@anzusystems/common-admin 1.49.0 → 2.0.0-rc.1

package/dist/domains/log/valueObject/LogLevel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LogLevel.js","names":["LogLevel","useLogLevel","logLevelOptions","ref","item","value"],"sources":["../../../../src/domains/log/valueObject/LogLevel.ts"],"sourcesContent":["import { ref } from 'vue'\nimport type { ValueObjectOption } from '@/shared/types/ValueObject'\n\nexport const LogLevel = {\n  Debug: 'DEBUG',\n  Info: 'INFO',\n  Notice: 'NOTICE',\n  Warning: 'WARNING',\n  Error: 'ERROR',\n  Critical: 'CRITICAL',\n  Alert: 'ALERT',\n  Emergency: 'EMERGENCY',\n} as const\nexport type LogLevelType = (typeof LogLevel)[keyof typeof LogLevel]\n\nexport function useLogLevel() {\n  const logLevelOptions = ref<ValueObjectOption<LogLevelType>[]>([\n    {\n      value: LogLevel.Debug,\n      title: LogLevel.Debug,\n      color: 'blue-grey lighten-5',\n    },\n    {\n      value: LogLevel.Info,\n      title: LogLevel.Info,\n      color: 'blue-grey lighten-3',\n    },\n    {\n      value: LogLevel.Notice,\n      title: LogLevel.Notice,\n      color: 'amber lighten-4',\n    },\n    {\n      value: LogLevel.Warning,\n      title: LogLevel.Warning,\n      color: 'amber',\n    },\n    {\n      value: LogLevel.Error,\n      title: LogLevel.Error,\n      color: 'red',\n    },\n    {\n      value: LogLevel.Critical,\n      title: LogLevel.Critical,\n      color: 'red accent-4',\n    },\n    {\n      value: LogLevel.Alert,\n      title: LogLevel.Alert,\n      color: 'pink',\n    },\n    {\n      value: LogLevel.Emergency,\n      title: LogLevel.Emergency,\n      color: 'ping darken-4',\n    },\n  ])\n\n  const getLogLevelOption = (value: LogLevelType) => {\n    return logLevelOptions.value.find((item) => item.value === value)\n  }\n\n  return {\n    logLevelOptions,\n    getLogLevelOption,\n  }\n}\n"],"mappings":";;AAGA,IAAaA,IAAW;CACtB,OAAO;CACP,MAAM;CACN,QAAQ;CACR,SAAS;CACT,OAAO;CACP,UAAU;CACV,OAAO;CACP,WAAW;AACb;AAGA,SAAgBC,IAAc;CAC5B,IAAMC,IAAkBC,EAAuC;EAC7D;GACE,OAAOH,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;EACA;GACE,OAAOA,EAAS;GAChB,OAAOA,EAAS;GAChB,OAAO;EACT;CACF,CAAC;CAMD,OAAO;EACL;EACA,oBANyB,MAClBE,EAAgB,MAAM,MAAM,MAASE,EAAK,UAAUC,CAAK;CAMlE;AACF"}

package/dist/domains/permission/components/APermissionEditor.js

@@ -0,0 +1,7 @@
+import e from "./APermissionEditor.vue_vue_type_script_setup_true_lang.js";
+//#region src/domains/permission/components/APermissionEditor.vue
+var t = e;
+//#endregion
+export { t as default };
+
+//# sourceMappingURL=APermissionEditor.js.map

package/dist/domains/permission/components/APermissionEditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"APermissionEditor.js","names":["_sfc_main","APermissionEditor_vue_vue_type_script_setup_true_lang_default","APermissionEditor_default"],"sources":["../../../../src/domains/permission/components/APermissionEditor.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { ROLE_SUPER_ADMIN } from '@/domains/auth/composables/defineAuth'\nimport APermissionGrantEditor from '@/domains/permission/components/APermissionGrantEditor.vue'\nimport APermissionValueChip from '@/domains/permission/components/APermissionValueChip.vue'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { usePermissionConfigActions } from '@/domains/permission/config/composables/permissionConfigActions'\nimport { Grant, type GrantType } from '@/domains/auth/valueObject/Grant'\nimport { GrantOrigin, GrantOriginDefault } from '@/domains/permission/valueObject/GrantOrigin'\nimport type { Permissions } from '@/domains/auth/types/Permission'\nimport { cloneDeep, isUndefined } from '@/shared/utils/common'\nimport { objectDeletePropertyByPath, objectGetValueByPath, objectSetValueByPath } from '@/shared/utils/object'\n\nconst props = withDefaults(\n  defineProps<{\n    client: AxiosClientFn\n    /** Which backend's permission vocabulary to draw. Never a global -- see `permissionConfigActions`. */\n    system: string\n    entity?: string | undefined\n    endPoint?: string | undefined\n    /**\n     * The grants the subject already has from roles and groups. Undefined means \"this model is a\n     * group, not a user\": the origin column then reads every explicit grant as coming from the\n     * group itself rather than from the user.\n     */\n    resolvedPermissions?: Permissions | undefined\n    roles?: string[]\n    /** One component for detail and edit (decision 27). Readonly drops the grant column. */\n    readonly?: boolean\n  }>(),\n  {\n    entity: undefined,\n    endPoint: undefined,\n    resolvedPermissions: undefined,\n    roles: () => [],\n    readonly: false,\n  }\n)\n\nconst modelValue = defineModel<Permissions>({ required: true })\n\nconst { t } = useI18n()\nconst { showWarning } = useAlerts()\n\n// A clone, because every mutation below writes a whole object back through `modelValue`: editing\n// the model in place would not re-trigger the parent's watchers that guard unsaved changes.\nconst permissions = computed(() => cloneDeep(modelValue.value))\n\n/* eslint-disable vue/no-setup-props-reactivity-loss */\nconst { permissionConfig, loadingPermissionConfig, isPermissionConfigInitialized, translatePermission } =\n  usePermissionConfigActions({\n    client: props.client,\n    system: props.system,\n    entity: props.entity,\n    endPoint: props.endPoint,\n  })\n/* eslint-enable vue/no-setup-props-reactivity-loss */\n\nconst changeGrant = (subject: string, action: string, grant?: GrantType) => {\n  const permissionName = subject + '_' + action\n  if (isUndefined(grant) && Object.hasOwn(permissions.value, permissionName)) {\n    objectDeletePropertyByPath(permissions.value, permissionName)\n    modelValue.value = permissions.value\n    return\n  }\n  objectSetValueByPath(permissions.value, permissionName, grant)\n  modelValue.value = permissions.value\n}\n\nconst getSelectedGrant = (subject: string, action: string) => {\n  return objectGetValueByPath(permissions.value, subject + '_' + action)\n}\n\nconst getAvailableGrants = (subject: string, action: string): GrantType[] => {\n  const grants = objectGetValueByPath(permissionConfig.value.config, subject + '.' + action + '.grants')\n  if (isUndefined(grants)) {\n    return permissionConfig.value.defaultGrants\n  }\n  return grants\n}\n\nconst RESTRICTIVE_GRANTS: GrantType[] = [Grant.Deny, Grant.AllowOwner]\n\nconst isExplicitRestrictiveGrant = (subject: string, action: string) => {\n  const permissionName = subject + '_' + action\n  if (!Object.hasOwn(permissions.value, permissionName)) return false\n  return RESTRICTIVE_GRANTS.includes(getSelectedGrant(subject, action))\n}\n\n/**\n * \"Allow everything in this subject\", but it refuses to undo a deliberate restriction: an action\n * someone explicitly set to deny or owner-only is left alone and counted, and the count is\n * reported. Silently widening those is the one way this button could grant access nobody asked\n * for.\n */\n// Called with a subject from the template's own loop over `permissionConfig.config`.\nconst allowAllActions = (subject: string) => {\n  let keptRestrictiveGrantCount = 0\n  for (const action of Object.keys(permissionConfig.value.config[subject]!)) {\n    if (!getAvailableGrants(subject, action).includes(Grant.Allow)) continue\n    if (isExplicitRestrictiveGrant(subject, action)) {\n      keptRestrictiveGrantCount++\n      continue\n    }\n    objectSetValueByPath(permissions.value, subject + '_' + action, Grant.Allow)\n  }\n  modelValue.value = permissions.value\n  if (keptRestrictiveGrantCount > 0) {\n    showWarning(\n      t('common.permissionEditor.restrictiveGrantKept', { count: keptRestrictiveGrantCount }, keptRestrictiveGrantCount)\n    )\n  }\n}\n\nconst hasSuperAdminRole = computed(() => props.roles.includes(ROLE_SUPER_ADMIN))\n\nconst getResolvedGrant = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return Grant.Allow\n  const permissionName = subject + '_' + action\n  if (props.resolvedPermissions && Object.hasOwn(props.resolvedPermissions, permissionName)) {\n    return objectGetValueByPath(props.resolvedPermissions, permissionName)\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) {\n    return objectGetValueByPath(permissions.value, permissionName)\n  }\n  return Grant.Deny\n}\n\nconst getGrantOrigin = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return GrantOrigin.Role\n  const permissionName = subject + '_' + action\n  if (isUndefined(props.resolvedPermissions)) {\n    if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.Group\n    return GrantOriginDefault\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.User\n  if (Object.hasOwn(props.resolvedPermissions, permissionName)) return GrantOrigin.Group\n  return GrantOriginDefault\n}\n</script>\n\n<template>\n  <VCard :loading=\"loadingPermissionConfig\">\n    <VCardText>\n      <VTable v-if=\"isPermissionConfigInitialized\">\n        <thead>\n          <tr>\n            <th>{{ t('common.anzuUser.table.grants') }}</th>\n            <th v-if=\"!readonly\">\n              {{ t('common.anzuUser.table.permissions') }}\n            </th>\n            <th>{{ t('common.anzuUser.table.resolvedPermissions') }}</th>\n          </tr>\n        </thead>\n        <tbody>\n          <template\n            v-for=\"permissionSubject in Object.keys(permissionConfig.config)\"\n            :key=\"permissionSubject\"\n          >\n            <tr>\n              <td\n                :colspan=\"readonly ? 2 : 3\"\n                class=\"text-headline-small font-weight-bold\"\n              >\n                {{ translatePermission('subjects', permissionSubject) }}\n                <VBtn\n                  v-if=\"!readonly\"\n                  size=\"x-small\"\n                  variant=\"text\"\n                  class=\"ml-2\"\n                  :data-cy=\"`permission-allow-all-${permissionSubject}`\"\n                  @click=\"allowAllActions(permissionSubject)\"\n                >\n                  {{ t('common.permissionEditor.allowAll') }}\n                </VBtn>\n              </td>\n            </tr>\n            <tr\n              v-for=\"permissionAction in Object.keys(permissionConfig.config[permissionSubject]!)\"\n              :key=\"permissionAction\"\n            >\n              <td>\n                {{ translatePermission('actions', permissionAction) }}\n                <div class=\"text-body-small text-disabled\">{{ permissionSubject }}_{{ permissionAction }}</div>\n              </td>\n              <td v-if=\"!readonly\">\n                <APermissionGrantEditor\n                  :available-grants=\"getAvailableGrants(permissionSubject, permissionAction)\"\n                  :selected-grant=\"getSelectedGrant(permissionSubject, permissionAction)\"\n                  @change=\"changeGrant(permissionSubject, permissionAction, $event)\"\n                />\n              </td>\n              <td>\n                <APermissionValueChip\n                  :grant=\"getResolvedGrant(permissionSubject, permissionAction)\"\n                  :grant-origin=\"getGrantOrigin(permissionSubject, permissionAction)\"\n                />\n              </td>\n            </tr>\n          </template>\n        </tbody>\n      </VTable>\n    </VCardText>\n  </VCard>\n</template>\n"],"mappings":""}

