@anzusystems/common-admin 1.49.0 → 2.0.0-rc.1

package/dist/domains/anzuUser/composables/userSystemProbe.js

@@ -0,0 +1,104 @@
+import "../../../shared/statusCodes.js";
+import { AnzuApiForbiddenError as e } from "../../../shared/error/AnzuApiForbiddenError.js";
+import { AnzuApiResponseCodeError as t } from "../../../shared/error/AnzuApiResponseCodeError.js";
+import { AnzuApiAxiosError as n } from "../../../shared/error/AnzuApiAxiosError.js";
+import { AnzuApiCancelledError as r } from "../../../shared/error/AnzuApiCancelledError.js";
+import { USER_PROBE_ENTITY as i } from "../../api/utils/apiErrors.js";
+import { useApiRequest as a } from "../../api/composables/useApiRequest.js";
+import { resolveProbeEndpoint as o } from "./userSystemDescriptor.js";
+import { UserSystemAccess as s, UserSystemLoad as c, UserSystemPresence as l, classifyProbeStatus as u, emptyUserSystemAxes as d } from "../utils/userSystemState.js";
+import { ref as f } from "vue";
+import p from "axios";
+//#region src/domains/anzuUser/composables/userSystemProbe.ts
+var m = Symbol("UserSystemRefreshHook"), h = (r) => {
+	if (r instanceof t) return r.code;
+	if (r instanceof e) return 403;
+	if (r instanceof n) return r.cause.response?.status ?? null;
+	let i = r?.cause;
+	return p.isAxiosError(i) ? i.response?.status ?? null : p.isAxiosError(r) ? r.response?.status ?? null : null;
+}, g = (e) => {
+	let { descriptor: t, refreshHook: n } = e, p = f(d()), m = f(null), g = 0, _ = null;
+	return {
+		axes: p,
+		user: m,
+		probe: async (e) => {
+			if (!t.isEnabled()) {
+				p.value = {
+					load: c.Loaded,
+					presence: l.Unknown,
+					access: s.ConfigDisabled,
+					enabled: "unknown"
+				}, m.value = null;
+				return;
+			}
+			let d = ++g;
+			p.value = {
+				...p.value,
+				load: c.Loading
+			};
+			let f = o(t), v = async () => {
+				let { execute: n, abort: r } = a({
+					client: t.client,
+					method: "GET",
+					system: t.system,
+					entity: i,
+					validationSystem: "common",
+					validationEntity: t.entity,
+					urlTemplate: f.get
+				});
+				_ = r;
+				try {
+					return await n({ urlParams: { id: e } });
+				} finally {
+					_ = null;
+				}
+			};
+			try {
+				let e = await v();
+				if (d !== g) return;
+				m.value = e, p.value = {
+					load: c.Loaded,
+					presence: l.Present,
+					access: s.Ok,
+					enabled: e.enabled
+				};
+			} catch (e) {
+				if (d !== g || e instanceof r) return;
+				let i = h(e);
+				if (i === 401 && n) {
+					let e = await n(t.system).catch(() => !1);
+					if (d !== g) return;
+					if (e) try {
+						let e = await v();
+						if (d !== g) return;
+						m.value = e, p.value = {
+							load: c.Loaded,
+							presence: l.Present,
+							access: s.Ok,
+							enabled: e.enabled
+						};
+						return;
+					} catch (e) {
+						if (d !== g) return;
+						i = h(e);
+					}
+				}
+				m.value = null, p.value = {
+					load: c.Loaded,
+					...u(i),
+					enabled: "unknown"
+				};
+			}
+		},
+		reset: () => {
+			p.value = d(), m.value = null;
+		},
+		cancel: () => {
+			g++, _?.(), _ = null;
+		}
+	};
+};
+//#endregion
+export { i as USER_PROBE_ENTITY, m as UserSystemRefreshHookKey, h as probeStatusFromError, g as useUserSystemProbe };
+
+//# sourceMappingURL=userSystemProbe.js.map

