@anzusystems/common-admin 1.49.0 → 2.0.0-rc.1

package/dist/domains/anzuUser/components/AUserSystemPanel.vue.d.ts

@@ -0,0 +1,31 @@
+import { AnyUserSystemDescriptor } from '../composables/userSystemDescriptor';
+import { BaseUser } from '../../../shared/types/AnzuUser';
+import { IntegerId } from '../../../shared/types/common';
+type __VLS_Props = {
+    descriptor: AnyUserSystemDescriptor;
+    userId: IntegerId;
+    /**
+     * On a viewing page there is no Create. A write action on a read-only screen would be the first
+     * in the fleet; Manage stays, because it only leads somewhere.
+     */
+    readonly?: boolean;
+    /** Whether the account about to be created would be switched on. */
+    createEnabled?: boolean;
+    /** What the owning system holds, to prefill the create form. */
+    source?: BaseUser | null;
+    creating?: boolean;
+};
+declare const __VLS_export: import('vue').DefineComponent<__VLS_Props, {
+    refresh: () => Promise<void>;
+}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {} & {
+    create: (descriptor: AnyUserSystemDescriptor, user: BaseUser) => any;
+}, string, import('vue').PublicProps, Readonly<__VLS_Props> & Readonly<{
+    onCreate?: ((descriptor: AnyUserSystemDescriptor, user: BaseUser) => any) | undefined;
+}>, {
+    source: BaseUser | null;
+    readonly: boolean;
+    createEnabled: boolean;
+    creating: boolean;
+}, {}, {}, {}, string, import('vue').ComponentProvideOptions, false, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/domains/anzuUser/components/AUserSystemPanel.vue_vue_type_script_setup_true_lang.js

@@ -0,0 +1,107 @@
+import { isUndefined as e } from "../../../shared/utils/common.js";
+import { descriptorMayWrite as t } from "../composables/userSystemDescriptor.js";
+import { UserSystemAccess as n, UserSystemLoad as r, isAuthoritativelyAbsent as i } from "../utils/userSystemState.js";
+import { UserSystemRefreshHookKey as a, useUserSystemProbe as o } from "../composables/userSystemProbe.js";
+import s from "./AUserCreateInSystemButton.js";
+import c from "./AUserManageButton.js";
+import l from "./AUserSystemStatusChip.js";
+import { computed as u, createBlock as d, createCommentVNode as f, createElementBlock as p, createElementVNode as m, createTextVNode as h, createVNode as g, defineComponent as _, inject as v, onBeforeUnmount as y, onMounted as b, openBlock as x, toDisplayString as S, unref as C, watch as w, withCtx as T } from "vue";
+import { useI18n as E } from "vue-i18n";
+import { VChip as D } from "vuetify/components/VChip";
+import { VSpacer as O } from "vuetify/components/VGrid";
+import { VBtn as k } from "vuetify/components/VBtn";
+//#region src/domains/anzuUser/components/AUserSystemPanel.vue?vue&type=script&setup=true&lang.ts
+var A = ["data-cy"], j = { class: "font-weight-medium" }, M = {
+	key: 1,
+	class: "text-body-small text-medium-emphasis"
+}, N = {
+	key: 2,
+	class: "text-body-small text-medium-emphasis w-100"
+}, P = /*@__PURE__*/ _({
+	__name: "AUserSystemPanel",
+	props: {
+		descriptor: {},
+		userId: {},
+		readonly: {
+			type: Boolean,
+			default: !1
+		},
+		createEnabled: {
+			type: Boolean,
+			default: !1
+		},
+		source: { default: null },
+		creating: {
+			type: Boolean,
+			default: !1
+		}
+	},
+	emits: ["create"],
+	setup(_, { expose: P, emit: F }) {
+		let I = _, L = F, { t: R } = E(), z = v(a, void 0), { axes: B, user: V, probe: H, cancel: U } = o({
+			descriptor: I.descriptor,
+			refreshHook: z
+		}), W = u(() => I.descriptor.label ?? I.descriptor.system), G = u(() => B.value.load === r.Loaded && V.value !== null && !e(I.descriptor.manage) && t(I.descriptor, "update")), K = u(() => !I.readonly && i(B.value) && t(I.descriptor, "create")), q = u(() => V.value === null || e(I.descriptor.manage) ? null : I.descriptor.manage(V.value)), J = u(() => V.value === null || e(I.descriptor.extraState) ? null : I.descriptor.extraState(V.value)), Y = {
+			ok: "success",
+			warn: "warning",
+			error: "error"
+		}, X = u(() => B.value.access === n.Unavailable || B.value.access === n.Unauthenticated), Z = () => H(I.userId);
+		return b(Z), w(() => I.userId, Z), y(U), P({ refresh: Z }), (e, t) => (x(), p("div", {
+			class: "d-flex align-center flex-wrap ga-2",
+			"data-cy": `user-system-panel-${_.descriptor.system}`
+		}, [
+			m("div", j, S(W.value), 1),
+			g(l, { axes: C(B) }, null, 8, ["axes"]),
+			J.value ? (x(), d(D, {
+				key: 0,
+				color: Y[J.value.tone],
+				label: "",
+				size: "small"
+			}, {
+				default: T(() => [h(S(J.value.label) + ": " + S(J.value.value), 1)]),
+				_: 1
+			}, 8, ["color"])) : f("", !0),
+			C(V) ? (x(), p("div", M, S(C(V).person.fullName) + " · " + S(C(V).email), 1)) : f("", !0),
+			_.descriptor.enabledNote ? (x(), p("div", N, S(_.descriptor.enabledNote), 1)) : f("", !0),
+			g(O),
+			G.value && q.value ? (x(), d(c, {
+				key: 3,
+				target: q.value,
+				"system-label": W.value
+			}, null, 8, ["target", "system-label"])) : f("", !0),
+			K.value ? (x(), d(s, {
+				key: 4,
+				"system-label": W.value,
+				"create-note": _.descriptor.createNote,
+				"will-be-enabled": _.createEnabled,
+				loading: _.creating,
+				"required-metadata": _.descriptor.requiredMetadata,
+				"user-id": _.userId,
+				source: _.source,
+				onConfirm: t[0] ||= (e) => L("create", _.descriptor, e)
+			}, null, 8, [
+				"system-label",
+				"create-note",
+				"will-be-enabled",
+				"loading",
+				"required-metadata",
+				"user-id",
+				"source"
+			])) : f("", !0),
+			X.value ? (x(), d(k, {
+				key: 5,
+				size: "small",
+				variant: "text",
+				"data-cy": "user-system-retry",
+				onClick: Z
+			}, {
+				default: T(() => [h(S(C(R)("common.userSystem.button.retry")), 1)]),
+				_: 1
+			})) : f("", !0)
+		], 8, A));
+	}
+});
+//#endregion
+export { P as default };
+
+//# sourceMappingURL=AUserSystemPanel.vue_vue_type_script_setup_true_lang.js.map

