrantedTenants());
+  }
+  /**
+   * Runs the work once per tenant the current user can enter, in that tenant's data and with that tenant's roles.
+   *
+   * @param operation What the run does, recorded in the audit trail (e.g. 'period-close').
+   * @param work The work, given the id of the tenant it runs in.
+   * @returns One result per tenant.
+   */
+  static forEachGrantedTenant(operation, work) {
+    const results = TenantsFacade.forEachGrantedTenant(operation, (tenantId) => work(tenantId));
+    const mapped = [];
+    for (let i = 0; i < results.size(); i++) {
+      const r = results.get(i);
+      mapped.push({
+        tenantId: r.tenantId(),
+        succeeded: r.succeeded(),
+        result: r.succeeded() ? r.result() : void 0,
+        error: r.error() ?? void 0
+      });
+    }
+    return mapped;
+  }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/dts/security/index.d.ts

@@ -9,11 +9,13 @@
  *
  * The main components of this module are:
  * - User: User identity and authentication utilities.
+ * - Tenants: The tenants the user holds a role in, and runs across them.
  * - OAuth: OAuth2 integration helpers for authentication flows.
  * - Decorators: Security decorators for endpoint access control.
  */
 export * from "./user";
 export { User as user } from "./user";
+export * from "./tenants";
 export * from "./oauth";
 export * from "./decorators";
 export * as decorators from "./decorators";

package/dist/dts/security/tenants.d.ts

@@ -0,0 +1,79 @@
+/**
+ * @module security/tenants
+ * @package @aerokit/sdk/security
+ * @name Tenants
+ * @overview
+ *
+ * The Tenants class lists the tenants the current user holds a role in and runs work across them. It is built for a user who works
+ * for many tenants at once - an accounting practice keeping the books of its clients, each one a tenant - and who has to run the same
+ * operation (a period close, a statutory file) in each of them.
+ *
+ * ### Key Features:
+ * - **Granted tenants**: the tenants the user's memberships grant and that can be entered now, with the roles held in each.
+ * - **Runs across tenants**: the work runs once per tenant, in that tenant's data and with that tenant's roles - never the roles of the
+ *   tenant the session has selected. A failure in one tenant is reported for it and the run carries on with the next.
+ * - **Audit**: every visit is recorded in the cross-tenant audit trail, readable by each tenant's administrators.
+ *
+ * Available with the token-groups tenant resolution only (`DIRIGIBLE_TENANT_RESOLUTION_STRATEGY=TOKEN_GROUPS`); check
+ * `Tenants.isAvailable()` first.
+ *
+ * ### Example Usage:
+ * ```ts
+ * import { Tenants } from "@aerokit/sdk/security";
+ *
+ * const results = Tenants.forEachGrantedTenant("period-close", (tenantId) => {
+ *     // runs with the data and the roles of tenantId
+ *     return closePeriod("2026-09");
+ * });
+ * results.filter(r => !r.succeeded).forEach(r => console.error(`${r.tenantId}: ${r.error}`));
+ * ```
+ */
+/**
+ * A tenant the current user holds a role in.
+ */
+export interface GrantedTenant {
+    /** The tenant id. */
+    id: string;
+    /** The tenant name. */
+    name: string;
+    /** The roles held in the tenant. */
+    roles: string[];
+}
+/**
+ * What one tenant's visit of a run came to.
+ */
+export interface CrossTenantResult<T> {
+    /** The tenant visited. */
+    tenantId: string;
+    /** Whether the work returned normally. */
+    succeeded: boolean;
+    /** What the work returned; undefined on a failure. */
+    result?: T;
+    /** Why the work failed; undefined on a success. */
+    error?: string;
+}
+/**
+ * Lists the tenants the current user holds a role in and runs work across them.
+ */
+export declare class Tenants {
+    /**
+     * Whether runs across tenants are available on this instance.
+     *
+     * @returns True with the token-groups tenant resolution.
+     */
+    static isAvailable(): boolean;
+    /**
+     * The tenants the current user holds a role in and can enter now.
+     *
+     * @returns The tenants, with the roles held in each.
+     */
+    static getGrantedTenants(): GrantedTenant[];
+    /**
+     * Runs the work once per tenant the current user can enter, in that tenant's data and with that tenant's roles.
+     *
+     * @param operation What the run does, recorded in the audit trail (e.g. 'period-close').
+     * @param work The work, given the id of the tenant it runs in.
+     * @returns One result per tenant.
+     */
+    static forEachGrantedTenant<T>(operation: string, work: (tenantId: string) => T): CrossTenantResult<T>[];
+}