package/dist/domains/anzuUser/composables/userSystemProbe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userSystemProbe.js","names":["axios","UserSystemRefreshHookKey","probeStatusFromError","error","AnzuApiResponseCodeError","AnzuApiForbiddenError","AnzuApiAxiosError","cause","useUserSystemProbe","params","axes","ref","emptyUserSystemAxes","user","generation","abortInFlight","descriptor","UserSystemLoad","UserSystemPresence","UserSystemAccess","token","endpoint","resolveProbeEndpoint","ask","useApiRequest","USER_PROBE_ENTITY","abort","execute","found","AnzuApiCancelledError","status","refreshHook","refreshed","retryError","classifyProbeStatus"],"sources":["../../../../src/domains/anzuUser/composables/userSystemProbe.ts"],"sourcesContent":["import { ref, type InjectionKey, type Ref } from 'vue'\nimport axios from 'axios'\nimport { AnzuApiAxiosError } from '@/shared/error/AnzuApiAxiosError'\nimport { AnzuApiCancelledError } from '@/shared/error/AnzuApiCancelledError'\nimport { AnzuApiForbiddenError } from '@/shared/error/AnzuApiForbiddenError'\nimport { AnzuApiResponseCodeError } from '@/shared/error/AnzuApiResponseCodeError'\nimport { HTTP_STATUS_FORBIDDEN, HTTP_STATUS_UNAUTHORIZED } from '@/shared/statusCodes'\nimport { USER_PROBE_ENTITY } from '@/domains/api/utils/apiErrors'\nimport { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport { type AnyUserSystemDescriptor, resolveProbeEndpoint } from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport {\n  classifyProbeStatus,\n  emptyUserSystemAxes,\n  UserSystemAccess,\n  UserSystemLoad,\n  UserSystemPresence,\n  type UserSystemAxes,\n} from '@/domains/anzuUser/utils/userSystemState'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\n\n/**\n * How an app refreshes a session for one system, and retries.\n *\n * The probe cannot do this itself: a first 401 is ambiguous -- expired session or no account --\n * and the only way to tell them apart is to refresh and ask again, with the session this admin\n * refreshes (its `createRefreshSession`, shared with its refresh interceptor). Without this hook a\n * panel would show an expired token as \"no account here\", which is exactly the confusion decision\n * 16 forbids.\n *\n * Returns true when the refresh succeeded and the call is worth repeating.\n */\nexport type UserSystemRefreshHook = (system: string) => Promise<boolean>\n\nexport { USER_PROBE_ENTITY }\n\nexport const UserSystemRefreshHookKey: InjectionKey<UserSystemRefreshHook> = Symbol('UserSystemRefreshHook')\n\n/**\n * The status the backend answered with, or null when nothing ever answered.\n *\n * Read off the axios failure the mapped error kept as its cause, not off the class. Going by class\n * alone misses exactly the answers that exist *because* the backend replied with a body: a\n * validation failure is `AnzuApiValidationError`, a dependency conflict is\n * `AnzuApiDependencyExistsError`, and both are 422s that have to be reported as such. Reported as\n * \"the system did not answer\" they would send the operator looking for an outage instead of at the\n * account whose stored data no longer validates -- which, with legacy rows, is the failure that\n * happens most.\n */\nexport const probeStatusFromError = (error: unknown): number | null => {\n  if (error instanceof AnzuApiResponseCodeError) return error.code\n  if (error instanceof AnzuApiForbiddenError) return HTTP_STATUS_FORBIDDEN\n  if (error instanceof AnzuApiAxiosError) return error.cause.response?.status ?? null\n  const cause = (error as { cause?: unknown } | null)?.cause\n  if (axios.isAxiosError(cause)) return cause.response?.status ?? null\n  if (axios.isAxiosError(error)) return error.response?.status ?? null\n\n  return null\n}\n\nexport interface UserSystemProbeResult {\n  axes: Ref<UserSystemAxes>\n  user: Ref<AnzuUser | null>\n  probe: (id: IntegerId) => Promise<void>\n  reset: () => void\n  cancel: () => void\n}\n\nexport interface UserSystemProbeParams {\n  descriptor: AnyUserSystemDescriptor\n  /** Usually injected once per page; passing it explicitly is for tests and one-off panels. */\n  refreshHook?: UserSystemRefreshHook | undefined\n}\n\n/**\n * One system's answer about one user.\n *\n * Reads through `endpoints[probe].get`, never a hard-coded path: in dam the choice is visible to\n * the operator, because `/adm/v1/anzu-user/{id}` has no gating there while `/adm/users/{id}` sits\n * behind `DAM_USER_READ` -- only the second can ever render \"you have no access\".\n *\n * Note for the app: a probe answering 404 is an expected result here, not a failure. The default\n * api error logger skips it; a logger of the app's own still receives it and should filter on\n * `status === 404 && entity === USER_PROBE_ENTITY`, or every absent account writes a line into the log.\n */\nexport const useUserSystemProbe = (params: UserSystemProbeParams): UserSystemProbeResult => {\n  const { descriptor, refreshHook } = params\n\n  const axes = ref<UserSystemAxes>(emptyUserSystemAxes())\n  const user = ref<AnzuUser | null>(null)\n\n  let generation = 0\n  /**\n   * The helper's abort handle for the request that is in flight.\n   *\n   * The generation token alone already stops a stale answer from being written; this is what stops\n   * the request itself. Leaving a page mid-search would otherwise leave up to eighteen calls\n   * running against backends nobody is waiting for any more.\n   */\n  let abortInFlight: (() => void) | null = null\n\n  const reset = () => {\n    axes.value = emptyUserSystemAxes()\n    user.value = null\n  }\n\n  const cancel = () => {\n    generation++\n    abortInFlight?.()\n    abortInFlight = null\n  }\n\n  const probe = async (id: IntegerId) => {\n    // A system switched off in configuration is a state to show, not a call to make.\n    if (!descriptor.isEnabled()) {\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        presence: UserSystemPresence.Unknown,\n        access: UserSystemAccess.ConfigDisabled,\n        enabled: 'unknown',\n      }\n      user.value = null\n      return\n    }\n\n    const token = ++generation\n    axes.value = { ...axes.value, load: UserSystemLoad.Loading }\n\n    const endpoint = resolveProbeEndpoint(descriptor)\n\n    const ask = async () => {\n      const { execute, abort } = useApiRequest<AnzuUser, null>({\n        client: descriptor.client,\n        method: 'GET',\n        system: descriptor.system,\n        entity: USER_PROBE_ENTITY,\n        validationSystem: 'common',\n        validationEntity: descriptor.entity,\n        urlTemplate: endpoint.get,\n      })\n      abortInFlight = abort\n      try {\n        return await execute({ urlParams: { id } })\n      } finally {\n        abortInFlight = null\n      }\n    }\n\n    try {\n      const found = await ask()\n      if (token !== generation) return\n      user.value = found\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        presence: UserSystemPresence.Present,\n        access: UserSystemAccess.Ok,\n        enabled: found.enabled,\n      }\n    } catch (error) {\n      if (token !== generation) return\n      if (error instanceof AnzuApiCancelledError) return\n\n      let status = probeStatusFromError(error)\n\n      // The one retry the classification depends on. Only after it has happened is a 401 a verdict\n      // rather than a question.\n      if (status === HTTP_STATUS_UNAUTHORIZED && refreshHook) {\n        const refreshed = await refreshHook(descriptor.system).catch(() => false)\n        if (token !== generation) return\n        if (refreshed) {\n          try {\n            const found = await ask()\n            if (token !== generation) return\n            user.value = found\n            axes.value = {\n              load: UserSystemLoad.Loaded,\n              presence: UserSystemPresence.Present,\n              access: UserSystemAccess.Ok,\n              enabled: found.enabled,\n            }\n            return\n          } catch (retryError) {\n            if (token !== generation) return\n            status = probeStatusFromError(retryError)\n          }\n        }\n      }\n\n      user.value = null\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        ...classifyProbeStatus(status),\n        enabled: 'unknown',\n      }\n    }\n  }\n\n  return { axes, user, probe, reset, cancel }\n}\n"],"mappings":";;;;;;;;;;;;AAoCA,IAAaC,IAAgE,OAAO,uBAAuB,GAa9FC,KAAwB,MAAkC;CACrE,IAAIC,aAAiBC,GAA0B,OAAOD,EAAM;CAC5D,IAAIA,aAAiBE,GAAuB,OAAA;CAC5C,IAAIF,aAAiBG,GAAmB,OAAOH,EAAM,MAAM,UAAU,UAAU;CAC/E,IAAMI,IAASJ,GAAsC;CAIrD,OAHIH,EAAM,aAAaO,CAAK,IAAUA,EAAM,UAAU,UAAU,OAC5DP,EAAM,aAAaG,CAAK,IAAUA,EAAM,UAAU,UAAU,OAEzD;AACT,GA2BaK,KAAsB,MAAyD;CAC1F,IAAM,EAAE,eAAY,mBAAgBC,GAE9BC,IAAOC,EAAoBC,EAAoB,CAAC,GAChDC,IAAOF,EAAqB,IAAI,GAElCG,IAAa,GAQbC,IAAqC;CAkGzC,OAAO;EAAE;EAAM;EAAM,cArFA,MAAkB;GAErC,IAAI,CAACC,EAAW,UAAU,GAAG;IAO3B,AANA,EAAK,QAAQ;KACX,MAAMC,EAAe;KACrB,UAAUC,EAAmB;KAC7B,QAAQC,EAAiB;KACzB,SAAS;IACX,GACA,EAAK,QAAQ;IACb;GACF;GAEA,IAAMC,IAAQ,EAAEN;GAChB,EAAK,QAAQ;IAAE,GAAGJ,EAAK;IAAO,MAAMO,EAAe;GAAQ;GAE3D,IAAMI,IAAWC,EAAqBN,CAAU,GAE1CO,IAAM,YAAY;IACtB,IAAM,EAAE,YAAS,aAAUC,EAA8B;KACvD,QAAQR,EAAW;KACnB,QAAQ;KACR,QAAQA,EAAW;KACnB,QAAQS;KACR,kBAAkB;KAClB,kBAAkBT,EAAW;KAC7B,aAAaK,EAAS;IACxB,CAAC;IACD,IAAgBK;IAChB,IAAI;KACF,OAAO,MAAMC,EAAQ,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;IAC5C,UAAU;KACR,IAAgB;IAClB;GACF;GAEA,IAAI;IACF,IAAMC,IAAQ,MAAML,EAAI;IACxB,IAAIH,MAAUN,GAAY;IAE1B,AADA,EAAK,QAAQc,GACb,EAAK,QAAQ;KACX,MAAMX,EAAe;KACrB,UAAUC,EAAmB;KAC7B,QAAQC,EAAiB;KACzB,SAASS,EAAM;IACjB;GACF,SAASzB,GAAO;IAEd,IADIiB,MAAUN,KACVX,aAAiB0B,GAAuB;IAE5C,IAAIC,IAAS5B,EAAqBC,CAAK;IAIvC,IAAI2B,MAAA,OAAuCC,GAAa;KACtD,IAAMC,IAAY,MAAMD,EAAYf,EAAW,MAAM,CAAC,CAAC,YAAY,EAAK;KACxE,IAAII,MAAUN,GAAY;KAC1B,IAAIkB,GACF,IAAI;MACF,IAAMJ,IAAQ,MAAML,EAAI;MACxB,IAAIH,MAAUN,GAAY;MAE1B,AADA,EAAK,QAAQc,GACb,EAAK,QAAQ;OACX,MAAMX,EAAe;OACrB,UAAUC,EAAmB;OAC7B,QAAQC,EAAiB;OACzB,SAASS,EAAM;MACjB;MACA;KACF,SAASK,GAAY;MACnB,IAAIb,MAAUN,GAAY;MAC1B,IAASZ,EAAqB+B,CAAU;KAC1C;IAEJ;IAGA,AADA,EAAK,QAAQ,MACb,EAAK,QAAQ;KACX,MAAMhB,EAAe;KACrB,GAAGiB,EAAoBJ,CAAM;KAC7B,SAAS;IACX;GACF;EACF;EAE4B,aAhGR;GAElB,AADA,EAAK,QAAQlB,EAAoB,GACjC,EAAK,QAAQ;EACf;EA6FmC,cA3Fd;GAGnB,AAFA,KACAG,IAAgB,GAChB,IAAgB;EAClB;CAuF0C;AAC5C"}