package/dist/domains/anzuUser/components/AUserSystemPanel.vue_vue_type_script_setup_true_lang.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AUserSystemPanel.vue_vue_type_script_setup_true_lang.js","names":["_openBlock","_createElementBlock","_createElementVNode","_toDisplayString","_createVNode","AUserSystemStatusChip","_unref","_createBlock","_component_VChip","_withCtx","_createTextVNode","_createCommentVNode","_component_VSpacer","AUserManageButton","AUserCreateInSystemButton","_component_VBtn","AUserCreateInSystemButton_default","AUserManageButton_default","AUserSystemStatusChip_default","_hoisted_1","_hoisted_2","_hoisted_3","_hoisted_4","AUserSystemPanel_vue_vue_type_script_setup_true_lang_default","__expose","__emit","props","__props","emit","useI18n","refreshHook","inject","UserSystemRefreshHookKey","useUserSystemProbe","label","computed","showManage","axes","UserSystemLoad","user","isUndefined","descriptorMayWrite","showCreate","isAuthoritativelyAbsent","manageTarget","extraState","EXTRA_STATE_COLOR","canRetry","UserSystemAccess","run","probe","onMounted","watch","onBeforeUnmount","cancel","openBlock","createElementBlock","createElementVNode","toDisplayString","createVNode","unref","createBlock","VChip","withCtx","createTextVNode","createCommentVNode","VSpacer","_cache","VBtn","t"],"sources":["../../../../src/domains/anzuUser/components/AUserSystemPanel.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed, inject, onBeforeUnmount, onMounted, watch } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport AUserCreateInSystemButton from '@/domains/anzuUser/components/AUserCreateInSystemButton.vue'\nimport AUserManageButton from '@/domains/anzuUser/components/AUserManageButton.vue'\nimport AUserSystemStatusChip from '@/domains/anzuUser/components/AUserSystemStatusChip.vue'\nimport { type AnyUserSystemDescriptor, descriptorMayWrite } from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport { useUserSystemProbe, UserSystemRefreshHookKey } from '@/domains/anzuUser/composables/userSystemProbe'\nimport { isAuthoritativelyAbsent, UserSystemAccess, UserSystemLoad } from '@/domains/anzuUser/utils/userSystemState'\nimport type { BaseUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\nimport { isUndefined } from '@/shared/utils/common'\n\nconst props = withDefaults(\n  defineProps<{\n    descriptor: AnyUserSystemDescriptor\n    userId: IntegerId\n    /**\n     * On a viewing page there is no Create. A write action on a read-only screen would be the first\n     * in the fleet; Manage stays, because it only leads somewhere.\n     */\n    readonly?: boolean\n    /** Whether the account about to be created would be switched on. */\n    createEnabled?: boolean\n    /** What the owning system holds, to prefill the create form. */\n    source?: BaseUser | null\n    creating?: boolean\n  }>(),\n  {\n    readonly: false,\n    createEnabled: false,\n    source: null,\n    creating: false,\n  }\n)\n\nconst emit = defineEmits<{\n  (e: 'create', descriptor: AnyUserSystemDescriptor, user: BaseUser): void\n}>()\n\nconst { t } = useI18n()\n\n// Provided once per page rather than passed down through every row.\nconst refreshHook = inject(UserSystemRefreshHookKey, undefined)\n\n/* eslint-disable vue/no-setup-props-reactivity-loss */\nconst { axes, user, probe, cancel } = useUserSystemProbe({ descriptor: props.descriptor, refreshHook })\n/* eslint-enable vue/no-setup-props-reactivity-loss */\n\nconst label = computed(() => props.descriptor.label ?? props.descriptor.system)\n\n/**\n * The buttons are decided by the probe's answer, never by `<Acl>` -- except that the admin's descriptor\n * can say the current user may not write there (`canWrite`).\n *\n * On a cross-system surface there is no current user loaded for the other backends, so `can()`\n * would throw and `<Acl>` would silently render nothing at all. The probe is the only signal there\n * is -- which is also why its 401 handling has to be right.\n */\nconst showManage = computed(\n  () =>\n    axes.value.load === UserSystemLoad.Loaded &&\n    user.value !== null &&\n    !isUndefined(props.descriptor.manage) &&\n    descriptorMayWrite(props.descriptor, 'update')\n)\nconst showCreate = computed(\n  () => !props.readonly && isAuthoritativelyAbsent(axes.value) && descriptorMayWrite(props.descriptor, 'create')\n)\n\nconst manageTarget = computed(() => {\n  if (user.value === null || isUndefined(props.descriptor.manage)) return null\n  return props.descriptor.manage(user.value)\n})\n\nconst extraState = computed(() => {\n  if (user.value === null || isUndefined(props.descriptor.extraState)) return null\n  return props.descriptor.extraState(user.value)\n})\n\nconst EXTRA_STATE_COLOR = { ok: 'success', warn: 'warning', error: 'error' } as const\n\nconst canRetry = computed(\n  () => axes.value.access === UserSystemAccess.Unavailable || axes.value.access === UserSystemAccess.Unauthenticated\n)\n\nconst run = () => probe(props.userId)\n\nonMounted(run)\n\n// The panel is mounted once and never re-created -- `VWindowItem` hides it with `v-show` -- so a\n// new id has to reach it this way.\nwatch(() => props.userId, run)\n\nonBeforeUnmount(cancel)\n\ndefineExpose({\n  refresh: run,\n})\n</script>\n\n<template>\n  <div\n    class=\"d-flex align-center flex-wrap ga-2\"\n    :data-cy=\"`user-system-panel-${descriptor.system}`\"\n  >\n    <div class=\"font-weight-medium\">{{ label }}</div>\n    <AUserSystemStatusChip :axes=\"axes\" />\n    <VChip\n      v-if=\"extraState\"\n      :color=\"EXTRA_STATE_COLOR[extraState.tone]\"\n      label\n      size=\"small\"\n    >\n      {{ extraState.label }}: {{ extraState.value }}\n    </VChip>\n    <div\n      v-if=\"user\"\n      class=\"text-body-small text-medium-emphasis\"\n    >\n      {{ user.person.fullName }} · {{ user.email }}\n    </div>\n    <div\n      v-if=\"descriptor.enabledNote\"\n      class=\"text-body-small text-medium-emphasis w-100\"\n    >\n      {{ descriptor.enabledNote }}\n    </div>\n    <VSpacer />\n    <AUserManageButton\n      v-if=\"showManage && manageTarget\"\n      :target=\"manageTarget\"\n      :system-label=\"label\"\n    />\n    <AUserCreateInSystemButton\n      v-if=\"showCreate\"\n      :system-label=\"label\"\n      :create-note=\"descriptor.createNote\"\n      :will-be-enabled=\"createEnabled\"\n      :loading=\"creating\"\n      :required-metadata=\"descriptor.requiredMetadata\"\n      :user-id=\"userId\"\n      :source=\"source\"\n      @confirm=\"(user) => emit('create', descriptor, user)\"\n    />\n    <VBtn\n      v-if=\"canRetry\"\n      size=\"small\"\n      variant=\"text\"\n      data-cy=\"user-system-retry\"\n      @click=\"run\"\n    >\n      {{ t('common.userSystem.button.retry') }}\n    </VBtn>\n  </div>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAaA,IAAM0B,IAAQC,GAuBRC,IAAOH,GAIP,EAAE,SAAMI,EAAQ,GAGhBC,IAAcC,EAAOC,GAA0B,KAAA,CAAS,GAGxD,EAAE,SAAM,SAAM,UAAO,cAAWC,EAAmB;GAAE,YAAYP,EAAM;GAAY;EAAY,CAAC,GAGhGQ,IAAQC,QAAeT,EAAM,WAAW,SAASA,EAAM,WAAW,MAAM,GAUxEU,IAAaD,QAEfE,EAAK,MAAM,SAASC,EAAe,UACnCC,EAAK,UAAU,QACf,CAACC,EAAYd,EAAM,WAAW,MAAM,KACpCe,EAAmBf,EAAM,YAAY,QAAQ,CACjD,GACMgB,IAAaP,QACX,CAACT,EAAM,YAAYiB,EAAwBN,EAAK,KAAK,KAAKI,EAAmBf,EAAM,YAAY,QAAQ,CAC/G,GAEMkB,IAAeT,QACfI,EAAK,UAAU,QAAQC,EAAYd,EAAM,WAAW,MAAM,IAAU,OACjEA,EAAM,WAAW,OAAOa,EAAK,KAAK,CAC1C,GAEKM,IAAaV,QACbI,EAAK,UAAU,QAAQC,EAAYd,EAAM,WAAW,UAAU,IAAU,OACrEA,EAAM,WAAW,WAAWa,EAAK,KAAK,CAC9C,GAEKO,IAAoB;GAAE,IAAI;GAAW,MAAM;GAAW,OAAO;EAAQ,GAErEC,IAAWZ,QACTE,EAAK,MAAM,WAAWW,EAAiB,eAAeX,EAAK,MAAM,WAAWW,EAAiB,eACrG,GAEMC,UAAYC,EAAMxB,EAAM,MAAM;E,OAEpCyB,EAAUF,CAAG,GAIbG,QAAY1B,EAAM,QAAQuB,CAAG,GAE7BI,EAAgBC,CAAM,GAEtB9B,EAAa,EACX,SAASyB,EACX,CAAC,I,UAICjD,EAAA,GAAAC,EAoDM,OAAA;GAnDJ,OAAM;GACL,WAAO,qBAAuB0B,EAAA,WAAW;;GAE1CzB,EAAiD,OAAjDkB,GAAiDjB,EAAd+B,EAAA,KAAK,GAAA,CAAA;GACxC9B,EAAsCC,GAAA,EAAd,MAAMC,EAAA+B,CAAA,EAAI,GAAA,MAAA,GAAA,CAAA,MAAA,CAAA;GAE1BQ,EAAA,SADR7C,EAAA,GAAAO,EAOQC,GAAA;;IALL,OAAOsC,EAAkBD,EAAA,MAAW;IACrC,OAAA;IACA,MAAK;;IAEL,SAAApC,QAAsB,CAAnBC,EAAAP,EAAA0C,EAAA,MAAW,KAAK,IAAG,OAAE1C,EAAG0C,EAAA,MAAW,KAAK,GAAA,CAAA,C;;;GAGrCvC,EAAAiC,CAAA,KADRvC,EAAA,GAAAC,EAKM,OALNoB,GAKMlB,EADDG,EAAAiC,CAAA,CAAI,CAAC,OAAO,QAAQ,IAAG,QAAGpC,EAAGG,EAAAiC,CAAA,CAAI,CAAC,KAAK,GAAA,CAAA,K;GAGpCZ,EAAA,WAAW,eADnB3B,EAAA,GAAAC,EAKM,OALNqB,GAKMnB,EADDwB,EAAA,WAAW,WAAW,GAAA,CAAA,K;GAE3BvB,EAAWQ,CAAA;GAEHwB,EAAA,SAAcQ,EAAA,SADtB5C,EAAA,GAAAO,EAIEM,GAAA;;IAFC,QAAQ+B,EAAA;IACR,gBAAcV,EAAA;;GAGTQ,EAAA,SADR1C,EAAA,GAAAO,EAUEO,GAAA;;IARC,gBAAcoB,EAAA;IACd,eAAaP,EAAA,WAAW;IACxB,mBAAiBA,EAAA;IACjB,SAASA,EAAA;IACT,qBAAmBA,EAAA,WAAW;IAC9B,WAASA,EAAA;IACT,QAAQA,EAAA;IACR,WAAO,AAAAwC,EAAA,QAAG,MAASvC,EAAI,UAAWD,EAAA,YAAYY,CAAI;;;;;;;;;;GAG7CQ,EAAA,SADR/C,EAAA,GAAAO,EAQOQ,GAAA;;IANL,MAAK;IACL,SAAQ;IACR,WAAQ;IACP,SAAOkC;;IAER,SAAAxC,QAAyC,CAAtCC,EAAAP,EAAAG,EAAA+D,CAAA,CAAC,CAAA,gCAAA,CAAA,GAAA,CAAA,C"}

package/dist/domains/anzuUser/components/AUserSystemStatusChip.js

@@ -0,0 +1,7 @@
+import e from "./AUserSystemStatusChip.vue_vue_type_script_setup_true_lang.js";
+//#region src/domains/anzuUser/components/AUserSystemStatusChip.vue
+var t = e;
+//#endregion
+export { t as default };
+
+//# sourceMappingURL=AUserSystemStatusChip.js.map

