@antelopejs/dms 0.5.5 → 0.6.0

package/dist/pages/settings/users/role-preview.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizePreviewPermissions = sanitizePreviewPermissions;
+exports.findPermissionNode = findPermissionNode;
+exports.listPermissionChildren = listPermissionChildren;
+exports.collectPreviewLayout = collectPreviewLayout;
+exports.listPreviewPermissionIds = listPreviewPermissionIds;
+exports.classifyPreviewBlocks = classifyPreviewBlocks;
+exports.countOutOfScope = countOutOfScope;
+exports.losesOnPreviewPage = losesOnPreviewPage;
+const role_editor_1 = require("./role-editor");
+const ID_SEPARATOR = ".";
+const READ_ACTION_IDS = new Set(["list", "view", "details", "read"]);
+function isReadAction(permissionId) {
+    return READ_ACTION_IDS.has(permissionId.split(ID_SEPARATOR).at(-1) ?? "");
+}
+function sanitizePreviewPermissions(permissions) {
+    return new Set(permissions.filter((id) => id.length > 0 && id !== role_editor_1.ALL_PERMISSIONS));
+}
+function findPermissionNode(tree, permissionId) {
+    const [head, ...rest] = permissionId.split(ID_SEPARATOR);
+    let node = head === undefined ? undefined : tree[head];
+    for (const part of rest) {
+        if (!node)
+            return undefined;
+        node = node.children[part];
+    }
+    return node;
+}
+function listPermissionChildren(tree, permissionId) {
+    const node = findPermissionNode(tree, permissionId);
+    if (!node)
+        return [];
+    return Object.values(node.children)
+        .map((child) => child.data?.id)
+        .filter((id) => !!id);
+}
+function joinId(parent, id) {
+    return `${parent}${ID_SEPARATOR}${id}`;
+}
+function collectNode(component, path, permissionId, childrenOf) {
+    const children = (component.children ?? []).map((child) => collectNode(child.component, joinId(path, child.id), joinId(permissionId, child.id), childrenOf));
+    const childIds = new Set(children.map((child) => child.permissionId));
+    return {
+        path,
+        permissionId,
+        actionIds: childrenOf(permissionId).filter((id) => !childIds.has(id)),
+        children,
+    };
+}
+function collectPreviewLayout(components, pagePermissionId, childrenOf) {
+    return Object.entries(components).map(([key, component]) => collectNode(component, key, joinId(pagePermissionId, key), childrenOf));
+}
+function listPreviewPermissionIds(nodes) {
+    return nodes.flatMap((node) => [
+        node.permissionId,
+        ...node.actionIds,
+        ...listPreviewPermissionIds(node.children),
+    ]);
+}
+function classifyNode(node, grants, titleOf, blocks) {
+    if (!grants.preview.has(node.permissionId)) {
+        blocks[node.path] = { state: "hidden" };
+        return;
+    }
+    const held = node.actionIds.filter((id) => grants.real.has(id) && !grants.universal?.has(id));
+    const withheld = held.filter((id) => !grants.preview.has(id));
+    if (withheld.length > 0) {
+        const writes = held.filter((id) => !isReadAction(id));
+        const keepsWrite = writes.some((id) => grants.preview.has(id));
+        blocks[node.path] = {
+            state: writes.length > 0 && !keepsWrite ? "readonly" : "limited",
+            withheld: withheld.map(titleOf),
+        };
+    }
+    for (const child of node.children) {
+        classifyNode(child, grants, titleOf, blocks);
+    }
+}
+function classifyPreviewBlocks(nodes, grants, pageHidden, titleOf = (id) => id) {
+    const blocks = {};
+    for (const node of nodes) {
+        if (pageHidden) {
+            blocks[node.path] = { state: "hidden" };
+            continue;
+        }
+        classifyNode(node, grants, titleOf, blocks);
+    }
+    return blocks;
+}
+function countOutOfScope(preview, realHolds) {
+    return [...preview].filter((id) => !realHolds(id)).length;
+}
+function losesOnPreviewPage(blocks, hiddenHeaderActions) {
+    return hiddenHeaderActions.length > 0 || Object.keys(blocks).length > 0;
+}
+//# sourceMappingURL=role-preview.js.map

package/dist/pages/settings/users/role-preview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-preview.