@anzusystems/common-admin 1.49.0 → 2.0.0-rc.10

package/dist/domains/permission/components/APermissionEditor.vue_vue_type_script_setup_true_lang.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"APermissionEditor.vue_vue_type_script_setup_true_lang.js","names":["_useModel","_openBlock","_createBlock","_component_VCard","_unref","_withCtx","_createVNode","_component_VCardText","_component_VTable","_createElementVNode","_toDisplayString","_createElementBlock","_createCommentVNode","_Fragment","_renderList","_createTextVNode","_component_VBtn","APermissionGrantEditor","APermissionValueChip","APermissionGrantEditor_default","APermissionValueChip_default","_hoisted_1","_hoisted_2","_hoisted_3","_hoisted_4","APermissionEditor_vue_vue_type_script_setup_true_lang_default","\"modelValue\"","\"modelModifiers\"","props","__props","modelValue","useModel","useI18n","useAlerts","permissions","computed","cloneDeep","usePermissionConfigActions","changeGrant","permissionName","subject","action","isUndefined","grant","objectDeletePropertyByPath","objectSetValueByPath","getSelectedGrant","objectGetValueByPath","getAvailableGrants","grants","permissionConfig","RESTRICTIVE_GRANTS","Grant","isExplicitRestrictiveGrant","allowAllActions","keptRestrictiveGrantCount","showWarning","t","hasSuperAdminRole","ROLE_SUPER_ADMIN","getResolvedGrant","getGrantOrigin","GrantOrigin","GrantOriginDefault","openBlock","createBlock","VCard","unref","loadingPermissionConfig","withCtx","createVNode","VCardText","isPermissionConfigInitialized","VTable","createElementVNode","toDisplayString","createCommentVNode","createElementBlock","Fragment","renderList","permissionSubject","createTextVNode","translatePermission","VBtn","permissionAction","$event"],"sources":["../../../../src/domains/permission/components/APermissionEditor.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { ROLE_SUPER_ADMIN } from '@/domains/auth/composables/defineAuth'\nimport APermissionGrantEditor from '@/domains/permission/components/APermissionGrantEditor.vue'\nimport APermissionValueChip from '@/domains/permission/components/APermissionValueChip.vue'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { usePermissionConfigActions } from '@/domains/permission/config/composables/permissionConfigActions'\nimport { Grant, type GrantType } from '@/domains/auth/valueObject/Grant'\nimport { GrantOrigin, GrantOriginDefault } from '@/domains/permission/valueObject/GrantOrigin'\nimport type { Permissions } from '@/domains/auth/types/Permission'\nimport { cloneDeep, isUndefined } from '@/shared/utils/common'\nimport { objectDeletePropertyByPath, objectGetValueByPath, objectSetValueByPath } from '@/shared/utils/object'\n\nconst props = withDefaults(\n  defineProps<{\n    client: AxiosClientFn\n    /** Which backend's permission vocabulary to draw. Never a global, see `permissionConfigActions`. */\n    system: string\n    entity?: string | undefined\n    endPoint?: string | undefined\n    /**\n     * Grants the subject already has from roles and groups.\n     * Undefined means the model is a group, not a user. The origin\n     * column then attributes every explicit grant to the group itself.\n     */\n    resolvedPermissions?: Permissions | undefined\n    roles?: string[]\n    /** One component for detail and edit (decision 27). Readonly drops the grant column. */\n    readonly?: boolean\n  }>(),\n  {\n    entity: undefined,\n    endPoint: undefined,\n    resolvedPermissions: undefined,\n    roles: () => [],\n    readonly: false,\n  }\n)\n\nconst modelValue = defineModel<Permissions>({ required: true })\n\nconst { t } = useI18n()\nconst { showWarning } = useAlerts()\n\n// A clone, because every mutation writes a whole object back through `modelValue`.\n// Editing in place would not trigger the parent's unsaved-changes watchers.\nconst permissions = computed(() => cloneDeep(modelValue.value))\n\n/* eslint-disable vue/no-setup-props-reactivity-loss */\nconst { permissionConfig, loadingPermissionConfig, isPermissionConfigInitialized, translatePermission } =\n  usePermissionConfigActions({\n    client: props.client,\n    system: props.system,\n    entity: props.entity,\n    endPoint: props.endPoint,\n  })\n/* eslint-enable vue/no-setup-props-reactivity-loss */\n\nconst changeGrant = (subject: string, action: string, grant?: GrantType) => {\n  const permissionName = subject + '_' + action\n  if (isUndefined(grant) && Object.hasOwn(permissions.value, permissionName)) {\n    objectDeletePropertyByPath(permissions.value, permissionName)\n    modelValue.value = permissions.value\n    return\n  }\n  objectSetValueByPath(permissions.value, permissionName, grant)\n  modelValue.value = permissions.value\n}\n\nconst getSelectedGrant = (subject: string, action: string) => {\n  return objectGetValueByPath(permissions.value, subject + '_' + action)\n}\n\nconst getAvailableGrants = (subject: string, action: string): GrantType[] => {\n  const grants = objectGetValueByPath(permissionConfig.value.config, subject + '.' + action + '.grants')\n  if (isUndefined(grants)) {\n    return permissionConfig.value.defaultGrants\n  }\n  return grants\n}\n\nconst RESTRICTIVE_GRANTS: GrantType[] = [Grant.Deny, Grant.AllowOwner]\n\nconst isExplicitRestrictiveGrant = (subject: string, action: string) => {\n  const permissionName = subject + '_' + action\n  if (!Object.hasOwn(permissions.value, permissionName)) return false\n  return RESTRICTIVE_GRANTS.includes(getSelectedGrant(subject, action))\n}\n\n/**\n * Allows every action in the subject, except actions explicitly set to deny or owner-only.\n * Those are left alone and their count is reported, so the button never widens a deliberate restriction.\n */\nconst allowAllActions = (subject: string) => {\n  let keptRestrictiveGrantCount = 0\n  for (const action of Object.keys(permissionConfig.value.config[subject]!)) {\n    if (!getAvailableGrants(subject, action).includes(Grant.Allow)) continue\n    if (isExplicitRestrictiveGrant(subject, action)) {\n      keptRestrictiveGrantCount++\n      continue\n    }\n    objectSetValueByPath(permissions.value, subject + '_' + action, Grant.Allow)\n  }\n  modelValue.value = permissions.value\n  if (keptRestrictiveGrantCount > 0) {\n    showWarning(\n      t('common.permissionEditor.restrictiveGrantKept', { count: keptRestrictiveGrantCount }, keptRestrictiveGrantCount)\n    )\n  }\n}\n\nconst hasSuperAdminRole = computed(() => props.roles.includes(ROLE_SUPER_ADMIN))\n\nconst getResolvedGrant = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return Grant.Allow\n  const permissionName = subject + '_' + action\n  if (props.resolvedPermissions && Object.hasOwn(props.resolvedPermissions, permissionName)) {\n    return