package/dist/domains/anzuUser/components/AUserSystemStatusChip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AUserSystemStatusChip.js","names":["_sfc_main","AUserSystemStatusChip_vue_vue_type_script_setup_true_lang_default","AUserSystemStatusChip_default"],"sources":["../../../../src/domains/anzuUser/components/AUserSystemStatusChip.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport {\n  resolveUserSystemState,\n  UserSystemState,\n  type UserSystemAxes,\n  type UserSystemStateType,\n} from '@/domains/anzuUser/utils/userSystemState'\n\nconst props = defineProps<{\n  axes: UserSystemAxes\n}>()\n\nconst { t } = useI18n()\n\nconst state = computed<UserSystemStateType>(() => resolveUserSystemState(props.axes))\n\n/**\n * One definition, one set of colours, one set of icons -- shown in the \"other systems\" table, in a\n * cross-system row, in a bulk-action row and in the log. A text chip rather than a hover tooltip:\n * a tooltip does not exist on touch, cannot be scanned down a column, and would let \"no account\n * here\" and \"no access\" look nearly the same.\n */\nconst APPEARANCE: Record<UserSystemStateType, { color: string; icon: string; muted: boolean }> = {\n  [UserSystemState.Loading]: { color: 'default', icon: 'mdi-dots-horizontal', muted: true },\n  [UserSystemState.Enabled]: { color: 'success', icon: 'mdi-check-circle-outline', muted: false },\n  [UserSystemState.Disabled]: { color: 'warning', icon: 'mdi-alert-circle-outline', muted: false },\n  [UserSystemState.Absent]: { color: 'default', icon: 'mdi-close-circle-outline', muted: false },\n  [UserSystemState.Forbidden]: { color: 'default', icon: 'mdi-cancel', muted: false },\n  [UserSystemState.Unavailable]: { color: 'error', icon: 'mdi-alert-outline', muted: false },\n  [UserSystemState.ConfigDisabled]: { color: 'default', icon: 'mdi-cancel', muted: true },\n}\n\nconst appearance = computed(() => APPEARANCE[state.value])\n</script>\n\n<template>\n  <VChip\n    :color=\"appearance.color\"\n    close-label=\"common.button.remove\"\n    :prepend-icon=\"appearance.icon\"\n    :class=\"{ 'text-disabled': appearance.muted }\"\n    :data-cy=\"`user-system-state-${state}`\"\n    label\n    size=\"small\"\n  >\n    {{ t(`common.userSystem.state.${state}`) }}\n  </VChip>\n</template>\n"],"mappings":""}

package/dist/domains/anzuUser/components/AUserSystemStatusChip.vue.d.ts

@@ -0,0 +1,7 @@
+import { UserSystemAxes } from '../utils/userSystemState';
+type __VLS_Props = {
+    axes: UserSystemAxes;
+};
+declare const __VLS_export: import('vue').DefineComponent<__VLS_Props, {}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {}, string, import('vue').PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {}, {}, {}, {}, string, import('vue').ComponentProvideOptions, false, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/domains/anzuUser/components/AUserSystemStatusChip.vue_vue_type_script_setup_true_lang.js

@@ -0,0 +1,69 @@
+import { UserSystemState as e, resolveUserSystemState as t } from "../utils/userSystemState.js";
+import { computed as n, createBlock as r, createTextVNode as i, defineComponent as a, normalizeClass as o, openBlock as s, toDisplayString as c, unref as l, withCtx as u } from "vue";
+import { useI18n as d } from "vue-i18n";
+import { VChip as f } from "vuetify/components/VChip";
+//#region src/domains/anzuUser/components/AUserSystemStatusChip.vue?vue&type=script&setup=true&lang.ts
+var p = /*@__PURE__*/ a({
+	__name: "AUserSystemStatusChip",
+	props: { axes: {} },
+	setup(a) {
+		let p = a, { t: m } = d(), h = n(() => t(p.axes)), g = {
+			[e.Loading]: {
+				color: "default",
+				icon: "mdi-dots-horizontal",
+				muted: !0
+			},
+			[e.Enabled]: {
+				color: "success",
+				icon: "mdi-check-circle-outline",
+				muted: !1
+			},
+			[e.Disabled]: {
+				color: "warning",
+				icon: "mdi-alert-circle-outline",
+				muted: !1
+			},
+			[e.Absent]: {
+				color: "default",
+				icon: "mdi-close-circle-outline",
+				muted: !1
+			},
+			[e.Forbidden]: {
+				color: "default",
+				icon: "mdi-cancel",
+				muted: !1
+			},
+			[e.Unavailable]: {
+				color: "error",
+				icon: "mdi-alert-outline",
+				muted: !1
+			},
+			[e.ConfigDisabled]: {
+				color: "default",
+				icon: "mdi-cancel",
+				muted: !0
+			}
+		}, _ = n(() => g[h.value]);
+		return (e, t) => (s(), r(f, {
+			color: _.value.color,
+			"close-label": "common.button.remove",
+			"prepend-icon": _.value.icon,
+			class: o({ "text-disabled": _.value.muted }),
+			"data-cy": `user-system-state-${h.value}`,
+			label: "",
+			size: "small"
+		}, {
+			default: u(() => [i(c(l(m)(`common.userSystem.state.${h.value}`)), 1)]),
+			_: 1
+		}, 8, [
+			"color",
+			"prepend-icon",
+			"class",
+			"data-cy"
+		]));
+	}
+});
+//#endregion
+export { p as default };
+
+//# sourceMappingURL=AUserSystemStatusChip.vue_vue_type_script_setup_true_lang.js.map

package/dist/domains/anzuUser/components/AUserSystemStatusChip.vue_vue_type_script_setup_true_lang.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AUserSystemStatusChip.vue_vue_type_script_setup_true_lang.js","names":["_openBlock","_createBlock","_component_VChip","_normalizeClass","_withCtx","_createTextVNode","_toDisplayString","_unref","AUserSystemStatusChip_vue_vue_type_script_setup_true_lang_default","props","__props","useI18n","state","computed","resolveUserSystemState","APPEARANCE","UserSystemState","appearance","openBlock","createBlock","VChip","normalizeClass","withCtx","createTextVNode","toDisplayString","unref","t"],"sources":["../../../../src/domains/anzuUser/components/AUserSystemStatusChip.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport {\n  resolveUserSystemState,\n  UserSystemState,\n  type UserSystemAxes,\n  type UserSystemStateType,\n} from '@/domains/anzuUser/utils/userSystemState'\n\nconst props = defineProps<{\n  axes: UserSystemAxes\n}>()\n\nconst { t } = useI18n()\n\nconst state = computed<UserSystemStateType>(() => resolveUserSystemState(props.axes))\n\n/**\n * One definition, one set of colours, one set of icons -- shown in the \"other systems\" table, in a\n * cross-system row, in a bulk-action row and in the log. A text chip rather than a hover tooltip:\n * a tooltip does not exist on touch, cannot be scanned down a column, and would let \"no account\n * here\" and \"no access\" look nearly the same.\n */\nconst APPEARANCE: Record<UserSystemStateType, { color: string; icon: string; muted: boolean }> = {\n  [UserSystemState.Loading]: { color: 'default', icon: 'mdi-dots-horizontal', muted: true },\n  [UserSystemState.Enabled]: { color: 'success', icon: 'mdi-check-circle-outline', muted: false },\n  [UserSystemState.Disabled]: { color: 'warning', icon: 'mdi-alert-circle-outline', muted: false },\n  [UserSystemState.Absent]: { color: 'default', icon: 'mdi-close-circle-outline', muted: false },\n  [UserSystemState.Forbidden]: { color: 'default', icon: 'mdi-cancel', muted: false },\n  [UserSystemState.Unavailable]: { color: 'error', icon: 'mdi-alert-outline', muted: false },\n  [UserSystemState.ConfigDisabled]: { color: 'default', icon: 'mdi-cancel', muted: true },\n}\n\nconst appearance = computed(() => APPEARANCE[state.value])\n</script>\n\n<template>\n  <VChip\n    :color=\"appearance.color\"\n    close-label=\"common.button.remove\"\n    :prepend-icon=\"appearance.icon\"\n    :class=\"{ 'text-disabled': appearance.muted }\"\n    :data-cy=\"`user-system-state-${state}`\"\n    label\n    size=\"small\"\n  >\n    {{ t(`common.userSystem.state.${state}`) }}\n  </VChip>\n</template>\n"],"mappings":";;;;;;;;;EAUA,IAAMS,IAAQC,GAIR,EAAE,SAAMC,EAAQ,GAEhBC,IAAQC,QAAoCC,EAAuBL,EAAM,IAAI,CAAC,GAQ9EM,IAA2F;IAC9FC,EAAgB,UAAU;IAAE,OAAO;IAAW,MAAM;IAAuB,OAAO;GAAK;IACvFA,EAAgB,UAAU;IAAE,OAAO;IAAW,MAAM;IAA4B,OAAO;GAAM;IAC7FA,EAAgB,WAAW;IAAE,OAAO;IAAW,MAAM;IAA4B,OAAO;GAAM;IAC9FA,EAAgB,SAAS;IAAE,OAAO;IAAW,MAAM;IAA4B,OAAO;GAAM;IAC5FA,EAAgB,YAAY;IAAE,OAAO;IAAW,MAAM;IAAc,OAAO;GAAM;IACjFA,EAAgB,cAAc;IAAE,OAAO;IAAS,MAAM;IAAqB,OAAO;GAAM;IACxFA,EAAgB,iBAAiB;IAAE,OAAO;IAAW,MAAM;IAAc,OAAO;GAAK;EACxF,GAEMC,IAAaJ,QAAeE,EAAWH,EAAM,MAAM;E,kBAIvDZ,EAAA,GAAAC,EAUQC,GAAA;GATL,OAAOe,EAAA,MAAW;GACnB,eAAY;GACX,gBAAcA,EAAA,MAAW;GACzB,OAAKd,EAAA,EAAA,iBAAqBc,EAAA,MAAW,MAAK,CAAA;GAC1C,WAAO,qBAAuBL,EAAA;GAC/B,OAAA;GACA,MAAK;;GAEL,SAAAR,QAA2C,CAAxCC,EAAAC,EAAAC,EAAAmB,CAAA,CAAC,CAAA,2BAA4Bd,EAAA,OAAK,CAAA,GAAA,CAAA,C"}

package/dist/domains/anzuUser/components/AUserTabsShell.js

@@ -0,0 +1,7 @@
+import e from "./AUserTabsShell.vue_vue_type_script_setup_true_lang.js";
+//#region src/domains/anzuUser/components/AUserTabsShell.vue
+var t = e;
+//#endregion
+export { t as default };
+
+//# sourceMappingURL=AUserTabsShell.js.map