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/role-preview.ts"],"names":[],"mappings":";;AA2FA,gEAIC;AAGD,gDAWC;AAGD,wDASC;AAmCD,oDAQC;AAGD,4DAQC;AAwCD,sDAeC;AAMD,0CAKC;AAOD,gDAKC;AA3PD,+CAAgD;AAGhD,MAAM,YAAY,GAAG,GAAG,CAAC;AAMzB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAErE,SAAS,YAAY,CAAC,YAAoB;IACxC,OAAO,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC;AA4ED,SAAgB,0BAA0B,CAAC,WAAqB;IAC9D,OAAO,IAAI,GAAG,CACZ,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,6BAAe,CAAC,CACpE,CAAC;AACJ,CAAC;AAGD,SAAgB,kBAAkB,CAChC,IAAoC,EACpC,YAAoB;IAEpB,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,SAAgB,sBAAsB,CACpC,IAAoC,EACpC,YAAoB;IAEpB,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;SAChC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;SAC9B,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,EAAU;IACxC,OAAO,GAAG,MAAM,GAAG,YAAY,GAAG,EAAE,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAClB,SAAkC,EAClC,IAAY,EACZ,YAAoB,EACpB,UAA8C;IAE9C,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACxD,WAAW,CACT,KAAK,CAAC,SAAS,EACf,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,EACtB,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,EAC9B,UAAU,CACX,CACF,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACtE,OAAO;QACL,IAAI;QACJ,YAAY;QACZ,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrE,QAAQ;KACT,CAAC;AACJ,CAAC;AAQD,SAAgB,oBAAoB,CAClC,UAAmD,EACnD,gBAAwB,EACxB,UAA8C;IAE9C,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,CACzD,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,CACvE,CAAC;AACJ,CAAC;AAGD,SAAgB,wBAAwB,CACtC,KAA8B;IAE9B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,YAAY;QACjB,GAAG,IAAI,CAAC,SAAS;QACjB,GAAG,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC;KAC3C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CACnB,IAA2B,EAC3B,MAAyB,EACzB,OAAyC,EACzC,MAAwC;IAIxC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAE3C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACxC,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAChC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAC1D,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAClB,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YAChE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;SAChC,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAUD,SAAgB,qBAAqB,CACnC,KAA8B,EAC9B,MAAyB,EACzB,UAAmB,EACnB,UAA4C,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE;IAEtD,MAAM,MAAM,GAAqC,EAAE,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QACD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAMD,SAAgB,eAAe,CAC7B,OAA4B,EAC5B,SAA4C;IAE5C,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC5D,CAAC;AAOD,SAAgB,kBAAkB,CAChC,MAAwC,EACxC,mBAAsC;IAEtC,OAAO,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1E,CAAC"}

package/dist/pages/settings/users/roles.d.ts

@@ -1,11 +1,26 @@
-import type { FormComponents } from "@antelopejs/interface-dms/base/form";
+import { type RequestContext } from "@antelopejs/interface-api";
+import type { User } from "@antelopejs/interface-dms/auth/db";
+import { type ConfirmDialogSerialized, type TableViewOptionsSerialized } from "@antelopejs/interface-dms/base/table-view";
+import { ComponentBuilder } from "@antelopejs/interface-dms/component";
+import type { RoleEditorPermissionNode, RolesOverview } from "./role-editor";
+import { type RolePreviewResult } from "./role-preview";
+export interface CreatedRole {
+    id: string;
+}
+export declare const rolesEditor: ComponentBuilder<TableViewOptionsSerialized>;
 declare const RolesSettingsController_base: {
     new (...args: any[]): {};
     extend: <T extends import("@antelopejs/interface-api").ControllerClass>(this: T, location: string) => T;
     location: string;
 };
 export declare class RolesSettingsController extends RolesSettingsController_base {
-    getPermissionsTree(): Promise<FormComponents.PermissionsTreeNode[]>;
-    static table: import("@antelopejs/interface-dms").ComponentBuilder<import("@antelopejs/interface-dms/base").TableViewOptionsSerialized>;
+    static table: ComponentBuilder<TableViewOptionsSerialized>;
+    getOverview(ctx: RequestContext, user: User): Promise<RolesOverview>;
+    getEditorTree(_user: User): Promise<RoleEditorPermissionNode[]>;
+    preview(ctx: RequestContext, user: User, body: unknown): Promise<RolePreviewResult>;
+    create(ctx: RequestContext, user: User, body: unknown): Promise<CreatedRole>;
+    update(ctx: RequestContext, user: User, roleId: string, body: unknown): Promise<void>;
+    duplicate(ctx: RequestContext, user: User, roleId: string, body: unknown): Promise<CreatedRole>;
+    deleteConfirm(ctx: RequestContext, _user: User, roleId: string): Promise<ConfirmDialogSerialized>;
 }
 export {};

package/dist/pages/settings/users/roles.js

@@ -8,49 +8,258 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RolesSettingsController = void 0;
+exports.RolesSettingsController = exports.rolesEditor = void 0;
 const interface_api_1 = require("@antelopejs/interface-api");
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const interface_core_1 = require("@antelopejs/interface-core");
 const interface_data_api_1 = require("@antelopejs/interface-data-api");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const table_view_1 = require("@antelopejs/interface-dms/base/table-view");