objectGetValueByPath(props.resolvedPermissions, permissionName)\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) {\n    return objectGetValueByPath(permissions.value, permissionName)\n  }\n  return Grant.Deny\n}\n\nconst getGrantOrigin = (subject: string, action: string) => {\n  if (hasSuperAdminRole.value) return GrantOrigin.Role\n  const permissionName = subject + '_' + action\n  if (isUndefined(props.resolvedPermissions)) {\n    if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.Group\n    return GrantOriginDefault\n  }\n  if (Object.hasOwn(permissions.value, permissionName)) return GrantOrigin.User\n  if (Object.hasOwn(props.resolvedPermissions, permissionName)) return GrantOrigin.Group\n  return GrantOriginDefault\n}\n</script>\n\n<template>\n  <VCard :loading=\"loadingPermissionConfig\">\n    <VCardText>\n      <VTable v-if=\"isPermissionConfigInitialized\">\n        <thead>\n          <tr>\n            <th>{{ t('common.anzuUser.table.grants') }}</th>\n            <th v-if=\"!readonly\">\n              {{ t('common.anzuUser.table.permissions') }}\n            </th>\n            <th>{{ t('common.anzuUser.table.resolvedPermissions') }}</th>\n          </tr>\n        </thead>\n        <tbody>\n          <template\n            v-for=\"permissionSubject in Object.keys(permissionConfig.config)\"\n            :key=\"permissionSubject\"\n          >\n            <tr>\n              <td\n                :colspan=\"readonly ? 2 : 3\"\n                class=\"text-headline-small font-weight-bold\"\n              >\n                {{ translatePermission('subjects', permissionSubject) }}\n                <VBtn\n                  v-if=\"!readonly\"\n                  size=\"x-small\"\n                  variant=\"text\"\n                  class=\"ml-2\"\n                  :data-cy=\"`permission-allow-all-${permissionSubject}`\"\n                  @click=\"allowAllActions(permissionSubject)\"\n                >\n                  {{ t('common.permissionEditor.allowAll') }}\n                </VBtn>\n              </td>\n            </tr>\n            <tr\n              v-for=\"permissionAction in Object.keys(permissionConfig.config[permissionSubject]!)\"\n              :key=\"permissionAction\"\n            >\n              <td>\n                {{ translatePermission('actions', permissionAction) }}\n                <div class=\"text-body-small text-disabled\">{{ permissionSubject }}_{{ permissionAction }}</div>\n              </td>\n              <td v-if=\"!readonly\">\n                <APermissionGrantEditor\n                  :available-grants=\"getAvailableGrants(permissionSubject, permissionAction)\"\n                  :selected-grant=\"getSelectedGrant(permissionSubject, permissionAction)\"\n                  @change=\"changeGrant(permissionSubject, permissionAction, $event)\"\n                />\n              </td>\n              <td>\n                <APermissionValueChip\n                  :grant=\"getResolvedGrant(permissionSubject, permissionAction)\"\n                  :grant-origin=\"getGrantOrigin(permissionSubject, permissionAction)\"\n                />\n              </td>\n            </tr>\n          </template>\n        </tbody>\n      </VTable>\n    </VCardText>\n  </VCard>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAeA,IAAM4B,IAAQC,GA0BRC,IAAa9B,EAAwB6B,GAAA,YAAmB,GAExD,EAAE,SAAMG,EAAQ,GAChB,EAAE,mBAAgBC,EAAU,GAI5BC,IAAcC,QAAeC,EAAUN,EAAW,KAAK,CAAC,GAGxD,EAAE,qBAAkB,4BAAyB,kCAA+B,2BAChFO,EAA2B;GACzB,QAAQT,EAAM;GACd,QAAQA,EAAM;GACd,QAAQA,EAAM;GACd,UAAUA,EAAM;EAClB,CAAC,GAGGU,KAAe,GAAiB,GAAgB,MAAsB;GAC1E,IAAMC,IAAiBC,IAAU,MAAMC;GACvC,AAAIC,EAAYC,CAAK,KAAK,OAAO,OAAOT,EAAY,OAAOK,CAAc,KACvEK,EAA2BV,EAAY,OAAOK,CAAc,GAC5D,EAAW,QAAQL,EAAY,UAGjCW,EAAqBX,EAAY,OAAOK,GAAgBI,CAAK,GAC7D,EAAW,QAAQT,EAAY;EACjC,GAEMY,KAAoB,GAAiB,MAClCC,EAAqBb,EAAY,OAAOM,IAAU,MAAMC,CAAM,GAGjEO,KAAsB,GAAiB,MAAgC;GAC3E,IAAMC,IAASF,EAAqBG,EAAiB,MAAM,QAAQV,IAAU,MAAMC,IAAS,SAAS;GAIrG,OAHIC,EAAYO,CAAM,IACbC,EAAiB,MAAM,gBAEzBD;EACT,GAEME,IAAkC,CAACC,EAAM,MAAMA,EAAM,UAAU,GAE/DC,KAA8B,GAAiB,MAAmB;GACtE,IAAMd,IAAiBC,IAAU,MAAMC;GAEvC,OADK,OAAO,OAAOP,EAAY,OAAOK,CAAc,IAC7CY,EAAmB,SAASL,EAAiBN,GAASC,CAAM,CAAC,IADN;EAEhE,GAMMa,KAAmB,MAAoB;GAC3C,IAAIC,IAA4B;GAChC,KAAK,IAAMd,KAAU,OAAO,KAAKS,EAAiB,MAAM,OAAOV,EAAS,GACtE,AAAKQ,EAAmBR,GAASC,CAAM,CAAC,CAAC,SAASW,EAAM,KAAK,MACzDC,EAA2Bb,GAASC,CAAM,IAC5C,MAGFI,EAAqBX,EAAY,OAAOM,IAAU,MAAMC,GAAQW,EAAM,KAAK;GAG7E,AADA,EAAW,QAAQlB,EAAY,OAC3BqB,IAA4B,KAC9BC,EACEC,EAAE,gDAAgD,EAAE,OAAOF,EAA0B,GAAGA,CAAyB,CACnH;EAEJ,GAEMG,IAAoBvB,QAAeP,EAAM,MAAM,SAAS+B,CAAgB,CAAC,GAEzEC,KAAoB,GAAiB,MAAmB;GAC5D,IAAIF,EAAkB,OAAO,OAAON,EAAM;GAC1C,IAAMb,IAAiBC,IAAU,MAAMC;GAOvC,OANIb,EAAM,uBAAuB,OAAO,OAAOA,EAAM,qBAAqBW,CAAc,IAC/EQ,EAAqBnB,EAAM,qBAAqBW,CAAc,IAEnE,OAAO,OAAOL,EAAY,OAAOK,CAAc,IAC1CQ,EAAqBb,EAAY,OAAOK,CAAc,IAExDa,EAAM;EACf,GAEMS,MAAkB,GAAiB,MAAmB;GAC1D,IAAIH,EAAkB,OAAO,OAAOI,EAAY;GAChD,IAAMvB,IAAiBC,IAAU,MAAMC;GAOvC,OANIC,EAAYd,EAAM,mBAAmB,IACnC,OAAO,OAAOM,EAAY,OAAOK,CAAc,IAAUuB,EAAY,QAClEC,IAEL,OAAO,OAAO7B,EAAY,OAAOK,CAAc,IAAUuB,EAAY,OACrE,OAAO,OAAOlC,EAAM,qBAAqBW,CAAc,IAAUuB,EAAY,QAC1EC;EACT;E,kBAIE9D,EAAA,GAAAC,EA6DQC,GAAA,EA7DA,SAASC,EAAAgE,CAAA,EAAuB,GAAA;GACtC,SAAA/D,QA2DY,CA3DZC,EA2DYC,GAAA,MAAA;IA1DV,SAAAF,QAyDS,CAzDKD,EAAAoE,CAAA,KAAdvE,EAAA,GAAAC,EAyDSM,GAAA,EAAA,KAAA,EAAA,GAAA;KAxDP,SAAAH,QAQQ,CARRI,EAQQ,SAAA,MAAA,CAPNA,EAMK,MAAA,MAAA;MALHA,EAAgD,MAAA,MAAAC,EAAzCN,EAAAqD,CAAA,CAAC,CAAA,8BAAA,CAAA,GAAA,CAAA;MACG5B,EAAA,W,aAAX5B,EAAA,GAAAU,EAEK,MAAAU,GAAAX,EADAN,EAAAqD,CAAA,CAAC,CAAA,mCAAA,CAAA,GAAA,CAAA;MAENhD,EAA6D,MAAA,MAAAC,EAAtDN,EAAAqD,CAAA,CAAC,CAAA,2CAAA,CAAA,GAAA,CAAA;K,MAGZhD,EA8CQ,SAAA,MAAA,EA7CNR,EAAA,EAAA,GAAAU,EA4CWE,GAAA,MAAAC,EA3CmB,OAAO,KAAKV,EAAA8C,CAAA,CAAgB,CAAC,MAAM,IAAxD,OACDjD,EAAA,GAAAU,EAAAE,GAAA,EAAA,KAAAmE,EAAiB,GAAA,CAEvBvE,EAiBK,MAAA,MAAA,CAhBHA,EAeK,MAAA;MAdF,SAASoB,EAAA,WAAQ,IAAA;MAClB,OAAM;K,IAEHd,EAAAL,EAAAN,EAAA8E,CAAA,CAAmB,CAAA,YAAaF,CAAiB,CAAA,IAAI,KACxD,CAAA,GACSnD,EAAA,W,aADT5B,EAAA,GAAAC,EASOc,GAAA;;MAPL,MAAK;MACL,SAAQ;MACR,OAAM;MACL,WAAO,wBAA0BgE;MACjC,UAAK,MAAE1B,EAAgB0B,CAAiB;;MAEzC,SAAA3E,QAA2C,CAAxCU,EAAAL,EAAAN,EAAAqD,CAAA,CAAC,CAAA,kCAAA,CAAA,GAAA,CAAA,C;;K,2CAIVxD,EAAA,EAAA,GAAAU,EAqBKE,GAAA,MAAAC,EApBwB,OAAO,KAAKV,EAAA8C,CAAA,CAAgB,CAAC,OAAO8B,EAAiB,IAAzE,OADT/E,EAAA,GAAAU,EAqBK,MAAA,EAnBF,KAAKyE,EAAgB,GAAA;MAEtB3E,EAGK,MAAA,MAAA,CAFAM,EAAAL,EAAAN,EAAA8E,CAAA,CAAmB,CAAA,WAAYE,CAAgB,CAAA,IAAI,KACtD,CAAA,GAAA3E,EAA+F,OAA/Fc,GAA+Fb,EAAjDsE,CAAiB,IAAG,MAACtE,EAAG0E,CAAgB,GAAA,CAAA,C;MAE7EvD,EAAA,W,aAAX5B,EAAA,GAAAU,EAMK,MAAAa,GAAA,CALHlB,EAIEW,GAAA;OAHC,oBAAkB+B,EAAmBgC,GAAmBI,CAAgB;OACxE,kBAAgBtC,EAAiBkC,GAAmBI,CAAgB;OACpE,WAAM,MAAE9C,EAAY0C,GAAmBI,GAAkBC,CAAM;;;;;;MAGpE5E,EAKK,MAAA,MAAA,CAJHH,EAGEY,GAAA;OAFC,OAAO0C,EAAiBoB,GAAmBI,CAAgB;OAC3D,gBAAcvB,GAAemB,GAAmBI,CAAgB"}

