@anzusystems/common-admin 2.0.0-rc.1 → 2.0.0-rc.10

package/dist/domains/anzuUser/composables/anzuUserValidations.js

@@ -1,7 +1,7 @@
 import { useValidate as e } from "../../../shared/validators/vuelidate/useValidate.js";
 import { computed as t, toValue as n } from "vue";
 import r from "@vuelidate/core";
-//#region src/domains/anzuUser/composables/anzuUserValidations.ts
+// src/domains/anzuUser/composables/anzuUserValidations.ts
 function i(i, a) {
 	let { email: o, hexColor: s, maxLength: c, minLength: l, required: u } = e(), d = t(() => {
 		let e = n(a.required) ? { required: u } : {};
@@ -44,7 +44,6 @@ function i(i, a) {
 	});
 	return { v$: r(d, { user: i }, a.scope === void 0 ? void 0 : { $scope: a.scope }) };
 }
-//#endregion
 export { i as useUserMetadataValidation };
 
 //# sourceMappingURL=anzuUserValidations.js.map

package/dist/domains/anzuUser/composables/anzuUserValidations.js.map

@@ -1 +1 @@
-{"version":3,"file":"anzuUserValidations.js","names":["useVuelidate","useUserMetadataValidation","useValidate","rules","computed","requiredWhenProfileSays","toValue","options","maxLength","minLength"],"sources":["../../../../src/domains/anzuUser/composables/anzuUserValidations.ts"],"sourcesContent":["import useVuelidate from '@vuelidate/core'\nimport { computed, toValue, type MaybeRefOrGetter, type Ref } from 'vue'\nimport { useValidate } from '@/shared/validators/vuelidate/useValidate'\nimport type { BaseUser } from '@/shared/types/AnzuUser'\n\nexport interface UserMetadataValidationOptions {\n  /**\n   * The system's profile (`requiredMetadata` on its descriptor). `false` requires only the\n   * e-mail; `true` also requires first name, last name, full name, avatar text and avatar colour.\n   * It applies the same way to creating and to editing -- within a system it is one rule.\n   */\n  required: MaybeRefOrGetter<boolean>\n  /** Whether the id is a field at all. When it is, and this is a create, it is required. */\n  idInput: MaybeRefOrGetter<boolean>\n  isEdit: MaybeRefOrGetter<boolean>\n  /** Scope key, so an owning form can validate its own fields alongside the app's system fields. */\n  scope?: string | symbol | false\n}\n\n/**\n * The `BaseUserDto` rules, per profile.\n *\n * The lengths come from the backend constraints (`email` 256, first/last 120, full 242, avatar\n * text 2-3). The backend requires only the e-mail; the front end is deliberately stricter, and\n * `requiredMetadata` is what says by how much.\n */\nexport function useUserMetadataValidation(user: Ref<BaseUser>, options: UserMetadataValidationOptions) {\n  const { email, hexColor, maxLength, minLength, required } = useValidate()\n\n  const rules = computed(() => {\n    // Read inside the computed, not once at setup: the \"not found anywhere\" dialog switches the\n    // target system under a mounted form, and a profile captured at mount would go on applying the\n    // first system's rules to all the others.\n    const requiredWhenProfileSays = toValue(options.required) ? { required } : {}\n\n    return {\n      user: {\n        // Only on a create, and only where the id is typed at all: on an edit it is a primary key\n        // being displayed, and in cms the backend resolves it from SSO.\n        id: toValue(options.idInput) && !toValue(options.isEdit) ? { required } : {},\n        email: {\n          required,\n          email,\n          maxLength: maxLength(256),\n        },\n        person: {\n          firstName: { ...requiredWhenProfileSays, minLength: minLength(2), maxLength: maxLength(120) },\n          lastName: { ...requiredWhenProfileSays, minLength: minLength(2), maxLength: maxLength(120) },\n          fullName: { ...requiredWhenProfileSays, minLength: minLength(3), maxLength: maxLength(242) },\n        },\n        avatar: {\n          // Shape, not length: `minLength(7)` lets `#GGGGGG` through and the server rejects it.\n          // The rule passes an empty value, so a profile that does not require a colour still saves.\n          color: { ...requiredWhenProfileSays, hexColor },\n          text: { ...requiredWhenProfileSays, minLength: minLength(2), maxLength: maxLength(3) },\n        },\n      },\n    }\n  })\n\n  const v$ = useVuelidate(rules, { user }, options.scope === undefined ? undefined : { $scope: options.scope })\n\n  return {\n    v$,\n  }\n}\n"],"mappings":";;;;AA0BA,SAAgBC,EAA0B,GAAqB,GAAwC;CACrG,IAAM,EAAE,UAAO,aAAU,cAAW,cAAW,gBAAaC,EAAY,GAElEC,IAAQC,QAAe;EAI3B,IAAMC,IAA0BC,EAAQC,EAAQ,QAAQ,IAAI,EAAE,YAAS,IAAI,CAAC;EAE5E,OAAO,EACL,MAAM;GAGJ,IAAID,EAAQC,EAAQ,OAAO,KAAK,CAACD,EAAQC,EAAQ,MAAM,IAAI,EAAE,YAAS,IAAI,CAAC;GAC3E,OAAO;IACL;IACA;IACA,WAAWC,EAAU,GAAG;GAC1B;GACA,QAAQ;IACN,WAAW;KAAE,GAAGH;KAAyB,WAAWI,EAAU,CAAC;KAAG,WAAWD,EAAU,GAAG;IAAE;IAC5F,UAAU;KAAE,GAAGH;KAAyB,WAAWI,EAAU,CAAC;KAAG,WAAWD,EAAU,GAAG;IAAE;IAC3F,UAAU;KAAE,GAAGH;KAAyB,WAAWI,EAAU,CAAC;KAAG,WAAWD,EAAU,GAAG;IAAE;GAC7F;GACA,QAAQ;IAGN,OAAO;KAAE,GAAGH;KAAyB;IAAS;IAC9C,MAAM;KAAE,GAAGA;KAAyB,WAAWI,EAAU,CAAC;KAAG,WAAWD,EAAU,CAAC;IAAE;GACvF;EACF,EACF;CACF,CAAC;CAID,OAAO,EACL,IAHSR,EAAaG,GAAO,EAAE,QAAK,GAAGI,EAAQ,UAAU,KAAA,IAAY,KAAA,IAAY,EAAE,QAAQA,EAAQ,MAAM,CAGzG,EACF;AACF"}