+const factory_helpers_1 = require("@antelopejs/interface-dms/base/table-view/internal/factory-helpers");
+const component_1 = require("@antelopejs/interface-dms/component");
 const roles_1 = require("@antelopejs/interface-dms/data-controllers/roles");
+const db_1 = require("@antelopejs/interface-dms/db");
+const guards_1 = require("@antelopejs/interface-dms/guards");
 const page_1 = require("@antelopejs/interface-dms/page");
 const permissions_1 = require("@antelopejs/interface-dms/permissions");
-const base_1 = require("@antelopejs/interface-dms/base");
-const category_1 = require("./category");
-const permission_tree_nodes_1 = require("./permission-tree-nodes");
+const permissions_resolver_1 = require("@antelopejs/interface-dms/permissions-resolver");
+const request_tenant_1 = require("@antelopejs/interface-dms/request-tenant");
+const page_2 = require("../../../implementations/dms/page");
+const workspace_notifications_1 = require("../../../utils/workspace-notifications");
+const role_editor_schema_1 = require("../../../validation/role-editor.schema");
+const role_editor_store_1 = require("./role-editor-store");
+const role_preview_1 = require("./role-preview");
+const fire_and_forget_1 = require("@antelopejs/interface-dms/utils/fire-and-forget");
 (0, interface_data_api_1.RegisterDataController)()(roles_1.roleSettingDataAPI);
+const ROLES_EDITOR_COMPONENT_NAME = "DmsSettingsRoles";
+exports.rolesEditor = new component_1.ComponentBuilder(ROLES_EDITOR_COMPONENT_NAME).meta({ name: "$page.settings.roles.table.caption", icon: "i-ph-key" });
+(0, factory_helpers_1.registerTableViewActions)(exports.rolesEditor, {
+    hasNewForm: true,
+    hasEditForm: true,
+    hasViewForm: true,
+    hasDeleteEndpoint: true,
+    archiveMode: false,
+    isExportEnabled: true,
+});
+const rolesMeta = (0, interface_core_1.GetMetadata)(roles_1.roleSettingDataAPI, table_view_1.TableViewMeta);
+rolesMeta.addComponentBuilder(exports.rolesEditor);
+rolesMeta.setControllerGuards({
+    delete: (ctx, { ids, values }) => (0, role_editor_store_1.prepareRoleDeletion)((0, request_tenant_1.getRequestTenantId)(ctx), ids, values),
+});
+function requireEditorAction(id) {
+    const action = exports.rolesEditor.getAction(id);
+    if (!action) {
+        throw new Error(`Roles editor is expected to register a '${id}' action`);
+    }
+    return action;
+}
+const listAction = requireEditorAction("list");
+const addAction = requireEditorAction("add");
+const editAction = requireEditorAction("edit");
+const deleteAction = requireEditorAction("delete");
+async function resolveActor(ctx, user) {
+    const tenantId = (0, request_tenant_1.getRequestTenantId)(ctx);
+    const member = await (0, interface_database_decorators_1.GetModel)(db_1.TenantMemberModel, tenantId).getByUser(user._id);
+    const permissions = await (0, permissions_1.GetEffectiveUserPermissions)(user, tenantId, member?.roleIds ?? [], (0, interface_database_decorators_1.GetModel)(db_1.RoleModel, tenantId));
+    return { tenantId, permissions };
+}
+async function holdsAction(actor, action) {
+    const { permissionId } = action;
+    return !permissionId || (0, permissions_1.HasPermission)(actor.permissions, permissionId);
+}
+const OWNER_ROW = 1;
+const HTTP_FORBIDDEN = 403;
+exports.rolesEditor.navBadge({
+    count: async (ctx, user) => {
+        const actor = await resolveActor(ctx, user);
+        (0, interface_api_util_1.assert)(await holdsAction(actor, listAction), HTTP_FORBIDDEN, "error.forbidden");
+        const roles = await (0, interface_database_decorators_1.GetModel)(db_1.RoleModel, actor.tenantId).getAll();
+        return roles.length + OWNER_ROW;
+    },
+});
+async function resolveCapabilities(actor) {
+    const [canAdd, canEdit, canDelete] = await Promise.all([addAction, editAction, deleteAction].map((action) => holdsAction(actor, action)));
+    return { canAdd, canEdit, canDelete };
+}
+async function grantedAmong(permissions, ids) {
+    const unique = [...new Set(ids)];
+    const held = await Promise.all(unique.map((id) => (0, permissions_1.HasPermission)(permissions, id)));
+    return new Set(unique.filter((_, index) => held[index]));
+}
+async function previewTitleOf(permissionId) {
+    const permission = await (0, permissions_1.GetPermission)(permissionId);
+    return permission?.title ?? permissionId.split(".").at(-1) ?? permissionId;
+}
+async function classifyPagePreview(page, grants, titleOf) {
+    const tree = await (0, permissions_1.GetPermissions)();
+    const nodes = page.filtersComponents
+        ? (0, role_preview_1.collectPreviewLayout)(page.components, page.pagePermissionId, (id) => (0, role_preview_1.listPermissionChildren)(tree, id))
+        : [];