package/dist/domains/permission/components/APermissionGrantEditor.js

@@ -0,0 +1,6 @@
+import e from "./APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js";
+// src/domains/permission/components/APermissionGrantEditor.vue
+var t = e;
+export { t as default };
+
+//# sourceMappingURL=APermissionGrantEditor.js.map

package/dist/domains/permission/components/APermissionGrantEditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"APermissionGrantEditor.js","names":["_sfc_main","APermissionGrantEditor_vue_vue_type_script_setup_true_lang_default","APermissionGrantEditor_default"],"sources":["../../../../src/domains/permission/components/APermissionGrantEditor.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { type GrantType, useGrant } from '@/domains/auth/valueObject/Grant'\nimport { computed } from 'vue'\n\nconst props = defineProps<{\n  availableGrants: GrantType[]\n  selectedGrant: GrantType | undefined\n}>()\nconst emit = defineEmits<{\n  (e: 'change', data?: GrantType): void\n}>()\nconst selectedGrant = computed({\n  get() {\n    return props.selectedGrant\n  },\n  set(newGrant) {\n    emit('change', newGrant)\n  },\n})\nconst { getGrantOption } = useGrant()\n</script>\n\n<template>\n  <VBtnToggle\n    v-model=\"selectedGrant\"\n    divided\n    density=\"compact\"\n    variant=\"outlined\"\n    class=\"text-disabled\"\n  >\n    <VBtn\n      v-for=\"availableGrant in availableGrants\"\n      :key=\"availableGrant\"\n      :value=\"availableGrant\"\n      :color=\"getGrantOption(availableGrant)?.color\"\n    >\n      {{ getGrantOption(availableGrant)?.title }}\n    </VBtn>\n  </VBtnToggle>\n</template>\n"],"mappings":""}

package/dist/domains/permission/components/APermissionGrantEditor.vue.d.ts

@@ -0,0 +1,12 @@
+import { GrantType } from '../../auth/valueObject/Grant';
+type __VLS_Props = {
+    availableGrants: GrantType[];
+    selectedGrant: GrantType | undefined;
+};
+declare const __VLS_export: import('vue').DefineComponent<__VLS_Props, {}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {} & {
+    change: (data?: GrantType | undefined) => any;
+}, string, import('vue').PublicProps, Readonly<__VLS_Props> & Readonly<{
+    onChange?: ((data?: GrantType | undefined) => any) | undefined;
+}>, {}, {}, {}, {}, string, import('vue').ComponentProvideOptions, false, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/domains/permission/components/APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js

@@ -0,0 +1,44 @@
+import { useGrant as e } from "../../auth/valueObject/Grant.js";
+import { Fragment as t, computed as n, createBlock as r, createElementBlock as i, createTextVNode as a, defineComponent as o, openBlock as s, renderList as c, toDisplayString as l, unref as u, withCtx as d } from "vue";
+import { VBtn as f } from "vuetify/components/VBtn";
+import { VBtnToggle as p } from "vuetify/components/VBtnToggle";
+// src/domains/permission/components/APermissionGrantEditor.vue?vue&type=script&setup=true&lang.ts
+var m = /*@__PURE__*/ o({
+	__name: "APermissionGrantEditor",
+	props: {
+		availableGrants: {},
+		selectedGrant: {}
+	},
+	emits: ["change"],
+	setup(o, { emit: m }) {
+		let h = o, g = m, _ = n({
+			get() {
+				return h.selectedGrant;
+			},
+			set(e) {
+				g("change", e);
+			}
+		}), { getGrantOption: v } = e();
+		return (e, n) => (s(), r(p, {
+			modelValue: _.value,
+			"onUpdate:modelValue": n[0] ||= (e) => _.value = e,
+			divided: "",
+			density: "compact",
+			variant: "outlined",
+			class: "text-disabled"
+		}, {
+			default: d(() => [(s(!0), i(t, null, c(o.availableGrants, (e) => (s(), r(f, {
+				key: e,
+				value: e,
+				color: u(v)(e)?.color
+			}, {
+				default: d(() => [a(l(u(v)(e)?.title), 1)]),
+				_: 2
+			}, 1032, ["value", "color"]))), 128))]),
+			_: 1
+		}, 8, ["modelValue"]));
+	}
+});
+export { m as default };
+
+//# sourceMappingURL=APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js.map

package/dist/domains/permission/components/APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"APermissionGrantEditor.vue_vue_type_script_setup_true_lang.js","names":["_openBlock","_createBlock","_component_VBtnToggle","_withCtx","_createElementBlock","_Fragment","_renderList","_component_VBtn","_unref","_createTextVNode","_toDisplayString","APermissionGrantEditor_vue_vue_type_script_setup_true_lang_default","__emit","props","__props","emit","selectedGrant","computed","newGrant","useGrant","openBlock","createBlock","VBtnToggle","_cache","$event","withCtx","createElementBlock","Fragment","renderList","VBtn","availableGrant","unref","getGrantOption","createTextVNode","toDisplayString"],"sources":["../../../../src/domains/permission/components/APermissionGrantEditor.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { type GrantType, useGrant } from '@/domains/auth/valueObject/Grant'\nimport { computed } from 'vue'\n\nconst props = defineProps<{\n  availableGrants: GrantType[]\n  selectedGrant: GrantType | undefined\n}>()\nconst emit = defineEmits<{\n  (e: 'change', data?: GrantType): void\n}>()\nconst selectedGrant = computed({\n  get() {\n    return props.selectedGrant\n  },\n  set(newGrant) {\n    emit('change', newGrant)\n  },\n})\nconst { getGrantOption } = useGrant()\n</script>\n\n<template>\n  <VBtnToggle\n    v-model=\"selectedGrant\"\n    divided\n    density=\"compact\"\n    variant=\"outlined\"\n    class=\"text-disabled\"\n  >\n    <VBtn\n      v-for=\"availableGrant in availableGrants\"\n      :key=\"availableGrant\"\n      :value=\"availableGrant\"\n      :color=\"getGrantOption(availableGrant)?.color\"\n    >\n      {{ getGrantOption(availableGrant)?.title }}\n    </VBtn>\n  </VBtnToggle>\n</template>\n"],"mappings":";;;;;;;;;;;;;EAIA,IAAMa,IAAQC,GAIRC,IAAOH,GAGPI,IAAgBC,EAAS;GAC7B,MAAM;IACJ,OAAOJ,EAAM;GACf;GACA,IAAI,GAAU;IACZ,EAAK,UAAUK,CAAQ;GACzB;EACF,CAAC,GACK,EAAE,sBAAmBC,EAAS;E,kBAIlCnB,EAAA,GAAAC,EAeaC,GAAA;GAdF,YAAAc,EAAA;GAAA,uBAAA,AAAAO,EAAA,QAAA,MAAA,EAAa,QAAAC;GACtB,SAAA;GACA,SAAQ;GACR,SAAQ;GACR,OAAM;;GAGJ,SAAArB,QAAyC,EAD3CH,EAAA,EAAA,GAAAI,EAOOC,GAAA,MAAAC,EANoBQ,EAAA,kBAAlB,OADTd,EAAA,GAAAC,EAOOM,GAAA;IALJ,KAAKuB;IACL,OAAOA;IACP,OAAOtB,EAAAwB,CAAA,CAAc,CAACF,CAAc,CAAA,EAAG;;IAExC,SAAA3B,QAA2C,CAAxCM,EAAAC,EAAAF,EAAAwB,CAAA,CAAc,CAACF,CAAc,CAAA,EAAG,KAAK,GAAA,CAAA,C"}