package/dist/domains/anzuUser/factory/AnzuUserFactory.d.ts

@@ -0,0 +1,4 @@
+import { AnzuUser } from '../../../shared/types/AnzuUser';
+export declare function useAnzuUserFactory(system?: string, resourceName?: string): {
+    createAnzuUser: (system?: string, resourceName?: string) => AnzuUser;
+};

package/dist/domains/anzuUser/factory/AnzuUserFactory.js

@@ -0,0 +1,35 @@
+import { isString as e } from "../../../shared/utils/common.js";
+import { dateTimeNow as t } from "../../../shared/utils/datetime.js";
+//#region src/domains/anzuUser/factory/AnzuUserFactory.ts
+function n(n = "", r = "user") {
+	let i = n, a = r;
+	return { createAnzuUser: (n, r) => (e(n) && (i = n), e(r) && (a = r), {
+		id: null,
+		email: "",
+		avatar: {
+			color: "",
+			text: ""
+		},
+		person: {
+			firstName: "",
+			fullName: "",
+			lastName: ""
+		},
+		enabled: !1,
+		locale: null,
+		permissionGroups: [],
+		permissions: {},
+		resolvedPermissions: {},
+		roles: [],
+		modifiedAt: t(),
+		modifiedBy: null,
+		createdAt: t(),
+		createdBy: null,
+		_system: i,
+		_resourceName: a
+	}) };
+}
+//#endregion
+export { n as useAnzuUserFactory };
+
+//# sourceMappingURL=AnzuUserFactory.js.map