package/dist/esm/security/index.mjs

@@ -1,5 +1,6 @@
 export * from "./user";
 import { User } from "./user";
+export * from "./tenants";
 export * from "./oauth";
 export * from "./decorators";
 import * as decorators from "./decorators";
@@ -7,4 +8,4 @@ export {
   decorators,
   User as user
 };
-//# sourceMappingURL=data:application/json;base64,ewogICJ2ZXJzaW9uIjogMywKICAic291cmNlcyI6IFsiLi4vLi4vLi4vc3JjL3NlY3VyaXR5L2luZGV4LnRzIl0sCiAgInNvdXJjZXNDb250ZW50IjogWyIvKipcbiAqIEBtb2R1bGUgc2VjdXJpdHkvaW5kZXhcbiAqIEBwYWNrYWdlIEBhZXJva2l0L3Nkay9zZWN1cml0eVxuICogQG92ZXJ2aWV3XG4gKlxuICogUHJvdmlkZXMgc2VjdXJpdHkgaGVscGVycyBmb3IgdXNlciBhdXRoZW50aWNhdGlvbiwgT0F1dGggZmxvd3MsIGFuZCBtZXRhZGF0YSBkZWNvcmF0b3JzLlxuICogSXQgZXhwb3NlcyB1c2VyIG1hbmFnZW1lbnQgdXRpbGl0aWVzLCBPQXV0aCBpbnRlZ3JhdGlvbiwgYW5kIHVzZWZ1bCBzZWN1cml0eSBkZWNvcmF0b3JzXG4gKiBmb3IgcHJvdGVjdGVkIHJvdXRlIGhhbmRsaW5nIGFuZCByb2xlLWJhc2VkIGFjY2VzcyBjb250cm9sLlxuICpcbiAqIFRoZSBtYWluIGNvbXBvbmVudHMgb2YgdGhpcyBtb2R1bGUgYXJlOlxuICogLSBVc2VyOiBVc2VyIGlkZW50aXR5IGFuZCBhdXRoZW50aWNhdGlvbiB1dGlsaXRpZXMuXG4gKiAtIE9BdXRoOiBPQXV0aDIgaW50ZWdyYXRpb24gaGVscGVycyBmb3IgYXV0aGVudGljYXRpb24gZmxvd3MuXG4gKiAtIERlY29yYXRvcnM6IFNlY3VyaXR5IGRlY29yYXRvcnMgZm9yIGVuZHBvaW50IGFjY2VzcyBjb250cm9sLlxuICovXG5cbmV4cG9ydCAqIGZyb20gXCIuL3VzZXJcIjtcbmV4cG9ydCB7IFVzZXIgYXMgdXNlciB9IGZyb20gXCIuL3VzZXJcIjtcbmV4cG9ydCAqIGZyb20gXCIuL29hdXRoXCI7XG5leHBvcnQgKiBmcm9tIFwiLi9kZWNvcmF0b3JzXCI7XG5leHBvcnQgKiBhcyBkZWNvcmF0b3JzIGZyb20gXCIuL2RlY29yYXRvcnNcIjtcbiJdLAogICJtYXBwaW5ncyI6ICJBQWVBLGNBQWM7QUFDZCxTQUFpQixZQUFZO0FBQzdCLGNBQWM7QUFDZCxjQUFjO0FBQ2QsWUFBWSxnQkFBZ0I7IiwKICAibmFtZXMiOiBbXQp9Cg==
+//# sourceMappingURL=data:application/json;base64,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

package/dist/esm/security/tenants.mjs

@@ -0,0 +1,44 @@
+const TenantsFacade = Java.type("org.eclipse.dirigible.components.api.security.TenantsFacade");
+class Tenants {
+  /**
+   * Whether runs across tenants are available on this instance.
+   *
+   * @returns True with the token-groups tenant resolution.
+   */
+  static isAvailable() {
+    return TenantsFacade.isAvailable();
+  }
+  /**
+   * The tenants the current user holds a role in and can enter now.
+   *
+   * @returns The tenants, with the roles held in each.
+   */
+  static getGrantedTenants() {
+    return JSON.parse(TenantsFacade.getGrantedTenants());
+  }
+  /**
+   * Runs the work once per tenant the current user can enter, in that tenant's data and with that tenant's roles.
+   *
+   * @param operation What the run does, recorded in the audit trail (e.g. 'period-close').
+   * @param work The work, given the id of the tenant it runs in.
+   * @returns One result per tenant.
+   */
+  static forEachGrantedTenant(operation, work) {
+    const results = TenantsFacade.forEachGrantedTenant(operation, (tenantId) => work(tenantId));
+    const mapped = [];
+    for (let i = 0; i < results.size(); i++) {
+      const r = results.get(i);
+      mapped.push({
+        tenantId: r.tenantId(),
+        succeeded: r.succeeded(),
+        result: r.succeeded() ? r.result() : void 0,
+        error: r.error() ?? void 0
+      });
+    }
+    return mapped;
+  }
+}
+export {
+  Tenants
+};
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aerokit/sdk",
-  "version": "14.89.0",
+  "version": "14.91.0",
   "description": "Unified TypeScript SDK for modern cloud platforms.",
   "scripts": {
     "clean": "rm -rf dist",

package/test/flows/crud.js

@@ -92,7 +92,8 @@ export function crudFlow(manifest, entity, opts = {}) {
           // Save is disabled again once the re-read header is the new pristine state - leaving before
           // that would meet the unsaved-changes guard
           await expect(save).toBeDisabled();
-          await page.getByRole('button', { name: 'Back to list', exact: true }).click();
+          // A clean document's dismiss is Cancel (dirigible #7770).
+          await page.getByRole('button', { name: 'Cancel', exact: true }).click();
         } else {
           await page.getByRole('button', { name: 'Save', exact: true }).click();
         }