package/dist/domains/anzuUser/components/AUserTabsShell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AUserTabsShell.js","names":["_sfc_main","AUserTabsShell_vue_vue_type_script_setup_true_lang_default","AUserTabsShell_default"],"sources":["../../../../src/domains/anzuUser/components/AUserTabsShell.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed, onMounted, provide, ref, watch } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport { useRoute, useRouter } from 'vue-router'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { useAnzuUserFactory } from '@/domains/anzuUser/factory/AnzuUserFactory'\nimport { cloneDeep, isNull, isUndefined } from '@/shared/utils/common'\nimport { BulkOutcome } from '@/domains/anzuUser/store/userCrossSystemStore'\nimport { useUserCrossSystemWrites } from '@/domains/anzuUser/composables/userCrossSystemWrites'\nimport AUnsavedConfirmDialog from '@/domains/unsavedGuard/components/AUnsavedConfirmDialog.vue'\nimport { useUnsavedChangesGuard } from '@/domains/unsavedGuard/composables/useUnsavedChangesGuard'\nimport AUserOtherSystemsTable from '@/domains/anzuUser/components/AUserOtherSystemsTable.vue'\nimport AUserSystemPanel from '@/domains/anzuUser/components/AUserSystemPanel.vue'\nimport { type AnyUserSystemDescriptor, descriptorMayWrite } from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport type { AnzuUser, BaseUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\nimport { UserSystemRefreshHookKey, type UserSystemRefreshHook } from '@/domains/anzuUser/composables/userSystemProbe'\nimport { OTHER_SYSTEMS_TAB } from '@/domains/anzuUser/utils/userTabs'\n\nconst props = withDefaults(\n  defineProps<{\n    userId: IntegerId\n    /** Which tab carries the owning form, i.e. gets the slot. */\n    owner: string\n    /**\n     * The tabs, in the order they are drawn, plus \"other systems\" appended by this component.\n     *\n     * A prop and not something derived from the descriptor array, because the list depends on the\n     * route rather than on what the admin owns: admin-inhouse owns four systems and has two tabs,\n     * since the system is part of the path.\n     */\n    ownedTabs: string[]\n    /** Every system this admin can reach. The \"other systems\" tab lists the ones not in a tab. */\n    descriptors: AnyUserSystemDescriptor[]\n    /**\n     * \"After a 401, refresh once and try again.\"\n     *\n     * The library cannot decide this for itself: the mechanism exists only in the apps, and each\n     * one does it differently -- inhouse `refreshSession`, cms and contentHub their own\n     * `refresh-token` call. Without it an expired token renders as \"no account in this system\",\n     * which is the one confusion decision 16 forbids. Every panel this shell draws gets it.\n     */\n    refreshHook?: UserSystemRefreshHook | undefined\n    readonly?: boolean\n    /**\n     * Whether the owning form holds edits that have not been saved.\n     *\n     * It drives two things. The dot on the owning tab, so the operator can see it from the other\n     * tabs -- the Save button itself is visible everywhere, by decision, because a button that\n     * disappeared would read as \"this is read-only\". And the guard below, which is the only thing\n     * standing between unsaved work and the button in a panel that leaves the page: switching a tab\n     * is not navigation, so nothing else ever asks.\n     */\n    unsavedChanges?: boolean\n    /** Query key for the deep link. */\n    tabQueryKey?: string\n  }>(),\n  {\n    refreshHook: undefined,\n    readonly: false,\n    unsavedChanges: false,\n    tabQueryKey: 'tab',\n  }\n)\n\nconst emit = defineEmits<{\n  /** After an account was created in another system, so a page can react if it wants to. */\n  (e: 'created', descriptor: AnyUserSystemDescriptor): void\n}>()\n\nconst activeTab = defineModel<string>('activeTab', { required: false, default: '' })\n\nconst { t } = useI18n()\nconst route = useRoute()\nconst router = useRouter()\n\nconst bySystem = computed(() => new Map(props.descriptors.map((item) => [item.system, item])))\n\nconst tabs = computed(() => [...props.ownedTabs, OTHER_SYSTEMS_TAB])\n\nconst otherDescriptors = computed(() => props.descriptors.filter((item) => !props.ownedTabs.includes(item.system)))\n\nconst labelFor = (system: string) => bySystem.value.get(system)?.label ?? system\n\nconst isValidTab = (value: unknown): value is string => typeof value === 'string' && tabs.value.includes(value)\n\nonMounted(() => {\n  const fromUrl = route.query[props.tabQueryKey]\n  // An unknown tab -- a system dropped out of the configuration since the link was sent -- is\n  // ignored without a word and the owning tab opens. An error here would help nobody.\n  activeTab.value = isValidTab(fromUrl) ? fromUrl : props.owner\n})\n\nwatch(activeTab, (value) => {\n  if (!isValidTab(value)) return\n  // `replace`, not `push`: with `push` the back button would walk through the tabs instead of\n  // leaving the page.\n  void router.replace({ query: { ...route.query, [props.tabQueryKey]: value } })\n})\n\n/**\n * Registered here rather than in the page, because this is the component the leaving happens from:\n * an internal \"manage in X\" is a router link inside a panel, and `onBeforeRouteLeave` has to be\n * bound somewhere inside the route. An external one opens a new tab and leaves this page standing,\n * so it needs no guard at all.\n */\nconst unsavedSource = computed(() => props.unsavedChanges)\nconst { hasUnsavedChanges, dirtyLabels, promptOpen, resolvePrompt } = useUnsavedChangesGuard({\n  sources: [unsavedSource],\n})\n\nconst otherSystems = ref<InstanceType<typeof AUserOtherSystemsTable> | null>(null)\nconst ownedPanels = ref<InstanceType<typeof AUserSystemPanel>[]>([])\n\n/**\n * Creating this person's account in another system.\n *\n * Handled here rather than by the page, because the panel that offers it is here and the whole\n * operation is the library's: read the owning system's record, copy the metadata, post it. The\n * page would only be passing it through.\n */\nconst writes = useUserCrossSystemWrites()\nconst { createAnzuUser } = useAnzuUserFactory()\nconst { showError, showRecordWas } = useAlerts()\n\n// Only when there is one: the panel's own `inject` default is `undefined`, and providing that\n// explicitly would say \"there is a hook\" to anything that merely checks for the key.\n// eslint-disable-next-line vue/no-setup-props-reactivity-loss\nif (!isUndefined(props.refreshHook)) provide(UserSystemRefreshHookKey, props.refreshHook)\n\nconst ownerDescriptor = computed(() => bySystem.value.get(props.owner))\n/**\n * The owning system's record as the server holds it, not as the form does.\n *\n * Read when the panels are, so the owning tab costs nothing, and read again before each POST: a\n * switch flipped in the form and not saved must not be copied into another system, where in blog\n * and forum it would mean a working public account. That is the whole point of the fix commit this\n * rule comes from.\n */\nconst sourceUser = ref<AnzuUser | null>(null)\nconst creatingSystem = ref<string | null>(null)\n\nconst loadSource = async () => {\n  const descriptor = ownerDescriptor.value\n  if (isUndefined(descriptor)) return\n  sourceUser.value = await writes.readSourceUser(descriptor, props.userId)\n}\n\n/** Copying a person into another system copies whether they are switched on. Roles stay empty. */\nconst createEnabled = computed(() => sourceUser.value?.enabled === true)\n\nconst onCreate = async (descriptor: AnyUserSystemDescriptor, metadata: BaseUser) => {\n  const owner = ownerDescriptor.value\n  if (isUndefined(owner)) return\n  creatingSystem.value = descriptor.system\n  try {\n    const source = await writes.readSourceUser(owner, props.userId)\n    if (isNull(source)) {\n      showError(t('common.userSystem.create.sourceUnreadable', { system: labelFor(owner.system) }))\n      return\n    }\n    // The dialog has already promised one of two sentences -- created ready to use, or created\n    // switched off -- from the copy read when the panels were. If the server no longer says that,\n    // the promise was wrong, and in blog and forum the difference is a working public account. The\n    // commonest way to get here is that first read having failed, which leaves `sourceUser` null\n    // and the dialog saying \"disabled\" about an account that is on. Nothing is written until the\n    // corrected row has been confirmed again.\n    if (source.enabled !== createEnabled.value) {\n      sourceUser.value = source\n      showError(t('common.userSystem.create.sourceChanged'))\n      return\n    }\n    // The create right may have gone while the source was read; nothing is offered then, so nothing is said.\n    if (!descriptorMayWrite(descriptor, 'create')) return\n    // From the library factory, never assembled by hand: a body of base fields alone would have the\n    // backend fill in `ROLE_USER`, leaving an account with a role nobody granted.\n    //\n    // The metadata is the dialog's, not the source's: the form was validated against the target's\n    // profile and the operator may have filled in what the source leaves empty -- blog fills\n    // `person` for nobody, and a system that requires it would get a record its own form refuses\n    // to save. The id and `enabled` still come from the fresh read.\n    const body = createAnzuUser(descriptor.system)\n    body.id = source.id\n    body.email = metadata.email\n    body.person = cloneDeep(metadata.person)\n    body.avatar = cloneDeep(metadata.avatar)\n    body.enabled = source.enabled\n    const result = await writes.createInSystem(descriptor, body)\n    if (result.outcome !== BulkOutcome.Done) {\n      // Silence here read as success: the row was re-probed, still said \"absent\", and nothing\n      // explained why. The per-admin pages this replaces reported every write.\n      showError(labelFor(descriptor.system) + ': ' + t('common.userSystem.bulk.outcome.' + result.outcome))\n      return\n    }\n    showRecordWas('created')\n    emit('created', descriptor)\n    otherSystems.value?.refreshSystem(descriptor.system)\n    ownedPanels.value.forEach((panel) => panel?.refresh())\n  } finally {\n    creatingSystem.value = null\n  }\n}\n\n/**\n * Called by the page after the owning form saved.\n *\n * `VWindowItem` takes only `hasContent` from `useLazy` and hides the panel with `v-show`, so once a\n * panel is mounted it is never unmounted and never re-fetches on its own. Without this the panel\n * would keep showing what it read before the save -- and the create-in-another-system action,\n * which reads from it, would copy that stale snapshot.\n *\n * Deliberately not a refetch on every tab activation: that would turn cheap tab switching into\n * eight calls each time, which is the cost the pseudo-tab was dropped to avoid.\n */\nconst refresh = () => {\n  void loadSource()\n  otherSystems.value?.refresh()\n  ownedPanels.value.forEach((panel) => panel?.refresh())\n}\n\n// Read alongside the panels, on the first activation of a tab that is not the owning one -- so the\n// owning tab still costs no foreign call at all.\nwatch(\n  activeTab,\n  (value) => {\n    // `isValidTab` first: before the mount hook settles it, the model is an empty string, and\n    // treating that as \"not the owning tab\" would fetch on the owning tab too -- the one call this\n    // whole lazy arrangement exists to avoid.\n    if (!isValidTab(value) || value === props.owner) return\n    if (isNull(sourceUser.value)) void loadSource()\n  },\n  { immediate: true }\n)\n\ndefineExpose({ refresh })\n</script>\n\n<template>\n  <div>\n    <!--\n      No tab navigates. Every one of them redraws the content, and what leaves the page is the\n      Manage button inside a panel -- which is an anchor. `VTab` renders `role=\"tab\"` and could not\n      carry a navigation semantically.\n    -->\n    <VTabs\n      v-model=\"activeTab\"\n      data-cy=\"user-tabs\"\n    >\n      <VTab\n        v-for=\"tab in tabs\"\n        :key=\"tab\"\n        :value=\"tab\"\n        :data-cy=\"`user-tab-${tab}`\"\n      >\n        {{ tab === OTHER_SYSTEMS_TAB ? t('common.userSystem.tab.otherSystems') : labelFor(tab) }}\n        <!-- The owning tab says it holds unsaved work; the Save button itself is always visible. -->\n        <VIcon\n          v-if=\"tab === owner && hasUnsavedChanges\"\n          class=\"ml-1\"\n          size=\"x-small\"\n          color=\"warning\"\n          icon=\"mdi-circle\"\n          data-cy=\"user-tab-unsaved\"\n        />\n      </VTab>\n    </VTabs>\n    <VWindow\n      v-model=\"activeTab\"\n      class=\"mt-4\"\n    >\n      <VWindowItem\n        v-for=\"tab in ownedTabs\"\n        :key=\"tab\"\n        :value=\"tab\"\n      >\n        <!-- The owning system of the current route: the full form. -->\n        <slot v-if=\"tab === owner\" />\n        <!--\n          Another system this admin owns, but whose route is not open: a probe with a summary and a\n          Manage button, exactly like any other system. No tab takes the operator anywhere.\n        -->\n        <AUserSystemPanel\n          v-else-if=\"!isUndefined(bySystem.get(tab))\"\n          ref=\"ownedPanels\"\n          :descriptor=\"bySystem.get(tab)!\"\n          :user-id=\"userId\"\n          :readonly=\"readonly\"\n          :create-enabled=\"createEnabled\"\n          :source=\"sourceUser\"\n          :creating=\"creatingSystem === tab\"\n          @create=\"onCreate\"\n        />\n      </VWindowItem>\n      <VWindowItem :value=\"OTHER_SYSTEMS_TAB\">\n        <!--\n          Lazy by construction: `VWindowItem` renders its content on first activation, so opening a\n          user costs no foreign calls at all.\n        -->\n        <AUserOtherSystemsTable\n          ref=\"otherSystems\"\n          :descriptors=\"otherDescriptors\"\n          :user-id=\"userId\"\n          :readonly=\"readonly\"\n          :create-enabled=\"createEnabled\"\n          :source=\"sourceUser\"\n          :creating-system=\"creatingSystem\"\n          @create=\"onCreate\"\n        />\n      </VWindowItem>\n    </VWindow>\n    <AUnsavedConfirmDialog\n      v-model=\"promptOpen\"\n      :dirty-labels=\"dirtyLabels\"\n      @resolve=\"resolvePrompt\"\n    />\n  </div>\n</template>\n"],"mappings":""}