+{"version":3,"file":"anzuUserValidations.js","names":["useVuelidate","useUserMetadataValidation","useValidate","rules","computed","requiredWhenProfileSays","toValue","options","maxLength","minLength"],"sources":["../../../../src/domains/anzuUser/composables/anzuUserValidations.ts"],"sourcesContent":["import useVuelidate from '@vuelidate/core'\nimport { computed, toValue, type MaybeRefOrGetter, type Ref } from 'vue'\nimport { useValidate } from '@/shared/validators/vuelidate/useValidate'\nimport type { BaseUser } from '@/shared/types/AnzuUser'\n\nexport interface UserMetadataValidationOptions {\n  /**\n   * The system's profile (`requiredMetadata` on its descriptor). `false` requires only the\n   * e-mail. `true` also requires first, last and full name, avatar text and avatar colour.\n   * It applies equally to create and edit.\n   */\n  required: MaybeRefOrGetter<boolean>\n  /** Whether the id is a field at all. When it is, and this is a create, it is required. */\n  idInput: MaybeRefOrGetter<boolean>\n  isEdit: MaybeRefOrGetter<boolean>\n  /** Scope key, so an owning form can validate its own fields alongside the app's system fields. */\n  scope?: string | symbol | false\n}\n\n/**\n * The `BaseUserDto` rules, per profile.\n * Lengths follow backend constraints (`email` 256, first/last 120, full 242, avatar text 2-3). The\n * backend requires only the e-mail. The front end is deliberately stricter, as set by `requiredMetadata`.\n */\nexport function useUserMetadataValidation(user: Ref<BaseUser>, options: UserMetadataValidationOptions) {\n  const { email, hexColor, maxLength, minLength, required } = useValidate()\n\n  const rules = computed(() => {\n    // Read inside the computed, not at setup. The \"not found anywhere\" dialog switches the target\n    // system under a mounted form, and a profile captured at mount would keep the first system's rules.\n    const requiredWhenProfileSays = toValue(options.required) ? { required } : {}\n\n    return {\n      user: {\n        // Required only on create where the id is typed. On edit it is a\n        // displayed primary key, and in cms the backend resolves it from SSO.\n        id: toValue(options.idInput) && !toValue(options.isEdit) ? { required } : {},\n        email: {\n          required,\n          email,\n          maxLength: maxLength(256),\n        },\n        person: {\n          firstName: { ...requiredWhenProfileSays, minLength: minLength(2), maxLength: maxLength(120) },\n          lastName: { ...requiredWhenProfileSays, minLength: minLength(2), maxLength: maxLength(120) },\n          fullName: { ...requiredWhenProfileSays, minLength: minLength(3), maxLength: maxLength(242) },\n        },\n        avatar: {\n          // Check the shape, not the length: `minLength(7)` accepts `#GGGGGG`, which the server rejects.\n          // `hexColor` passes an empty value, so a profile without a required colour still saves.\n          color: { ...requiredWhenProfileSays, hexColor },\n          text: { ...requiredWhenProfileSays, minLength: minLength(2), maxLength: maxLength(3) },\n        },\n      },\n    }\n  })\n\n  const v$ = useVuelidate(rules, { user }, options.scope === undefined ? undefined : { $scope: options.scope })\n\n  return {\n    v$,\n  }\n}\n"],"mappings":";;;;AAwBA,SAAgBC,EAA0B,GAAqB,GAAwC;CACrG,IAAM,EAAE,UAAO,aAAU,cAAW,cAAW,gBAAaC,EAAY,GAElEC,IAAQC,QAAe;EAG3B,IAAMC,IAA0BC,EAAQC,EAAQ,QAAQ,IAAI,EAAE,YAAS,IAAI,CAAC;EAE5E,OAAO,EACL,MAAM;GAGJ,IAAID,EAAQC,EAAQ,OAAO,KAAK,CAACD,EAAQC,EAAQ,MAAM,IAAI,EAAE,YAAS,IAAI,CAAC;GAC3E,OAAO;IACL;IACA;IACA,WAAWC,EAAU,GAAG;GAC1B;GACA,QAAQ;IACN,WAAW;KAAE,GAAGH;KAAyB,WAAWI,EAAU,CAAC;KAAG,WAAWD,EAAU,GAAG;IAAE;IAC5F,UAAU;KAAE,GAAGH;KAAyB,WAAWI,EAAU,CAAC;KAAG,WAAWD,EAAU,GAAG;IAAE;IAC3F,UAAU;KAAE,GAAGH;KAAyB,WAAWI,EAAU,CAAC;KAAG,WAAWD,EAAU,GAAG;IAAE;GAC7F;GACA,QAAQ;IAGN,OAAO;KAAE,GAAGH;KAAyB;IAAS;IAC9C,MAAM;KAAE,GAAGA;KAAyB,WAAWI,EAAU,CAAC;KAAG,WAAWD,EAAU,CAAC;IAAE;GACvF;EACF,EACF;CACF,CAAC;CAID,OAAO,EACL,IAHSR,EAAaG,GAAO,EAAE,QAAK,GAAGI,EAAQ,UAAU,KAAA,IAAY,KAAA,IAAY,EAAE,QAAQA,EAAQ,MAAM,CAGzG,EACF;AACF"}