+    const ids = (0, role_preview_1.listPreviewPermissionIds)(nodes);
+    const [real, granted, universal, title] = await Promise.all([
+        grantedAmong(grants.real, ids),
+        grantedAmong(grants.preview, ids),
+        grantedAmong(new Set(), ids),
+        titleOf?.(ids),
+    ]);
+    return (0, role_preview_1.classifyPreviewBlocks)(nodes, { real, preview: granted, universal }, page.hiddenInPreview, title);
+}
+async function loadPreviewTitles(ids) {
+    const titles = new Map(await Promise.all(ids.map(async (id) => [id, await previewTitleOf(id)])));
+    return (id) => titles.get(id) ?? id;
+}
+const pageLosesInPreview = async (page, grants) => {
+    if ((0, role_preview_1.losesOnPreviewPage)({}, page.hiddenHeaderActions))
+        return true;
+    return (0, role_preview_1.losesOnPreviewPage)(await classifyPagePreview(page, grants), []);
+};
+async function previewRole(ctx, user, rolePermissions, path) {
+    const actor = await resolveActor(ctx, user);
+    const preview = await (0, permissions_resolver_1.ApplyPermissionsResolvers)(user._id, actor.tenantId, (0, role_preview_1.sanitizePreviewPermissions)(rolePermissions));
+    const access = await (0, page_2.resolvePermissionPreviewAccess)({
+        path,
+        user,
+        memberModel: (0, interface_database_decorators_1.GetModel)(db_1.TenantMemberModel, actor.tenantId),
+        roleModel: (0, interface_database_decorators_1.GetModel)(db_1.RoleModel, actor.tenantId),
+        tenantId: actor.tenantId,
+        previewPermissions: preview,
+        pageLoses: pageLosesInPreview,
+    });
+    const realInPreview = await grantedAmong(actor.permissions, preview);
+    const outOfScope = (0, role_preview_1.countOutOfScope)(preview, (id) => realInPreview.has(id));
+    const { page } = access;
+    const menu = {
+        hiddenEntries: access.hiddenEntries,
+        partialEntries: access.partialEntries,
+        hiddenQuickActions: access.hiddenQuickActions,
+        outOfScope,
+    };
+    if (!page) {
+        return { ...menu, page: null, blocks: {}, hiddenHeaderActions: [] };
+    }
+    return {
+        ...menu,
+        page: {
+            fullId: page.fullId,
+            displayName: page.displayName,
+            hidden: page.hiddenInPreview,
+        },
+        blocks: await classifyPagePreview(page, { real: actor.permissions, preview }, loadPreviewTitles),
+        hiddenHeaderActions: page.hiddenHeaderActions,
+    };
+}
 let RolesSettingsController = class RolesSettingsController extends (0, page_1.PageController)("roles", {
     displayName: "$menu.roles",
-    category: category_1.userCategory,
+    category: page_1.workspaceSettingsCategory,
     icon: "i-ph-key",
-    order: 6,
+    order: 2,
     description: "$page.settings.description.roles",
 }) {
-    async getPermissionsTree() {
-        const permissionTree = await (0, permissions_1.GetPermissions)();
-        return (0, permission_tree_nodes_1.mapPermissionTreeToPermissionNodes)(permissionTree);
-    }
-    static table = (0, base_1.TableView)(roles_1.roleSettingDataAPI, {
-        caption: "$page.settings.roles.table.caption",
-        rowActions: {
-            add: true,
-            copyLink: true,
-            delete: { isEnabled: true, isVisible: true },
-            details: true,
-            duplicate: true,
-            edit: { isEnabled: true, isVisible: true },
-            hasSelection: true,
-        },
-        formContainer: { type: "page" },
-    });
+    static table = exports.rolesEditor;
+    async getOverview(ctx, user) {
+        const actor = await resolveActor(ctx, user);
+        return (0, role_editor_store_1.loadRolesOverview)(actor, await resolveCapabilities(actor));
+    }
+    async getEditorTree(_user) {
+        return (0, role_editor_store_1.loadRoleEditorTree)();
+    }
+    async preview(ctx, user, body) {
+        const { permissions, path } = (0, interface_api_util_1.assertValidation)(body, (v) => role_editor_schema_1.rolePreviewSchema.parse(v));
+        return previewRole(ctx, user, permissions, path);
+    }
+    async create(ctx, user, body) {
+        const input = (0, interface_api_util_1.assertValidation)(body, (v) => role_editor_schema_1.roleEditorSchema.parse(v));
+        return { id: await (0, role_editor_store_1.createRole)(await resolveActor(ctx, user), input) };
+    }
+    async update(ctx, user, roleId, body) {
+        const input = (0, interface_api_util_1.assertValidation)(body, (v) => role_editor_schema_1.roleEditorSchema.parse(v));
+        const actor = await resolveActor(ctx, user);
+        const { name, permissionsChanged } = await (0, role_editor_store_1.updateRole)(actor, roleId, input);
+        if (permissionsChanged) {