package/dist/domains/permission/components/APermissionEditor.vue.d.ts

@@ -0,0 +1,35 @@
+import { AxiosClientFn } from '../../api/utils/client';
+import { Permissions } from '../../auth/types/Permission';
+type __VLS_Props = {
+    client: AxiosClientFn;
+    /** Which backend's permission vocabulary to draw. Never a global -- see `permissionConfigActions`. */
+    system: string;
+    entity?: string | undefined;
+    endPoint?: string | undefined;
+    /**
+     * The grants the subject already has from roles and groups. Undefined means "this model is a
+     * group, not a user": the origin column then reads every explicit grant as coming from the
+     * group itself rather than from the user.
+     */
+    resolvedPermissions?: Permissions | undefined;
+    roles?: string[];
+    /** One component for detail and edit (decision 27). Readonly drops the grant column. */
+    readonly?: boolean;
+};
+type __VLS_ModelProps = {
+    modelValue: Permissions;
+};
+type __VLS_PublicProps = __VLS_Props & __VLS_ModelProps;
+declare const __VLS_export: import('vue').DefineComponent<__VLS_PublicProps, {}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {
+    "update:modelValue": (value: Permissions) => any;
+}, string, import('vue').PublicProps, Readonly<__VLS_PublicProps> & Readonly<{
+    "onUpdate:modelValue"?: ((value: Permissions) => any) | undefined;
+}>, {
+    roles: string[];
+    resolvedPermissions: Permissions;
+    entity: string;
+    readonly: boolean;
+    endPoint: string;
+}, {}, {}, {}, string, import('vue').ComponentProvideOptions, false, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/domains/permission/components/APermissionEditor.vue_vue_type_script_setup_true_lang.js

@@ -0,0 +1,109 @@
+import { cloneDeep as e, isUndefined as t } from "../../../shared/utils/common.js";
+import { useAlerts as n } from "../../system/composables/alerts.js";
+import { objectDeletePropertyByPath as r, objectGetValueByPath as i, objectSetValueByPath as a } from "../../../shared/utils/object.js";
+import { Grant as o } from "../../auth/valueObject/Grant.js";
+import { ROLE_SUPER_ADMIN as s } from "../../auth/composables/defineAuth.js";
+import { GrantOrigin as c, GrantOriginDefault as l } from "../valueObject/GrantOrigin.js";
+import u from "./APermissionGrantEditor.js";
+import d from "./APermissionValueChip.js";
+import { usePermissionConfigActions as f } from "../config/composables/permissionConfigActions.js";
+import { Fragment as p, computed as m, createBlock as h, createCommentVNode as g, createElementBlock as _, createElementVNode as v, createTextVNode as y, createVNode as b, defineComponent as x, mergeModels as S, openBlock as C, renderList as w, toDisplayString as T, unref as E, useModel as D, withCtx as O } from "vue";
+import { useI18n as k } from "vue-i18n";
+import { VCard as A, VCardText as j } from "vuetify/components/VCard";
+import { VBtn as M } from "vuetify/components/VBtn";
+import { VTable as N } from "vuetify/components/VTable";
+//#region src/domains/permission/components/APermissionEditor.vue?vue&type=script&setup=true&lang.ts
+var P = { key: 0 }, F = ["colspan"], I = { class: "text-body-small text-disabled" }, L = { key: 0 }, R = /*@__PURE__*/ x({
+	__name: "APermissionEditor",
+	props: /*@__PURE__*/ S({
+		client: {},
+		system: {},
+		entity: { default: void 0 },
+		endPoint: { default: void 0 },
+		resolvedPermissions: { default: void 0 },
+		roles: { default: () => [] },
+		readonly: {
+			type: Boolean,
+			default: !1
+		}
+	}, {
+		modelValue: { required: !0 },
+		modelModifiers: {}
+	}),
+	emits: ["update:modelValue"],
+	setup(x) {
+		let S = x, R = D(x, "modelValue"), { t: z } = k(), { showWarning: B } = n(), V = m(() => e(R.value)), { permissionConfig: H, loadingPermissionConfig: U, isPermissionConfigInitialized: W, translatePermission: G } = f({
+			client: S.client,
+			system: S.system,
+			entity: S.entity,
+			endPoint: S.endPoint
+		}), K = (e, n, i) => {
+			let o = e + "_" + n;
+			t(i) && Object.hasOwn(V.value, o) ? (r(V.value, o), R.value = V.value) : (a(V.value, o, i), R.value = V.value);
+		}, q = (e, t) => i(V.value, e + "_" + t), J = (e, n) => {
+			let r = i(H.value.config, e + "." + n + ".grants");
+			return t(r) ? H.value.defaultGrants : r;
+		}, Y = [o.Deny, o.AllowOwner], X = (e, t) => {
+			let n = e + "_" + t;
+			return Object.hasOwn(V.value, n) ? Y.includes(q(e, t)) : !1;
+		}, Z = (e) => {
+			let t = 0;
+			for (let n of Object.keys(H.value.config[e])) J(e, n).includes(o.Allow) && (X(e, n) ? t++ : a(V.value, e + "_" + n, o.Allow));
+			R.value = V.value, t > 0 && B(z("common.permissionEditor.restrictiveGrantKept", { count: t }, t));
+		}, Q = m(() => S.roles.includes(s)), $ = (e, t) => {
+			if (Q.value) return o.Allow;
+			let n = e + "_" + t;
+			return S.resolvedPermissions && Object.hasOwn(S.resolvedPermissions, n) ? i(S.resolvedPermissions, n) : Object.hasOwn(V.value, n) ? i(V.value, n) : o.Deny;
+		}, ee = (e, n) => {
+			if (Q.value) return c.Role;
+			let r = e + "_" + n;
+			return t(S.resolvedPermissions) ? Object.hasOwn(V.value, r) ? c.Group : l : Object.hasOwn(V.value, r) ? c.User : Object.hasOwn(S.resolvedPermissions, r) ? c.Group : l;
+		};
+		return (e, t) => (C(), h(A, { loading: E(U) }, {
+			default: O(() => [b(j, null, {
+				default: O(() => [E(W) ? (C(), h(N, { key: 0 }, {
+					default: O(() => [v("thead", null, [v("tr", null, [
+						v("th", null, T(E(z)("common.anzuUser.table.grants")), 1),
+						x.readonly ? g("", !0) : (C(), _("th", P, T(E(z)("common.anzuUser.table.permissions")), 1)),
+						v("th", null, T(E(z)("common.anzuUser.table.resolvedPermissions")), 1)
+					])]), v("tbody", null, [(C(!0), _(p, null, w(Object.keys(E(H).config), (e) => (C(), _(p, { key: e }, [v("tr", null, [v("td", {
+						colspan: x.readonly ? 2 : 3,
+						class: "text-headline-small font-weight-bold"
+					}, [y(T(E(G)("subjects", e)) + " ", 1), x.readonly ? g("", !0) : (C(), h(M, {
+						key: 0,
+						size: "x-small",
+						variant: "text",
+						class: "ml-2",
+						"data-cy": `permission-allow-all-${e}`,
+						onClick: (t) => Z(e)
+					}, {
+						default: O(() => [y(T(E(z)("common.permissionEditor.allowAll")), 1)]),
+						_: 1
+					}, 8, ["data-cy", "onClick"]))], 8, F)]), (C(!0), _(p, null, w(Object.keys(E(H).config[e]), (t) => (C(), _("tr", { key: t }, [
+						v("td", null, [y(T(E(G)("actions", t)) + " ", 1), v("div", I, T(e) + "_" + T(t), 1)]),
+						x.readonly ? g("", !0) : (C(), _("td", L, [b(u, {
+							"available-grants": J(e, t),
+							"selected-grant": q(e, t),
+							onChange: (n) => K(e, t, n)
+						}, null, 8, [
+							"available-grants",
+							"selected-grant",
+							"onChange"
+						])])),
+						v("td", null, [b(d, {
+							grant: $(e, t),
+							"grant-origin": ee(e, t)
+						}, null, 8, ["grant", "grant-origin"])])
+					]))), 128))], 64))), 128))])]),
+					_: 1
+				})) : g("", !0)]),
+				_: 1
+			})]),
+			_: 1
+		}, 8, ["loading"]));
+	}
+});
+//#endregion
+export { R as default };
+
+//# sourceMappingURL=APermissionEditor.vue_vue_type_script_setup_true_lang.js.map