package/dist/domains/anzuUser/composables/cachedAnzuUsers.d.ts

@@ -7,9 +7,9 @@ export interface CachedAnzuUsersParams {
     endPoint?: string;
 }
 /**
- * Users of one backend, read from its `/adm/v1/anzu-user` (every backend has it), for an admin that has
- * no user cache of its own for that backend. Returns the names the admins' own `useCachedUsers()` use,
- * so it plugs into `createUserAndTimeTrackingFields` as it is.
+ * Users of one backend, read from its `/adm/v1/anzu-user`, for an admin without its own user cache for that backend.
+ * Returns the same names as the admins' `useCachedUsers()`, so
+ * it plugs into `createUserAndTimeTrackingFields` directly.
  */
 export declare const useCachedAnzuUsers: (params: CachedAnzuUsersParams) => {
     cachedUsers: import('vue').Ref<Map<number, import('../../cached/composables/defineCached').CachedItem<AnzuUserMinimal>>, Map<number, import('../../cached/composables/defineCached').CachedItem<AnzuUserMinimal>>>;

package/dist/domains/anzuUser/composables/cachedAnzuUsers.js

@@ -1,6 +1,6 @@
 import { defineCached as e } from "../../cached/composables/defineCached.js";
 import { useAnzuUserApi as t } from "../api/anzuUserApi.js";
-//#region src/domains/anzuUser/composables/cachedAnzuUsers.ts
+// src/domains/anzuUser/composables/cachedAnzuUsers.ts
 var n = /* @__PURE__ */ new Map(), r = (e) => ({
 	id: e.id ?? 0,
 	email: e.email,
@@ -43,7 +43,6 @@ var n = /* @__PURE__ */ new Map(), r = (e) => ({
 		clearCachedUsers: m
 	};
 };
-//#endregion
 export { o as useCachedAnzuUsers };
 