+            (0, fire_and_forget_1.fireAndForget)((0, workspace_notifications_1.notifyRolePermissionsChanged)({
+                tenantId: actor.tenantId,
+                roleId,
+                roleName: name,
+                actor: { id: user._id, name: user.name || user.email },
+            }), "role permissions change notification");
+        }
+    }
+    async duplicate(ctx, user, roleId, body) {
+        const { name } = (0, interface_api_util_1.assertValidation)(body, (v) => role_editor_schema_1.roleDuplicateSchema.parse(v));
+        const actor = await resolveActor(ctx, user);
+        return { id: await (0, role_editor_store_1.duplicateRole)(actor, roleId, name) };
+    }
+    async deleteConfirm(ctx, _user, roleId) {
+        return (0, role_editor_store_1.loadRoleDeleteConfirm)((0, request_tenant_1.getRequestTenantId)(ctx), roleId);
+    }
 };
 exports.RolesSettingsController = RolesSettingsController;
 __decorate([
-    (0, interface_api_1.Get)("permissions-tree"),
+    (0, interface_api_1.Get)("overview"),
+    __param(0, (0, interface_api_1.Context)()),
+    __param(1, (0, guards_1.AuthUserWithPermission)(listAction)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Function]),
+    __metadata("design:returntype", Promise)
+], RolesSettingsController.prototype, "getOverview", null);
+__decorate([
+    (0, interface_api_1.Get)("editor-tree"),
+    __param(0, (0, guards_1.AuthUserWithPermission)(listAction)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Function]),
+    __metadata("design:returntype", Promise)
+], RolesSettingsController.prototype, "getEditorTree", null);
+__decorate([
+    (0, interface_api_1.Post)("preview"),
+    __param(0, (0, interface_api_1.Context)()),
+    __param(1, (0, guards_1.AuthUserWithPermission)(editAction)),
+    __param(2, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Function, Object]),
+    __metadata("design:returntype", Promise)
+], RolesSettingsController.prototype, "preview", null);
+__decorate([
+    (0, interface_api_1.Post)("create"),
+    __param(0, (0, interface_api_1.Context)()),
+    __param(1, (0, guards_1.AuthUserWithPermission)(addAction)),
+    __param(2, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Function, Object]),
+    __metadata("design:returntype", Promise)
+], RolesSettingsController.prototype, "create", null);
+__decorate([
+    (0, interface_api_1.Put)(":id"),
+    __param(0, (0, interface_api_1.Context)()),
+    __param(1, (0, guards_1.AuthUserWithPermission)(editAction)),
+    __param(2, (0, interface_api_1.Parameter)("id", "param")),
+    __param(3, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Function, String, Object]),
+    __metadata("design:returntype", Promise)
+], RolesSettingsController.prototype, "update", null);
+__decorate([
+    (0, interface_api_1.Post)(":id/duplicate"),
+    __param(0, (0, interface_api_1.Context)()),
+    __param(1, (0, guards_1.AuthUserWithPermission)(addAction)),
+    __param(2, (0, interface_api_1.Parameter)("id", "param")),
+    __param(3, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Function, String, Object]),
+    __metadata("design:returntype", Promise)
+], RolesSettingsController.prototype, "duplicate", null);
+__decorate([
+    (0, interface_api_1.Get)(":id/delete-confirm"),
+    __param(0, (0, interface_api_1.Context)()),
+    __param(1, (0, guards_1.AuthUserWithPermission)(deleteAction)),
+    __param(2, (0, interface_api_1.Parameter)("id", "param")),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", []),
+    __metadata("design:paramtypes", [Object, Function, String]),
     __metadata("design:returntype", Promise)
-], RolesSettingsController.prototype, "getPermissionsTree", null);
+], RolesSettingsController.prototype, "deleteConfirm", null);
 exports.RolesSettingsController = RolesSettingsController = __decorate([
     (0, page_1.RegisterPage)()
 ], RolesSettingsController);

package/dist/pages/settings/users/roles.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/roles.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6DAAgD;AAChD,uEAAwE;AACxE,4EAAsF;AACtF,yDAA8E;AAC9E,uEAAuE;AACvE,yDAA2D;AAE3D,yCAA0C;AAC1C,mEAA6E;AAE7E,IAAA,2CAAsB,GAAE,CAAC,0BAAkB,CAAC,CAAC;AAGtC,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,IAAA,qBAAc,EAAC,OAAO,EAAE;IACnE,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,uBAAY;IACtB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,kCAAkC;CAChD,CAAC;IAEM,AAAN,KAAK,CAAC,kBAAkB;QACtB,MAAM,cAAc,GAAG,MAAM,IAAA,4BAAc,GAAE,CAAC;QAC9C,OAAO,IAAA,0DAAkC,EAAC,cAAc,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,CAAC,KAAK,GAAG,IAAA,gBAAS,EAAC,0BAAkB,EAAE;QAC3C,OAAO,EAAE,oCAAoC;QAC7C,UAAU,EAAE;YACV,GAAG,EAAE,IAAI;YACT,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;YAC5C,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;YAC1C,YAAY,EAAE,IAAI;SACnB;QACD,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;KAChC,CAAC,CAAC;;AAzBQ,0DAAuB;AAQ5B;IADL,IAAA,mBAAG,EAAC,kBAAkB,CAAC;;;;iEAIvB;kCAXU,uBAAuB;IADnC,IAAA,mBAAY,GAAE;GACF,uBAAuB,CA0BnC"}