package/dist/domains/anzuUser/factory/AnzuUserFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AnzuUserFactory.js","names":["useAnzuUserFactory","_system","system","_resourceName","resourceName","isString","dateTimeNow"],"sources":["../../../../src/domains/anzuUser/factory/AnzuUserFactory.ts"],"sourcesContent":["import { dateTimeNow } from '@/shared/utils/datetime'\nimport { isString } from '@/shared/utils/common'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\n\nexport function useAnzuUserFactory(system = '', resourceName = 'user') {\n  let _system = system\n  let _resourceName = resourceName\n  const createAnzuUser = (system?: string, resourceName?: string): AnzuUser => {\n    if (isString(system)) _system = system\n    if (isString(resourceName)) _resourceName = resourceName\n\n    return {\n      id: null,\n      email: '',\n      avatar: {\n        color: '',\n        text: '',\n      },\n      person: {\n        firstName: '',\n        fullName: '',\n        lastName: '',\n      },\n      enabled: false,\n      locale: null,\n      permissionGroups: [],\n      permissions: {},\n      resolvedPermissions: {},\n      roles: [],\n      modifiedAt: dateTimeNow(),\n      modifiedBy: null,\n      createdAt: dateTimeNow(),\n      createdBy: null,\n      _system: _system,\n      _resourceName: _resourceName,\n    }\n  }\n\n  return {\n    createAnzuUser,\n  }\n}\n"],"mappings":";;;AAIA,SAAgBA,EAAmB,IAAS,IAAI,IAAe,QAAQ;CACrE,IAAIC,IAAUC,GACVC,IAAgBC;CAgCpB,OAAO,EACL,iBAhCsB,GAAiB,OACnCC,EAASH,CAAM,MAAG,IAAUA,IAC5BG,EAASD,CAAY,MAAG,IAAgBA,IAErC;EACL,IAAI;EACJ,OAAO;EACP,QAAQ;GACN,OAAO;GACP,MAAM;EACR;EACA,QAAQ;GACN,WAAW;GACX,UAAU;GACV,UAAU;EACZ;EACA,SAAS;EACT,QAAQ;EACR,kBAAkB,CAAC;EACnB,aAAa,CAAC;EACd,qBAAqB,CAAC;EACtB,OAAO,CAAC;EACR,YAAYE,EAAY;EACxB,YAAY;EACZ,WAAWA,EAAY;EACvB,WAAW;EACF;EACM;CACjB,GAKF;AACF"}

package/dist/domains/anzuUser/filter/anzuUserFilter.d.ts

@@ -0,0 +1,65 @@
+import { FilterConfig, FilterData, MakeFilterOption } from '../../filters/composables/filterFactory';
+declare const anzuUserListFields: ({
+    name: "id";
+    default: null;
+    type: "integer";
+    variant?: undefined;
+    render?: undefined;
+} | {
+    name: "email";
+    variant: "startsWith";
+    default: null;
+    type: "string";
+    render: {
+        skip: true;
+    };
+} | {
+    name: "enabled";
+    default: null;
+    type: "boolean";
+    variant?: undefined;
+    render?: undefined;
+})[];
+type ListFields = typeof anzuUserListFields;
+export declare const anzuUserFilterStorageKey: (system: string) => string;
+/**
+ * The three fields every system has, plus whatever that system adds.
+ *
+ * The extras are a parameter rather than fields in the list above because the same filter is not
+ * the same query everywhere: cms asks for permission groups with `memberOf` and dam with `custom`,
+ * and cms has `allowedSites`, which exists nowhere else. Hard-coding either variant would send the
+ * wrong query to the other backend, and leaving them out costs those two lists filters they have
+ * today.
+ *
+ * `AFilterWrapper` draws any field that is not `render.skip` by itself, so a plain extra field
+ * needs nothing else; one that wants its own widget -- a remote autocomplete -- is passed through
+ * the matching slot.
+ */
+export declare function useAnzuUserListFilter<E extends readonly MakeFilterOption[] = []>(system: string, extraFields?: E): {
+    filterConfig: FilterConfig<readonly [...ListFields, ...E]>;
+    filterData: FilterData<readonly [...ListFields, ...E]>;
+};
+/**
+ * Exact match on e-mail, for the cross-system search.
+ *
+ * `startsWith` -- what the list filter uses and what admin-inhouse's search used -- cannot answer
+ * the question that search asks. "Is this person here under this address" has to be `eq`, or
+ * `jozko@sme.sk` matches `jozko.mrkvicka@sme.sk` and the fan-out reports the wrong identity.
+ */
+export declare function useAnzuUserEmailLookupFilter(): {
+    filterConfig: FilterConfig<{
+        name: "email";
+        variant: "eq";
+        default: null;
+        type: "string";
+    }[]>;
+    filterData: FilterData<{
+        name: "email";
+        variant: "eq";
+        default: null;
+        type: "string";
+    }[]>;
+};
+/** Test seam; the list stores are module state. */
+export declare const resetAnzuUserListFilters: () => void;
+export {};

