@antelopejs/dms 0.5.6 → 0.6.0

package/dist/pages/settings/users/region.js

@@ -0,0 +1,77 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RegionSettingsController = void 0;
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const custom_1 = require("@antelopejs/interface-dms/base/custom");
+const guards_1 = require("@antelopejs/interface-dms/guards");
+const page_1 = require("@antelopejs/interface-dms/page");
+const regional_preferences_schema_1 = require("../../../validation/regional-preferences.schema");
+const category_1 = require("./category");
+const regional_preferences_1 = require("./regional-preferences");
+const region_form_1 = require("./region-form");
+const HTTP_NOT_FOUND = 404;
+let RegionSettingsController = class RegionSettingsController extends (0, page_1.PageController)("region", {
+    displayName: "$menu.region",
+    category: category_1.userCategory,
+    icon: "i-ph-globe-hemisphere-west",
+    order: 2,
+    description: "$page.settings.description.region",
+}) {
+    static regionComponent = (0, region_form_1.regionPreferencesForm)().meta({
+        name: "$menu.region",
+        icon: "i-ph-globe-hemisphere-west",
+    });
+    static formatsComponent = (0, custom_1.CustomComponent)("DmsRegionFormatPreview").meta({
+        name: "$page.settings.region.preview_title",
+        icon: "i-ph-eye",
+    });
+    getPreferences() {
+        return (0, regional_preferences_1.toRegionFormValues)((0, regional_preferences_1.readRegionalPreferences)(this.user));
+    }
+    async updatePreferences(body, userModel) {
+        const input = (0, interface_api_util_1.assertValidation)((0, regional_preferences_1.fromRegionFormValues)(body), (value) => regional_preferences_schema_1.regionalPreferencesSchema.parse(value));
+        const stored = await userModel.get(this.user._id);
+        (0, interface_api_util_1.assert)(stored, HTTP_NOT_FOUND, "error.user_not_found");
+        (0, regional_preferences_1.applyRegionalPreferences)(stored, input);
+        await userModel.update(stored);
+        return (0, regional_preferences_1.toRegionFormValues)((0, regional_preferences_1.readRegionalPreferences)(stored));
+    }
+};
+exports.RegionSettingsController = RegionSettingsController;
+__decorate([
+    (0, guards_1.AuthUserWithPermission)(RegionSettingsController),
+    __metadata("design:type", Function)
+], RegionSettingsController.prototype, "user", void 0);
+__decorate([
+    (0, interface_api_1.Get)("/preferences"),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Object)
+], RegionSettingsController.prototype, "getPreferences", null);
+__decorate([
+    (0, interface_api_1.Post)("/preferences"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __param(1, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, db_1.UserModel]),
+    __metadata("design:returntype", Promise)
+], RegionSettingsController.prototype, "updatePreferences", null);
+exports.RegionSettingsController = RegionSettingsController = __decorate([
+    (0, page_1.RegisterPage)()
+], RegionSettingsController);
+//# sourceMappingURL=region.js.map

package/dist/pages/settings/users/region.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"region.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/region.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6DAAgE;AAChE,uEAA0E;AAC1E,6FAAkE;AAClE,0DAAyE;AACzE,kEAAwE;AACxE,6DAA0E;AAC1E,yDAA8E;AAC9E,iGAA4F;AAC5F,yCAA0C;AAC1C,iEAKgC;AAChC,+CAAsD;AAEtD,MAAM,cAAc,GAAG,GAAG,CAAC;AAQpB,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,IAAA,qBAAc,EAAC,QAAQ,EAAE;IACrE,WAAW,EAAE,cAAc;IAC3B,QAAQ,EAAE,uBAAY;IACtB,IAAI,EAAE,4BAA4B;IAClC,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,mCAAmC;CACjD,CAAC;IACA,MAAM,CAAC,eAAe,GAAG,IAAA,mCAAqB,GAAE,CAAC,IAAI,CAAC;QACpD,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,4BAA4B;KACnC,CAAC,CAAC;IAEH,MAAM,CAAC,gBAAgB,GAAG,IAAA,wBAAe,EAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC;QACvE,IAAI,EAAE,qCAAqC;QAC3C,IAAI,EAAE,UAAU;KACjB,CAAC,CAAC;IAMH,cAAc;QACZ,OAAO,IAAA,yCAAkB,EAAC,IAAA,8CAAuB,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;IAIK,AAAN,KAAK,CAAC,iBAAiB,CACT,IAAa,EACP,SAAoB;QAEtC,MAAM,KAAK,GAAG,IAAA,qCAAgB,EAAC,IAAA,2CAAoB,EAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CACnE,uDAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CACvC,CAAC;QAGF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,IAAA,2BAAM,EAAC,MAAM,EAAE,cAAc,EAAE,sBAAsB,CAAC,CAAC;QACvD,IAAA,+CAAwB,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,IAAA,yCAAkB,EAAC,IAAA,8CAAuB,EAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;;AAzCU,4DAAwB;AAkB3B;IADP,IAAA,+BAAsB,EAAC,wBAAwB,CAAC;;sDAC9B;AAGnB;IADC,IAAA,mBAAG,EAAC,cAAc,CAAC;;;;8DAGnB;AAIK;IADL,IAAA,oBAAI,EAAC,cAAc,CAAC;IAElB,WAAA,IAAA,wBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;;6CAAY,cAAS;;iEAYvC;mCAzCU,wBAAwB;IADpC,IAAA,mBAAY,GAAE;GACF,wBAAwB,CA0CpC"}