package/dist/domains/permission/components/APermissionEditor.vue_vue_type_script_setup_true_lang.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"APermissionEditor.vue_vue_type_script_setup_true_lang.js","names":["_useModel","_openBlock","_createBlock","_component_VCard","_unref","_withCtx","_createVNode","_component_VCardText","_component_VTable","_createElementVNode","_toDisplayString","_createElementBlock","_createCommentVNode","_Fragment","_renderList","_createTextVNode","_component_VBtn","APermissionGrantEditor","APermissionValueChip","APermissionGrantEditor_default","APermissionValueChip_default","_hoisted_1","_hoisted_2","_hoisted_3","_hoisted_4","APermissionEditor_vue_vue_type_script_setup_true_lang_default","\"modelValue\"","\"modelModifiers\"","props","__props","modelValue","useModel","useI18n","useAlerts","permissions","computed","cloneDeep","usePermissionConfigActions","changeGrant","permissionName","subject","action","isUndefined","grant","objectDeletePropertyByPath","objectSetValueByPath","getSelectedGrant","objectGetValueByPath","getAvailableGrants","grants","permissionConfig","RESTRICTIVE_GRANTS","Grant","isExplicitRestrictiveGrant","allowAllActions","keptRestrictiveGrantCount","showWarning","t","hasSuperAdminRole","ROLE_SUPER_ADMIN","getResolvedGrant","getGrantOrigin","GrantOrigin","GrantOriginDefault","openBlock","createBlock","VCard","unref","loadingPermissionConfig","withCtx","createVNode","VCardText","isPermissionConfigInitialized","VTable","createElementVNode","toDisplayString","createCommentVNode","createElementBlock","Fragment","renderList","permissionSubject","createTextVNode","translatePermission","VBtn","permissionAction","$event"],"sources":["../../../../src/domains/permission/components/APermissionEditor.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { ROLE_SUPER_ADMIN } from '@/domains/auth/composables/defineAuth'\nimport APermissionGrantEditor from '@/domains/permission/components/APermissionGrantEditor.vue'\nimport APermissionValueChip from '@/domains/permission/components/APermissionValueChip.vue'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { usePermissionConfigActions } from '@/domains/permission/config/composables/permissionConfigActions'\nimport { Grant, type GrantType } from '@/domains/auth/valueObject/Grant'\nimport { GrantOrigin, GrantOriginDefault } from '@/domains/permission/valueObject/GrantOrigin'\nimport type { Permissions } from '@/domains/auth/types/Permission'\nimport { cloneDeep, isUndefined } from '@/shared/utils/common'\nimport { objectDeletePropertyByPath, objectGetValueByPath, objectSetValueByPath } from '@/shared/utils/object'\n\nconst props = withDefaults(\n  defineProps<{\n    client: AxiosClientFn\n    /** Which backend's permission vocabulary to draw. Never a global -- see `permissionConfigActions`. */\n    system: string\n    entity?: string | undefined\n    endPoint?: string | undefined\n    /**\n     * The grants the subject already has from roles and groups. Undefined means \"this model is a\n     * group, not a user\": the origin column then reads every explicit grant as coming from the\n     * group itself rather than from the user.\n     */\n    resolvedPermissions?: Permissions | undefined\n    roles?: string[]\n    /** One component for detail and edit (decision 27). Readonly drops the grant column. */\n    readonly?: boolean\n  }>(),\n  {\n    entity: undefined,\n    endPoint: undefined,\n    resolvedPermissions: undefined,\n    roles: () => [],\n    readonly: false,\n  }\n)\n\nconst modelValue = defineModel<Permissions>({ required: true })\n\nconst { t } = useI18n()\nconst { showWarning } = useAlerts()\n\n// A clone, because every mutation below writes a whole object back through `modelValue`: editing\n// the model in place would not re-trigger the parent's watchers that guard unsaved changes.\nconst permissions = computed(() => cloneDeep(modelValue.value))\n\n/* eslint-disable vue/no-setup-props-reactivity-loss */\nconst { permissionConfig, loadingPermissionConfig, isPermissionConfigInitialized, translatePermission } =\n  usePermissionConfigActions({\n    client: props.client,\n    system: props.system,\n    entity: props.entity,\n    endPoint: props.endPoint,\n  })\n/* eslint-enable vue/no-setup-props-reactivity-loss */\n\nconst changeGrant = (subject: string, action: string, grant?: GrantType) => {\n  const permissionName = subject + '_' + action\n  if (isUndefined(grant) && Object.hasOwn(permissions.value, permissionName)) {\n    objectDeletePropertyByPath(permissions.value, permissionName)\n    modelValue.value = permissions.value\n    return\n  }\n  objectSetValueByPath(permissions.value, permissionName, grant)\n  modelValue.value = permissions.value\n}\n\nconst getSelectedGrant = (subject: string, action: string) => {\n  return objectGetValueByPath(permissions.value, subject + '_' + action)\n}\n\nconst getAvailableGrants = (subject: string, action: string): GrantType[] => {\n  const grants = objectGetValueByPath(permissionConfig.value.config, subject + '.' + action + '.grants')\n  if (isUndefined(grants)) {\n    return permissionConfig.value.defaultGrants\n  }\n  return grants\n}\n\nconst RESTRICTIVE_GRANTS: GrantType[] = [Grant.Deny, Grant.AllowOwner]\n\nconst isExplicitRestrictiveGrant = (subject: string, action: string) => {\n  const permissionName = subject + '_' + action\n  if (!Object.hasOwn(permissions.value, permissionName)) return false\n  return RESTRICTIVE_GRANTS.includes(getSelectedGrant(subject, action))\n}\n\n/**\n * \"Allow everything in this subject\", but it refuses to undo a deliberate restriction: an action\n * someone explicitly set to deny or owner-only is left alone and counted, and the count is\n * reported. Silently widening those is the one way this button could grant access nobody asked\n * for.\n */\n// Called with a subject from the template's own loop over `permissionConfig.config`.