package/dist/domains/permission/components/APermissionValueChip.js

@@ -0,0 +1,6 @@
+import e from "./APermissionValueChip.vue_vue_type_script_setup_true_lang.js";
+// src/domains/permission/components/APermissionValueChip.vue
+var t = e;
+export { t as default };
+
+//# sourceMappingURL=APermissionValueChip.js.map

package/dist/domains/permission/components/APermissionValueChip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"APermissionValueChip.js","names":["_sfc_main","APermissionValueChip_vue_vue_type_script_setup_true_lang_default","APermissionValueChip_default"],"sources":["../../../../src/domains/permission/components/APermissionValueChip.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { type GrantType, useGrant } from '@/domains/auth/valueObject/Grant'\nimport { GrantOriginDefault, type GrantOriginType, useGrantOrigin } from '@/domains/permission/valueObject/GrantOrigin'\nimport { computed } from 'vue'\n\nconst props = defineProps<{\n  grant: GrantType\n  grantOrigin: GrantOriginType\n}>()\n\nconst { getGrantOption } = useGrant()\nconst grantOption = computed(() => getGrantOption(props.grant))\n\nconst { getGrantOriginOption } = useGrantOrigin()\nconst grantOriginOption = computed(() => getGrantOriginOption(props.grantOrigin))\n</script>\n\n<template>\n  <VChip\n    v-if=\"grantOption\"\n    :color=\"grantOption.color\"\n    close-label=\"common.button.remove\"\n    label\n    size=\"small\"\n  >\n    {{ grantOption.title }}\n    <span\n      v-if=\"grantOrigin !== GrantOriginDefault\"\n      class=\"ml-1\"\n      >({{ grantOriginOption?.title }})</span\n    >\n  </VChip>\n</template>\n"],"mappings":""}

package/dist/domains/permission/components/APermissionValueChip.vue.d.ts

@@ -0,0 +1,9 @@
+import { GrantType } from '../../auth/valueObject/Grant';
+import { GrantOriginType } from '../valueObject/GrantOrigin';
+type __VLS_Props = {
+    grant: GrantType;
+    grantOrigin: GrantOriginType;
+};
+declare const __VLS_export: import('vue').DefineComponent<__VLS_Props, {}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {}, string, import('vue').PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {}, {}, {}, {}, string, import('vue').ComponentProvideOptions, false, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/domains/permission/components/APermissionValueChip.vue_vue_type_script_setup_true_lang.js

@@ -0,0 +1,31 @@
+import { useGrant as e } from "../../auth/valueObject/Grant.js";
+import { GrantOriginDefault as t, useGrantOrigin as n } from "../valueObject/GrantOrigin.js";
+import { computed as r, createBlock as i, createCommentVNode as a, createElementBlock as o, createTextVNode as s, defineComponent as c, openBlock as l, toDisplayString as u, unref as d, withCtx as f } from "vue";
+import { VChip as p } from "vuetify/components/VChip";
+// src/domains/permission/components/APermissionValueChip.vue?vue&type=script&setup=true&lang.ts
+var m = {
+	key: 0,
+	class: "ml-1"
+}, h = /*@__PURE__*/ c({
+	__name: "APermissionValueChip",
+	props: {
+		grant: {},
+		grantOrigin: {}
+	},
+	setup(c) {
+		let h = c, { getGrantOption: g } = e(), _ = r(() => g(h.grant)), { getGrantOriginOption: v } = n(), y = r(() => v(h.grantOrigin));
+		return (e, n) => _.value ? (l(), i(p, {
+			key: 0,
+			color: _.value.color,
+			"close-label": "common.button.remove",
+			label: "",
+			size: "small"
+		}, {
+			default: f(() => [s(u(_.value.title) + " ", 1), c.grantOrigin === d(t) ? a("", !0) : (l(), o("span", m, "(" + u(y.value?.title) + ")", 1))]),
+			_: 1
+		}, 8, ["color"])) : a("", !0);
+	}
+});
+export { h as default };
+
+//# sourceMappingURL=APermissionValueChip.vue_vue_type_script_setup_true_lang.js.map

package/dist/domains/permission/components/APermissionValueChip.vue_vue_type_script_setup_true_lang.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"APermissionValueChip.vue_vue_type_script_setup_true_lang.js","names":["_openBlock","_createBlock","_component_VChip","_withCtx","_createTextVNode","_toDisplayString","_unref","_createElementBlock","_createCommentVNode","_hoisted_1","APermissionValueChip_vue_vue_type_script_setup_true_lang_default","props","__props","useGrant","grantOption","computed","getGrantOption","useGrantOrigin","grantOriginOption","getGrantOriginOption","openBlock","createBlock","VChip","withCtx","createTextVNode","toDisplayString","unref","GrantOriginDefault","createCommentVNode","createElementBlock"],"sources":["../../../../src/domains/permission/components/APermissionValueChip.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { type GrantType, useGrant } from '@/domains/auth/valueObject/Grant'\nimport { GrantOriginDefault, type GrantOriginType, useGrantOrigin } from '@/domains/permission/valueObject/GrantOrigin'\nimport { computed } from 'vue'\n\nconst props = defineProps<{\n  grant: GrantType\n  grantOrigin: GrantOriginType\n}>()\n\nconst { getGrantOption } = useGrant()\nconst grantOption = computed(() => getGrantOption(props.grant))\n\nconst { getGrantOriginOption } = useGrantOrigin()\nconst grantOriginOption = computed(() => getGrantOriginOption(props.grantOrigin))\n</script>\n\n<template>\n  <VChip\n    v-if=\"grantOption\"\n    :color=\"grantOption.color\"\n    close-label=\"common.button.remove\"\n    label\n    size=\"small\"\n  >\n    {{ grantOption.title }}\n    <span\n      v-if=\"grantOrigin !== GrantOriginDefault\"\n      class=\"ml-1\"\n      >({{ grantOriginOption?.title }})</span\n    >\n  </VChip>\n</template>\n"],"mappings":";;;;;;;;;;;;;;;EAKA,IAAMW,IAAQC,GAKR,EAAE,sBAAmBC,EAAS,GAC9BC,IAAcC,QAAeC,EAAeL,EAAM,KAAK,CAAC,GAExD,EAAE,4BAAyBM,EAAe,GAC1CC,IAAoBH,QAAeI,EAAqBR,EAAM,WAAW,CAAC;E,iBAKtEG,EAAA,SADRd,EAAA,GAAAC,EAaQC,GAAA;;GAXL,OAAOY,EAAA,MAAY;GACpB,eAAY;GACZ,OAAA;GACA,MAAK;;GAEL,SAAAX,QAAuB,CAApBC,EAAAC,EAAAS,EAAA,MAAY,KAAK,IAAG,KACvB,CAAA,GACQF,EAAA,gBAAgBN,EAAAqB,CAAA,I,aADxB3B,EAAA,GAAAO,EAIC,QAJDE,GAGG,MAACJ,EAAGa,EAAA,OAAmB,KAAK,IAAG,KAAC,CAAA,E"}