package/dist/pages/settings/users/regional-preferences.d.ts

@@ -0,0 +1,14 @@
+import type { User, UserDateFormat, UserTimeFormat, UserWeekStart } from "@antelopejs/interface-dms/auth/db";
+import type { RegionalPreferencesInput } from "../../../validation/regional-preferences.schema";
+export declare const AUTOMATIC_PREFERENCE = "auto";
+export interface RegionalPreferences {
+    language: string | null;
+    timeZone: string | null;
+    weekStart: UserWeekStart | null;
+    timeFormat: UserTimeFormat | null;
+    dateFormat: UserDateFormat | null;
+}
+export declare function applyRegionalPreferences(user: User, input: RegionalPreferencesInput): void;
+export declare function readRegionalPreferences(user: User): RegionalPreferences;
+export declare function toRegionFormValues(preferences: RegionalPreferences): Record<string, unknown>;
+export declare function fromRegionFormValues(body: unknown): unknown;

package/dist/pages/settings/users/regional-preferences.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTOMATIC_PREFERENCE = void 0;
+exports.applyRegionalPreferences = applyRegionalPreferences;
+exports.readRegionalPreferences = readRegionalPreferences;
+exports.toRegionFormValues = toRegionFormValues;
+exports.fromRegionFormValues = fromRegionFormValues;
+exports.AUTOMATIC_PREFERENCE = "auto";
+const REGIONAL_KEYS = [
+    "timeZone",
+    "weekStart",
+    "timeFormat",
+    "dateFormat",
+];
+function assignPreference(user, key, value) {
+    if (value === undefined)
+        return;
+    user[key] = value;
+}
+function applyRegionalPreferences(user, input) {
+    if (input.language)
+        user.language = input.language;
+    for (const key of REGIONAL_KEYS)
+        assignPreference(user, key, input[key]);
+}
+function readRegionalPreferences(user) {
+    return {
+        language: user.language || null,
+        timeZone: user.timeZone ?? null,
+        weekStart: user.weekStart ?? null,
+        timeFormat: user.timeFormat ?? null,
+        dateFormat: user.dateFormat ?? null,
+    };
+}
+function toRegionFormValues(preferences) {
+    const values = { language: preferences.language };
+    for (const key of REGIONAL_KEYS) {
+        const value = preferences[key];
+        values[key] = value === null ? exports.AUTOMATIC_PREFERENCE : String(value);
+    }
+    return values;
+}
+function fromRegionFormValues(body) {
+    if (!body || typeof body !== "object")
+        return body;
+    const values = { ...body };
+    for (const key of REGIONAL_KEYS) {
+        if (values[key] === exports.AUTOMATIC_PREFERENCE)
+            values[key] = null;
+    }
+    if (typeof values.weekStart === "string") {
+        values.weekStart = Number(values.weekStart);
+    }
+    return values;
+}
+//# sourceMappingURL=regional-preferences.js.map

package/dist/pages/settings/users/regional-preferences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regional-preferences.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/regional-preferences.ts"],"names":[],"mappings":";;;AAgDA,4DAMC;AAGD,0DAQC;AAMD,gDASC;AAOD,oDAWC;AAtFY,QAAA,oBAAoB,GAAG,MAAM,CAAC;AAa3C,MAAM,aAAa,GAAkB;IACnC,UAAU;IACV,WAAW;IACX,YAAY;IACZ,YAAY;CACb,CAAC;AAEF,SAAS,gBAAgB,CACvB,IAAU,EACV,GAAM,EACN,KAAyC;IAEzC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAC/B,IAAgC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AACjD,CAAC;AASD,SAAgB,wBAAwB,CACtC,IAAU,EACV,KAA+B;IAE/B,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACnD,KAAK,MAAM,GAAG,IAAI,aAAa;QAAE,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3E,CAAC;AAGD,SAAgB,uBAAuB,CAAC,IAAU;IAChD,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;QACjC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;QACnC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;KACpC,CAAC;AACJ,CAAC;AAMD,SAAgB,kBAAkB,CAChC,WAAgC;IAEhC,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC;IAC3E,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,4BAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD,SAAgB,oBAAoB,CAAC,IAAa;IAChD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,MAAM,GAAG,EAAE,GAAI,IAAgC,EAAE,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,4BAAoB;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAC/D,CAAC;IAED,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/pages/settings/users/role-editor-store.d.ts

@@ -0,0 +1,19 @@
+import { type ConfirmDialogSerialized } from "@antelopejs/interface-dms/base/table-view";
+import { type RoleEditorInput } from "../../../validation/role-editor.schema";
+import { type RoleEditorCapabilities, type RoleEditorPermissionNode, type RolesOverview } from "./role-editor";
+export declare const REASSIGN_FIELD = "reassignTo";
+export interface RoleEditorActor {
+    tenantId: string;
+    permissions: Set<string>;
+}
+export declare function loadRoleEditorTree(): Promise<RoleEditorPermissionNode[]>;
+export declare function loadRolesOverview(actor: RoleEditorActor, capabilities: RoleEditorCapabilities): Promise<RolesOverview>;
+export declare function createRole(actor: RoleEditorActor, input: RoleEditorInput): Promise<string>;
+export interface RoleUpdateResult {
+    name: string;
+    permissionsChanged: boolean;
+}
+export declare function updateRole(actor: RoleEditorActor, roleId: string, input: RoleEditorInput): Promise<RoleUpdateResult>;
+export declare function duplicateRole(actor: RoleEditorActor, roleId: string, name: string): Promise<string>;
+export declare function loadRoleDeleteConfirm(tenantId: string, roleId: string): Promise<ConfirmDialogSerialized>;
+export declare function prepareRoleDeletion(tenantId: string, roleIds: string[], values: Record<string, unknown> | undefined): Promise<void>;