\nconst allowAllActions = (subject: string) => {\n  let keptRestrictiveGrantCount = 0\n  for (const action of Object.keys(permissionConfig.value.config[subject]!)) {\n    if (!getAvailableGrants(subject, action).includes(Grant.Allow)) continue\n    if (isExplicitRestrictiveGrant(subject, action)) {\n      keptRestrictiveGrantCount++\n      continue\n    }\n    objectSetValueByPath(permissions.value, subject + '_' + action, Grant.Allow)\n  }\n  modelValue.value = permissions.value\n  if (keptRestrictiveGrantCount > 0) {\n    showWarning(\n      t('common.permissionEditor.restrictiveGrantKept', { count: keptRestrictiveGrantCount }, keptRestrictiveGrantCount)\n    )\n  }\n}\n\nconst hasSuperAdminRole = computed(() => props.roles.includes(ROLE_SUPER_ADMIN))\n\nconst getResolvedGrant = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return Grant.Allow\n  const permissionName = subject + '_' + action\n  if (props.resolvedPermissions && Object.hasOwn(props.resolvedPermissions, permissionName)) {\n    return objectGetValueByPath(props.resolvedPermissions, permissionName)\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) {\n    return objectGetValueByPath(permissions.value, permissionName)\n  }\n  return Grant.Deny\n}\n\nconst getGrantOrigin = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return GrantOrigin.Role\n  const permissionName = subject + '_' + action\n  if (isUndefined(props.resolvedPermissions)) {\n    if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.Group\n    return GrantOriginDefault\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.User\n  if (Object.hasOwn(props.resolvedPermissions, permissionName)) return GrantOrigin.Group\n  return GrantOriginDefault\n}\n</script>\n\n<template>\n  <VCard :loading=\"loadingPermissionConfig\">\n    <VCardText>\n      <VTable v-if=\"isPermissionConfigInitialized\">\n        <thead>\n          <tr>\n            <th>{{ t('common.anzuUser.table.grants') }}</th>\n            <th v-if=\"!readonly\">\n              {{ t('common.anzuUser.table.permissions') }}\n            </th>\n            <th>{{ t('common.anzuUser.table.resolvedPermissions') }}</th>\n          </tr>\n        </thead>\n        <tbody>\n          <template\n            v-for=\"permissionSubject in Object.keys(permissionConfig.config)\"\n            :key=\"permissionSubject\"\n          >\n            <tr>\n              <td\n                :colspan=\"readonly ? 2 : 3\"\n                class=\"text-headline-small font-weight-bold\"\n              >\n                {{ translatePermission('subjects', permissionSubject) }}\n                <VBtn\n                  v-if=\"!readonly\"\n                  size=\"x-small\"\n                  variant=\"text\"\n                  class=\"ml-2\"\n                  :data-cy=\"`permission-allow-all-${permissionSubject}`\"\n                  @click=\"allowAllActions(permissionSubject)\"\n                >\n                  {{ t('common.permissionEditor.allowAll') }}\n                </VBtn>\n              </td>\n            </tr>\n            <tr\n              v-for=\"permissionAction in Object.keys(permissionConfig.config[permissionSubject]!)\"\n              :key=\"permissionAction\"\n            >\n              <td>\n                {{ translatePermission('actions', permissionAction) }}\n                <div class=\"text-body-small text-disabled\">{{ permissionSubject }}_{{ permissionAction }}</div>\n              </td>\n              <td v-if=\"!readonly\">\n                <APermissionGrantEditor\n                  :available-grants=\"getAvailableGrants(permissionSubject, permissionAction)\"\n                  :selected-grant=\"getSelectedGrant(permissionSubject, permissionAction)\"\n                  @change=\"changeGrant(permissionSubject, permissionAction, $event)\"\n                />\n              </td>\n              <td>\n                <APermissionValueChip\n                  :grant=\"getResolvedGrant(permissionSubject, permissionAction)\"\n                  :grant-origin=\"getGrantOrigin(permissionSubject, permissionAction)\"\n                />\n              </td>\n            </tr>\n          </template>\n        </tbody>\n      </VTable>\n    </VCardText>\n  </VCard>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAeA,IAAM4B,IAAQC,GA0BRC,IAAa9B,EAAwB6B,GAAA,YAAmB,GAExD,EAAE,SAAMG,EAAQ,GAChB,EAAE,mBAAgBC,EAAU,GAI5BC,IAAcC,QAAeC,EAAUN,EAAW,KAAK,CAAC,GAGxD,EAAE,qBAAkB,4BAAyB,kCAA+B,2BAChFO,EAA2B;GACzB,QAAQT,EAAM;GACd,QAAQA,EAAM;GACd,QAAQA,EAAM;GACd,UAAUA,EAAM;EAClB,CAAC,GAGGU,KAAe,GAAiB,GAAgB,MAAsB;GAC1E,IAAMC,IAAiBC,IAAU,MAAMC;GACvC,AAAIC,EAAYC,CAAK,KAAK,OAAO,OAAOT,EAAY,OAAOK,CAAc,KACvEK,EAA2BV,EAAY,OAAOK,CAAc,GAC5D,EAAW,QAAQL,EAAY,UAGjCW,EAAqBX,EAAY,OAAOK,GAAgBI,CAAK,GAC7D,EAAW,QAAQT,EAAY;EACjC,GAEMY,KAAoB,GAAiB,MAClCC,EAAqBb,EAAY,OAAOM,IAAU,MAAMC,CAAM,GAGjEO,KAAsB,GAAiB,MAAgC;GAC3E,IAAMC,IAASF,EAAqBG,EAAiB,MAAM,QAAQV,IAAU,MAAMC,IAAS,SAAS;GAIrG,OAHIC,EAAYO,CAAM,IACbC,EAAiB,MAAM,gBAEzBD;EACT,GAEME,IAAkC,CAACC,EAAM,MAAMA,EAAM,UAAU,GAE/DC,KAA8B,GAAiB,MAAmB;GACtE,IAAMd,IAAiBC,IAAU,MAAMC;GAEvC,OADK,OAAO,OAAOP,EAAY,OAAOK,CAAc,IAC7CY,EAAmB,SAASL,EAAiBN,GAASC,CAAM,CAAC,IADN;EAEhE,GASMa,KAAmB,MAAoB;GAC3C,IAAIC,IAA4B;GAChC,KAAK,IAAMd,KAAU,OAAO,KAAKS,EAAiB,MAAM,OAAOV,EAAS,GACtE,AAAKQ,EAAmBR,GAASC,CAAM,CAAC,CAAC,SAASW,EAAM,KAAK,MACzDC,EAA2Bb,GAASC,CAAM,IAC5C,MAGFI,EAAqBX,EAAY,OAAOM,IAAU,MAAMC,GAAQW,EAAM,KAAK;GAG7E,AADA,EAAW,QAAQlB,EAAY,OAC3BqB,IAA4B,KAC9BC,EACEC,EAAE,gDAAgD,EAAE,OAAOF,EAA0B,GAAGA,CAAyB,CACnH;EAEJ,GAEMG,IAAoBvB,QAAeP,EAAM,MAAM,SAAS+B,CAAgB,CAAC,GAEzEC,KAAoB,GAAiB,MAAmB;GAC5D,IAAIF,EAAkB,OAAO,OAAON,EAAM;GAC1C,IAAMb,IAAiBC,IAAU,MAAMC;GAOvC,OANIb,EAAM,uBAAuB,OAAO,OAAOA,EAAM,qBAAqBW,CAAc,IAC/EQ,EAAqBnB,EAAM,qBAAqBW,CAAc,IAEnE,OAAO,OAAOL,EAAY,OAAOK,CAAc,IAC1CQ,EAAqBb,EAAY,OAAOK,CAAc,IAExDa,EAAM;EACf,GAEMS,MAAkB,GAAiB,MAAmB;GAC1D,IAAIH,EAAkB,OAAO,OAAOI,EAAY;GAChD,IAAMvB,IAAiBC,IAAU,MAAMC;GAOvC,OANIC,EAAYd,EAAM,mBAAmB,IACnC,OAAO,OAAOM,EAAY,OAAOK,CAAc,IAAUuB,EAAY,QAClEC,IAEL,OAAO,OAAO7B,EAAY,OAAOK,CAAc,IAAUuB,EAAY,OACrE,OAAO,OAAOlC,EAAM,qBAAqBW,CAAc,IAAUuB,EAAY,QAC1EC;EACT;E,kBAIE9D,EAAA,GAAAC,EA6DQC,GAAA,EA7DA,SAASC,EAAAgE,CAAA,EAAuB,GAAA;GACtC,SAAA/D,QA2DY,CA3DZC,EA2DYC,GAAA,MAAA;IA1DV,SAAAF,QAyDS,CAzDKD,EAAAoE,CAAA,KAAdvE,EAAA,GAAAC,EAyDSM,GAAA,EAAA,KAAA,EAAA,GAAA;KAxDP,SAAAH,QAQQ,CARRI,EAQQ,SAAA,MAAA,CAPNA,EAMK,MAAA,MAAA;MALHA,EAAgD,MAAA,MAAAC,EAAzCN,EAAAqD,CAAA,CAAC,CAAA,8BAAA,CAAA,GAAA,CAAA;MACG5B,EAAA,W,aAAX5B,EAAA,GAAAU,EAEK,MAAAU,GAAAX,EADAN,EAAAqD,CAAA,CAAC,CAAA,mCAAA,CAAA,GAAA,CAAA;MAENhD,EAA6D,MAAA,MAAAC,EAAtDN,EAAAqD,CAAA,CAAC,CAAA,2CAAA,CAAA,GAAA,CAAA;K,MAGZhD,EA8CQ,SAAA,MAAA,EA7CNR,EAAA,EAAA,GAAAU,EA4CWE,GAAA,MAAAC,EA3CmB,OAAO,KAAKV,EAAA8C,CAAA,CAAgB,CAAC,MAAM,IAAxD,OACDjD,EAAA,GAAAU,EAAAE,GAAA,EAAA,KAAAmE,EAAiB,GAAA,CAEvBvE,EAiBK,MAAA,MAAA,CAhBHA,EAeK,MAAA;MAdF,SAASoB,EAAA,WAAQ,IAAA;MAClB,OAAM;K,IAEHd,EAAAL,EAAAN,EAAA8E,CAAA,CAAmB,CAAA,YAAaF,CAAiB,CAAA,IAAI,KACxD,CAAA,GACSnD,EAAA,W,aADT5B,EAAA,GAAAC,EASOc,GAAA;;MAPL,MAAK;MACL,SAAQ;MACR,OAAM;MACL,WAAO,wBAA0BgE;MACjC,UAAK,MAAE1B,EAAgB0B,CAAiB;;MAEzC,SAAA3E,QAA2C,CAAxCU,EAAAL,EAAAN,EAAAqD,CAAA,CAAC,CAAA,kCAAA,CAAA,GAAA,CAAA,C;;K,2CAIVxD,EAAA,EAAA,GAAAU,EAqBKE,GAAA,MAAAC,EApBwB,OAAO,KAAKV,EAAA8C,CAAA,CAAgB,CAAC,OAAO8B,EAAiB,IAAzE,OADT/E,EAAA,GAAAU,EAqBK,MAAA,EAnBF,KAAKyE,EAAgB,GAAA;MAEtB3E,EAGK,MAAA,MAAA,CAFAM,EAAAL,EAAAN,EAAA8E,CAAA,CAAmB,CAAA,WAAYE,CAAgB,CAAA,IAAI,KACtD,CAAA,GAAA3E,EAA+F,OAA/Fc,GAA+Fb,EAAjDsE,CAAiB,IAAG,MAACtE,EAAG0E,CAAgB,GAAA,CAAA,C;MAE7EvD,EAAA,W,aAAX5B,EAAA,GAAAU,EAMK,MAAAa,GAAA,CALHlB,EAIEW,GAAA;OAHC,oBAAkB+B,EAAmBgC,GAAmBI,CAAgB;OACxE,kBAAgBtC,EAAiBkC,GAAmBI,CAAgB;OACpE,WAAM,MAAE9C,EAAY0C,GAAmBI,GAAkBC,CAAM;;;;;;MAGpE5E,EAKK,MAAA,MAAA,CAJHH,EAGEY,GAAA;OAFC,OAAO0C,EAAiBoB,GAAmBI,CAAgB;OAC3D,gBAAcvB,GAAemB,GAAmBI,CAAgB"}