package/dist/domains/anzuUser/components/AUserTabsShell.vue.d.ts

@@ -0,0 +1,71 @@
+import { AnyUserSystemDescriptor } from '../composables/userSystemDescriptor';
+import { IntegerId } from '../../../shared/types/common';
+import { UserSystemRefreshHook } from '../composables/userSystemProbe';
+type __VLS_Props = {
+    userId: IntegerId;
+    /** Which tab carries the owning form, i.e. gets the slot. */
+    owner: string;
+    /**
+     * The tabs, in the order they are drawn, plus "other systems" appended by this component.
+     *
+     * A prop and not something derived from the descriptor array, because the list depends on the
+     * route rather than on what the admin owns: admin-inhouse owns four systems and has two tabs,
+     * since the system is part of the path.
+     */
+    ownedTabs: string[];
+    /** Every system this admin can reach. The "other systems" tab lists the ones not in a tab. */
+    descriptors: AnyUserSystemDescriptor[];
+    /**
+     * "After a 401, refresh once and try again."
+     *
+     * The library cannot decide this for itself: the mechanism exists only in the apps, and each
+     * one does it differently -- inhouse `refreshSession`, cms and contentHub their own
+     * `refresh-token` call. Without it an expired token renders as "no account in this system",
+     * which is the one confusion decision 16 forbids. Every panel this shell draws gets it.
+     */
+    refreshHook?: UserSystemRefreshHook | undefined;
+    readonly?: boolean;
+    /**
+     * Whether the owning form holds edits that have not been saved.
+     *
+     * It drives two things. The dot on the owning tab, so the operator can see it from the other
+     * tabs -- the Save button itself is visible everywhere, by decision, because a button that
+     * disappeared would read as "this is read-only". And the guard below, which is the only thing
+     * standing between unsaved work and the button in a panel that leaves the page: switching a tab
+     * is not navigation, so nothing else ever asks.
+     */
+    unsavedChanges?: boolean;
+    /** Query key for the deep link. */
+    tabQueryKey?: string;
+};
+type __VLS_ModelProps = {
+    'activeTab'?: string;
+};
+type __VLS_PublicProps = __VLS_Props & __VLS_ModelProps;
+declare var __VLS_32: {};
+type __VLS_Slots = {} & {
+    default?: (props: typeof __VLS_32) => any;
+};
+declare const __VLS_base: import('vue').DefineComponent<__VLS_PublicProps, {
+    refresh: () => void;
+}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {
+    "update:activeTab": (value: string) => any;
+} & {
+    created: (descriptor: AnyUserSystemDescriptor) => any;
+}, string, import('vue').PublicProps, Readonly<__VLS_PublicProps> & Readonly<{
+    onCreated?: ((descriptor: AnyUserSystemDescriptor) => any) | undefined;
+    "onUpdate:activeTab"?: ((value: string) => any) | undefined;
+}>, {
+    unsavedChanges: boolean;
+    readonly: boolean;
+    refreshHook: UserSystemRefreshHook;
+    tabQueryKey: string;
+}, {}, {}, {}, string, import('vue').ComponentProvideOptions, false, {}, any>;
+declare const __VLS_export: __VLS_WithSlots<typeof __VLS_base, __VLS_Slots>;
+declare const _default: typeof __VLS_export;
+export default _default;
+type __VLS_WithSlots<T, S> = T & {
+    new (): {
+        $slots: S;
+    };
+};

package/dist/domains/anzuUser/components/AUserTabsShell.vue_vue_type_script_setup_true_lang.js