package/dist/pages/settings/users/role-editor-store.js

@@ -0,0 +1,196 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REASSIGN_FIELD = void 0;
+exports.loadRoleEditorTree = loadRoleEditorTree;
+exports.loadRolesOverview = loadRolesOverview;
+exports.createRole = createRole;
+exports.updateRole = updateRole;
+exports.duplicateRole = duplicateRole;
+exports.loadRoleDeleteConfirm = loadRoleDeleteConfirm;
+exports.prepareRoleDeletion = prepareRoleDeletion;
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const db_2 = require("@antelopejs/interface-dms/db");
+const permissions_1 = require("@antelopejs/interface-dms/permissions");
+const default_types_1 = require("@antelopejs/interface-dms/base/data-types/default-types");
+const table_view_1 = require("@antelopejs/interface-dms/base/table-view");
+const page_1 = require("../../../implementations/dms/page");
+const notification_rules_1 = require("../../../utils/notification-rules");
+const role_editor_schema_1 = require("../../../validation/role-editor.schema");
+const role_editor_1 = require("./role-editor");
+const HTTP_NOT_FOUND = 404;
+const HTTP_CONFLICT = 409;
+const HTTP_INTERNAL_ERROR = 500;
+const ROLE_NOT_FOUND_MESSAGE = "$page.settings.roles.error.not_found";
+const NAME_TAKEN_MESSAGE = "$page.settings.roles.error.name_taken";
+const IN_USE_MESSAGE = "$page.settings.roles.error.in_use";
+const INVALID_REASSIGN_MESSAGE = "$page.settings.roles.error.invalid_reassign";
+const NOT_CREATED_MESSAGE = "$page.settings.roles.error.not_created";
+const DELETE_I18N = "$page.settings.roles.editor";
+exports.REASSIGN_FIELD = "reassignTo";
+async function loadRoleEditorTree() {
+    return (0, role_editor_1.orderRoleEditorTree)((0, role_editor_1.mapRoleEditorTree)(await (0, permissions_1.GetPermissions)(), (0, page_1.GetCategoryPermissionIds)()), (0, page_1.GetMenuOrder)());
+}
+async function loadUserNames(userIds) {
+    if (userIds.length === 0)
+        return new Map();
+    const users = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).getBy("_id", ...new Set(userIds));
+    return new Map(users.map((user) => [user._id, user.name]));
+}
+async function loadRolesOverview(actor, capabilities) {
+    const [roles, members, invites, tree] = await Promise.all([
+        (0, interface_database_decorators_1.GetModel)(db_2.RoleModel, actor.tenantId).getAll(),
+        (0, interface_database_decorators_1.GetModel)(db_2.TenantMemberModel, actor.tenantId).listAll(),
+        (0, interface_database_decorators_1.GetModel)(db_2.UserInviteModel, actor.tenantId).getAll(),
+        loadRoleEditorTree(),
+    ]);
+    const permissionIds = (0, role_editor_1.collectPermissionIds)(tree);
+    const userNames = await loadUserNames(members.map((member) => member.userId));
+    return {
+        roles: (0, role_editor_1.summarizeRoles)({
+            roles,
+            members,
+            invites,
+            userNames,
+            knownPermissionIds: new Set(permissionIds),
+            now: new Date(),
+        }),
+        owners: (0, role_editor_1.summarizeOwners)(members, userNames),
+        totalPermissions: permissionIds.length,
+        grantable: null,
+        capabilities,
+    };
+}
+async function requireRole(tenantId, roleId) {
+    const role = await (0, interface_database_decorators_1.GetModel)(db_2.RoleModel, tenantId).get(roleId);
+    (0, interface_api_util_1.assert)(role, HTTP_NOT_FOUND, ROLE_NOT_FOUND_MESSAGE);
+    return role;
+}
+async function assertNameAvailable(tenantId, name, roleId) {
+    const existing = await (0, interface_database_decorators_1.GetModel)(db_2.RoleModel, tenantId).getByName(name);
+    (0, interface_api_util_1.assert)(!existing || existing._id === roleId, HTTP_CONFLICT, NAME_TAKEN_MESSAGE);
+}
+async function insertRole(tenantId, input) {
+    const now = new Date();
+    const [roleId] = await (0, interface_database_decorators_1.GetModel)(db_2.RoleModel, tenantId).insert({
+        name: input.name,
+        description: input.description,
+        permissions: [...new Set(input.permissions)],
+        createdAt: now,
+        updatedAt: now,
+    });
+    (0, interface_api_util_1.assert)(roleId, HTTP_INTERNAL_ERROR, NOT_CREATED_MESSAGE);
+    return roleId;
+}
+async function createRole(actor, input) {
+    await assertNameAvailable(actor.tenantId, input.name);
+    return insertRole(actor.tenantId, input);
+}
+async function updateRole(actor, roleId, input) {
+    const role = await requireRole(actor.tenantId, roleId);
+    await assertNameAvailable(actor.tenantId, input.name, roleId);
+    const permissions = [...new Set(input.permissions)];