package/dist/domains/anzuUser/filter/anzuUserFilter.js

@@ -0,0 +1,53 @@
+import { createFilter as e, createFilterStore as t } from "../../filters/composables/filterFactory.js";
+import { ANZU_USER_ENTITY as n } from "../api/anzuUserApi.js";
+//#region src/domains/anzuUser/filter/anzuUserFilter.ts
+var r = [
+	{
+		name: "id",
+		default: null,
+		type: "integer"
+	},
+	{
+		name: "email",
+		variant: "startsWith",
+		default: null,
+		type: "string",
+		render: { skip: !0 }
+	},
+	{
+		name: "enabled",
+		default: null,
+		type: "boolean"
+	}
+], i = /* @__PURE__ */ new Map(), a = (e) => `commonAnzuUser_${e}`;
+function o(a, o) {
+	let s = o ?? [], c = [...r, ...s], l = [a, ...s.map((e) => e.name)].join("|"), u = i.get(l);
+	u || (u = t(c), i.set(l, u));
+	let { filterConfig: d, filterData: f } = e(c, u, {
+		system: "common",
+		subject: n
+	});
+	return {
+		filterConfig: d,
+		filterData: f
+	};
+}
+function s() {
+	let r = [{
+		name: "email",
+		variant: "eq",
+		default: null,
+		type: "string"
+	}], { filterConfig: i, filterData: a } = e(r, t(r), {
+		system: "common",
+		subject: n
+	});
+	return {
+		filterConfig: i,
+		filterData: a
+	};
+}
+//#endregion
+export { a as anzuUserFilterStorageKey, s as useAnzuUserEmailLookupFilter, o as useAnzuUserListFilter };
+
+//# sourceMappingURL=anzuUserFilter.js.map

package/dist/domains/anzuUser/filter/anzuUserFilter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anzuUserFilter.js","names":["anzuUserListFields","listStores","anzuUserFilterStorageKey","system","useAnzuUserListFilter","extras","extraFields","fields","key","field","store","createFilterStore","createFilter","ANZU_USER_ENTITY","useAnzuUserEmailLookupFilter"],"sources":["../../../../src/domains/anzuUser/filter/anzuUserFilter.ts"],"sourcesContent":["import {\n  createFilter,\n  createFilterStore,\n  type FilterConfig,\n  type FilterData,\n  type MakeFilterOption,\n} from '@/domains/filters/composables/filterFactory'\nimport { ANZU_USER_ENTITY } from '@/domains/anzuUser/api/anzuUserApi'\n\nconst anzuUserListFields = [\n  { name: 'id' as const, default: null, type: 'integer' },\n  { name: 'email' as const, variant: 'startsWith', default: null, type: 'string', render: { skip: true } },\n  { name: 'enabled' as const, default: null, type: 'boolean' },\n] satisfies readonly MakeFilterOption[]\n\ntype ListFields = typeof anzuUserListFields\n\n/** One store per system; see the note in `permissionGroupFilter`. */\nconst listStores = new Map<string, FilterData<readonly MakeFilterOption[]>>()\n\nexport const anzuUserFilterStorageKey = (system: string) => `commonAnzuUser_${system}`\n\n/**\n * The three fields every system has, plus whatever that system adds.\n *\n * The extras are a parameter rather than fields in the list above because the same filter is not\n * the same query everywhere: cms asks for permission groups with `memberOf` and dam with `custom`,\n * and cms has `allowedSites`, which exists nowhere else. Hard-coding either variant would send the\n * wrong query to the other backend, and leaving them out costs those two lists filters they have\n * today.\n *\n * `AFilterWrapper` draws any field that is not `render.skip` by itself, so a plain extra field\n * needs nothing else; one that wants its own widget -- a remote autocomplete -- is passed through\n * the matching slot.\n */\nexport function useAnzuUserListFilter<E extends readonly MakeFilterOption[] = []>(\n  system: string,\n  extraFields?: E\n): {\n  filterConfig: FilterConfig<readonly [...ListFields, ...E]>\n  filterData: FilterData<readonly [...ListFields, ...E]>\n} {\n  const extras = (extraFields ?? []) as readonly MakeFilterOption[]\n  const fields = [...anzuUserListFields, ...extras] as unknown as readonly [...ListFields, ...E]\n  // The extras are part of the identity: one list asking for `allowedSites` and another that does\n  // not are two different stores, and sharing one would carry a value the second cannot clear.\n  const key = [system, ...extras.map((field) => field.name)].join('|')\n\n  let store = listStores.get(key)\n  if (!store) {\n    store = createFilterStore(fields) as FilterData<readonly MakeFilterOption[]>\n    listStores.set(key, store)\n  }\n\n  const { filterConfig, filterData } = createFilter(fields, store as FilterData<readonly [...ListFields, ...E]>, {\n    system: 'common',\n    subject: ANZU_USER_ENTITY,\n  })\n\n  return { filterConfig, filterData }\n}\n\n/**\n * Exact match on e-mail, for the cross-system search.\n *\n * `startsWith` -- what the list filter uses and what admin-inhouse's search used -- cannot answer\n * the question that search asks. \"Is this person here under this address\" has to be `eq`, or\n * `jozko@sme.sk` matches `jozko.mrkvicka@sme.sk` and the fan-out reports the wrong identity.\n */\nexport function useAnzuUserEmailLookupFilter() {\n  const fields = [\n    { name: 'email' as const, variant: 'eq', default: null, type: 'string' },\n  ] satisfies readonly MakeFilterOption[]\n\n  const { filterConfig, filterData } = createFilter(fields, createFilterStore(fields), {\n    system: 'common',\n    subject: ANZU_USER_ENTITY,\n  })\n\n  return { filterConfig, filterData }\n}\n\n/** Test seam; the list stores are module state. */\nexport const resetAnzuUserListFilters = () => {\n  listStores.clear()\n}\n"],"mappings":";;;AASA,IAAMA,IAAqB;CACzB;EAAE,MAAM;EAAe,SAAS;EAAM,MAAM;CAAU;CACtD;EAAE,MAAM;EAAkB,SAAS;EAAc,SAAS;EAAM,MAAM;EAAU,QAAQ,EAAE,MAAM,GAAK;CAAE;CACvG;EAAE,MAAM;EAAoB,SAAS;EAAM,MAAM;CAAU;AAC7D,GAKMC,oBAAa,IAAI,IAAqD,GAE/DC,KAA4B,MAAmB,kBAAkBC;AAe9E,SAAgBC,EACd,GACA,GAIA;CACA,IAAMC,IAAUC,KAAe,CAAC,GAC1BC,IAAS,CAAC,GAAGP,GAAoB,GAAGK,CAAM,GAG1CG,IAAM,CAACL,GAAQ,GAAGE,EAAO,KAAK,MAAUI,EAAM,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,GAE/DC,IAAQT,EAAW,IAAIO,CAAG;CAC9B,AAAKE,MACH,IAAQC,EAAkBJ,CAAM,GAChCN,EAAW,IAAIO,GAAKE,CAAK;CAG3B,IAAM,EAAE,iBAAc,kBAAeE,EAAaL,GAAQG,GAAqD;EAC7G,QAAQ;EACR,SAASG;CACX,CAAC;CAED,OAAO;EAAE;EAAc;CAAW;AACpC;AASA,SAAgBC,IAA+B;CAC7C,IAAMP,IAAS,CACb;EAAE,MAAM;EAAkB,SAAS;EAAM,SAAS;EAAM,MAAM;CAAS,CACzE,GAEM,EAAE,iBAAc,kBAAeK,EAAaL,GAAQI,EAAkBJ,CAAM,GAAG;EACnF,QAAQ;EACR,SAASM;CACX,CAAC;CAED,OAAO;EAAE;EAAc;CAAW;AACpC"}

package/dist/domains/anzuUser/store/anzuUserStore.d.ts

@@ -0,0 +1,61 @@
+import { AnzuUser } from '../../../shared/types/AnzuUser';
+/**
+ * The one user the owning form is editing. Cross-system pages do not use this -- they hold a
+ * result per system and never a single "current" user -- so it stays a single record, the way the
+ * admins have it.
+ */
+export declare const useAnzuUserOneStore: import('pinia').SetupStoreDefinition<"commonAdminAnzuUserOneStore", {
+    anzuUser: import('vue').Ref<{
+        enabled: boolean;
+        locale: import('../../../lib').LanguageCode | null;
+        roles: string[];
+        permissionGroups: import('../../../lib').IntegerId[];
+        permissions: import('../../../lib').Permissions;
+        resolvedPermissions: import('../../../lib').Permissions;
+        _resourceName: string;
+        _system: string;
+        createdAt: import('../../../lib').DatetimeUTC;
+        modifiedAt: import('../../../lib').DatetimeUTC;
+        modifiedBy: import('../../../lib').IntegerIdNullable;
+        createdBy: import('../../../lib').IntegerIdNullable;
+        id?: import('../../../lib').IntegerIdNullable | undefined;
+        email: string;
+        person: {
+            firstName: string;
+            lastName: string;
+            fullName: string;
+        };
+        avatar: {
+            color: string;
+            text: string;
+        };
+    }, AnzuUser | {
+        enabled: boolean;
+        locale: import('../../../lib').LanguageCode | null;
+        roles: string[];
+        permissionGroups: import('../../../lib').IntegerId[];
+        permissions: import('../../../lib').Permissions;
+        resolvedPermissions: import('../../../lib').Permissions;
+        _resourceName: string;
+        _system: string;
+        createdAt: import('../../../lib').DatetimeUTC;
+        modifiedAt: import('../../../lib').DatetimeUTC;
+        modifiedBy: import('../../../lib').IntegerIdNullable;
+        createdBy: import('../../../lib').IntegerIdNullable;
+        id?: import('../../../lib').IntegerIdNullable | undefined;
+        email: string;
+        person: {
+            firstName: string;
+            lastName: string;
+            fullName: string;
+        };
+        avatar: {
+            color: string;
+            text: string;
+        };
+    }>;
+    loadingAnzuUser: import('vue').Ref<boolean, boolean>;
+    setAnzuUser: (newAnzuUser: AnzuUser) => void;
+    setLoadingAnzuUser: (loading: boolean) => void;
+    reset: (system?: string, resourceName?: string) => void;
+}>;

package/dist/domains/anzuUser/store/anzuUserStore.js

@@ -0,0 +1,27 @@
+import { useAnzuUserFactory as e } from "../factory/AnzuUserFactory.js";
+import { ref as t } from "vue";
+import { defineStore as n } from "pinia";
+//#region src/domains/anzuUser/store/anzuUserStore.ts
+var r = n("commonAdminAnzuUserOneStore", () => {
+	let { createAnzuUser: n } = e(), r = t(n()), i = t(!1);
+	function a(e) {
+		r.value = e;
+	}
+	function o(e) {
+		i.value = e;
+	}
+	function s(e = "", t = "user") {
+		r.value = n(e, t), i.value = !1;
+	}
+	return {
+		anzuUser: r,
+		loadingAnzuUser: i,
+		setAnzuUser: a,
+		setLoadingAnzuUser: o,
+		reset: s
+	};
+});
+//#endregion
+export { r as useAnzuUserOneStore };
+
+//# sourceMappingURL=anzuUserStore.js.map