@@ -0,0 +1,188 @@
+import { cloneDeep as e, isNull as t, isUndefined as n } from "../../../shared/utils/common.js";
+import { useAlerts as r } from "../../system/composables/alerts.js";
+import i from "../../unsavedGuard/components/AUnsavedConfirmDialog.js";
+import { useUnsavedChangesGuard as a } from "../../unsavedGuard/composables/useUnsavedChangesGuard.js";
+import { useAnzuUserFactory as o } from "../factory/AnzuUserFactory.js";
+import { descriptorMayWrite as ee } from "../composables/userSystemDescriptor.js";
+import { BulkOutcome as s } from "../store/userCrossSystemStore.js";
+import { UserSystemRefreshHookKey as c } from "../composables/userSystemProbe.js";
+import { useUserCrossSystemWrites as te } from "../composables/userCrossSystemWrites.js";
+import l from "./AUserSystemPanel.js";
+import u from "./AUserOtherSystemsTable.js";
+import { OTHER_SYSTEMS_TAB as d } from "../utils/userTabs.js";
+import { Fragment as f, computed as p, createBlock as m, createCommentVNode as h, createElementBlock as g, createTextVNode as ne, createVNode as _, defineComponent as v, isRef as y, mergeModels as b, onMounted as re, openBlock as x, provide as S, ref as C, renderList as w, renderSlot as ie, toDisplayString as T, unref as E, useModel as D, watch as O, withCtx as k } from "vue";
+import { useI18n as ae } from "vue-i18n";
+import { VIcon as oe } from "vuetify/components/VIcon";
+import { useRoute as se, useRouter as ce } from "vue-router";
+import { VTab as le, VTabs as ue } from "vuetify/components/VTabs";
+import { VWindow as de, VWindowItem as A } from "vuetify/components/VWindow";
+//#region src/domains/anzuUser/components/AUserTabsShell.vue?vue&type=script&setup=true&lang.ts
+var j = /*@__PURE__*/ v({
+	__name: "AUserTabsShell",
+	props: /*@__PURE__*/ b({
+		userId: {},
+		owner: {},
+		ownedTabs: {},
+		descriptors: {},
+		refreshHook: {
+			type: Function,
+			default: void 0
+		},
+		readonly: {
+			type: Boolean,
+			default: !1
+		},
+		unsavedChanges: {
+			type: Boolean,
+			default: !1
+		},
+		tabQueryKey: { default: "tab" }
+	}, {
+		activeTab: {
+			required: !1,
+			default: ""
+		},
+		activeTabModifiers: {}
+	}),
+	emits: /*@__PURE__*/ b(["created"], ["update:activeTab"]),
+	setup(v, { expose: b, emit: j }) {
+		let M = v, N = j, P = D(v, "activeTab"), { t: F } = ae(), I = se(), L = ce(), R = p(() => new Map(M.descriptors.map((e) => [e.system, e]))), z = p(() => [...M.ownedTabs, d]), B = p(() => M.descriptors.filter((e) => !M.ownedTabs.includes(e.system))), V = (e) => R.value.get(e)?.label ?? e, H = (e) => typeof e == "string" && z.value.includes(e);
+		re(() => {
+			let e = I.query[M.tabQueryKey];
+			P.value = H(e) ? e : M.owner;
+		}), O(P, (e) => {
+			H(e) && L.replace({ query: {
+				...I.query,
+				[M.tabQueryKey]: e
+			} });
+		});
+		let fe = p(() => M.unsavedChanges), { hasUnsavedChanges: pe, dirtyLabels: me, promptOpen: U, resolvePrompt: he } = a({ sources: [fe] }), W = C(null), G = C([]), K = te(), { createAnzuUser: ge } = o(), { showError: q, showRecordWas: _e } = r();
+		n(M.refreshHook) || S(c, M.refreshHook);
+		let J = p(() => R.value.get(M.owner)), Y = C(null), X = C(null), Z = async () => {
+			let e = J.value;
+			n(e) || (Y.value = await K.readSourceUser(e, M.userId));
+		}, Q = p(() => Y.value?.enabled === !0), $ = async (r, i) => {
+			let a = J.value;
+			if (!n(a)) {
+				X.value = r.system;
+				try {
+					let n = await K.readSourceUser(a, M.userId);
+					if (t(n)) {
+						q(F("common.userSystem.create.sourceUnreadable", { system: V(a.system) }));
+						return;
+					}
+					if (n.enabled !== Q.value) {
+						Y.value = n, q(F("common.userSystem.create.sourceChanged"));
+						return;
+					}
+					if (!ee(r, "create")) return;
+					let o = ge(r.system);
+					o.id = n.id, o.email = i.email, o.person = e(i.person), o.avatar = e(i.avatar), o.enabled = n.enabled;
+					let c = await K.createInSystem(r, o);
+					if (c.outcome !== s.Done) {
+						q(V(r.system) + ": " + F("common.userSystem.bulk.outcome." + c.outcome));
+						return;
+					}
+					_e("created"), N("created", r), W.value?.refreshSystem(r.system), G.value.forEach((e) => e?.refresh());
+				} finally {
+					X.value = null;
+				}
+			}
+		};
+		return O(P, (e) => {
+			H(e) && e !== M.owner && t(Y.value) && Z();
+		}, { immediate: !0 }), b({ refresh: () => {
+			Z(), W.value?.refresh(), G.value.forEach((e) => e?.refresh());
+		} }), (e, t) => (x(), g("div", null, [
+			_(ue, {
+				modelValue: P.value,
+				"onUpdate:modelValue": t[0] ||= (e) => P.value = e,
+				"data-cy": "user-tabs"
+			}, {
+				default: k(() => [(x(!0), g(f, null, w(z.value, (e) => (x(), m(le, {
+					key: e,
+					value: e,
+					"data-cy": `user-tab-${e}`
+				}, {
+					default: k(() => [ne(T(e === E("__otherSystems") ? E(F)("common.userSystem.tab.otherSystems") : V(e)) + " ", 1), e === v.owner && E(pe) ? (x(), m(oe, {
+						key: 0,
+						class: "ml-1",
+						size: "x-small",
+						color: "warning",
+						icon: "mdi-circle",
+						"data-cy": "user-tab-unsaved"
+					})) : h("", !0)]),
+					_: 2
+				}, 1032, ["value", "data-cy"]))), 128))]),
+				_: 1
+			}, 8, ["modelValue"]),
+			_(de, {
+				modelValue: P.value,
+				"onUpdate:modelValue": t[1] ||= (e) => P.value = e,
+				class: "mt-4"
+			}, {
+				default: k(() => [(x(!0), g(f, null, w(v.ownedTabs, (t) => (x(), m(A, {
+					key: t,
+					value: t
+				}, {
+					default: k(() => [t === v.owner ? ie(e.$slots, "default", {}, void 0, void 0, 0) : E(n)(R.value.get(t)) ? h("", !0) : (x(), m(l, {
+						key: 1,
+						ref_for: !0,
+						ref_key: "ownedPanels",
+						ref: G,
+						descriptor: R.value.get(t),
+						"user-id": v.userId,
+						readonly: v.readonly,
+						"create-enabled": Q.value,
+						source: Y.value,
+						creating: X.value === t,
+						onCreate: $
+					}, null, 8, [
+						"descriptor",
+						"user-id",
+						"readonly",
+						"create-enabled",
+						"source",
+						"creating"
+					]))]),
+					_: 2
+				}, 1032, ["value"]))), 128)), _(A, { value: E(d) }, {
+					default: k(() => [_(u, {
+						ref_key: "otherSystems",
+						ref: W,
+						descriptors: B.value,
+						"user-id": v.userId,
+						readonly: v.readonly,
+						"create-enabled": Q.value,
+						source: Y.value,
+						"creating-system": X.value,
+						onCreate: $
+					}, null, 8, [
+						"descriptors",
+						"user-id",
+						"readonly",
+						"create-enabled",
+						"source",
+						"creating-system"
+					])]),
+					_: 1
+				}, 8, ["value"])]),
+				_: 3
+			}, 8, ["modelValue"]),
+			_(i, {
+				modelValue: E(U),
+				"onUpdate:modelValue": t[2] ||= (e) => y(U) ? U.value = e : null,
+				"dirty-labels": E(me),
+				onResolve: E(he)
+			}, null, 8, [
+				"modelValue",
+				"dirty-labels",
+				"onResolve"
+			])
+		]));
+	}
+});
+//#endregion
+export { j as default };
+
+//# sourceMappingURL=AUserTabsShell.vue_vue_type_script_setup_true_lang.js.map