+    const permissionsChanged = !(0, notification_rules_1.haveSameMembers)(role.permissions ?? [], permissions);
+    role.name = input.name;
+    role.description = input.description;
+    role.permissions = permissions;
+    role.updatedAt = new Date();
+    await (0, interface_database_decorators_1.GetModel)(db_2.RoleModel, actor.tenantId).update(role);
+    return { name: role.name, permissionsChanged };
+}
+async function duplicateRole(actor, roleId, name) {
+    const role = await requireRole(actor.tenantId, roleId);
+    await assertNameAvailable(actor.tenantId, name);
+    const permissions = role.permissions ?? [];
+    return insertRole(actor.tenantId, {
+        name,
+        description: role.description ?? "",
+        permissions,
+    });
+}
+async function assertRoleUnused(tenantId, roleId) {
+    const [members, invites] = await Promise.all([
+        (0, interface_database_decorators_1.GetModel)(db_2.TenantMemberModel, tenantId).listAll(),
+        (0, interface_database_decorators_1.GetModel)(db_2.UserInviteModel, tenantId).getAll(),
+    ]);
+    const holders = (0, role_editor_1.countRoleHolders)(roleId, members, invites, new Date());
+    (0, interface_api_util_1.assert)(holders === 0, HTTP_CONFLICT, IN_USE_MESSAGE);
+}
+async function moveRoleHolders(tenantId, roleId, replacementId) {
+    const memberModel = (0, interface_database_decorators_1.GetModel)(db_2.TenantMemberModel, tenantId);
+    const inviteModel = (0, interface_database_decorators_1.GetModel)(db_2.UserInviteModel, tenantId);
+    const [members, invites] = await Promise.all([
+        memberModel.listAll(),
+        inviteModel.getAll(),
+    ]);
+    for (const member of members) {
+        const roleIds = (0, role_editor_1.replaceRoleReference)(member.roleIds ?? [], roleId, replacementId);
+        if (roleIds)
+            await memberModel.update(member._id, { roleIds });
+    }
+    for (const invite of invites) {
+        const rolesIds = (0, role_editor_1.replaceRoleReference)(invite.roles_ids ?? [], roleId, replacementId);
+        if (rolesIds)
+            await inviteModel.update(invite._id, { roles_ids: rolesIds });
+    }
+}
+async function loadRoleDeleteConfirm(tenantId, roleId) {
+    const role = await requireRole(tenantId, roleId);
+    const [roles, members, invites] = await Promise.all([
+        (0, interface_database_decorators_1.GetModel)(db_2.RoleModel, tenantId).getAll(),
+        (0, interface_database_decorators_1.GetModel)(db_2.TenantMemberModel, tenantId).listAll(),
+        (0, interface_database_decorators_1.GetModel)(db_2.UserInviteModel, tenantId).getAll(),
+    ]);
+    const holders = (0, role_editor_1.countRoleHolders)(roleId, members, invites, new Date());
+    const otherRoles = roles.filter((candidate) => candidate._id !== roleId);
+    return (0, table_view_1.serializeConfirmDialog)({
+        title: `${DELETE_I18N}.delete_title`,
+        description: holders > 0
+            ? `${DELETE_I18N}.delete_in_use`
+            : `${DELETE_I18N}.delete_unused`,
+        params: { name: role.name, count: holders },
+        icon: "i-ph-trash",
+        color: "error",
+        confirmLabel: `${DELETE_I18N}.delete_confirm`,
+        cancelLabel: `${DELETE_I18N}.cancel`,
+        fields: holders > 0
+            ? [
+                {
+                    id: exports.REASSIGN_FIELD,
+                    label: `${DELETE_I18N}.reassign_label`,
+                    type: new default_types_1.DefaultDataTypes.SelectType({
+                        items: otherRoles.map(({ _id, name }) => ({
+                            value: _id,
+                            label: name,
+                        })),
+                        placeholder: `${DELETE_I18N}.reassign_none`,
+                        deselectable: true,
+                    }),
+                },
+            ]
+            : undefined,
+    });
+}
+async function prepareRoleDeletion(tenantId, roleIds, values) {
+    if (!values) {
+        for (const roleId of roleIds)
+            await assertRoleUnused(tenantId, roleId);
+        return;
+    }
+    const { reassignTo } = (0, interface_api_util_1.assertValidation)(values, (v) => role_editor_schema_1.roleDeleteSchema.parse(v));
+    if (reassignTo) {
+        if (roleIds.includes(reassignTo)) {
+            throw new interface_api_1.HTTPResult(HTTP_CONFLICT, {
+                field: exports.REASSIGN_FIELD,
+                message: INVALID_REASSIGN_MESSAGE,
+            });
+        }
+        await requireRole(tenantId, reassignTo);
+    }
+    for (const roleId of roleIds) {
+        await moveRoleHolders(tenantId, roleId, reassignTo ?? undefined);
+    }
+}
+//# sourceMappingURL=role-editor-store.js.map