package/dist/domains/permission/components/APermissionGrantEditor.js

@@ -0,0 +1,7 @@
+import e from "./APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js";
+//#region src/domains/permission/components/APermissionGrantEditor.vue
+var t = e;
+//#endregion
+export { t as default };
+
+//# sourceMappingURL=APermissionGrantEditor.js.map

package/dist/domains/permission/components/APermissionGrantEditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"APermissionGrantEditor.js","names":["_sfc_main","APermissionGrantEditor_vue_vue_type_script_setup_true_lang_default","APermissionGrantEditor_default"],"sources":["../../../../src/domains/permission/components/APermissionGrantEditor.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { type GrantType, useGrant } from '@/domains/auth/valueObject/Grant'\nimport { computed } from 'vue'\n\nconst props = defineProps<{\n  availableGrants: GrantType[]\n  selectedGrant: GrantType | undefined\n}>()\nconst emit = defineEmits<{\n  (e: 'change', data?: GrantType): void\n}>()\nconst selectedGrant = computed({\n  get() {\n    return props.selectedGrant\n  },\n  set(newGrant) {\n    emit('change', newGrant)\n  },\n})\nconst { getGrantOption } = useGrant()\n</script>\n\n<template>\n  <VBtnToggle\n    v-model=\"selectedGrant\"\n    divided\n    density=\"compact\"\n    variant=\"outlined\"\n    class=\"text-disabled\"\n  >\n    <VBtn\n      v-for=\"availableGrant in availableGrants\"\n      :key=\"availableGrant\"\n      :value=\"availableGrant\"\n      :color=\"getGrantOption(availableGrant)?.color\"\n    >\n      {{ getGrantOption(availableGrant)?.title }}\n    </VBtn>\n  </VBtnToggle>\n</template>\n"],"mappings":""}

package/dist/domains/permission/components/APermissionGrantEditor.vue.d.ts

@@ -0,0 +1,12 @@
+import { GrantType } from '../../auth/valueObject/Grant';
+type __VLS_Props = {
+    availableGrants: GrantType[];
+    selectedGrant: GrantType | undefined;
+};
+declare const __VLS_export: import('vue').DefineComponent<__VLS_Props, {}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {} & {
+    change: (data?: GrantType | undefined) => any;
+}, string, import('vue').PublicProps, Readonly<__VLS_Props> & Readonly<{
+    onChange?: ((data?: GrantType | undefined) => any) | undefined;
+}>, {}, {}, {}, {}, string, import('vue').ComponentProvideOptions, false, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/domains/permission/components/APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js

@@ -0,0 +1,45 @@
+import { useGrant as e } from "../../auth/valueObject/Grant.js";
+import { Fragment as t, computed as n, createBlock as r, createElementBlock as i, createTextVNode as a, defineComponent as o, openBlock as s, renderList as c, toDisplayString as l, unref as u, withCtx as d } from "vue";
+import { VBtn as f } from "vuetify/components/VBtn";
+import { VBtnToggle as p } from "vuetify/components/VBtnToggle";
+//#region src/domains/permission/components/APermissionGrantEditor.vue?vue&type=script&setup=true&lang.ts
+var m = /*@__PURE__*/ o({
+	__name: "APermissionGrantEditor",
+	props: {
+		availableGrants: {},
+		selectedGrant: {}
+	},
+	emits: ["change"],
+	setup(o, { emit: m }) {
+		let h = o, g = m, _ = n({
+			get() {
+				return h.selectedGrant;
+			},
+			set(e) {
+				g("change", e);
+			}
+		}), { getGrantOption: v } = e();
+		return (e, n) => (s(), r(p, {
+			modelValue: _.value,
+			"onUpdate:modelValue": n[0] ||= (e) => _.value = e,
+			divided: "",
+			density: "compact",
+			variant: "outlined",
+			class: "text-disabled"
+		}, {
+			default: d(() => [(s(!0), i(t, null, c(o.availableGrants, (e) => (s(), r(f, {
+				key: e,
+				value: e,
+				color: u(v)(e)?.color
+			}, {
+				default: d(() => [a(l(u(v)(e)?.title), 1)]),
+				_: 2
+			}, 1032, ["value", "color"]))), 128))]),
+			_: 1
+		}, 8, ["modelValue"]));
+	}
+});
+//#endregion
+export { m as default };
+
+//# sourceMappingURL=APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js.map

package/dist/domains/permission/components/APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js","names":["_openBlock","_createBlock","_component_VBtnToggle","_withCtx","_createElementBlock","_Fragment","_renderList","_component_VBtn","_unref","_createTextVNode","_toDisplayString","APermissionGrantEditor_vue_vue_type_script_setup_true_lang_default","__emit","props","__props","emit","selectedGrant","computed","newGrant","useGrant","openBlock","createBlock","VBtnToggle","_cache","$event","withCtx","createElementBlock","Fragment","renderList","VBtn","availableGrant","unref","getGrantOption","createTextVNode","toDisplayString"],"sources":["../../../../src/domains/permission/components/APermissionGrantEditor.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { type GrantType, useGrant } from '@/domains/auth/valueObject/Grant'\nimport { computed } from 'vue'\n\nconst props = defineProps<{\n  availableGrants: GrantType[]\n  selectedGrant: GrantType | undefined\n}>()\nconst emit = defineEmits<{\n  (e: 'change', data?: GrantType): void\n}>()\nconst selectedGrant = computed({\n  get() {\n    return props.selectedGrant\n  },\n  set(newGrant) {\n    emit('change', newGrant)\n  },\n})\nconst { getGrantOption } = useGrant()\n</script>\n\n<template>\n  <VBtnToggle\n    v-model=\"selectedGrant\"\n    divided\n    density=\"compact\"\n    variant=\"outlined\"\n    class=\"text-disabled\"\n  >\n    <VBtn\n      v-for=\"availableGrant in availableGrants\"\n      :key=\"availableGrant\"\n      :value=\"availableGrant\"\n      :color=\"getGrantOption(availableGrant)?.color\"\n    >\n      {{ getGrantOption(availableGrant)?.title }}\n    </VBtn>\n  </VBtnToggle>\n</template>\n"],"mappings":";;;;;;;;;;;;;EAIA,IAAMa,IAAQC,GAIRC,IAAOH,GAGPI,IAAgBC,EAAS;GAC7B,MAAM;IACJ,OAAOJ,EAAM;GACf;GACA,IAAI,GAAU;IACZ,EAAK,UAAUK,CAAQ;GACzB;EACF,CAAC,GACK,EAAE,sBAAmBC,EAAS;E,kBAIlCnB,EAAA,GAAAC,EAeaC,GAAA;GAdF,YAAAc,EAAA;GAAA,uBAAA,AAAAO,EAAA,QAAA,MAAA,EAAa,QAAAC;GACtB,SAAA;GACA,SAAQ;GACR,SAAQ;GACR,OAAM;;GAGJ,SAAArB,QAAyC,EAD3CH,EAAA,EAAA,GAAAI,EAOOC,GAAA,MAAAC,EANoBQ,EAAA,kBAAlB,OADTd,EAAA,GAAAC,EAOOM,GAAA;IALJ,KAAKuB;IACL,OAAOA;IACP,OAAOtB,EAAAwB,CAAA,CAAc,CAACF,CAAc,CAAA,EAAG;;IAExC,SAAA3B,QAA2C,CAAxCM,EAAAC,EAAAF,EAAAwB,CAAA,CAAc,CAACF,CAAc,CAAA,EAAG,KAAK,GAAA,CAAA,C"}

package/dist/domains/permission/components/APermissionValueChip.js

@@ -0,0 +1,7 @@
+import e from "./APermissionValueChip.vue_vue_type_script_setup_true_lang.js";
+//#region src/domains/permission/components/APermissionValueChip.vue
+var t = e;
+//#endregion
+export { t as default };
+
+//# sourceMappingURL=APermissionValueChip.js.map

package/dist/domains/permission/components/APermissionValueChip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"APermissionValueChip.js","names":["_sfc_main","APermissionValueChip_vue_vue_type_script_setup_true_lang_default","APermissionValueChip_default"],"sources":["../../../../src/domains/permission/components/APermissionValueChip.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { type GrantType, useGrant } from '@/domains/auth/valueObject/Grant'\nimport { GrantOriginDefault, type GrantOriginType, useGrantOrigin } from '@/domains/permission/valueObject/GrantOrigin'\nimport { computed } from 'vue'\n\nconst props = defineProps<{\n  grant: GrantType\n  grantOrigin: GrantOriginType\n}>()\n\nconst { getGrantOption } = useGrant()\nconst grantOption = computed(() => getGrantOption(props.grant))\n\nconst { getGrantOriginOption } = useGrantOrigin()\nconst grantOriginOption = computed(() => getGrantOriginOption(props.grantOrigin))\n</script>\n\n<template>\n  <VChip\n    v-if=\"grantOption\"\n    :color=\"grantOption.color\"\n    close-label=\"common.button.remove\"\n    label\n    size=\"small\"\n  >\n    {{ grantOption.title }}\n    <span\n      v-if=\"grantOrigin !== GrantOriginDefault\"\n      class=\"ml-1\"\n      >({{ grantOriginOption?.title }})</span\n    >\n  </VChip>\n</template>\n"],"mappings":""}

package/dist/domains/permission/components/APermissionValueChip.vue.d.ts

@@ -0,0 +1,9 @@
+import { GrantType } from '../../auth/valueObject/Grant';
+import { GrantOriginType } from '../valueObject/GrantOrigin';
+type __VLS_Props = {
+    grant: GrantType;
+    grantOrigin: GrantOriginType;
+};
+declare const __VLS_export: import('vue').DefineComponent<__VLS_Props, {}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {}, string, import('vue').PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {}, {}, {}, {}, string, import('vue').ComponentProvideOptions, false, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/domains/permission/components/APermissionValueChip.vue_vue_type_script_setup_true_lang.js