package/dist/domains/permission/composables/permissionActions.d.ts

@@ -0,0 +1,19 @@
+import { AxiosClientFn } from '../../api/utils/client';
+import { AnzuUser } from '../../../shared/types/AnzuUser';
+import { IntegerId } from '../../../shared/types/common';
+import { Permissions } from '../../auth/types/Permission';
+export interface PermissionActionsParams {
+    client: AxiosClientFn;
+    system: string;
+    entity?: string;
+    endPoint?: string;
+}
+/**
+ * Builds the user's resulting grant map for the editor's "resolved" column, from the user's groups plus direct grants.
+ * This is not the backend's `resolvedPermissions`, which includes roles. It reflects what
+ * a save would send now, so a just-ticked group shows its effect without a round trip.
+ */
+export declare const usePermissionActions: (params: PermissionActionsParams) => {
+    resolvePermissions: (user: AnzuUser) => Permissions;
+    resolveGroupPermissions: (permissionGroupIds: IntegerId[]) => Permissions;
+};

package/dist/domains/permission/composables/permissionActions.js

@@ -0,0 +1,24 @@
+import { useCachedPermissionGroups as e } from "../group/composables/cachedPermissionGroups.js";
+import { isUndefined as t } from "../../../shared/utils/common.js";
+import { objectGetValueByPath as n, objectSetValueByPath as r } from "../../../shared/utils/object.js";
+// src/domains/permission/composables/permissionActions.ts
+var i = (i) => {
+	let { getCachedPermissionGroup: a } = e(i), o = (e) => {
+		let i = {}, o = e.map((e) => a(e));
+		for (let e of o) if (!t(e)) for (let t in e.permissions) {
+			let a = n(e.permissions, t);
+			Object.hasOwn(i, t) ? n(i, t) < a && r(i, t, a) : r(i, t, a);
+		}
+		return i;
+	};
+	return {
+		resolvePermissions: (e) => ({
+			...o(e.permissionGroups),
+			...e.permissions
+		}),
+		resolveGroupPermissions: o
+	};
+};
+export { i as usePermissionActions };
+
+//# sourceMappingURL=permissionActions.js.map

package/dist/domains/permission/composables/permissionActions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionActions.js","names":["usePermissionActions","useCachedPermissionGroups","params","resolveGroupPermissions","permissions","permissionGroups","permissionGroupIds","getCachedPermissionGroup","id","permissionGroup","permissionName","grant","objectGetValueByPath","objectSetValueByPath","user"],"sources":["../../../../src/domains/permission/composables/permissionActions.ts"],"sourcesContent":["import type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { useCachedPermissionGroups } from '@/domains/permission/group/composables/cachedPermissionGroups'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\nimport type { Permissions } from '@/domains/auth/types/Permission'\nimport { isUndefined } from '@/shared/utils/common'\nimport { objectGetValueByPath, objectSetValueByPath } from '@/shared/utils/object'\n\nexport interface PermissionActionsParams {\n  client: AxiosClientFn\n  system: string\n  entity?: string\n  endPoint?: string\n}\n\n/**\n * Builds the user's resulting grant map for the editor's \"resolved\" column, from the user's groups plus direct grants.\n * This is not the backend's `resolvedPermissions`, which includes roles. It reflects what\n * a save would send now, so a just-ticked group shows its effect without a round trip.\n */\nexport const usePermissionActions = (params: PermissionActionsParams) => {\n  const { getCachedPermissionGroup } = useCachedPermissionGroups(params)\n\n  const resolveGroupPermissions = (permissionGroupIds: IntegerId[]): Permissions => {\n    const permissions: Permissions = {}\n    const permissionGroups = permissionGroupIds.map((id) => getCachedPermissionGroup(id))\n\n    for (const permissionGroup of permissionGroups) {\n      if (isUndefined(permissionGroup)) continue\n      for (const permissionName in permissionGroup.permissions) {\n        const grant = objectGetValueByPath(permissionGroup.permissions, permissionName)\n        if (!Object.hasOwn(permissions, permissionName)) {\n          objectSetValueByPath(permissions, permissionName, grant)\n          continue\n        }\n        // Grants are ordered deny < allowOwner < allow, so the widest group wins. Two groups that\n        // disagree do not cancel out.\n        if (objectGetValueByPath(permissions, permissionName) < grant) {\n          objectSetValueByPath(permissions, permissionName, grant)\n        }\n      }\n    }\n    return permissions\n  }\n\n  /** A grant set on the user directly always beats whatever the groups say. */\n  const resolvePermissions = (user: AnzuUser): Permissions => ({\n    ...resolveGroupPermissions(user.permissionGroups),\n    ...user.permissions,\n  })\n\n  return {\n    resolvePermissions,\n    resolveGroupPermissions,\n  }\n}\n"],"mappings":";;;;AAoBA,IAAaA,KAAwB,MAAoC;CACvE,IAAM,EAAE,gCAA6BC,EAA0BC,CAAM,GAE/DC,KAA2B,MAAiD;EAChF,IAAMC,IAA2B,CAAC,GAC5BC,IAAmBC,EAAmB,KAAK,MAAOC,EAAyBC,CAAE,CAAC;EAEpF,KAAK,IAAMC,KAAmBJ,GAC5B,IAAI,GAAYI,CAAe,GAC/B,KAAK,IAAMC,KAAkBD,EAAgB,aAAa;GACxD,IAAME,IAAQC,EAAqBH,EAAgB,aAAaC,CAAc;GAC9E,AAAK,OAAO,OAAON,GAAaM,CAAc,IAM1CE,EAAqBR,GAAaM,CAAc,IAAIC,KACtDE,EAAqBT,GAAaM,GAAgBC,CAAK,IANvDE,EAAqBT,GAAaM,GAAgBC,CAAK;EAQ3D;EAEF,OAAOP;CACT;CAQA,OAAO;EACL,qBAN0B,OAAiC;GAC3D,GAAGD,EAAwBW,EAAK,gBAAgB;GAChD,GAAGA,EAAK;EACV;EAIE;CACF;AACF"}

package/dist/domains/permission/config/api/permissionConfigApi.d.ts

@@ -0,0 +1,18 @@
+import { AxiosClientFn } from '../../../api/utils/client';
+import { PermissionConfig } from '../types/PermissionConfig';
+export declare const PERMISSION_CONFIG_ENTITY = "permissionConfig";
+export declare const PERMISSION_CONFIG_ENDPOINT = "/adm/v1/permissions/config";
+export interface PermissionConfigApiParams {
+    client: AxiosClientFn;
+    /**
+     * Which backend this instance talks to. It reaches `useApiRequest` for error context.
+     * It is also the storage key downstream, so two systems can be loaded side by side.
+     */
+    system: string;
+    /** Goes into every `useApiRequest` call; see the per-system entity note in `permissionGroupApi`. */
+    entity?: string;
+    endPoint?: string;
+}
+export declare const usePermissionConfigApi: ({ client, system, entity, endPoint, }: PermissionConfigApiParams) => {
+    useFetchPermissionConfig: () => import('../../../api/composables/useApiRequest').UseApiRequestReturnType<PermissionConfig, null>;
+};

package/dist/domains/permission/config/api/permissionConfigApi.js

@@ -0,0 +1,14 @@
+import { useApiRequest as e } from "../../../api/composables/useApiRequest.js";
+// src/domains/permission/config/api/permissionConfigApi.ts
+var t = "permissionConfig", n = "/adm/v1/permissions/config", r = ({ client: r, system: i, entity: a = t, endPoint: o = n }) => ({ useFetchPermissionConfig: () => e({
+	client: r,
+	method: "GET",
+	system: i,
+	entity: a,
+	validationSystem: "common",
+	validationEntity: a,
+	urlTemplate: o
+}) });
+export { n as PERMISSION_CONFIG_ENDPOINT, t as PERMISSION_CONFIG_ENTITY, r as usePermissionConfigApi };
+
+//# sourceMappingURL=permissionConfigApi.js.map