package/dist/pages/settings/users/role-editor-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-editor-store.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/role-editor-store.ts"],"names":[],"mappings":";;;AA6DA,gDAOC;AASD,8CA4BC;AAsCD,gCAMC;AAUD,gCAkBC;AAGD,sCAaC;AAoDD,sDAyCC;AAQD,kDA0BC;AAhUD,6DAAuD;AACvD,uEAA0E;AAC1E,6FAAqE;AACrE,0DAA8D;AAC9D,qDAKsC;AACtC,uEAAuE;AACvE,2FAA2F;AAC3F,0EAGmD;AACnD,4DAG2C;AAC3C,0EAAoE;AACpE,+EAGgD;AAChD,+CAWuB;AAEvB,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AACtE,MAAM,kBAAkB,GAAG,uCAAuC,CAAC;AACnE,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAC3D,MAAM,wBAAwB,GAAG,6CAA6C,CAAC;AAC/E,MAAM,mBAAmB,GAAG,wCAAwC,CAAC;AACrE,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAErC,QAAA,cAAc,GAAG,YAAY,CAAC;AAYpC,KAAK,UAAU,kBAAkB;IAGtC,OAAO,IAAA,iCAAmB,EACxB,IAAA,+BAAiB,EAAC,MAAM,IAAA,4BAAc,GAAE,EAAE,IAAA,+BAAwB,GAAE,CAAC,EACrE,IAAA,mBAAY,GAAE,CACf,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAiB;IAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAGM,KAAK,UAAU,iBAAiB,CACrC,KAAsB,EACtB,YAAoC;IAEpC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxD,IAAA,wCAAQ,EAAC,cAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE;QAC5C,IAAA,wCAAQ,EAAC,sBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;QACrD,IAAA,wCAAQ,EAAC,oBAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE;QAClD,kBAAkB,EAAE;KACrB,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,IAAA,kCAAoB,EAAC,IAAI,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,OAAO;QACL,KAAK,EAAE,IAAA,4BAAc,EAAC;YACpB,KAAK;YACL,OAAO;YACP,OAAO;YACP,SAAS;YACT,kBAAkB,EAAE,IAAI,GAAG,CAAC,aAAa,CAAC;YAC1C,GAAG,EAAE,IAAI,IAAI,EAAE;SAChB,CAAC;QACF,MAAM,EAAE,IAAA,6BAAe,EAAC,OAAO,EAAE,SAAS,CAAC;QAC3C,gBAAgB,EAAE,aAAa,CAAC,MAAM;QAGtC,SAAS,EAAE,IAAI;QACf,YAAY;KACb,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,MAAc;IACzD,MAAM,IAAI,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAA,2BAAM,EAAC,IAAI,EAAE,cAAc,EAAE,sBAAsB,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,QAAgB,EAChB,IAAY,EACZ,MAAe;IAEf,MAAM,QAAQ,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,EAAE,QAAQ,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrE,IAAA,2BAAM,EACJ,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,EACpC,aAAa,EACb,kBAAkB,CACnB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,QAAgB,EAChB,KAAsB;IAEtB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC1D,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5C,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC,CAAC;IACH,IAAA,2BAAM,EAAC,MAAM,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC;AAChB,CAAC;AAGM,KAAK,UAAU,UAAU,CAC9B,KAAsB,EACtB,KAAsB;IAEtB,MAAM,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAUM,KAAK,UAAU,UAAU,CAC9B,KAAsB,EACtB,MAAc,EACd,KAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACpD,MAAM,kBAAkB,GAAG,CAAC,IAAA,oCAAe,EACzC,IAAI,CAAC,WAAW,IAAI,EAAE,EACtB,WAAW,CACZ,CAAC;IACF,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACvB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACrC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAC5B,MAAM,IAAA,wCAAQ,EAAC,cAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC;AACjD,CAAC;AAGM,KAAK,UAAU,aAAa,CACjC,KAAsB,EACtB,MAAc,EACd,IAAY;IAEZ,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IAC3C,OAAO,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE;QAChC,IAAI;QACJ,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;QACnC,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAMD,KAAK,UAAU,gBAAgB,CAC7B,QAAgB,EAChB,MAAc;IAEd,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3C,IAAA,wCAAQ,EAAC,sBAAiB,EAAE,QAAQ,CAAC,CAAC,OAAO,EAAE;QAC/C,IAAA,wCAAQ,EAAC,oBAAe,EAAE,QAAQ,CAAC,CAAC,MAAM,EAAE;KAC7C,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAA,8BAAgB,EAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACvE,IAAA,2BAAM,EAAC,OAAO,KAAK,CAAC,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAgB,EAChB,MAAc,EACd,aAAsB;IAEtB,MAAM,WAAW,GAAG,IAAA,wCAAQ,EAAC,sBAAiB,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAA,wCAAQ,EAAC,oBAAe,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3C,WAAW,CAAC,OAAO,EAAE;QACrB,WAAW,CAAC,MAAM,EAAE;KACrB,CAAC,CAAC;IACH,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAA,kCAAoB,EAClC,MAAM,CAAC,OAAO,IAAI,EAAE,EACpB,MAAM,EACN,aAAa,CACd,CAAC;QACF,IAAI,OAAO;YAAE,MAAM,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAA,kCAAoB,EACnC,MAAM,CAAC,SAAS,IAAI,EAAE,EACtB,MAAM,EACN,aAAa,CACd,CAAC;QACF,IAAI,QAAQ;YAAE,MAAM,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAOM,KAAK,UAAU,qBAAqB,CACzC,QAAgB,EAChB,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClD,IAAA,wCAAQ,EAAC,cAAS,EAAE,QAAQ,CAAC,CAAC,MAAM,EAAE;QACtC,IAAA,wCAAQ,EAAC,sBAAiB,EAAE,QAAQ,CAAC,CAAC,OAAO,EAAE;QAC/C,IAAA,wCAAQ,EAAC,oBAAe,EAAE,QAAQ,CAAC,CAAC,MAAM,EAAE;KAC7C,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAA,8BAAgB,EAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;IACzE,OAAO,IAAA,mCAAsB,EAAC;QAC5B,KAAK,EAAE,GAAG,WAAW,eAAe;QACpC,WAAW,EACT,OAAO,GAAG,CAAC;YACT,CAAC,CAAC,GAAG,WAAW,gBAAgB;YAChC,CAAC,CAAC,GAAG,WAAW,gBAAgB;QACpC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;QAC3C,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,GAAG,WAAW,iBAAiB;QAC7C,WAAW,EAAE,GAAG,WAAW,SAAS;QACpC,MAAM,EACJ,OAAO,GAAG,CAAC;YACT,CAAC,CAAC;gBACE;oBACE,EAAE,EAAE,sBAAc;oBAClB,KAAK,EAAE,GAAG,WAAW,iBAAiB;oBACtC,IAAI,EAAE,IAAI,gCAAgB,CAAC,UAAU,CAAC;wBACpC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;4BACxC,KAAK,EAAE,GAAG;4BACV,KAAK,EAAE,IAAI;yBACZ,CAAC,CAAC;wBACH,WAAW,EAAE,GAAG,WAAW,gBAAgB;wBAC3C,YAAY,EAAE,IAAI;qBACnB,CAAC;iBACH;aACF;YACH,CAAC,CAAC,SAAS;KAChB,CAAC,CAAC;AACL,CAAC;AAQM,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,OAAiB,EACjB,MAA2C;IAE3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,qCAAgB,EAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CACpD,qCAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAC1B,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QAGf,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,0BAAU,CAAC,aAAa,EAAE;gBAClC,KAAK,EAAE,sBAAc;gBACrB,OAAO,EAAE,wBAAwB;aAClC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,IAAI,SAAS,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}