@@ -0,0 +1,32 @@
+import { useGrant as e } from "../../auth/valueObject/Grant.js";
+import { GrantOriginDefault as t, useGrantOrigin as n } from "../valueObject/GrantOrigin.js";
+import { computed as r, createBlock as i, createCommentVNode as a, createElementBlock as o, createTextVNode as s, defineComponent as c, openBlock as l, toDisplayString as u, unref as d, withCtx as f } from "vue";
+import { VChip as p } from "vuetify/components/VChip";
+//#region src/domains/permission/components/APermissionValueChip.vue?vue&type=script&setup=true&lang.ts
+var m = {
+	key: 0,
+	class: "ml-1"
+}, h = /*@__PURE__*/ c({
+	__name: "APermissionValueChip",
+	props: {
+		grant: {},
+		grantOrigin: {}
+	},
+	setup(c) {
+		let h = c, { getGrantOption: g } = e(), _ = r(() => g(h.grant)), { getGrantOriginOption: v } = n(), y = r(() => v(h.grantOrigin));
+		return (e, n) => _.value ? (l(), i(p, {
+			key: 0,
+			color: _.value.color,
+			"close-label": "common.button.remove",
+			label: "",
+			size: "small"
+		}, {
+			default: f(() => [s(u(_.value.title) + " ", 1), c.grantOrigin === d(t) ? a("", !0) : (l(), o("span", m, "(" + u(y.value?.title) + ")", 1))]),
+			_: 1
+		}, 8, ["color"])) : a("", !0);
+	}
+});
+//#endregion
+export { h as default };
+
+//# sourceMappingURL=APermissionValueChip.vue_vue_type_script_setup_true_lang.js.map

package/dist/domains/permission/components/APermissionValueChip.vue_vue_type_script_setup_true_lang.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"APermissionValueChip.vue_vue_type_script_setup_true_lang.js","names":["_openBlock","_createBlock","_component_VChip","_withCtx","_createTextVNode","_toDisplayString","_unref","_createElementBlock","_createCommentVNode","_hoisted_1","APermissionValueChip_vue_vue_type_script_setup_true_lang_default","props","__props","useGrant","grantOption","computed","getGrantOption","useGrantOrigin","grantOriginOption","getGrantOriginOption","openBlock","createBlock","VChip","withCtx","createTextVNode","toDisplayString","unref","GrantOriginDefault","createCommentVNode","createElementBlock"],"sources":["../../../../src/domains/permission/components/APermissionValueChip.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { type GrantType, useGrant } from '@/domains/auth/valueObject/Grant'\nimport { GrantOriginDefault, type GrantOriginType, useGrantOrigin } from '@/domains/permission/valueObject/GrantOrigin'\nimport { computed } from 'vue'\n\nconst props = defineProps<{\n  grant: GrantType\n  grantOrigin: GrantOriginType\n}>()\n\nconst { getGrantOption } = useGrant()\nconst grantOption = computed(() => getGrantOption(props.grant))\n\nconst { getGrantOriginOption } = useGrantOrigin()\nconst grantOriginOption = computed(() => getGrantOriginOption(props.grantOrigin))\n</script>\n\n<template>\n  <VChip\n    v-if=\"grantOption\"\n    :color=\"grantOption.color\"\n    close-label=\"common.button.remove\"\n    label\n    size=\"small\"\n  >\n    {{ grantOption.title }}\n    <span\n      v-if=\"grantOrigin !== GrantOriginDefault\"\n      class=\"ml-1\"\n      >({{ grantOriginOption?.title }})</span\n    >\n  </VChip>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;EAKA,IAAMW,IAAQC,GAKR,EAAE,sBAAmBC,EAAS,GAC9BC,IAAcC,QAAeC,EAAeL,EAAM,KAAK,CAAC,GAExD,EAAE,4BAAyBM,EAAe,GAC1CC,IAAoBH,QAAeI,EAAqBR,EAAM,WAAW,CAAC;E,iBAKtEG,EAAA,SADRd,EAAA,GAAAC,EAaQC,GAAA;;GAXL,OAAOY,EAAA,MAAY;GACpB,eAAY;GACZ,OAAA;GACA,MAAK;;GAEL,SAAAX,QAAuB,CAApBC,EAAAC,EAAAS,EAAA,MAAY,KAAK,IAAG,KACvB,CAAA,GACQF,EAAA,gBAAgBN,EAAAqB,CAAA,I,aADxB3B,EAAA,GAAAO,EAIC,QAJDE,GAGG,MAACJ,EAAGa,EAAA,OAAmB,KAAK,IAAG,KAAC,CAAA,E"}

package/dist/domains/permission/composables/permissionActions.d.ts

@@ -0,0 +1,22 @@
+import { AxiosClientFn } from '../../api/utils/client';
+import { AnzuUser } from '../../../shared/types/AnzuUser';
+import { IntegerId } from '../../../shared/types/common';
+import { Permissions } from '../../auth/types/Permission';
+export interface PermissionActionsParams {
+    client: AxiosClientFn;
+    system: string;
+    entity?: string;
+    endPoint?: string;
+}
+/**
+ * Builds the grant map a user would end up with, for the editor's "resolved" column, out of what
+ * the page already holds: the groups the user is in plus the grants set on the user directly.
+ *
+ * It is not the backend's `resolvedPermissions`. That one arrives with the record and includes
+ * roles; this one is what the screen would send if saved now, so the editor can show the effect of
+ * a group the operator has just ticked without a round trip.
+ */
+export declare const usePermissionActions: (params: PermissionActionsParams) => {
+    resolvePermissions: (user: AnzuUser) => Permissions;
+    resolveGroupPermissions: (permissionGroupIds: IntegerId[]) => Permissions;
+};

package/dist/domains/permission/composables/permissionActions.js

@@ -0,0 +1,25 @@
+import { isUndefined as e } from "../../../shared/utils/common.js";
+import { objectGetValueByPath as t, objectSetValueByPath as n } from "../../../shared/utils/object.js";
+import { useCachedPermissionGroups as r } from "../group/composables/cachedPermissionGroups.js";
+//#region src/domains/permission/composables/permissionActions.ts
+var i = (i) => {
+	let { getCachedPermissionGroup: a } = r(i), o = (r) => {
+		let i = {}, o = r.map((e) => a(e));
+		for (let r of o) if (!e(r)) for (let e in r.permissions) {
+			let a = t(r.permissions, e);
+			Object.hasOwn(i, e) ? t(i, e) < a && n(i, e, a) : n(i, e, a);
+		}
+		return i;
+	};
+	return {
+		resolvePermissions: (e) => ({
+			...o(e.permissionGroups),
+			...e.permissions
+		}),
+		resolveGroupPermissions: o
+	};
+};
+//#endregion
+export { i as usePermissionActions };
+
+//# sourceMappingURL=permissionActions.js.map