package/dist/domains/permission/config/api/permissionConfigApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionConfigApi.js","names":["PERMISSION_CONFIG_ENTITY","PERMISSION_CONFIG_ENDPOINT","usePermissionConfigApi","useApiRequest","entity","endPoint"],"sources":["../../../../../src/domains/permission/config/api/permissionConfigApi.ts"],"sourcesContent":["import type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport type { PermissionConfig } from '@/domains/permission/config/types/PermissionConfig'\n\nexport const PERMISSION_CONFIG_ENTITY = 'permissionConfig'\nexport const PERMISSION_CONFIG_ENDPOINT = '/adm/v1/permissions/config'\n\nexport interface PermissionConfigApiParams {\n  client: AxiosClientFn\n  /**\n   * Which backend this instance talks to. It reaches `useApiRequest` for error context.\n   * It is also the storage key downstream, so two systems can be loaded side by side.\n   */\n  system: string\n  /** Goes into every `useApiRequest` call; see the per-system entity note in `permissionGroupApi`. */\n  entity?: string\n  endPoint?: string\n}\n\nexport const usePermissionConfigApi = ({\n  client,\n  system,\n  entity = PERMISSION_CONFIG_ENTITY,\n  endPoint = PERMISSION_CONFIG_ENDPOINT,\n}: PermissionConfigApiParams) => {\n  const useFetchPermissionConfig = () =>\n    useApiRequest<PermissionConfig, null>({\n      client,\n      method: 'GET',\n      system,\n      entity,\n      // The config endpoint never returns field-level validation failures.\n      // The pair stays consistent with the rest of the shared api so a future one gets real labels.\n      validationSystem: 'common',\n      validationEntity: entity,\n      urlTemplate: endPoint,\n    })\n\n  return {\n    useFetchPermissionConfig,\n  }\n}\n"],"mappings":";;AAIA,IAAaA,IAA2B,oBAC3BC,IAA6B,8BAc7BC,KAA0B,EACrC,WACA,WACA,YAASF,GACT,cAAWC,SAeJ,EACL,gCAbAE,EAAsC;CACpC;CACA,QAAQ;CACR;CACA;CAGA,kBAAkB;CAClB,kBAAkBC;CAClB,aAAaC;AACf,CAAC,EAIH"}

package/dist/domains/permission/config/composables/permissionConfigActions.d.ts

@@ -0,0 +1,22 @@
+import { AxiosClientFn } from '../../../api/utils/client';
+import { PermissionTranslationGroup } from '../types/PermissionConfig';
+export interface PermissionConfigActionsParams {
+    client: AxiosClientFn;
+    /** The system this config belongs to. A parameter, not a global, so a page can show two systems at once. */
+    system: string;
+    entity?: string;
+    endPoint?: string;
+    /**
+     * Fetch as soon as the composable is built, as every admin does.
+     * Turn off where the caller decides when, e.g. a dialog that may never open or a test.
+     */
+    autoFetch?: boolean;
+}
+export declare const usePermissionConfigActions: (params: PermissionConfigActionsParams) => {
+    permissionConfig: import('vue').ComputedRef<import('../types/PermissionConfig').PermissionConfig>;
+    loadingPermissionConfig: import('vue').ComputedRef<boolean>;
+    isPermissionConfigInitialized: import('vue').ComputedRef<boolean>;
+    fetchPermissionConfig: (force?: boolean) => Promise<void>;
+    translatePermission: (group: PermissionTranslationGroup, key: string) => string;
+    resetPermissionConfig: () => void;
+};

package/dist/domains/permission/config/composables/permissionConfigActions.js

@@ -0,0 +1,42 @@
+import { useAlerts as e } from "../../../system/composables/alerts.js";
+import { useLanguageSettings as t } from "../../../system/composables/languageSettings.js";
+import { PERMISSION_CONFIG_ENDPOINT as n, PERMISSION_CONFIG_ENTITY as r, usePermissionConfigApi as i } from "../api/permissionConfigApi.js";
+import { usePermissionConfigStore as a } from "../store/permissionConfigStore.js";
+import { objectGetValueByPath as o } from "../../../../shared/utils/object.js";
+import { computed as s } from "vue";
+// src/domains/permission/config/composables/permissionConfigActions.ts
+var c = /* @__PURE__ */ new Map(), l = (l) => {
+	let { client: u, system: d, entity: f = r, endPoint: p = n, autoFetch: m = !0 } = l, { showErrorsDefault: h } = e(), { useFetchPermissionConfig: g } = i({
+		client: u,
+		system: d,
+		entity: f,
+		endPoint: p
+	}), _ = a(), v = s(() => _.getEntry(d)), y = s(() => v.value.config), b = s(() => v.value.loading), x = s(() => v.value.initialized), S = async () => {
+		_.setLoading(d, !0);
+		try {
+			let { execute: e } = g();
+			_.setConfig(d, await e());
+		} catch (e) {
+			h(e);
+		} finally {
+			_.setLoading(d, !1), c.delete(d);
+		}
+	}, C = async (e = !1) => {
+		if (!e && x.value) return;
+		let t = c.get(d);
+		if (t) return t;
+		let n = S();
+		return c.set(d, n), n;
+	}, { currentLanguageCode: w } = t();
+	return m && C(), {
+		permissionConfig: y,
+		loadingPermissionConfig: b,
+		isPermissionConfigInitialized: x,
+		fetchPermissionConfig: C,
+		translatePermission: (e, t) => o(y.value.translation, e + "." + t + "." + w.value) ?? t,
+		resetPermissionConfig: () => _.resetSystem(d)
+	};
+};
+export { l as usePermissionConfigActions };
+
+//# sourceMappingURL=permissionConfigActions.js.map