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/roles.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6DAQmC;AACnC,uEAA0E;AAC1E,+DAAyD;AACzD,uEAAwE;AACxE,6FAAqE;AAErE,0EAImD;AACnD,wGAA8G;AAC9G,mEAG6C;AAC7C,4EAAsF;AACtF,qDAA4E;AAC5E,6DAA0E;AAC1E,yDAIwC;AACxC,uEAK+C;AAC/C,yFAA2F;AAC3F,6EAA8E;AAC9E,4DAK2C;AAC3C,oFAAsF;AACtF,+EAIgD;AAMhD,2DAS6B;AAC7B,iDAUwB;AACxB,qFAAgF;AAEhF,IAAA,2CAAsB,GAAE,CAAC,0BAAkB,CAAC,CAAC;AAE7C,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AAa1C,QAAA,WAAW,GAAG,IAAI,4BAAgB,CAC7C,2BAA2B,CAC5B,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;AAEzE,IAAA,0CAAwB,EAAC,mBAAW,EAAE;IACpC,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,IAAI;IACjB,WAAW,EAAE,IAAI;IACjB,iBAAiB,EAAE,IAAI;IACvB,WAAW,EAAE,KAAK;IAClB,eAAe,EAAE,IAAI;CACtB,CAAC,CAAC;AAKH,MAAM,SAAS,GAAG,IAAA,4BAAW,EAAC,0BAAkB,EAAE,0BAAa,CAAC,CAAC;AACjE,SAAS,CAAC,mBAAmB,CAAC,mBAAW,CAAC,CAAC;AAC3C,SAAS,CAAC,mBAAmB,CAAC;IAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAC/B,IAAA,uCAAmB,EAAC,IAAA,mCAAkB,EAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC;CAC5D,CAAC,CAAC;AAEH,SAAS,mBAAmB,CAAC,EAAU;IACrC,MAAM,MAAM,GAAG,mBAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2CAA2C,EAAE,UAAU,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC/C,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;AAC7C,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC/C,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AAEnD,KAAK,UAAU,YAAY,CACzB,GAAmB,EACnB,IAAU;IAEV,MAAM,QAAQ,GAAG,IAAA,mCAAkB,EAAC,GAAG,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAQ,EAAC,sBAAiB,EAAE,QAAQ,CAAC,CAAC,SAAS,CAClE,IAAI,CAAC,GAAG,CACT,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,IAAA,yCAA2B,EACnD,IAAI,EACJ,QAAQ,EACR,MAAM,EAAE,OAAO,IAAI,EAAE,EACrB,IAAA,wCAAQ,EAAC,cAAS,EAAE,QAAQ,CAAC,CAC9B,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,KAAsB,EACtB,MAAc;IAEd,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAChC,OAAO,CAAC,YAAY,IAAI,IAAA,2BAAa,EAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AACzE,CAAC;AAID,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,mBAAW,CAAC,QAAQ,CAAC;IACnB,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAA,2BAAM,EACJ,MAAM,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,EACpC,cAAc,EACd,iBAAiB,CAClB,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;IAClC,CAAC;CACF,CAAC,CAAC;AAEH,KAAK,UAAU,mBAAmB,CAChC,KAAsB;IAEtB,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CACpD,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACnD,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAC3B,CACF,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACxC,CAAC;AAGD,KAAK,UAAU,YAAY,CACzB,WAAwB,EACxB,GAAqB;IAErB,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAA,2BAAa,EAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CACnD,CAAC;IACF,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,YAAoB;IAChD,MAAM,UAAU,GAAG,MAAM,IAAA,2BAAa,EAAC,YAAY,CAAC,CAAC;IACrD,OAAO,UAAU,EAAE,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;AAC7E,CAAC;AAQD,KAAK,UAAU,mBAAmB,CAChC,IAA2B,EAC3B,MAA+B,EAC/B,OAAsE;IAEtE,MAAM,IAAI,GAAG,MAAM,IAAA,4BAAc,GAAE,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB;QAClC,CAAC,CAAC,IAAA,mCAAoB,EAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,EAAE,CAClE,IAAA,qCAAsB,EAAC,IAAI,EAAE,EAAE,CAAC,CACjC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,GAAG,GAAG,IAAA,uCAAwB,EAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1D,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC;QAC9B,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;QACjC,YAAY,CAAC,IAAI,GAAG,EAAE,EAAE,GAAG,CAAC;QAC5B,OAAO,EAAE,CAAC,GAAG,CAAC;KACf,CAAC,CAAC;IACH,OAAO,IAAA,oCAAqB,EAC1B,KAAK,EACL,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EACrC,IAAI,CAAC,eAAe,EACpB,KAAK,CACN,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAa;IAEb,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,MAAM,OAAO,CAAC,GAAG,CACf,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,cAAc,CAAC,EAAE,CAAC,CAAU,CAAC,CAC/D,CACF,CAAC;IACF,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AACtC,CAAC;AAOD,MAAM,kBAAkB,GAAyB,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;IACtE,IAAI,IAAA,iCAAkB,EAAC,EAAE,EAAE,IAAI,CAAC,mBAAmB,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,IAAA,iCAAkB,EAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC,CAAC;AAOF,KAAK,UAAU,WAAW,CACxB,GAAmB,EACnB,IAAU,EACV,eAAyB,EACzB,IAAwB;IAExB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,IAAA,gDAAyB,EAC7C,IAAI,CAAC,GAAG,EACR,KAAK,CAAC,QAAQ,EACd,IAAA,yCAA0B,EAAC,eAAe,CAAC,CAC5C,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,IAAA,qCAA8B,EAAC;QAClD,IAAI;QACJ,IAAI;QACJ,WAAW,EAAE,IAAA,wCAAQ,EAAC,sBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC;QACxD,SAAS,EAAE,IAAA,wCAAQ,EAAC,cAAS,EAAE,KAAK,CAAC,QAAQ,CAAC;QAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,kBAAkB,EAAE,OAAO;QAC3B,SAAS,EAAE,kBAAkB;KAC9B,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,IAAA,8BAAe,EAAC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IACxB,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,UAAU;KACX,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACtE,CAAC;IACD,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE;YACJ,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,eAAe;SAC7B;QACD,MAAM,EAAE,MAAM,mBAAmB,CAC/B,IAAI,EACJ,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,EACpC,iBAAiB,CAClB;QACD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;KAC9C,CAAC;AACJ,CAAC;AAGM,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,IAAA,qBAAc,EAAC,OAAO,EAAE;IACnE,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,gCAAyB;IACnC,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,kCAAkC;CAChD,CAAC;IACA,MAAM,CAAC,KAAK,GAAG,mBAAW,CAAC;IAOrB,AAAN,KAAK,CAAC,WAAW,CACJ,GAAmB,EACM,IAAU;QAE9C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,OAAO,IAAA,qCAAiB,EAAC,KAAK,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,CAAC;IAIK,AAAN,KAAK,CAAC,aAAa,CACmB,KAAW;QAE/C,OAAO,IAAA,sCAAkB,GAAE,CAAC;IAC9B,CAAC;IAQK,AAAN,KAAK,CAAC,OAAO,CACA,GAAmB,EACM,IAAU,EAClC,IAAa;QAEzB,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACzD,sCAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3B,CAAC;QACF,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CACC,GAAmB,EACK,IAAU,EACjC,IAAa;QAEzB,MAAM,KAAK,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,qCAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,MAAM,IAAA,8BAAU,EAAC,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;IACxE,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CACC,GAAmB,EACM,IAAU,EACpB,MAAc,EAC5B,IAAa;QAEzB,MAAM,KAAK,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,qCAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,MAAM,IAAA,8BAAU,EAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5E,IAAI,kBAAkB,EAAE,CAAC;YACvB,IAAA,+BAAa,EACX,IAAA,sDAA4B,EAAC;gBAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM;gBACN,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;aACvD,CAAC,EACF,sCAAsC,CACvC,CAAC;QACJ,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CACF,GAAmB,EACK,IAAU,EACnB,MAAc,EAC5B,IAAa;QAEzB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAC5C,wCAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAC7B,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,MAAM,IAAA,iCAAa,EAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;IAC1D,CAAC;IAIK,AAAN,KAAK,CAAC,aAAa,CACN,GAAmB,EACQ,KAAW,EACvB,MAAc;QAExC,OAAO,IAAA,yCAAqB,EAAC,IAAA,mCAAkB,EAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;;AAtGU,0DAAuB;AAc5B;IADL,IAAA,mBAAG,EAAC,UAAU,CAAC;IAEb,WAAA,IAAA,uBAAO,GAAE,CAAA;IACT,WAAA,IAAA,+BAAsB,EAAC,UAAU,CAAC,CAAA;;;;0DAIpC;AAIK;IADL,IAAA,mBAAG,EAAC,aAAa,CAAC;IAEhB,WAAA,IAAA,+BAAsB,EAAC,UAAU,CAAC,CAAA;;;;4DAGpC;AAQK;IADL,IAAA,oBAAI,EAAC,SAAS,CAAC;IAEb,WAAA,IAAA,uBAAO,GAAE,CAAA;IACT,WAAA,IAAA,+BAAsB,EAAC,UAAU,CAAC,CAAA;IAClC,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;sDAMZ;AAGK;IADL,IAAA,oBAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,uBAAO,GAAE,CAAA;IACT,WAAA,IAAA,+BAAsB,EAAC,SAAS,CAAC,CAAA;IACjC,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;qDAIZ;AAGK;IADL,IAAA,mBAAG,EAAC,KAAK,CAAC;IAER,WAAA,IAAA,uBAAO,GAAE,CAAA;IACT,WAAA,IAAA,+BAAsB,EAAC,UAAU,CAAC,CAAA;IAClC,WAAA,IAAA,yBAAS,EAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACxB,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;qDAgBZ;AAGK;IADL,IAAA,oBAAI,EAAC,eAAe,CAAC;IAEnB,WAAA,IAAA,uBAAO,GAAE,CAAA;IACT,WAAA,IAAA,+BAAsB,EAAC,SAAS,CAAC,CAAA;IACjC,WAAA,IAAA,yBAAS,EAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACxB,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;wDAOZ;AAIK;IADL,IAAA,mBAAG,EAAC,oBAAoB,CAAC;IAEvB,WAAA,IAAA,uBAAO,GAAE,CAAA;IACT,WAAA,IAAA,+BAAsB,EAAC,YAAY,CAAC,CAAA;IACpC,WAAA,IAAA,yBAAS,EAAC,IAAI,EAAE,OAAO,CAAC,CAAA;;;;4DAG1B;kCAtGU,uBAAuB;IADnC,IAAA,mBAAY,GAAE;GACF,uBAAuB,CAuGnC"}

package/dist/pages/settings/users/security-attention.d.ts

@@ -0,0 +1,3 @@
+import type { TwoFactorStatus } from "./two-factor-operations";
+export type SecurityAttention = "two_factor_off" | "backup_codes_unsaved" | "backup_codes_low";