package/dist/domains/anzuUser/components/AUserTabsShell.vue_vue_type_script_setup_true_lang.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AUserTabsShell.vue_vue_type_script_setup_true_lang.js","names":["_useModel","_openBlock","_createElementBlock","_createVNode","_component_VTabs","_withCtx","_Fragment","_renderList","_createBlock","_component_VTab","_createTextVNode","_toDisplayString","_unref","_component_VIcon","_createCommentVNode","_component_VWindow","_component_VWindowItem","_renderSlot","AUserSystemPanel","AUserOtherSystemsTable","AUnsavedConfirmDialog","_isRef","AUnsavedConfirmDialog_default","AUserSystemPanel_default","AUserOtherSystemsTable_default","AUserTabsShell_vue_vue_type_script_setup_true_lang_default","\"activeTab\"","\"activeTabModifiers\"","__expose","__emit","props","__props","emit","activeTab","useModel","useI18n","route","useRoute","router","useRouter","bySystem","computed","item","tabs","OTHER_SYSTEMS_TAB","otherDescriptors","labelFor","system","isValidTab","value","onMounted","fromUrl","watch","unsavedSource","useUnsavedChangesGuard","otherSystems","ref","ownedPanels","writes","useUserCrossSystemWrites","useAnzuUserFactory","useAlerts","isUndefined","provide","UserSystemRefreshHookKey","ownerDescriptor","sourceUser","creatingSystem","loadSource","descriptor","createEnabled","onCreate","owner","source","isNull","t","showError","descriptorMayWrite","body","createAnzuUser","metadata","cloneDeep","result","BulkOutcome","showRecordWas","panel","openBlock","createElementBlock","createVNode","VTabs","_cache","$event","withCtx","Fragment","renderList","createBlock","VTab","tab","createTextVNode","toDisplayString","unref","hasUnsavedChanges","VIcon","createCommentVNode","VWindow","VWindowItem","renderSlot","_ctx","promptOpen","isRef","dirtyLabels","resolvePrompt"],"sources":["../../../../src/domains/anzuUser/components/AUserTabsShell.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed, onMounted, provide, ref, watch } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport { useRoute, useRouter } from 'vue-router'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { useAnzuUserFactory } from '@/domains/anzuUser/factory/AnzuUserFactory'\nimport { cloneDeep, isNull, isUndefined } from '@/shared/utils/common'\nimport { BulkOutcome } from '@/domains/anzuUser/store/userCrossSystemStore'\nimport { useUserCrossSystemWrites } from '@/domains/anzuUser/composables/userCrossSystemWrites'\nimport AUnsavedConfirmDialog from '@/domains/unsavedGuard/components/AUnsavedConfirmDialog.vue'\nimport { useUnsavedChangesGuard } from '@/domains/unsavedGuard/composables/useUnsavedChangesGuard'\nimport AUserOtherSystemsTable from '@/domains/anzuUser/components/AUserOtherSystemsTable.vue'\nimport AUserSystemPanel from '@/domains/anzuUser/components/AUserSystemPanel.vue'\nimport { type AnyUserSystemDescriptor, descriptorMayWrite } from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport type { AnzuUser, BaseUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\nimport { UserSystemRefreshHookKey, type UserSystemRefreshHook } from '@/domains/anzuUser/composables/userSystemProbe'\nimport { OTHER_SYSTEMS_TAB } from '@/domains/anzuUser/utils/userTabs'\n\nconst props = withDefaults(\n  defineProps<{\n    userId: IntegerId\n    /** Which tab carries the owning form, i.e. gets the slot. */\n    owner: string\n    /**\n     * The tabs, in the order they are drawn, plus \"other systems\" appended by this component.\n     *\n     * A prop and not something derived from the descriptor array, because the list depends on the\n     * route rather than on what the admin owns: admin-inhouse owns four systems and has two tabs,\n     * since the system is part of the path.\n     */\n    ownedTabs: string[]\n    /** Every system this admin can reach. The \"other systems\" tab lists the ones not in a tab. */\n    descriptors: AnyUserSystemDescriptor[]\n    /**\n     * \"After a 401, refresh once and try again.\"\n     *\n     * The library cannot decide this for itself: the mechanism exists only in the apps, and each\n     * one does it differently -- inhouse `refreshSession`, cms and contentHub their own\n     * `refresh-token` call. Without it an expired token renders as \"no account in this system\",\n     * which is the one confusion decision 16 forbids. Every panel this shell draws gets it.\n     */\n    refreshHook?: UserSystemRefreshHook | undefined\n    readonly?: boolean\n    /**\n     * Whether the owning form holds edits that have not been saved.\n     *\n     * It drives two things. The dot on the owning tab, so the operator can see it from the other\n     * tabs -- the Save button itself is visible everywhere, by decision, because a button that\n     * disappeared would read as \"this is read-only\". And the guard below, which is the only thing\n     * standing between unsaved work and the button in a panel that leaves the page: switching a tab\n     * is not navigation, so nothing else ever asks.\n     */\n    unsavedChanges?: boolean\n    /** Query key for the deep link. */\n    tabQueryKey?: string\n  }>(),\n  {\n    refreshHook: undefined,\n    readonly: false,\n    unsavedChanges: false,\n    tabQueryKey: 'tab',\n  }\n)\n\nconst emit = defineEmits<{\n  /** After an account was created in another system, so a page can react if it wants to. */\n  (e: 'created', descriptor: AnyUserSystemDescriptor): void\n}>()\n\nconst activeTab = defineModel<string>('activeTab', { required: false, default: '' })\n\nconst { t } = useI18n()\nconst route = useRoute()\nconst router = useRouter()\n\nconst bySystem = computed(() => new Map(props.descriptors.map((item) => [item.system, item])))\n\nconst tabs = computed(() => [...props.ownedTabs, OTHER_SYSTEMS_TAB])\n\nconst otherDescriptors = computed(() => props.descriptors.filter((item) => !props.ownedTabs.includes(item.system)))\n\nconst labelFor = (system: string) => bySystem.value.get(system)?.label ?? system\n\nconst isValidTab = (value: unknown): value is string => typeof value === 'string' && tabs.value.includes(value)\n\nonMounted(() => {\n  const fromUrl = route.query[props.tabQueryKey]\n  // An unknown tab -- a system dropped out of the configuration since the link was sent -- is\n  // ignored without a word and the owning tab opens. An error here would help nobody.\n  activeTab.value = isValidTab(fromUrl) ? fromUrl : props.owner\n})\n\nwatch(activeTab, (value) => {\n  if (!isValidTab(value)) return\n  // `replace`, not `push`: with `push` the back button would walk through the tabs instead of\n  // leaving the page.\n  void router.replace({ query: { ...route.query, [props.tabQueryKey]: value } })\n})\n\n/**\n * Registered here rather than in the page, because this is the component the leaving happens from:\n * an internal \"manage in X\" is a router link inside a panel, and `onBeforeRouteLeave` has to be\n * bound somewhere inside the route. An external one opens a new tab and leaves this page standing,\n * so it needs no guard at all.\n */\nconst unsavedSource = computed(() => props.unsavedChanges)\nconst { hasUnsavedChanges, dirtyLabels, promptOpen, resolvePrompt } = useUnsavedChangesGuard({\n  sources: [unsavedSource],\n})\n\nconst otherSystems = ref<InstanceType<typeof AUserOtherSystemsTable> | null>(null)\nconst ownedPanels = ref<InstanceType<typeof AUserSystemPanel>[]>([])\n\n/**\n * Creating this person's account in another system.\n *\n * Handled here rather than by the page, because the panel that offers it is here and the whole\n * operation is the library's: read the owning system's record, copy the metadata, post it. The\n * page would only be passing it through.\n */\nconst writes = useUserCrossSystemWrites()\nconst { createAnzuUser } = useAnzuUserFactory()\nconst { showError, showRecordWas } = useAlerts()\n\n// Only when there is one: the panel's own `inject` default is `undefined`, and providing that\n// explicitly would say \"there is a hook\" to anything that merely checks for the key.\n// eslint-disable-next-line vue/no-setup-props-reactivity-loss\nif (!isUndefined(props.refreshHook)) provide(UserSystemRefreshHookKey, props.refreshHook)\n\nconst ownerDescriptor = computed(() => bySystem.value.get(props.owner))\n/**\n * The owning system's record as the server holds it, not as the form does.\n *\n * Read when the panels are, so the owning tab costs nothing, and read again before each POST: a\n * switch flipped in the form and not saved must not be copied into another system, where in blog\n * and forum it would mean a working public account. That is the whole point of the fix commit this\n * rule comes from.\n */\nconst sourceUser = ref<AnzuUser | null>(null)\nconst creatingSystem = ref<string | null>(null)\n\nconst loadSource = async () => {\n  const descriptor = ownerDescriptor.value\n  if (isUndefined(descriptor)) return\n  sourceUser.value = await writes.readSourceUser(descriptor, props.userId)\n}\n\n/** Copying a person into another system copies whether they are switched on. Roles stay empty. */\nconst createEnabled = computed(() => sourceUser.value?.enabled === true)\n\nconst onCreate = async (descriptor: AnyUserSystemDescriptor, metadata: BaseUser) => {\n  const owner = ownerDescriptor.value\n  if (isUndefined(owner)) return\n  creatingSystem.value = descriptor.system\n  try {\n    const source = await writes.readSourceUser(owner, props.userId)\n    if (isNull(source)) {\n      showError(t('common.userSystem.create.sourceUnreadable', { system: labelFor(owner.system) }))\n      return\n    }\n    // The dialog has already promised one of two sentences -- created ready to use, or created\n    // switched off -- from the copy read when the panels were. If the server no longer says that,\n    // the promise was wrong, and in blog and forum the difference is a working public account. The\n    // commonest way to get here is that first read having failed, which leaves `sourceUser` null\n    // and the dialog saying \"disabled\" about an account that is on. Nothing is written until the\n    // corrected row has been confirmed again.