package/dist/domains/permission/composables/permissionActions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionActions.js","names":["usePermissionActions","useCachedPermissionGroups","params","resolveGroupPermissions","permissions","permissionGroups","permissionGroupIds","getCachedPermissionGroup","id","permissionGroup","permissionName","grant","objectGetValueByPath","objectSetValueByPath","user"],"sources":["../../../../src/domains/permission/composables/permissionActions.ts"],"sourcesContent":["import type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { useCachedPermissionGroups } from '@/domains/permission/group/composables/cachedPermissionGroups'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\nimport type { Permissions } from '@/domains/auth/types/Permission'\nimport { isUndefined } from '@/shared/utils/common'\nimport { objectGetValueByPath, objectSetValueByPath } from '@/shared/utils/object'\n\nexport interface PermissionActionsParams {\n  client: AxiosClientFn\n  system: string\n  entity?: string\n  endPoint?: string\n}\n\n/**\n * Builds the grant map a user would end up with, for the editor's \"resolved\" column, out of what\n * the page already holds: the groups the user is in plus the grants set on the user directly.\n *\n * It is not the backend's `resolvedPermissions`. That one arrives with the record and includes\n * roles; this one is what the screen would send if saved now, so the editor can show the effect of\n * a group the operator has just ticked without a round trip.\n */\nexport const usePermissionActions = (params: PermissionActionsParams) => {\n  const { getCachedPermissionGroup } = useCachedPermissionGroups(params)\n\n  const resolveGroupPermissions = (permissionGroupIds: IntegerId[]): Permissions => {\n    const permissions: Permissions = {}\n    const permissionGroups = permissionGroupIds.map((id) => getCachedPermissionGroup(id))\n\n    for (const permissionGroup of permissionGroups) {\n      if (isUndefined(permissionGroup)) continue\n      for (const permissionName in permissionGroup.permissions) {\n        const grant = objectGetValueByPath(permissionGroup.permissions, permissionName)\n        if (!Object.hasOwn(permissions, permissionName)) {\n          objectSetValueByPath(permissions, permissionName, grant)\n          continue\n        }\n        // Grants are ordered deny < allowOwner < allow, so the widest group wins. Two groups that\n        // disagree do not cancel out.\n        if (objectGetValueByPath(permissions, permissionName) < grant) {\n          objectSetValueByPath(permissions, permissionName, grant)\n        }\n      }\n    }\n    return permissions\n  }\n\n  /** A grant set on the user directly always beats whatever the groups say. */\n  const resolvePermissions = (user: AnzuUser): Permissions => ({\n    ...resolveGroupPermissions(user.permissionGroups),\n    ...user.permissions,\n  })\n\n  return {\n    resolvePermissions,\n    resolveGroupPermissions,\n  }\n}\n"],"mappings":";;;;AAuBA,IAAaA,KAAwB,MAAoC;CACvE,IAAM,EAAE,gCAA6BC,EAA0BC,CAAM,GAE/DC,KAA2B,MAAiD;EAChF,IAAMC,IAA2B,CAAC,GAC5BC,IAAmBC,EAAmB,KAAK,MAAOC,EAAyBC,CAAE,CAAC;EAEpF,KAAK,IAAMC,KAAmBJ,GAC5B,IAAI,GAAYI,CAAe,GAC/B,KAAK,IAAMC,KAAkBD,EAAgB,aAAa;GACxD,IAAME,IAAQC,EAAqBH,EAAgB,aAAaC,CAAc;GAC9E,AAAK,OAAO,OAAON,GAAaM,CAAc,IAM1CE,EAAqBR,GAAaM,CAAc,IAAIC,KACtDE,EAAqBT,GAAaM,GAAgBC,CAAK,IANvDE,EAAqBT,GAAaM,GAAgBC,CAAK;EAQ3D;EAEF,OAAOP;CACT;CAQA,OAAO;EACL,qBAN0B,OAAiC;GAC3D,GAAGD,EAAwBW,EAAK,gBAAgB;GAChD,GAAGA,EAAK;EACV;EAIE;CACF;AACF"}

package/dist/domains/permission/config/api/permissionConfigApi.d.ts

@@ -0,0 +1,18 @@
+import { AxiosClientFn } from '../../../api/utils/client';
+import { PermissionConfig } from '../types/PermissionConfig';
+export declare const PERMISSION_CONFIG_ENTITY = "permissionConfig";
+export declare const PERMISSION_CONFIG_ENDPOINT = "/adm/v1/permissions/config";
+export interface PermissionConfigApiParams {
+    client: AxiosClientFn;
+    /**
+     * Which backend this instance talks to. It reaches `useApiRequest` for error context and is the
+     * key everything downstream is stored under, so two systems can be loaded side by side.
+     */
+    system: string;
+    /** Goes into every `useApiRequest` call; see the per-system entity note in `permissionGroupApi`. */
+    entity?: string;
+    endPoint?: string;
+}
+export declare const usePermissionConfigApi: ({ client, system, entity, endPoint, }: PermissionConfigApiParams) => {
+    useFetchPermissionConfig: () => import('../../../api/composables/useApiRequest').UseApiRequestReturnType<PermissionConfig, null>;
+};

package/dist/domains/permission/config/api/permissionConfigApi.js

@@ -0,0 +1,15 @@
+import { useApiRequest as e } from "../../../api/composables/useApiRequest.js";
+//#region src/domains/permission/config/api/permissionConfigApi.ts
+var t = "permissionConfig", n = "/adm/v1/permissions/config", r = ({ client: r, system: i, entity: a = t, endPoint: o = n }) => ({ useFetchPermissionConfig: () => e({
+	client: r,
+	method: "GET",
+	system: i,
+	entity: a,
+	validationSystem: "common",
+	validationEntity: a,
+	urlTemplate: o
+}) });
+//#endregion
+export { n as PERMISSION_CONFIG_ENDPOINT, t as PERMISSION_CONFIG_ENTITY, r as usePermissionConfigApi };
+
+//# sourceMappingURL=permissionConfigApi.js.map

package/dist/domains/permission/config/api/permissionConfigApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionConfigApi.js","names":["PERMISSION_CONFIG_ENTITY","PERMISSION_CONFIG_ENDPOINT","usePermissionConfigApi","useApiRequest","entity","endPoint"],"sources":["../../../../../src/domains/permission/config/api/permissionConfigApi.ts"],"sourcesContent":["import type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport type { PermissionConfig } from '@/domains/permission/config/types/PermissionConfig'\n\nexport const PERMISSION_CONFIG_ENTITY = 'permissionConfig'\nexport const PERMISSION_CONFIG_ENDPOINT = '/adm/v1/permissions/config'\n\nexport interface PermissionConfigApiParams {\n  client: AxiosClientFn\n  /**\n   * Which backend this instance talks to. It reaches `useApiRequest` for error context and is the\n   * key everything downstream is stored under, so two systems can be loaded side by side.\n   */\n  system: string\n  /** Goes into every `useApiRequest` call; see the per-system entity note in `permissionGroupApi`. */\n  entity?: string\n  endPoint?: string\n}\n\nexport const usePermissionConfigApi = ({\n  client,\n  system,\n  entity = PERMISSION_CONFIG_ENTITY,\n  endPoint = PERMISSION_CONFIG_ENDPOINT,\n}: PermissionConfigApiParams) => {\n  const useFetchPermissionConfig = () =>\n    useApiRequest<PermissionConfig, null>({\n      client,\n      method: 'GET',\n      system,\n      entity,\n      // The config endpoint never answers a field-level validation failure, but the pair is kept\n      // consistent with the rest of the shared api so a future one lands on real labels.\n      validationSystem: 'common',\n      validationEntity: entity,\n      urlTemplate: endPoint,\n    })\n\n  return {\n    useFetchPermissionConfig,\n  }\n}\n"],"mappings":";;AAIA,IAAaA,IAA2B,oBAC3BC,IAA6B,8BAc7BC,KAA0B,EACrC,WACA,WACA,YAASF,GACT,cAAWC,SAeJ,EACL,gCAbAE,EAAsC;CACpC;CACA,QAAQ;CACR;CACA;CAGA,kBAAkB;CAClB,kBAAkBC;CAClB,aAAaC;AACf,CAAC,EAIH"}

package/dist/domains/permission/config/composables/permissionConfigActions.d.ts

@@ -0,0 +1,26 @@
+import { AxiosClientFn } from '../../../api/utils/client';
+import { PermissionTranslationGroup } from '../types/PermissionConfig';
+export interface PermissionConfigActionsParams {
+    client: AxiosClientFn;
+    /**
+     * The system this config belongs to. It is a parameter and not a global -- admin-inhouse used to
+     * read it from a `curSystem` ref, which made the whole module impossible to use from a page that
+     * shows two systems at once and impossible to move here at all.
+     */
+    system: string;
+    entity?: string;
+    endPoint?: string;
+    /**
+     * Fetch as soon as the composable is built, the way every admin does today. Turn it off where
+     * the caller wants to decide when (a dialog that may never open, a test).
+     */
+    autoFetch?: boolean;
+}
+export declare const usePermissionConfigActions: (params: PermissionConfigActionsParams) => {
+    permissionConfig: import('vue').ComputedRef<import('../types/PermissionConfig').PermissionConfig>;
+    loadingPermissionConfig: import('vue').ComputedRef<boolean>;
+    isPermissionConfigInitialized: import('vue').ComputedRef<boolean>;
+    fetchPermissionConfig: (force?: boolean) => Promise<void>;
+    translatePermission: (group: PermissionTranslationGroup, key: string) => string;
+    resetPermissionConfig: () => void;
+};

package/dist/domains/permission/config/composables/permissionConfigActions.js

@@ -0,0 +1,43 @@
+import { useAlerts as e } from "../../../system/composables/alerts.js";
+import { objectGetValueByPath as t } from "../../../../shared/utils/object.js";
+import { useLanguageSettings as n } from "../../../system/composables/languageSettings.js";
+import { PERMISSION_CONFIG_ENDPOINT as r, PERMISSION_CONFIG_ENTITY as i, usePermissionConfigApi as a } from "../api/permissionConfigApi.js";
+import { usePermissionConfigStore as o } from "../store/permissionConfigStore.js";
+import { computed as s } from "vue";
+//#region src/domains/permission/config/composables/permissionConfigActions.ts
+var c = /* @__PURE__ */ new Map(), l = (l) => {
+	let { client: u, system: d, entity: f = i, endPoint: p = r, autoFetch: m = !0 } = l, { showErrorsDefault: h } = e(), { useFetchPermissionConfig: g } = a({
+		client: u,
+		system: d,
+		entity: f,
+		endPoint: p
+	}), _ = o(), v = s(() => _.getEntry(d)), y = s(() => v.value.config), b = s(() => v.value.loading), x = s(() => v.value.initialized), S = async () => {
+		_.setLoading(d, !0);
+		try {
+			let { execute: e } = g();
+			_.setConfig(d, await e());
+		} catch (e) {
+			h(e);
+		} finally {
+			_.setLoading(d, !1), c.delete(d);
+		}
+	}, C = async (e = !1) => {
+		if (!e && x.value) return;
+		let t = c.get(d);
+		if (t) return t;
+		let n = S();
+		return c.set(d, n), n;
+	}, { currentLanguageCode: w } = n();
+	return m && C(), {
+		permissionConfig: y,
+		loadingPermissionConfig: b,
+		isPermissionConfigInitialized: x,
+		fetchPermissionConfig: C,
+		translatePermission: (e, n) => t(y.value.translation, e + "." + n + "." + w.value) ?? n,
+		resetPermissionConfig: () => _.resetSystem(d)
+	};
+};
+//#endregion
+export { l as usePermissionConfigActions };
+
+//# sourceMappingURL=permissionConfigActions.js.map