package/dist/domains/anzuUser/store/anzuUserStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anzuUserStore.js","names":["useAnzuUserOneStore","defineStore","useAnzuUserFactory","anzuUser","ref","createAnzuUser","loadingAnzuUser","setAnzuUser","newAnzuUser","setLoadingAnzuUser","loading","reset","system","resourceName"],"sources":["../../../../src/domains/anzuUser/store/anzuUserStore.ts"],"sourcesContent":["import { acceptHMRUpdate, defineStore } from 'pinia'\nimport { ref } from 'vue'\nimport { useAnzuUserFactory } from '@/domains/anzuUser/factory/AnzuUserFactory'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\n\n/**\n * The one user the owning form is editing. Cross-system pages do not use this -- they hold a\n * result per system and never a single \"current\" user -- so it stays a single record, the way the\n * admins have it.\n */\nexport const useAnzuUserOneStore = defineStore('commonAdminAnzuUserOneStore', () => {\n  const { createAnzuUser } = useAnzuUserFactory()\n\n  const anzuUser = ref<AnzuUser>(createAnzuUser())\n  const loadingAnzuUser = ref(false)\n\n  function setAnzuUser(newAnzuUser: AnzuUser) {\n    anzuUser.value = newAnzuUser\n  }\n\n  function setLoadingAnzuUser(loading: boolean) {\n    loadingAnzuUser.value = loading\n  }\n\n  function reset(system = '', resourceName = 'user') {\n    anzuUser.value = createAnzuUser(system, resourceName)\n    loadingAnzuUser.value = false\n  }\n\n  return {\n    anzuUser,\n    loadingAnzuUser,\n    setAnzuUser,\n    setLoadingAnzuUser,\n    reset,\n  }\n})\n\nif (import.meta.hot) {\n  import.meta.hot.accept(acceptHMRUpdate(useAnzuUserOneStore, import.meta.hot))\n}\n"],"mappings":";;;;AAUA,IAAaA,IAAsBC,EAAY,qCAAqC;CAClF,IAAM,EAAE,sBAAmBC,EAAmB,GAExCC,IAAWC,EAAcC,EAAe,CAAC,GACzCC,IAAkBF,EAAI,EAAK;CAEjC,SAASG,EAAY,GAAuB;EAC1C,EAAS,QAAQC;CACnB;CAEA,SAASC,EAAmB,GAAkB;EAC5C,EAAgB,QAAQC;CAC1B;CAEA,SAASC,EAAM,IAAS,IAAI,IAAe,QAAQ;EAEjD,AADA,EAAS,QAAQN,EAAeO,GAAQC,CAAY,GACpD,EAAgB,QAAQ;CAC1B;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;CACF;AACF,CAAC"}

package/dist/domains/anzuUser/store/userCrossSystemStore.d.ts

@@ -0,0 +1,152 @@
+import { UserSystemAxes } from '../utils/userSystemState';
+import { AnzuUser } from '../../../shared/types/AnzuUser';
+import { IntegerId, IntegerIdNullable } from '../../../shared/types/common';
+export interface UserSystemResult {
+    axes: UserSystemAxes;
+    user: AnzuUser | null;
+}
+export declare const CrossSystemPhase: {
+    readonly Idle: "idle";
+    /** First round of an e-mail search: find the person and their id. */
+    readonly MatchingEmail: "matchingEmail";
+    /** Second round: ask every system by that id, to catch the ones holding a different e-mail. */
+    readonly VerifyingById: "verifyingById";
+    readonly Done: "done";
+};
+export type CrossSystemPhaseType = (typeof CrossSystemPhase)[keyof typeof CrossSystemPhase];
+export declare const BulkAction: {
+    readonly Enable: "enable";
+    readonly Disable: "disable";
+    readonly Metadata: "metadata";
+};
+export type BulkActionType = (typeof BulkAction)[keyof typeof BulkAction];
+export declare const BulkOutcome: {
+    readonly Pending: "pending";
+    readonly Running: "running";
+    readonly Done: "done";
+    readonly Forbidden: "forbidden";
+    readonly Unauthenticated: "unauthenticated";
+    readonly NotFound: "notFound";
+    readonly Invalid: "invalid";
+    readonly Unavailable: "unavailable";
+};
+export type BulkOutcomeType = (typeof BulkOutcome)[keyof typeof BulkOutcome];
+export interface BulkLogEntry {
+    system: string;
+    outcome: BulkOutcomeType;
+    /**
+     * Which run the line belongs to.
+     *
+     * The log survives a run so that a retry does not erase the systems that succeeded a minute ago,
+     * and the retry button acts on whatever the log calls failed. Without these two fields a failed
+     * metadata write would be retried as a disable, and a previous person's failures would be retried
+     * against the id currently on screen -- neither `setEnabled` nor `writeMetadata` can tell it is
+     * being asked about a different action or a different account.
+     */
+    action: BulkActionType;
+    subjectId: IntegerIdNullable;
+    detail?: string;
+}
+/**
+ * Search results and the bulk run live here, not inside the dialog's component.
+ *
+ * The dialog can be closed while the calls are still going -- one dead backend running into its
+ * timeout must not lock the screen -- and state owned by the component would be thrown away with
+ * it. The results stay on the page either way.
+ */
+export declare const useUserCrossSystemStore: import('pinia').SetupStoreDefinition<"commonAdminUserCrossSystemStore", {
+    searchTerm: import('vue').Ref<string, string>;
+    resolvedId: import('vue').Ref<IntegerIdNullable, IntegerIdNullable>;
+    phase: import('vue').Ref<CrossSystemPhaseType, CrossSystemPhaseType>;
+    results: import('vue').Ref<Map<string, {
+        axes: {
+            load: import('../utils/userSystemState').UserSystemLoadType;
+            presence: import('../utils/userSystemState').UserSystemPresenceType;
+            access: import('../utils/userSystemState').UserSystemAccessType;
+            enabled: boolean | "unknown";
+        };
+        user: {
+            enabled: boolean;
+            locale: import('../../../lib').LanguageCode | null;
+            roles: string[];
+            permissionGroups: IntegerId[];
+            permissions: import('../../../lib').Permissions;
+            resolvedPermissions: import('../../../lib').Permissions;
+            _resourceName: string;
+            _system: string;
+            createdAt: import('../../../shared/types/common').DatetimeUTC;
+            modifiedAt: import('../../../shared/types/common').DatetimeUTC;
+            modifiedBy: IntegerIdNullable;
+            createdBy: IntegerIdNullable;
+            id?: IntegerIdNullable | undefined;
+            email: string;
+            person: {
+                firstName: string;
+                lastName: string;
+                fullName: string;
+            };
+            avatar: {
+                color: string;
+                text: string;
+            };
+        } | null;
+    }> & Omit<Map<string, UserSystemResult>, keyof Map<any, any>>, Map<string, UserSystemResult> | (Map<string, {
+        axes: {
+            load: import('../utils/userSystemState').UserSystemLoadType;
+            presence: import('../utils/userSystemState').UserSystemPresenceType;
+            access: import('../utils/userSystemState').UserSystemAccessType;
+            enabled: boolean | "unknown";
+        };
+        user: {
+            enabled: boolean;
+            locale: import('../../../lib').LanguageCode | null;
+            roles: string[];
+            permissionGroups: IntegerId[];
+            permissions: import('../../../lib').Permissions;
+            resolvedPermissions: import('../../../lib').Permissions;
+            _resourceName: string;
+            _system: string;
+            createdAt: import('../../../shared/types/common').DatetimeUTC;
+            modifiedAt: import('../../../shared/types/common').DatetimeUTC;
+            modifiedBy: IntegerIdNullable;
+            createdBy: IntegerIdNullable;
+            id?: IntegerIdNullable | undefined;
+            email: string;
+            person: {
+                firstName: string;
+                lastName: string;
+                fullName: string;
+            };
+            avatar: {
+                color: string;
+                text: string;
+            };
+        } | null;
+    }> & Omit<Map<string, UserSystemResult>, keyof Map<any, any>>)>;
+    identityConflict: import('vue').Ref<(Map<string, number> & Omit<Map<string, number>, keyof Map<any, any>>) | null, Map<string, number> | (Map<string, number> & Omit<Map<string, number>, keyof Map<any, any>>) | null>;
+    bulkRunning: import('vue').Ref<boolean, boolean>;
+    bulkAction: import('vue').Ref<BulkActionType | null, BulkActionType | null>;
+    bulkSubjectId: import('vue').Ref<IntegerIdNullable, IntegerIdNullable>;
+    bulkLog: import('vue').Ref<{
+        system: string;
+        outcome: BulkOutcomeType;
+        action: BulkActionType;
+        subjectId: IntegerIdNullable;
+        detail?: string | undefined;
+    }[], BulkLogEntry[] | {
+        system: string;
+        outcome: BulkOutcomeType;
+        action: BulkActionType;
+        subjectId: IntegerIdNullable;
+        detail?: string | undefined;
+    }[]>;
+    termRejected: import('vue').Ref<boolean, boolean>;
+    resetResults: () => void;
+    setResult: (system: string, result: UserSystemResult) => void;
+    patchAxes: (system: string, axes: UserSystemAxes) => void;
+    setUser: (system: string, user: AnzuUser | null) => void;
+    startBulk: (action: BulkActionType, systems: string[], subjectId: IntegerIdNullable) => void;
+    setBulkEntry: (system: string, outcome: BulkOutcomeType, detail?: string) => void;
+    finishBulk: () => void;
+    reset: () => void;
+}>;