package/dist/pages/settings/users/role-editor.d.ts

@@ -0,0 +1,60 @@
+import type { PermissionTree } from "@antelopejs/interface-dms/permissions";
+import type { Role, TenantMember, UserInvite } from "@antelopejs/interface-dms/db";
+export declare const ROLE_MEMBER_PREVIEW_LIMIT = 3;
+export declare const ALL_PERMISSIONS = "*";
+export interface RoleEditorPermissionNode {
+    id: string;
+    label: string;
+    icon?: string;
+    description?: string;
+    dependencies?: string[];
+    children?: RoleEditorPermissionNode[];
+}
+export interface RoleMemberPreview {
+    userId: string;
+    name: string;
+}
+export interface RoleSummary {
+    _id: string;
+    name: string;
+    description: string;
+    permissions: string[];
+    permissionCount: number;
+    memberCount: number;
+    members: RoleMemberPreview[];
+    inviteCount: number;
+}
+export interface RoleOwnersSummary {
+    memberCount: number;
+    members: RoleMemberPreview[];
+}
+export interface RoleEditorCapabilities {
+    canAdd: boolean;
+    canEdit: boolean;
+    canDelete: boolean;
+}
+export interface RolesOverview {
+    roles: RoleSummary[];
+    owners: RoleOwnersSummary;
+    totalPermissions: number;
+    grantable: string[] | null;
+    capabilities: RoleEditorCapabilities;
+}
+export interface RoleSummarySource {
+    roles: Role[];
+    members: TenantMember[];
+    invites: UserInvite[];
+    userNames: Map<string, string>;
+    knownPermissionIds: Set<string>;
+    now: Date;
+}
+export declare function mapRoleEditorTree(permissionTree: Record<string, PermissionTree>, categoryIds?: ReadonlySet<string>): RoleEditorPermissionNode[];
+export declare const SETTINGS_ROOT_PERMISSION_ID = "settings";
+export declare function orderRoleEditorTree(nodes: RoleEditorPermissionNode[], menuOrder: Map<string, number>): RoleEditorPermissionNode[];
+export declare function collectPermissionIds(nodes: RoleEditorPermissionNode[]): string[];
+export declare function countKnownPermissions(permissions: string[], knownPermissionIds: Set<string>): number;
+export declare function isInvitePending(invite: UserInvite, now: Date): boolean;
+export declare function summarizeRoles(source: RoleSummarySource): RoleSummary[];
+export declare function summarizeOwners(members: TenantMember[], userNames: Map<string, string>): RoleOwnersSummary;
+export declare function replaceRoleReference(roleIds: string[], deletedId: string, replacementId?: string): string[] | undefined;
+export declare function countRoleHolders(roleId: string, members: TenantMember[], invites: UserInvite[], now: Date): number;