package/dist/domains/permission/config/composables/permissionConfigActions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionConfigActions.js","names":["inFlight","usePermissionConfigActions","PERMISSION_CONFIG_ENTITY","PERMISSION_CONFIG_ENDPOINT","params","useAlerts","usePermissionConfigApi","store","usePermissionConfigStore","entry","computed","system","permissionConfig","loadingPermissionConfig","isPermissionConfigInitialized","runFetch","useFetchPermissionConfig","execute","error","fetchPermissionConfig","force","running","started","useLanguageSettings","autoFetch","objectGetValueByPath","group","key","currentLanguageCode"],"sources":["../../../../../src/domains/permission/config/composables/permissionConfigActions.ts"],"sourcesContent":["import { computed } from 'vue'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { useLanguageSettings } from '@/domains/system/composables/languageSettings'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport {\n  PERMISSION_CONFIG_ENDPOINT,\n  PERMISSION_CONFIG_ENTITY,\n  usePermissionConfigApi,\n} from '@/domains/permission/config/api/permissionConfigApi'\nimport { usePermissionConfigStore } from '@/domains/permission/config/store/permissionConfigStore'\nimport type { PermissionTranslationGroup } from '@/domains/permission/config/types/PermissionConfig'\nimport { objectGetValueByPath } from '@/shared/utils/object'\n\nexport interface PermissionConfigActionsParams {\n  client: AxiosClientFn\n  /**\n   * The system this config belongs to. It is a parameter and not a global -- admin-inhouse used to\n   * read it from a `curSystem` ref, which made the whole module impossible to use from a page that\n   * shows two systems at once and impossible to move here at all.\n   */\n  system: string\n  entity?: string\n  endPoint?: string\n  /**\n   * Fetch as soon as the composable is built, the way every admin does today. Turn it off where\n   * the caller wants to decide when (a dialog that may never open, a test).\n   */\n  autoFetch?: boolean\n}\n\n/**\n * One request per system, however many components ask at once. The map lives at module scope\n * because the de-duplication has to span composable instances: a page with the editor open twice\n * builds two of these, and both would otherwise fire the same GET.\n */\nconst inFlight = new Map<string, Promise<void>>()\n\nexport const usePermissionConfigActions = (params: PermissionConfigActionsParams) => {\n  const {\n    client,\n    system,\n    entity = PERMISSION_CONFIG_ENTITY,\n    endPoint = PERMISSION_CONFIG_ENDPOINT,\n    autoFetch = true,\n  } = params\n\n  const { showErrorsDefault } = useAlerts()\n  const { useFetchPermissionConfig } = usePermissionConfigApi({ client, system, entity, endPoint })\n  const store = usePermissionConfigStore()\n\n  const entry = computed(() => store.getEntry(system))\n  const permissionConfig = computed(() => entry.value.config)\n  const loadingPermissionConfig = computed(() => entry.value.loading)\n  const isPermissionConfigInitialized = computed(() => entry.value.initialized)\n\n  const runFetch = async () => {\n    store.setLoading(system, true)\n    try {\n      const { execute } = useFetchPermissionConfig()\n      store.setConfig(system, await execute())\n    } catch (error) {\n      showErrorsDefault(error)\n    } finally {\n      // Always, including on the failure path. Without it a backend that is down leaves the\n      // editor's card spinning for the rest of the session.\n      store.setLoading(system, false)\n      inFlight.delete(system)\n    }\n  }\n\n  const fetchPermissionConfig = async (force = false) => {\n    if (!force && isPermissionConfigInitialized.value) return\n    const running = inFlight.get(system)\n    if (running) return running\n    const started = runFetch()\n    inFlight.set(system, started)\n    return started\n  }\n\n  const { currentLanguageCode } = useLanguageSettings()\n\n  /**\n   * Falls back to the raw key, which is the contract the admins rely on: the ACL vocabulary lives\n   * in the backend yaml, never in front-end i18n, so an untranslated action is shown as\n   * `weather_location_ui` rather than as a blank cell.\n   */\n  const translatePermission = (group: PermissionTranslationGroup, key: string): string => {\n    const translated = objectGetValueByPath(\n      permissionConfig.value.translation,\n      group + '.' + key + '.' + currentLanguageCode.value\n    )\n\n    return translated ?? key\n  }\n\n  if (autoFetch) void fetchPermissionConfig()\n\n  return {\n    permissionConfig,\n    loadingPermissionConfig,\n    isPermissionConfigInitialized,\n    fetchPermissionConfig,\n    translatePermission,\n    resetPermissionConfig: () => store.resetSystem(system),\n  }\n}\n"],"mappings":";;;;;;;AAmCA,IAAMA,oBAAW,IAAI,IAA2B,GAEnCC,KAA8B,MAA0C;CACnF,IAAM,EACJ,WACA,WACA,YAASC,GACT,cAAWC,GACX,eAAY,OACVC,GAEE,EAAE,yBAAsBC,EAAU,GAClC,EAAE,gCAA6BC,EAAuB;EAAE;EAAQ;EAAQ;EAAQ;CAAS,CAAC,GAC1FC,IAAQC,EAAyB,GAEjCC,IAAQC,QAAeH,EAAM,SAASI,CAAM,CAAC,GAC7CC,IAAmBF,QAAeD,EAAM,MAAM,MAAM,GACpDI,IAA0BH,QAAeD,EAAM,MAAM,OAAO,GAC5DK,IAAgCJ,QAAeD,EAAM,MAAM,WAAW,GAEtEM,IAAW,YAAY;EAC3B,EAAM,WAAWJ,GAAQ,EAAI;EAC7B,IAAI;GACF,IAAM,EAAE,eAAYK,EAAyB;GAC7C,EAAM,UAAUL,GAAQ,MAAMM,EAAQ,CAAC;EACzC,SAASC,GAAO;GACd,EAAkBA,CAAK;EACzB,UAAU;GAIR,AADAX,EAAM,WAAWI,GAAQ,EAAK,GAC9BX,EAAS,OAAOW,CAAM;EACxB;CACF,GAEMQ,IAAwB,OAAO,IAAQ,OAAU;EACrD,IAAI,CAACC,KAASN,EAA8B,OAAO;EACnD,IAAMO,IAAUrB,EAAS,IAAIW,CAAM;EACnC,IAAIU,GAAS,OAAOA;EACpB,IAAMC,IAAUP,EAAS;EAEzB,OADAf,EAAS,IAAIW,GAAQW,CAAO,GACrBA;CACT,GAEM,EAAE,2BAAwBC,EAAoB;CAkBpD,OAFIC,KAAWL,EAA2B,GAEnC;EACL;EACA;EACA;EACA;EACA,sBAhB2B,GAAmC,MAC3CM,EACjBb,EAAiB,MAAM,aACvBc,IAAQ,MAAMC,IAAM,MAAMC,EAAoB,KAGzC,KAAcD;EAWrB,6BAA6BpB,EAAM,YAAYI,CAAM;CACvD;AACF"}

package/dist/domains/permission/config/factory/PermissionConfigFactory.d.ts

@@ -0,0 +1,4 @@
+import { PermissionConfig } from '../types/PermissionConfig';
+export declare function usePermissionConfigFactory(): {
+    createPermissionConfig: () => PermissionConfig;
+};

package/dist/domains/permission/config/factory/PermissionConfigFactory.js

@@ -0,0 +1,17 @@
+//#region src/domains/permission/config/factory/PermissionConfigFactory.ts
+function e() {
+	return { createPermissionConfig: () => ({
+		config: {},
+		defaultGrants: [],
+		roles: [],
+		translation: {
+			actions: {},
+			subjects: {},
+			roles: {}
+		}
+	}) };
+}
+//#endregion
+export { e as usePermissionConfigFactory };
+
+//# sourceMappingURL=PermissionConfigFactory.js.map

package/dist/domains/permission/config/factory/PermissionConfigFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionConfigFactory.js","names":["usePermissionConfigFactory"],"sources":["../../../../../src/domains/permission/config/factory/PermissionConfigFactory.ts"],"sourcesContent":["import type { PermissionConfig } from '@/domains/permission/config/types/PermissionConfig'\n\nexport function usePermissionConfigFactory() {\n  const createPermissionConfig = (): PermissionConfig => {\n    return {\n      config: {},\n      defaultGrants: [],\n      roles: [],\n      translation: {\n        actions: {},\n        subjects: {},\n        roles: {},\n      },\n    }\n  }\n\n  return {\n    createPermissionConfig,\n  }\n}\n"],"mappings":";AAEA,SAAgBA,IAA6B;CAc3C,OAAO,EACL,+BAbO;EACL,QAAQ,CAAC;EACT,eAAe,CAAC;EAChB,OAAO,CAAC;EACR,aAAa;GACX,SAAS,CAAC;GACV,UAAU,CAAC;GACX,OAAO,CAAC;EACV;CACF,GAKF;AACF"}