 //# sourceMappingURL=cachedAnzuUsers.js.map

package/dist/domains/anzuUser/composables/cachedAnzuUsers.js.map

@@ -1 +1 @@
-{"version":3,"file":"cachedAnzuUsers.js","names":["registries","mapFullToMinimal","user","mapIdToMinimal","buildRegistry","useAnzuUserApi","params","defineCached","useFetchAnzuUserListByIds","ids","useCachedAnzuUsers","resolved","registry","cache","fetch","immediateFetch","add","addManual","addManualMinimal","has","get","isLoaded","clear"],"sources":["../../../../src/domains/anzuUser/composables/cachedAnzuUsers.ts"],"sourcesContent":["import { defineCached } from '@/domains/cached/composables/defineCached'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { ANZU_USER_ENDPOINT, ANZU_USER_ENTITY, useAnzuUserApi } from '@/domains/anzuUser/api/anzuUserApi'\nimport type { IntegerId } from '@/shared/types/common'\nimport type { AnzuUser, AnzuUserMinimal } from '@/shared/types/AnzuUser'\n\nexport interface CachedAnzuUsersParams {\n  client: AxiosClientFn\n  system: string\n  entity?: string\n  endPoint?: string\n}\n\ntype Registry = ReturnType<typeof buildRegistry>\n\n/**\n * One cache per system, not one shared by all of them.\n *\n * Every backend keeps its own user table. Ids come from the central login and agree across them, but\n * a user who exists in one backend need not exist in another -- the system accounts of sms-gateway\n * live only there. An admin over several backends that resolved all of them against one table would\n * draw some users as unknown, which is what admin-inhouse did with the weather cache.\n */\nconst registries = new Map<string, Registry>()\n\nconst mapFullToMinimal = (user: AnzuUser): AnzuUserMinimal => ({\n  id: user.id ?? 0,\n  email: user.email,\n  person: user.person,\n  avatar: user.avatar,\n})\n\nconst mapIdToMinimal = (id: IntegerId): AnzuUserMinimal => ({\n  id,\n  email: '',\n  person: { firstName: '', lastName: '', fullName: '' },\n  avatar: { color: '', text: '' },\n})\n\nconst buildRegistry = (params: Required<CachedAnzuUsersParams>) => {\n  const { useFetchAnzuUserListByIds } = useAnzuUserApi(params)\n\n  return defineCached<IntegerId, AnzuUser, AnzuUserMinimal>(\n    mapFullToMinimal,\n    mapIdToMinimal,\n    (ids: IntegerId[]) => useFetchAnzuUserListByIds().execute(ids),\n    'id',\n    1000,\n    // A user missing from the table stays missing: a system user of another backend would otherwise\n    // be asked for on every page that shows it.\n    { retryNotFound: false }\n  )\n}\n\n/**\n * Users of one backend, read from its `/adm/v1/anzu-user` (every backend has it), for an admin that has\n * no user cache of its own for that backend. Returns the names the admins' own `useCachedUsers()` use,\n * so it plugs into `createUserAndTimeTrackingFields` as it is.\n */\nexport const useCachedAnzuUsers = (params: CachedAnzuUsersParams) => {\n  const resolved = {\n    client: params.client,\n    system: params.system,\n    entity: params.entity ?? ANZU_USER_ENTITY,\n    endPoint: params.endPoint ?? ANZU_USER_ENDPOINT,\n  }\n\n  let registry = registries.get(resolved.system)\n  if (!registry) {\n    registry = buildRegistry(resolved)\n    registries.set(resolved.system, registry)\n  }\n\n  const { cache, fetch, immediateFetch, add, addManual, addManualMinimal, has, get, isLoaded, clear } = registry\n\n  return {\n    cachedUsers: cache,\n    fetchCachedUsers: fetch,\n    immediateFetchCachedUsers: immediateFetch,\n    addToCachedUsers: add,\n    addManualToCachedUsers: addManual,\n    addManualMinimalToCachedUsers: addManualMinimal,\n    hasCachedUser: has,\n    getCachedUser: get,\n    isLoadedCachedUser: isLoaded,\n    clearCachedUsers: clear,\n  }\n}\n\n/** Test seam. Registries are module state and would otherwise leak between cases. */\nexport const resetCachedAnzuUserRegistries = () => {\n  registries.clear()\n}\n"],"mappings":";;;AAuBA,IAAMA,oBAAa,IAAI,IAAsB,GAEvCC,KAAoB,OAAqC;CAC7D,IAAIC,EAAK,MAAM;CACf,OAAOA,EAAK;CACZ,QAAQA,EAAK;CACb,QAAQA,EAAK;AACf,IAEMC,KAAkB,OAAoC;CAC1D;CACA,OAAO;CACP,QAAQ;EAAE,WAAW;EAAI,UAAU;EAAI,UAAU;CAAG;CACpD,QAAQ;EAAE,OAAO;EAAI,MAAM;CAAG;AAChC,IAEMC,KAAiB,MAA4C;CACjE,IAAM,EAAE,iCAA8BC,EAAeC,CAAM;CAE3D,OAAOC,EACLN,GACAE,IACC,MAAqBK,EAA0B,CAAC,CAAC,QAAQC,CAAG,GAC7D,MACA,KAGA,EAAE,eAAe,GAAM,CACzB;AACF,GAOaC,KAAsB,MAAkC;CACnE,IAAMC,IAAW;EACf,QAAQL,EAAO;EACf,QAAQA,EAAO;EACf,QAAQA,EAAO,UAAA;EACf,UAAUA,EAAO,YAAA;CACnB,GAEIM,IAAWZ,EAAW,IAAIW,EAAS,MAAM;CAC7C,AAAKC,MACH,IAAWR,EAAcO,CAAQ,GACjCX,EAAW,IAAIW,EAAS,QAAQC,CAAQ;CAG1C,IAAM,EAAE,UAAO,UAAO,mBAAgB,QAAK,cAAW,qBAAkB,QAAK,QAAK,aAAU,aAAUA;CAEtG,OAAO;EACL,aAAaC;EACb,kBAAkBC;EAClB,2BAA2BC;EAC3B,kBAAkBC;EAClB,wBAAwBC;EACxB,+BAA+BC;EAC/B,eAAeC;EACf,eAAeC;EACf,oBAAoBC;EACpB,kBAAkBC;CACpB;AACF"}
+{"version":3,"file":"cachedAnzuUsers.js","names":["registries","mapFullToMinimal","user","mapIdToMinimal","buildRegistry","useAnzuUserApi","params","defineCached","useFetchAnzuUserListByIds","ids","useCachedAnzuUsers","resolved","registry","cache","fetch","immediateFetch","add","addManual","addManualMinimal","has","get","isLoaded","clear"],"sources":["../../../../src/domains/anzuUser/composables/cachedAnzuUsers.ts"],"sourcesContent":["import { defineCached } from '@/domains/cached/composables/defineCached'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport { ANZU_USER_ENDPOINT, ANZU_USER_ENTITY, useAnzuUserApi } from '@/domains/anzuUser/api/anzuUserApi'\nimport type { IntegerId } from '@/shared/types/common'\nimport type { AnzuUser, AnzuUserMinimal } from '@/shared/types/AnzuUser'\n\nexport interface CachedAnzuUsersParams {\n  client: AxiosClientFn\n  system: string\n  entity?: string\n  endPoint?: string\n}\n\ntype Registry = ReturnType<typeof buildRegistry>\n\n/**\n * One cache per system, not one shared cache.\n * Each backend has its own user table. Ids agree across them, but a user may exist in only\n * one backend (sms-gateway system accounts). A shared table would draw such users as unknown.\n */\nconst registries = new Map<string, Registry>()\n\nconst mapFullToMinimal = (user: AnzuUser): AnzuUserMinimal => ({\n  id: user.id ?? 0,\n  email: user.email,\n  person: user.person,\n  avatar: user.avatar,\n})\n\nconst mapIdToMinimal = (id: IntegerId): AnzuUserMinimal => ({\n  id,\n  email: '',\n  person: { firstName: '', lastName: '', fullName: '' },\n  avatar: { color: '', text: '' },\n})\n\nconst buildRegistry = (params: Required<CachedAnzuUsersParams>) => {\n  const { useFetchAnzuUserListByIds } = useAnzuUserApi(params)\n\n  return defineCached<IntegerId, AnzuUser, AnzuUserMinimal>(\n    mapFullToMinimal,\n    mapIdToMinimal,\n    (ids: IntegerId[]) => useFetchAnzuUserListByIds().execute(ids),\n    'id',\n    1000,\n    // A user missing from the table stays missing. Otherwise another\n    // backend's system user would be requested on every page that shows it.