package/dist/pages/settings/users/role-editor.js

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SETTINGS_ROOT_PERMISSION_ID = exports.ALL_PERMISSIONS = exports.ROLE_MEMBER_PREVIEW_LIMIT = void 0;
+exports.mapRoleEditorTree = mapRoleEditorTree;
+exports.orderRoleEditorTree = orderRoleEditorTree;
+exports.collectPermissionIds = collectPermissionIds;
+exports.countKnownPermissions = countKnownPermissions;
+exports.isInvitePending = isInvitePending;
+exports.summarizeRoles = summarizeRoles;
+exports.summarizeOwners = summarizeOwners;
+exports.replaceRoleReference = replaceRoleReference;
+exports.countRoleHolders = countRoleHolders;
+const permission_tree_nodes_1 = require("./permission-tree-nodes");
+exports.ROLE_MEMBER_PREVIEW_LIMIT = 3;
+exports.ALL_PERMISSIONS = "*";
+function mapRoleEditorTree(permissionTree, categoryIds) {
+    return (0, permission_tree_nodes_1.mapPermissionTree)(permissionTree, (permission, children) => ({
+        id: permission.id,
+        label: (0, permission_tree_nodes_1.permissionLabel)(permission),
+        icon: permission.icon,
+        description: permission.description,
+        dependencies: permission.dependencies,
+        children,
+    }), categoryIds);
+}
+exports.SETTINGS_ROOT_PERMISSION_ID = "settings";
+function sortSiblingsByMenuOrder(nodes, menuOrder) {
+    const unlisted = nodes.filter((node) => !menuOrder.has(node.id));
+    const listed = nodes
+        .filter((node) => menuOrder.has(node.id))
+        .sort((left, right) => (menuOrder.get(left.id) ?? 0) - (menuOrder.get(right.id) ?? 0));
+    return [...unlisted, ...listed];
+}
+function orderBranch(nodes, menuOrder) {
+    return sortSiblingsByMenuOrder(nodes, menuOrder).map((node) => node.children
+        ? { ...node, children: orderBranch(node.children, menuOrder) }
+        : node);
+}
+function orderRoleEditorTree(nodes, menuOrder) {
+    const ordered = orderBranch(nodes, menuOrder);
+    return [
+        ...ordered.filter((node) => node.id !== exports.SETTINGS_ROOT_PERMISSION_ID),
+        ...ordered.filter((node) => node.id === exports.SETTINGS_ROOT_PERMISSION_ID),
+    ];
+}
+function collectPermissionIds(nodes) {
+    return nodes.flatMap((node) => [
+        node.id,
+        ...collectPermissionIds(node.children ?? []),
+    ]);
+}
+function countKnownPermissions(permissions, knownPermissionIds) {
+    return new Set(permissions.filter((id) => knownPermissionIds.has(id))).size;
+}
+function isInvitePending(invite, now) {
+    return new Date(invite.expiresAt).getTime() > now.getTime();
+}
+function previewMembers(members, userNames) {
+    return members.slice(0, exports.ROLE_MEMBER_PREVIEW_LIMIT).map((member) => ({
+        userId: member.userId,
+        name: userNames.get(member.userId) ?? "",
+    }));
+}
+function membersHoldingRole(roleId, members) {
+    return members.filter((member) => (member.roleIds ?? []).includes(roleId));
+}
+function pendingInvitesForRole(roleId, invites, now) {
+    return invites.filter((invite) => isInvitePending(invite, now) && (invite.roles_ids ?? []).includes(roleId));
+}
+function summarizeRole(role, source) {
+    const members = membersHoldingRole(role._id, source.members);
+    const inviteCount = pendingInvitesForRole(role._id, source.invites, source.now).length;
+    const permissions = role.permissions ?? [];
+    return {
+        _id: role._id,
+        name: role.name,
+        description: role.description ?? "",
+        permissions,
+        permissionCount: countKnownPermissions(permissions, source.knownPermissionIds),
+        memberCount: members.length,
+        members: previewMembers(members, source.userNames),
+        inviteCount,
+    };
+}
+function summarizeRoles(source) {
+    return [...source.roles]
+        .sort((left, right) => left.name.localeCompare(right.name))
+        .map((role) => summarizeRole(role, source));
+}
+function summarizeOwners(members, userNames) {
+    const owners = members.filter((member) => member.isTenantOwner === true);
+    return {
+        memberCount: owners.length,
+        members: previewMembers(owners, userNames),
+    };
+}
+function replaceRoleReference(roleIds, deletedId, replacementId) {
+    if (!roleIds.includes(deletedId))
+        return undefined;
+    const remaining = roleIds.filter((id) => id !== deletedId);
+    if (!replacementId || remaining.includes(replacementId))
+        return remaining;
+    return [...remaining, replacementId];
+}
+function countRoleHolders(roleId, members, invites, now) {
+    return (membersHoldingRole(roleId, members).length +
+        pendingInvitesForRole(roleId, invites, now).length);
+}
+//# sourceMappingURL=role-editor.js.map