package/dist/domains/permission/config/composables/permissionConfigActions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionConfigActions.js","names":["inFlight","usePermissionConfigActions","PERMISSION_CONFIG_ENTITY","PERMISSION_CONFIG_ENDPOINT","params","useAlerts","usePermissionConfigApi","store","usePermissionConfigStore","entry","computed","system","permissionConfig","loadingPermissionConfig","isPermissionConfigInitialized","runFetch","useFetchPermissionConfig","execute","error","fetchPermissionConfig","force","running","started","useLanguageSettings","autoFetch","objectGetValueByPath","group","key","currentLanguageCode"],"sources":["../../../../../src/domains/permission/config/composables/permissionConfigActions.ts"],"sourcesContent":["import { computed } from 'vue'\nimport { useAlerts } from '@/domains/system/composables/alerts'\nimport { useLanguageSettings } from '@/domains/system/composables/languageSettings'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport {\n  PERMISSION_CONFIG_ENDPOINT,\n  PERMISSION_CONFIG_ENTITY,\n  usePermissionConfigApi,\n} from '@/domains/permission/config/api/permissionConfigApi'\nimport { usePermissionConfigStore } from '@/domains/permission/config/store/permissionConfigStore'\nimport type { PermissionTranslationGroup } from '@/domains/permission/config/types/PermissionConfig'\nimport { objectGetValueByPath } from '@/shared/utils/object'\n\nexport interface PermissionConfigActionsParams {\n  client: AxiosClientFn\n  /** The system this config belongs to. A parameter, not a global, so a page can show two systems at once. */\n  system: string\n  entity?: string\n  endPoint?: string\n  /**\n   * Fetch as soon as the composable is built, as every admin does.\n   * Turn off where the caller decides when, e.g. a dialog that may never open or a test.\n   */\n  autoFetch?: boolean\n}\n\n/**\n * One request per system, however many components ask.\n * Module scope, because de-duplication must span composable\n * instances. Two open editors would otherwise fire the same GET.\n */\nconst inFlight = new Map<string, Promise<void>>()\n\nexport const usePermissionConfigActions = (params: PermissionConfigActionsParams) => {\n  const {\n    client,\n    system,\n    entity = PERMISSION_CONFIG_ENTITY,\n    endPoint = PERMISSION_CONFIG_ENDPOINT,\n    autoFetch = true,\n  } = params\n\n  const { showErrorsDefault } = useAlerts()\n  const { useFetchPermissionConfig } = usePermissionConfigApi({ client, system, entity, endPoint })\n  const store = usePermissionConfigStore()\n\n  const entry = computed(() => store.getEntry(system))\n  const permissionConfig = computed(() => entry.value.config)\n  const loadingPermissionConfig = computed(() => entry.value.loading)\n  const isPermissionConfigInitialized = computed(() => entry.value.initialized)\n\n  const runFetch = async () => {\n    store.setLoading(system, true)\n    try {\n      const { execute } = useFetchPermissionConfig()\n      store.setConfig(system, await execute())\n    } catch (error) {\n      showErrorsDefault(error)\n    } finally {\n      // Always, including on failure. Otherwise a down backend leaves the editor's card spinning for the session.\n      store.setLoading(system, false)\n      inFlight.delete(system)\n    }\n  }\n\n  const fetchPermissionConfig = async (force = false) => {\n    if (!force && isPermissionConfigInitialized.value) return\n    const running = inFlight.get(system)\n    if (running) return running\n    const started = runFetch()\n    inFlight.set(system, started)\n    return started\n  }\n\n  const { currentLanguageCode } = useLanguageSettings()\n\n  /**\n   * Falls back to the raw key, which the admins rely on.\n   * The ACL vocabulary lives in the backend yaml, not in front-end i18n, so\n   * an untranslated action shows as `weather_location_ui`, not a blank cell.\n   */\n  const translatePermission = (group: PermissionTranslationGroup, key: string): string => {\n    const translated = objectGetValueByPath(\n      permissionConfig.value.translation,\n      group + '.' + key + '.' + currentLanguageCode.value\n    )\n\n    return translated ?? key\n  }\n\n  if (autoFetch) void fetchPermissionConfig()\n\n  return {\n    permissionConfig,\n    loadingPermissionConfig,\n    isPermissionConfigInitialized,\n    fetchPermissionConfig,\n    translatePermission,\n    resetPermissionConfig: () => store.resetSystem(system),\n  }\n}\n"],"mappings":";;;;;;;AA+BA,IAAMA,oBAAW,IAAI,IAA2B,GAEnCC,KAA8B,MAA0C;CACnF,IAAM,EACJ,WACA,WACA,YAASC,GACT,cAAWC,GACX,eAAY,OACVC,GAEE,EAAE,yBAAsBC,EAAU,GAClC,EAAE,gCAA6BC,EAAuB;EAAE;EAAQ;EAAQ;EAAQ;CAAS,CAAC,GAC1FC,IAAQC,EAAyB,GAEjCC,IAAQC,QAAeH,EAAM,SAASI,CAAM,CAAC,GAC7CC,IAAmBF,QAAeD,EAAM,MAAM,MAAM,GACpDI,IAA0BH,QAAeD,EAAM,MAAM,OAAO,GAC5DK,IAAgCJ,QAAeD,EAAM,MAAM,WAAW,GAEtEM,IAAW,YAAY;EAC3B,EAAM,WAAWJ,GAAQ,EAAI;EAC7B,IAAI;GACF,IAAM,EAAE,eAAYK,EAAyB;GAC7C,EAAM,UAAUL,GAAQ,MAAMM,EAAQ,CAAC;EACzC,SAASC,GAAO;GACd,EAAkBA,CAAK;EACzB,UAAU;GAGR,AADAX,EAAM,WAAWI,GAAQ,EAAK,GAC9BX,EAAS,OAAOW,CAAM;EACxB;CACF,GAEMQ,IAAwB,OAAO,IAAQ,OAAU;EACrD,IAAI,CAACC,KAASN,EAA8B,OAAO;EACnD,IAAMO,IAAUrB,EAAS,IAAIW,CAAM;EACnC,IAAIU,GAAS,OAAOA;EACpB,IAAMC,IAAUP,EAAS;EAEzB,OADAf,EAAS,IAAIW,GAAQW,CAAO,GACrBA;CACT,GAEM,EAAE,2BAAwBC,EAAoB;CAkBpD,OAFIC,KAAWL,EAA2B,GAEnC;EACL;EACA;EACA;EACA;EACA,sBAhB2B,GAAmC,MAC3CM,EACjBb,EAAiB,MAAM,aACvBc,IAAQ,MAAMC,IAAM,MAAMC,EAAoB,KAGzC,KAAcD;EAWrB,6BAA6BpB,EAAM,YAAYI,CAAM;CACvD;AACF"}

package/dist/domains/permission/config/factory/PermissionConfigFactory.d.ts

@@ -0,0 +1,4 @@
+import { PermissionConfig } from '../types/PermissionConfig';
+export declare function usePermissionConfigFactory(): {
+    createPermissionConfig: () => PermissionConfig;
+};

package/dist/domains/permission/config/factory/PermissionConfigFactory.js

@@ -0,0 +1,16 @@
+// src/domains/permission/config/factory/PermissionConfigFactory.ts
+function e() {
+	return { createPermissionConfig: () => ({
+		config: {},
+		defaultGrants: [],
+		roles: [],
+		translation: {
+			actions: {},
+			subjects: {},
+			roles: {}
+		}
+	}) };
+}
+export { e as usePermissionConfigFactory };
+
+//# sourceMappingURL=PermissionConfigFactory.js.map

package/dist/domains/permission/config/factory/PermissionConfigFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionConfigFactory.js","names":["usePermissionConfigFactory"],"sources":["../../../../../src/domains/permission/config/factory/PermissionConfigFactory.ts"],"sourcesContent":["import type { PermissionConfig } from '@/domains/permission/config/types/PermissionConfig'\n\nexport function usePermissionConfigFactory() {\n  const createPermissionConfig = (): PermissionConfig => {\n    return {\n      config: {},\n      defaultGrants: [],\n      roles: [],\n      translation: {\n        actions: {},\n        subjects: {},\n        roles: {},\n      },\n    }\n  }\n\n  return {\n    createPermissionConfig,\n  }\n}\n"],"mappings":";AAEA,SAAgBA,IAA6B;CAc3C,OAAO,EACL,+BAbO;EACL,QAAQ,CAAC;EACT,eAAe,CAAC;EAChB,OAAO,CAAC;EACR,aAAa;GACX,SAAS,CAAC;GACV,UAAU,CAAC;GACX,OAAO,CAAC;EACV;CACF,GAKF;AACF"}

package/dist/domains/permission/config/store/permissionConfigStore.d.ts

@@ -0,0 +1,80 @@
+import { PermissionConfig } from '../types/PermissionConfig';
+/**
+ * One entry per system. Shared `loading` and `initialized` flags break with parallel fetches.
+ * The first fetch to finish would clear the flag for all, and a failure without `finally` would leave it set forever.
+ */
+export interface PermissionConfigEntry {
+    config: PermissionConfig;
+    loading: boolean;
+    initialized: boolean;
+}
+export declare const usePermissionConfigStore: import('pinia').SetupStoreDefinition<"commonAdminPermissionConfigStore", {
+    entries: import('vue').Ref<Map<string, {
+        config: {
+            roles: string[];
+            defaultGrants: import('../../../../lib').GrantType[];
+            config: {
+                [subject: string]: {
+                    [action: string]: {
+                        grants?: import('../../../../lib').GrantType[];
+                    };
+                };
+            };
+            translation: {
+                subjects: {
+                    [subject: string]: {
+                        [lang: string]: string;
+                    };
+                };
+                actions: {
+                    [action: string]: {
+                        [lang: string]: string;
+                    };
+                };
+                roles: {
+                    [role: string]: {
+                        [lang: string]: string;
+                    };
+                };
+            };
+        };
+        loading: boolean;
+        initialized: boolean;
+    }> & Omit<Map<string, PermissionConfigEntry>, keyof Map<any, any>>, Map<string, PermissionConfigEntry> | (Map<string, {
+        config: {
+            roles: string[];
+            defaultGrants: import('../../../../lib').GrantType[];
+            config: {
+                [subject: string]: {
+                    [action: string]: {
+                        grants?: import('../../../../lib').GrantType[];
+                    };
+                };
+            };
+            translation: {
+                subjects: {
+                    [subject: string]: {
+                        [lang: string]: string;
+                    };
+                };
+                actions: {
+                    [action: string]: {
+                        [lang: string]: string;
+                    };
+                };
+                roles: {
+                    [role: string]: {
+                        [lang: string]: string;
+                    };
+                };
+            };
+        };
+        loading: boolean;
+        initialized: boolean;
+    }> & Omit<Map<string, PermissionConfigEntry>, keyof Map<any, any>>)>;
+    getEntry: (system: string) => PermissionConfigEntry;
+    setLoading: (system: string, loading: boolean) => void;
+    setConfig: (system: string, config: PermissionConfig) => void;
+    resetSystem: (system: string) => void;
+    reset: () => void;
+}>;