\n    if (source.enabled !== createEnabled.value) {\n      sourceUser.value = source\n      showError(t('common.userSystem.create.sourceChanged'))\n      return\n    }\n    // The create right may have gone while the source was read; nothing is offered then, so nothing is said.\n    if (!descriptorMayWrite(descriptor, 'create')) return\n    // From the library factory, never assembled by hand: a body of base fields alone would have the\n    // backend fill in `ROLE_USER`, leaving an account with a role nobody granted.\n    //\n    // The metadata is the dialog's, not the source's: the form was validated against the target's\n    // profile and the operator may have filled in what the source leaves empty -- blog fills\n    // `person` for nobody, and a system that requires it would get a record its own form refuses\n    // to save. The id and `enabled` still come from the fresh read.\n    const body = createAnzuUser(descriptor.system)\n    body.id = source.id\n    body.email = metadata.email\n    body.person = cloneDeep(metadata.person)\n    body.avatar = cloneDeep(metadata.avatar)\n    body.enabled = source.enabled\n    const result = await writes.createInSystem(descriptor, body)\n    if (result.outcome !== BulkOutcome.Done) {\n      // Silence here read as success: the row was re-probed, still said \"absent\", and nothing\n      // explained why. The per-admin pages this replaces reported every write.\n      showError(labelFor(descriptor.system) + ': ' + t('common.userSystem.bulk.outcome.' + result.outcome))\n      return\n    }\n    showRecordWas('created')\n    emit('created', descriptor)\n    otherSystems.value?.refreshSystem(descriptor.system)\n    ownedPanels.value.forEach((panel) => panel?.refresh())\n  } finally {\n    creatingSystem.value = null\n  }\n}\n\n/**\n * Called by the page after the owning form saved.\n *\n * `VWindowItem` takes only `hasContent` from `useLazy` and hides the panel with `v-show`, so once a\n * panel is mounted it is never unmounted and never re-fetches on its own. Without this the panel\n * would keep showing what it read before the save -- and the create-in-another-system action,\n * which reads from it, would copy that stale snapshot.\n *\n * Deliberately not a refetch on every tab activation: that would turn cheap tab switching into\n * eight calls each time, which is the cost the pseudo-tab was dropped to avoid.\n */\nconst refresh = () => {\n  void loadSource()\n  otherSystems.value?.refresh()\n  ownedPanels.value.forEach((panel) => panel?.refresh())\n}\n\n// Read alongside the panels, on the first activation of a tab that is not the owning one -- so the\n// owning tab still costs no foreign call at all.\nwatch(\n  activeTab,\n  (value) => {\n    // `isValidTab` first: before the mount hook settles it, the model is an empty string, and\n    // treating that as \"not the owning tab\" would fetch on the owning tab too -- the one call this\n    // whole lazy arrangement exists to avoid.\n    if (!isValidTab(value) || value === props.owner) return\n    if (isNull(sourceUser.value)) void loadSource()\n  },\n  { immediate: true }\n)\n\ndefineExpose({ refresh })\n</script>\n\n<template>\n  <div>\n    <!--\n      No tab navigates. Every one of them redraws the content, and what leaves the page is the\n      Manage button inside a panel -- which is an anchor. `VTab` renders `role=\"tab\"` and could not\n      carry a navigation semantically.\n    -->\n    <VTabs\n      v-model=\"activeTab\"\n      data-cy=\"user-tabs\"\n    >\n      <VTab\n        v-for=\"tab in tabs\"\n        :key=\"tab\"\n        :value=\"tab\"\n        :data-cy=\"`user-tab-${tab}`\"\n      >\n        {{ tab === OTHER_SYSTEMS_TAB ? t('common.userSystem.tab.otherSystems') : labelFor(tab) }}\n        <!-- The owning tab says it holds unsaved work; the Save button itself is always visible. -->\n        <VIcon\n          v-if=\"tab === owner && hasUnsavedChanges\"\n          class=\"ml-1\"\n          size=\"x-small\"\n          color=\"warning\"\n          icon=\"mdi-circle\"\n          data-cy=\"user-tab-unsaved\"\n        />\n      </VTab>\n    </VTabs>\n    <VWindow\n      v-model=\"activeTab\"\n      class=\"mt-4\"\n    >\n      <VWindowItem\n        v-for=\"tab in ownedTabs\"\n        :key=\"tab\"\n        :value=\"tab\"\n      >\n        <!-- The owning system of the current route: the full form. -->\n        <slot v-if=\"tab === owner\" />\n        <!--\n          Another system this admin owns, but whose route is not open: a probe with a summary and a\n          Manage button, exactly like any other system. No tab takes the operator anywhere.\n        -->\n        <AUserSystemPanel\n          v-else-if=\"!isUndefined(bySystem.get(tab))\"\n          ref=\"ownedPanels\"\n          :descriptor=\"bySystem.get(tab)!\"\n          :user-id=\"userId\"\n          :readonly=\"readonly\"\n          :create-enabled=\"createEnabled\"\n          :source=\"sourceUser\"\n          :creating=\"creatingSystem === tab\"\n          @create=\"onCreate\"\n        />\n      </VWindowItem>\n      <VWindowItem :value=\"OTHER_SYSTEMS_TAB\">\n        <!--\n          Lazy by construction: `VWindowItem` renders its content on first activation, so opening a\n          user costs no foreign calls at all.\n        -->\n        <AUserOtherSystemsTable\n          ref=\"otherSystems\"\n          :descriptors=\"otherDescriptors\"\n          :user-id=\"userId\"\n          :readonly=\"readonly\"\n          :create-enabled=\"createEnabled\"\n          :source=\"sourceUser\"\n          :creating-system=\"creatingSystem\"\n          @create=\"onCreate\"\n        />\n      </VWindowItem>\n    </VWindow>\n    <AUnsavedConfirmDialog\n      v-model=\"promptOpen\"\n      :dirty-labels=\"dirtyLabels\"\n      @resolve=\"resolvePrompt\"\n    />\n  </div>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBA,IAAM8B,IAAQC,GA8CRC,IAAOH,GAKPI,IAAYjC,EAAmB+B,GAAC,WAA6C,GAE7E,EAAE,SAAMI,GAAQ,GAChBC,IAAQC,GAAS,GACjBC,IAASC,GAAU,GAEnBC,IAAWC,QAAe,IAAI,IAAIX,EAAM,YAAY,KAAK,MAAS,CAACY,EAAK,QAAQA,CAAI,CAAC,CAAC,CAAC,GAEvFC,IAAOF,QAAe,CAAC,GAAGX,EAAM,WAAWc,CAAiB,CAAC,GAE7DC,IAAmBJ,QAAeX,EAAM,YAAY,QAAQ,MAAS,CAACA,EAAM,UAAU,SAASY,EAAK,MAAM,CAAC,CAAC,GAE5GI,KAAY,MAAmBN,EAAS,MAAM,IAAIO,CAAM,CAAC,EAAE,SAASA,GAEpEC,KAAc,MAAoC,OAAOC,KAAU,YAAYN,EAAK,MAAM,SAASM,CAAK;EAS9G,AAPAC,SAAgB;GACd,IAAMC,IAAUf,EAAM,MAAMN,EAAM;GAGlC,EAAU,QAAQkB,EAAWG,CAAO,IAAIA,IAAUrB,EAAM;EAC1D,CAAC,GAEDsB,EAAMnB,IAAY,MAAU;GAC1B,AAAKe,EAAWC,CAAK,KAGrBX,EAAY,QAAQ,EAAE,OAAO;IAAE,GAAGF,EAAM;KAAQN,EAAM,cAAcmB;GAAM,EAAE,CAAC;EAC/E,CAAC;EAQD,IAAMI,KAAgBZ,QAAeX,EAAM,cAAc,GACnD,EAAE,uBAAmB,iBAAa,eAAY,sBAAkBwB,EAAuB,EAC3F,SAAS,CAACD,EAAa,EACzB,CAAC,GAEKE,IAAeC,EAAwD,IAAI,GAC3EC,IAAcD,EAA6C,CAAC,CAAC,GAS7DE,IAASC,GAAyB,GAClC,EAAE,uBAAmBC,EAAmB,GACxC,EAAE,cAAW,sBAAkBC,EAAU;EAK/C,AAAKC,EAAYhC,EAAM,WAAW,KAAGiC,EAAQC,GAA0BlC,EAAM,WAAW;EAExF,IAAMmC,IAAkBxB,QAAeD,EAAS,MAAM,IAAIV,EAAM,KAAK,CAAC,GAShEoC,IAAaV,EAAqB,IAAI,GACtCW,IAAiBX,EAAmB,IAAI,GAExCY,IAAa,YAAY;GAC7B,IAAMC,IAAaJ,EAAgB;GACnC,AAAIH,EAAYO,CAAU,MAC1B,EAAW,QAAQ,MAAMX,EAAO,eAAeW,GAAYvC,EAAM,MAAM;EACzE,GAGMwC,IAAgB7B,QAAeyB,EAAW,OAAO,YAAY,EAAI,GAEjEK,IAAW,OAAO,GAAqC,MAAuB;GAClF,IAAMC,IAAQP,EAAgB;GAC9B,IAAI,GAAYO,CAAK,GACrB;MAAe,QAAQH,EAAW;IAClC,IAAI;KACF,IAAMI,IAAS,MAAMf,EAAO,eAAec,GAAO1C,EAAM,MAAM;KAC9D,IAAI4C,EAAOD,CAAM,GAAG;MAClB,EAAUE,EAAE,6CAA6C,EAAE,QAAQ7B,EAAS0B,EAAM,MAAM,EAAE,CAAC,CAAC;MAC5F;KACF;KAOA,IAAIC,EAAO,YAAYH,EAAc,OAAO;MAE1C,AADA,EAAW,QAAQG,GACnBG,EAAUD,EAAE,wCAAwC,CAAC;MACrD;KACF;KAEA,IAAI,CAACE,GAAmBR,GAAY,QAAQ,GAAG;KAQ/C,IAAMS,IAAOC,GAAeV,EAAW,MAAM;KAK7C,AAJA,EAAK,KAAKI,EAAO,IACjB,EAAK,QAAQO,EAAS,OACtB,EAAK,SAASC,EAAUD,EAAS,MAAM,GACvC,EAAK,SAASC,EAAUD,EAAS,MAAM,GACvC,EAAK,UAAUP,EAAO;KACtB,IAAMS,IAAS,MAAMxB,EAAO,eAAeW,GAAYS,CAAI;KAC3D,IAAII,EAAO,YAAYC,EAAY,MAAM;MAGvC,EAAUrC,EAASuB,EAAW,MAAM,IAAI,OAAOM,EAAE,oCAAoCO,EAAO,OAAO,CAAC;MACpG;KACF;KAIA,AAHAE,GAAc,SAAS,GACvBpD,EAAK,WAAWqC,CAAU,GAC1Bd,EAAa,OAAO,cAAcc,EAAW,MAAM,GACnDZ,EAAY,MAAM,SAAS,MAAU4B,GAAO,QAAQ,CAAC;IACvD,UAAU;KACR,EAAe,QAAQ;IACzB;GA9CkC;EA+CpC;E,OAqBAjC,EACEnB,IACC,MAAU;GAIT,AAAKe,EAAWC,CAAK,KAAKA,MAAUnB,EAAM,SACtC4C,EAAOR,EAAW,KAAK,KAAGE,EAAgB;EAChD,GACA,EAAE,WAAW,GAAK,CACpB,GAEAxC,EAAa,EAAE,eApBO;GAGpB,AAFAwC,EAAgB,GAChBb,EAAa,OAAO,QAAQ,GAC5BE,EAAY,MAAM,SAAS,MAAU4B,GAAO,QAAQ,CAAC;EACvD,EAgBuB,CAAC,I,UAItBpF,EAAA,GAAAC,EA6EM,OAAA,MAAA;GAvEJC,EAqBQC,IAAA;IApBG,YAAA6B,EAAA;IAAA,uBAAA,AAAAyD,EAAA,QAAA,MAAA,EAAS,QAAAC;IAClB,WAAQ;;IAGN,SAAAtF,QAAmB,EADrBJ,EAAA,EAAA,GAAAC,EAgBOI,GAAA,MAAAC,EAfSoC,EAAA,QAAP,OADT1C,EAAA,GAAAO,EAgBOC,IAAA;KAdJ,KAAKwF;KACL,OAAOA;KACP,WAAO,YAAcA;;KAEtB,SAAA5F,QAAyF,CAAtFK,GAAAC,EAAAsF,MAAQrF,EAAAA,gBAAA,IAAoBA,EAAA+D,CAAA,CAAC,CAAA,oCAAA,IAAyC7B,EAASmD,CAAG,CAAA,IAAI,KAEzF,CAAA,GACQA,MAAQlE,EAAA,SAASnB,EAAAyF,EAAA,KADzBpG,EAAA,GAAAO,EAOEK,IAAA;;MALA,OAAM;MACN,MAAK;MACL,OAAM;MACN,MAAK;MACL,WAAQ;;;;;;GAIdV,EA2CUY,IAAA;IA1CC,YAAAkB,EAAA;IAAA,uBAAA,AAAAyD,EAAA,QAAA,MAAA,EAAS,QAAAC;IAClB,OAAM;;IAGJ,SAAAtF,QAAwB,EAD1BJ,EAAA,EAAA,GAAAC,EAsBcI,GAAA,MAAAC,EArBEwB,EAAA,YAAP,OADT9B,EAAA,GAAAO,EAsBcQ,GAAA;KApBX,KAAKiF;KACL,OAAOA;;KAGR,SAAA5F,QAA6B,CAAjB4F,MAAQlE,EAAA,QAApBd,GAA6B0F,EAAA,QAAA,WAAA,CAAA,GAAA,KAAA,GAAA,KAAA,GAAA,CAAA,IAMf/F,EAAAkD,CAAA,CAAW,CAACtB,EAAA,MAAS,IAAIyD,CAAG,CAAA,I,aAD1ChG,EAAA,GAAAO,EAUEU,GAAA;;;MARI,SAAA;MAAJ,KAAIuC;MACH,YAAYjB,EAAA,MAAS,IAAIyD,CAAG;MAC5B,WAASlE,EAAA;MACT,UAAUA,EAAA;MACV,kBAAgBuC,EAAA;MAChB,QAAQJ,EAAA;MACR,UAAUC,EAAA,UAAmB8B;MACrB;;;;;;;;;;I,8BAGb9F,EAeca,GAAA,EAfA,OAAOJ,EAAAgC,CAAA,EAAiB,GAAA;KAKpC,SAAAvC,QASE,CATFF,EASEgB,GAAA;MARI,SAAA;MAAJ,KAAIoC;MACH,aAAaV,EAAA;MACb,WAASd,EAAA;MACT,UAAUA,EAAA;MACV,kBAAgBuC,EAAA;MAChB,QAAQJ,EAAA;MACR,mBAAiBC,EAAA;MACT;;;;;;;;;;;;;GAIfhE,EAIEiB,GAAA;IAHS,YAAAR,EAAAgG,CAAA;IAAA,uBAAA,AAAAlB,EAAA,QAAA,MAAArE,EAAAuF,CAAA,IAAA,EAAU,QAAAjB,IAAA;IAClB,gBAAc/E,EAAAkG,EAAA;IACd,WAASlG,EAAAmG,EAAA"}