package/dist/pages/settings/users/role-editor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-editor.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/role-editor.ts"],"names":[],"mappings":";;;AAqFA,8CAgBC;AA2CD,kDASC;AAGD,oDAOC;AAGD,sDAKC;AAGD,0CAEC;AAsDD,wCAIC;AAGD,0CASC;AAMD,oDASC;AAGD,4CAUC;AA5QD,mEAA6E;AAGhE,QAAA,yBAAyB,GAAG,CAAC,CAAC;AAG9B,QAAA,eAAe,GAAG,GAAG,CAAC;AAyEnC,SAAgB,iBAAiB,CAC/B,cAA8C,EAC9C,WAAiC;IAEjC,OAAO,IAAA,yCAAiB,EACtB,cAAc,EACd,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACzB,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,KAAK,EAAE,IAAA,uCAAe,EAAC,UAAU,CAAC;QAClC,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,QAAQ;KACT,CAAC,EACF,WAAW,CACZ,CAAC;AACJ,CAAC;AAOY,QAAA,2BAA2B,GAAG,UAAU,CAAC;AAOtD,SAAS,uBAAuB,CAC9B,KAAiC,EACjC,SAA8B;IAE9B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,KAAK;SACjB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACxC,IAAI,CACH,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CACjE,CAAC;IACJ,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,WAAW,CAClB,KAAiC,EACjC,SAA8B;IAE9B,OAAO,uBAAuB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5D,IAAI,CAAC,QAAQ;QACX,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;QAC9D,CAAC,CAAC,IAAI,CACT,CAAC;AACJ,CAAC;AAMD,SAAgB,mBAAmB,CACjC,KAAiC,EACjC,SAA8B;IAE9B,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9C,OAAO;QACL,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,mCAA2B,CAAC;QACpE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,mCAA2B,CAAC;KACrE,CAAC;AACJ,CAAC;AAGD,SAAgB,oBAAoB,CAClC,KAAiC;IAEjC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,EAAE;QACP,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;KAC7C,CAAC,CAAC;AACL,CAAC;AAGD,SAAgB,qBAAqB,CACnC,WAAqB,EACrB,kBAA+B;IAE/B,OAAO,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9E,CAAC;AAGD,SAAgB,eAAe,CAAC,MAAkB,EAAE,GAAS;IAC3D,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,cAAc,CACrB,OAAuB,EACvB,SAA8B;IAE9B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,iCAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;KACzC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAc,EACd,OAAuB;IAEvB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAc,EACd,OAAqB,EACrB,GAAS;IAET,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,MAAM,EAAE,EAAE,CACT,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAU,EAAE,MAAyB;IAC1D,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,qBAAqB,CACvC,IAAI,CAAC,GAAG,EACR,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,GAAG,CACX,CAAC,MAAM,CAAC;IACT,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IAC3C,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;QACnC,WAAW;QACX,eAAe,EAAE,qBAAqB,CACpC,WAAW,EACX,MAAM,CAAC,kBAAkB,CAC1B;QACD,WAAW,EAAE,OAAO,CAAC,MAAM;QAC3B,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC;QAClD,WAAW;KACZ,CAAC;AACJ,CAAC;AAGD,SAAgB,cAAc,CAAC,MAAyB;IACtD,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;SACrB,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC1D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AAGD,SAAgB,eAAe,CAC7B,OAAuB,EACvB,SAA8B;IAE9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC;IACzE,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,OAAO,EAAE,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC;KAC3C,CAAC;AACJ,CAAC;AAMD,SAAgB,oBAAoB,CAClC,OAAiB,EACjB,SAAiB,EACjB,aAAsB;IAEtB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1E,OAAO,CAAC,GAAG,SAAS,EAAE,aAAa,CAAC,CAAC;AACvC,CAAC;AAGD,SAAgB,gBAAgB,CAC9B,MAAc,EACd,OAAuB,EACvB,OAAqB,EACrB,GAAS;IAET,OAAO,CACL,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM;QAC1C,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,CACnD,CAAC;AACJ,CAAC"}

package/dist/pages/settings/users/role-preview.d.ts

@@ -0,0 +1,41 @@
+import type { ComponentInfoSerialized } from "@antelopejs/interface-dms/component";
+import type { PermissionTree } from "@antelopejs/interface-dms/permissions";
+export interface RolePreviewLayoutNode {
+    path: string;
+    permissionId: string;
+    actionIds: string[];
+    children: RolePreviewLayoutNode[];
+}
+export type RolePreviewBlock = {
+    state: "hidden";
+} | {
+    state: "readonly" | "limited";
+    withheld: string[];
+};
+export interface RolePreviewGrants {
+    real: ReadonlySet<string>;
+    preview: ReadonlySet<string>;
+    universal?: ReadonlySet<string>;
+}
+export interface RolePreviewPage {
+    fullId: string;
+    displayName: string;
+    hidden: boolean;
+}
+export interface RolePreviewResult {
+    page: RolePreviewPage | null;
+    blocks: Record<string, RolePreviewBlock>;
+    hiddenEntries: string[];
+    partialEntries: string[];
+    hiddenHeaderActions: string[];
+    hiddenQuickActions: string[];
+    outOfScope: number;
+}
+export declare function sanitizePreviewPermissions(permissions: string[]): Set<string>;
+export declare function findPermissionNode(tree: Record<string, PermissionTree>, permissionId: string): PermissionTree | undefined;
+export declare function listPermissionChildren(tree: Record<string, PermissionTree>, permissionId: string): string[];
+export declare function collectPreviewLayout(components: Record<string, ComponentInfoSerialized>, pagePermissionId: string, childrenOf: (permissionId: string) => string[]): RolePreviewLayoutNode[];
+export declare function listPreviewPermissionIds(nodes: RolePreviewLayoutNode[]): string[];
+export declare function classifyPreviewBlocks(nodes: RolePreviewLayoutNode[], grants: RolePreviewGrants, pageHidden: boolean, titleOf?: (permissionId: string) => string): Record<string, RolePreviewBlock>;
+export declare function countOutOfScope(preview: ReadonlySet<string>, realHolds: (permissionId: string) => boolean): number;
+export declare function losesOnPreviewPage(blocks: Record<string, RolePreviewBlock>, hiddenHeaderActions: readonly string[]): boolean;