package/dist/domains/anzuUser/store/userCrossSystemStore.js

@@ -0,0 +1,103 @@
+import { emptyUserSystemAxes as e } from "../utils/userSystemState.js";
+import { ref as t } from "vue";
+import { defineStore as n } from "pinia";
+//#region src/domains/anzuUser/store/userCrossSystemStore.ts
+var r = {
+	Idle: "idle",
+	MatchingEmail: "matchingEmail",
+	VerifyingById: "verifyingById",
+	Done: "done"
+}, i = {
+	Enable: "enable",
+	Disable: "disable",
+	Metadata: "metadata"
+}, a = {
+	Pending: "pending",
+	Running: "running",
+	Done: "done",
+	Forbidden: "forbidden",
+	Unauthenticated: "unauthenticated",
+	NotFound: "notFound",
+	Invalid: "invalid",
+	Unavailable: "unavailable"
+}, o = n("commonAdminUserCrossSystemStore", () => {
+	let n = t(""), i = t(null), o = t(r.Idle), s = t(/* @__PURE__ */ new Map()), c = t(null), l = t(!1), u = t(null), d = t(null), f = t([]), p = t(!1);
+	function m() {
+		s.value = /* @__PURE__ */ new Map(), i.value = null, c.value = null, o.value = r.Idle, p.value = !1, f.value = [], u.value = null, d.value = null;
+	}
+	function h(e, t) {
+		s.value.set(e, t);
+	}
+	function g(t) {
+		s.value.has(t) || s.value.set(t, {
+			axes: e(),
+			user: null
+		});
+	}
+	function _(e, t) {
+		g(e);
+		let n = s.value.get(e);
+		s.value.set(e, {
+			...n,
+			axes: t
+		});
+	}
+	function v(e, t) {
+		g(e);
+		let n = s.value.get(e);
+		s.value.set(e, {
+			...n,
+			user: t
+		});
+	}
+	function y(e, t, n) {
+		l.value = !0, u.value = e, d.value = n;
+		let r = new Set(t), i = f.value.filter((t) => t.action === e && t.subjectId === n && !r.has(t.system));
+		f.value = [...i, ...t.map((t) => ({
+			system: t,
+			outcome: a.Pending,
+			action: e,
+			subjectId: n
+		}))];
+	}
+	function b(e, t, n) {
+		let r = f.value.findIndex((t) => t.system === e && t.action === u.value && t.subjectId === d.value);
+		if (r === -1) return;
+		let i = {
+			...f.value[r],
+			outcome: t,
+			detail: n
+		};
+		f.value = f.value.map((e, t) => t === r ? i : e);
+	}
+	function x() {
+		l.value = !1;
+	}
+	function S() {
+		n.value = "", m();
+	}
+	return {
+		searchTerm: n,
+		resolvedId: i,
+		phase: o,
+		results: s,
+		identityConflict: c,
+		bulkRunning: l,
+		bulkAction: u,
+		bulkSubjectId: d,
+		bulkLog: f,
+		termRejected: p,
+		resetResults: m,
+		setResult: h,
+		patchAxes: _,
+		setUser: v,
+		startBulk: y,
+		setBulkEntry: b,
+		finishBulk: x,
+		reset: S
+	};
+});
+//#endregion
+export { i as BulkAction, a as BulkOutcome, r as CrossSystemPhase, o as useUserCrossSystemStore };
+
+//# sourceMappingURL=userCrossSystemStore.js.map