package/dist/domains/permission/config/store/permissionConfigStore.js

@@ -0,0 +1,46 @@
+import { usePermissionConfigFactory as e } from "../factory/PermissionConfigFactory.js";
+import { ref as t } from "vue";
+import { defineStore as n } from "pinia";
+// src/domains/permission/config/store/permissionConfigStore.ts
+var r = n("commonAdminPermissionConfigStore", () => {
+	let { createPermissionConfig: n } = e(), r = t(/* @__PURE__ */ new Map()), i = () => ({
+		config: n(),
+		loading: !1,
+		initialized: !1
+	});
+	function a(e) {
+		return r.value.get(e) ?? i();
+	}
+	function o(e, t) {
+		let n = r.value.get(e) ?? i();
+		r.value.set(e, {
+			...n,
+			loading: t
+		});
+	}
+	function s(e, t) {
+		let n = r.value.get(e) ?? i();
+		r.value.set(e, {
+			...n,
+			config: t,
+			initialized: !0
+		});
+	}
+	function c(e) {
+		r.value.delete(e);
+	}
+	function l() {
+		r.value = /* @__PURE__ */ new Map();
+	}
+	return {
+		entries: r,
+		getEntry: a,
+		setLoading: o,
+		setConfig: s,
+		resetSystem: c,
+		reset: l
+	};
+});
+export { r as usePermissionConfigStore };
+
+//# sourceMappingURL=permissionConfigStore.js.map

package/dist/domains/permission/config/store/permissionConfigStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionConfigStore.js","names":["usePermissionConfigStore","defineStore","usePermissionConfigFactory","entries","ref","emptyEntry","createPermissionConfig","getEntry","system","setLoading","entry","setConfig","resetSystem","reset"],"sources":["../../../../../src/domains/permission/config/store/permissionConfigStore.ts"],"sourcesContent":["import { acceptHMRUpdate, defineStore } from 'pinia'\nimport { ref } from 'vue'\nimport { usePermissionConfigFactory } from '@/domains/permission/config/factory/PermissionConfigFactory'\nimport type { PermissionConfig } from '@/domains/permission/config/types/PermissionConfig'\n\n/**\n * One entry per system. Shared `loading` and `initialized` flags break with parallel fetches.\n * The first fetch to finish would clear the flag for all, and a failure without `finally` would leave it set forever.\n */\nexport interface PermissionConfigEntry {\n  config: PermissionConfig\n  loading: boolean\n  initialized: boolean\n}\n\nexport const usePermissionConfigStore = defineStore('commonAdminPermissionConfigStore', () => {\n  const { createPermissionConfig } = usePermissionConfigFactory()\n\n  const entries = ref(new Map<string, PermissionConfigEntry>())\n\n  const emptyEntry = (): PermissionConfigEntry => ({\n    config: createPermissionConfig(),\n    loading: false,\n    initialized: false,\n  })\n\n  /**\n   * Never returns undefined, so a template can read `.config` before the first fetch.\n   * The empty config is a fresh object per call. The editor writes into\n   * it, so a shared constant would be shared across unanswered systems.\n   */\n  function getEntry(system: string): PermissionConfigEntry {\n    return entries.value.get(system) ?? emptyEntry()\n  }\n\n  function setLoading(system: string, loading: boolean) {\n    const entry = entries.value.get(system) ?? emptyEntry()\n    entries.value.set(system, { ...entry, loading })\n  }\n\n  function setConfig(system: string, config: PermissionConfig) {\n    const entry = entries.value.get(system) ?? emptyEntry()\n    entries.value.set(system, { ...entry, config, initialized: true })\n  }\n\n  /** Drops one system, leaving the others loaded. Used when a system's client is swapped out. */\n  function resetSystem(system: string) {\n    entries.value.delete(system)\n  }\n\n  function reset() {\n    entries.value = new Map()\n  }\n\n  return {\n    entries,\n    getEntry,\n    setLoading,\n    setConfig,\n    resetSystem,\n    reset,\n  }\n})\n\nif (import.meta.hot) {\n  import.meta.hot.accept(acceptHMRUpdate(usePermissionConfigStore, import.meta.hot))\n}\n"],"mappings":";;;;AAeA,IAAaA,IAA2BC,EAAY,0CAA0C;CAC5F,IAAM,EAAE,8BAA2BC,EAA2B,GAExDC,IAAUC,kBAAI,IAAI,IAAmC,CAAC,GAEtDC,WAA2C;EAC/C,QAAQC,EAAuB;EAC/B,SAAS;EACT,aAAa;CACf;CAOA,SAASC,EAAS,GAAuC;EACvD,OAAOJ,EAAQ,MAAM,IAAIK,CAAM,KAAKH,EAAW;CACjD;CAEA,SAASI,EAAW,GAAgB,GAAkB;EACpD,IAAMC,IAAQP,EAAQ,MAAM,IAAIK,CAAM,KAAKH,EAAW;EACtD,EAAQ,MAAM,IAAIG,GAAQ;GAAE,GAAGE;GAAO;EAAQ,CAAC;CACjD;CAEA,SAASC,EAAU,GAAgB,GAA0B;EAC3D,IAAMD,IAAQP,EAAQ,MAAM,IAAIK,CAAM,KAAKH,EAAW;EACtD,EAAQ,MAAM,IAAIG,GAAQ;GAAE,GAAGE;GAAO;GAAQ,aAAa;EAAK,CAAC;CACnE;CAGA,SAASE,EAAY,GAAgB;EACnC,EAAQ,MAAM,OAAOJ,CAAM;CAC7B;CAEA,SAASK,IAAQ;EACf,EAAQ,wBAAQ,IAAI,IAAI;CAC1B;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;CACF;AACF,CAAC"}

package/dist/domains/permission/config/types/PermissionConfig.d.ts

@@ -0,0 +1,30 @@
+import { GrantType } from '../../../auth/valueObject/Grant';
+export interface PermissionConfig {
+    roles: string[];
+    defaultGrants: GrantType[];
+    config: {
+        [subject: string]: {
+            [action: string]: {
+                grants?: GrantType[];
+            };
+        };
+    };
+    translation: {
+        subjects: {
+            [subject: string]: {
+                [lang: string]: string;
+            };
+        };
+        actions: {
+            [action: string]: {
+                [lang: string]: string;
+            };
+        };
+        roles: {
+            [role: string]: {
+                [lang: string]: string;
+            };
+        };
+    };
+}
+export type PermissionTranslationGroup = 'subjects' | 'actions' | 'roles';

package/dist/domains/permission/group/api/permissionGroupApi.d.ts

@@ -0,0 +1,32 @@
+import { AxiosClientFn } from '../../../api/utils/client';
+import { PermissionGroup } from '../types/PermissionGroup';
+export declare const PERMISSION_GROUP_ENTITY = "permissionGroup";
+export declare const PERMISSION_GROUP_ENDPOINT = "/adm/v1/permission-group";
+export interface PermissionGroupApiParams {
+    client: AxiosClientFn;
+    /**
+     * Both reach every `useApiRequest` built here, and both must be passed, not assumed.
+     * admin-cms declared `SYSTEM_COMMON` but sent `SYSTEM_CMS` on
+     * one of four calls, reporting two systems for one endpoint.
+     * One file that is told its system cannot have that bug.
+     */
+    system: string;
+    entity?: string;
+    /**
+     * i18n scope for server-side validation failures, separate from which backend answered.
+     * `AnzuApiValidationError` builds `<system>.<entity>.model.<field>` keys. For a component shared by
+     * nine backends the labels are the library's `common.*`; `weather.anzuUser.model.email` does not exist.
+     * Defaults to `common` plus the entity. contentHub passes its own pair to keep its existing keys.
+     */
+    validationSystem?: string;
+    validationEntity?: string;
+    endPoint?: string;
+}
+export declare const usePermissionGroupApi: ({ client, system, entity, validationSystem, validationEntity, endPoint, }: PermissionGroupApiParams) => {
+    useFetchPermissionGroupListByIds: () => import('../../../api/composables/useApiFetchByIds').UseApiFetchByIdsReturnType<PermissionGroup>;
+    useFetchPermissionGroupList: () => import('../../../api/composables/useApiFetchList').UseApiFetchListReturnType<PermissionGroup>;
+    useFetchPermissionGroup: () => import('../../../api/composables/useApiRequest').UseApiRequestReturnType<PermissionGroup, null>;
+    useCreatePermissionGroup: () => import('../../../api/composables/useApiRequest').UseApiRequestReturnType<PermissionGroup, PermissionGroup>;
+    useUpdatePermissionGroup: () => import('../../../api/composables/useApiRequest').UseApiRequestReturnType<PermissionGroup, PermissionGroup>;
+    useDeletePermissionGroup: () => import('../../../api/composables/useApiRequest').UseApiRequestReturnType<void, null>;
+};