+export declare function securityAttention(twoFactor: TwoFactorStatus): SecurityAttention[];

package/dist/pages/settings/users/security-attention.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.securityAttention = securityAttention;
+const LOW_BACKUP_CODES = 3;
+const isTwoFactorOn = (twoFactor) => twoFactor.methods.length > 0;
+const ATTENTION_RULES = [
+    { id: "two_factor_off", applies: (twoFactor) => !isTwoFactorOn(twoFactor) },
+    {
+        id: "backup_codes_unsaved",
+        applies: (twoFactor) => twoFactor.hasBackupCodes &&
+            !!twoFactor.backupCodesGeneratedAt &&
+            !twoFactor.backupCodesSavedAt,
+    },
+    {
+        id: "backup_codes_low",
+        applies: (twoFactor) => isTwoFactorOn(twoFactor) && twoFactor.backupCodesLeft <= LOW_BACKUP_CODES,
+    },
+];
+function securityAttention(twoFactor) {
+    return ATTENTION_RULES.filter((rule) => rule.applies(twoFactor)).map((rule) => rule.id);
+}
+//# sourceMappingURL=security-attention.js.map

package/dist/pages/settings/users/security-attention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-attention.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/security-attention.ts"],"names":[],"mappings":";;AA2CA,8CAMC;AAxCD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAO3B,MAAM,aAAa,GAAG,CAAC,SAA0B,EAAW,EAAE,CAC5D,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;AAM/B,MAAM,eAAe,GAAoB;IACvC,EAAE,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE;IAC3E;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CACrB,SAAS,CAAC,cAAc;YACxB,CAAC,CAAC,SAAS,CAAC,sBAAsB;YAClC,CAAC,SAAS,CAAC,kBAAkB;KAChC;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CACrB,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,eAAe,IAAI,gBAAgB;KAC5E;CACF,CAAC;AAMF,SAAgB,iBAAiB,CAC/B,SAA0B;IAE1B,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAClE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAClB,CAAC;AACJ,CAAC"}

package/dist/pages/settings/users/security.d.ts

@@ -0,0 +1,31 @@
+import { SessionModel, type User, UserModel } from "@antelopejs/interface-dms/auth/db";
+declare const SecuritySettingsController_base: {
+    new (...args: any[]): {};
+    extend: <T extends import("@antelopejs/interface-api").ControllerClass>(this: T, location: string) => T;
+    location: string;
+};
+export declare class SecuritySettingsController extends SecuritySettingsController_base {
+    static statusComponent: import("@antelopejs/interface-dms").ComponentBuilder<unknown>;
+    static passwordComponent: import("@antelopejs/interface-dms").ComponentBuilder<unknown>;
+    static emailComponent: import("@antelopejs/interface-dms").ComponentBuilder<unknown>;
+    static twoFactorComponent: import("@antelopejs/interface-dms").ComponentBuilder<unknown>;
+    static sessionsComponent: import("@antelopejs/interface-dms").ComponentBuilder<unknown>;
+    user: User;
+    getOverview(sessionModel: SessionModel): Promise<import("./account-credentials").SecurityOverview>;
+    updatePassword(body: unknown, userModel: UserModel, sessionModel: SessionModel, authorization: string): Promise<import("./account-credentials").PasswordChangeResult>;
+    requestEmailChange(body: unknown, userModel: UserModel): Promise<import("./email-change").EmailChangeRequested>;
+    confirmEmailChange(body: unknown, userModel: UserModel): Promise<Partial<User>>;
+    cancelEmailChange(): Promise<import("./email-change").EmailChangeCancelled>;
+    getTwoFactorStatus(): import("./two-factor-operations").TwoFactorStatus;
+    enableTotp(body: unknown, userModel: UserModel): Promise<import("./two-factor-operations").TotpSetup>;
+    confirmTotp(body: unknown, userModel: UserModel): Promise<import("./two-factor-operations").MethodEnabledResult>;
+    enableEmail(body: unknown, userModel: UserModel): Promise<import("./two-factor-operations").MethodEnabledResult>;
+    disableTwoFactor(body: unknown, userModel: UserModel): Promise<import("./two-factor-operations").SuccessResult>;
+    regenerateBackupCodes(body: unknown, userModel: UserModel): Promise<import("./two-factor-operations").BackupCodesResult>;
+    markBackupCodesSaved(userModel: UserModel): Promise<import("./two-factor-operations").TwoFactorStatus>;
+    requestTwoFactorEmailCode(userModel: UserModel): Promise<import("./two-factor-operations").SuccessResult>;
+    getSessions(sessionModel: SessionModel, authorization: string): Promise<import("./profile-helpers").SessionResponse[]>;
+    revokeOtherSessions(userModel: UserModel, sessionModel: SessionModel, authorization: string): Promise<import("./account-credentials").SessionsRevokedResult>;
+    revokeSession(id: string, sessionModel: SessionModel): Promise<import("./account-credentials").SessionsRevokedResult>;
+}
+export {};