\n    { retryNotFound: false }\n  )\n}\n\n/**\n * Users of one backend, read from its `/adm/v1/anzu-user`, for an admin without its own user cache for that backend.\n * Returns the same names as the admins' `useCachedUsers()`, so\n * it plugs into `createUserAndTimeTrackingFields` directly.\n */\nexport const useCachedAnzuUsers = (params: CachedAnzuUsersParams) => {\n  const resolved = {\n    client: params.client,\n    system: params.system,\n    entity: params.entity ?? ANZU_USER_ENTITY,\n    endPoint: params.endPoint ?? ANZU_USER_ENDPOINT,\n  }\n\n  let registry = registries.get(resolved.system)\n  if (!registry) {\n    registry = buildRegistry(resolved)\n    registries.set(resolved.system, registry)\n  }\n\n  const { cache, fetch, immediateFetch, add, addManual, addManualMinimal, has, get, isLoaded, clear } = registry\n\n  return {\n    cachedUsers: cache,\n    fetchCachedUsers: fetch,\n    immediateFetchCachedUsers: immediateFetch,\n    addToCachedUsers: add,\n    addManualToCachedUsers: addManual,\n    addManualMinimalToCachedUsers: addManualMinimal,\n    hasCachedUser: has,\n    getCachedUser: get,\n    isLoadedCachedUser: isLoaded,\n    clearCachedUsers: clear,\n  }\n}\n\n/** Test seam. Registries are module state and would otherwise leak between cases. */\nexport const resetCachedAnzuUserRegistries = () => {\n  registries.clear()\n}\n"],"mappings":";;;AAoBA,IAAMA,oBAAa,IAAI,IAAsB,GAEvCC,KAAoB,OAAqC;CAC7D,IAAIC,EAAK,MAAM;CACf,OAAOA,EAAK;CACZ,QAAQA,EAAK;CACb,QAAQA,EAAK;AACf,IAEMC,KAAkB,OAAoC;CAC1D;CACA,OAAO;CACP,QAAQ;EAAE,WAAW;EAAI,UAAU;EAAI,UAAU;CAAG;CACpD,QAAQ;EAAE,OAAO;EAAI,MAAM;CAAG;AAChC,IAEMC,KAAiB,MAA4C;CACjE,IAAM,EAAE,iCAA8BC,EAAeC,CAAM;CAE3D,OAAOC,EACLN,GACAE,IACC,MAAqBK,EAA0B,CAAC,CAAC,QAAQC,CAAG,GAC7D,MACA,KAGA,EAAE,eAAe,GAAM,CACzB;AACF,GAOaC,KAAsB,MAAkC;CACnE,IAAMC,IAAW;EACf,QAAQL,EAAO;EACf,QAAQA,EAAO;EACf,QAAQA,EAAO,UAAA;EACf,UAAUA,EAAO,YAAA;CACnB,GAEIM,IAAWZ,EAAW,IAAIW,EAAS,MAAM;CAC7C,AAAKC,MACH,IAAWR,EAAcO,CAAQ,GACjCX,EAAW,IAAIW,EAAS,QAAQC,CAAQ;CAG1C,IAAM,EAAE,UAAO,UAAO,mBAAgB,QAAK,cAAW,qBAAkB,QAAK,QAAK,aAAU,aAAUA;CAEtG,OAAO;EACL,aAAaC;EACb,kBAAkBC;EAClB,2BAA2BC;EAC3B,kBAAkBC;EAClB,wBAAwBC;EACxB,+BAA+BC;EAC/B,eAAeC;EACf,eAAeC;EACf,oBAAoBC;EACpB,kBAAkBC;CACpB;AACF"}

package/dist/domains/anzuUser/composables/userCrossSystemSearch.d.ts

@@ -9,10 +9,8 @@ export interface CrossSystemSearchParams {
 export declare const isEmailTerm: (term: string) => boolean;
 /**
  * The cross-system fan-out.
- *
- * No calls to the current-user endpoints go out at all: the buttons in a row are decided by the
- * probe's answer rather than by `<Acl>`, so there is nothing to load nine current users for. The
- * budget is nine calls when searching by id, eighteen when searching by e-mail.
+ * No current-user endpoints are called, because row buttons depend on the
+ * probe's answer, not `<Acl>`. Budget: nine calls by id, eighteen by e-mail.
  */
 export declare const useUserCrossSystemSearch: (params: CrossSystemSearchParams) => {
     search: (term: string) => Promise<boolean>;

package/dist/domains/anzuUser/composables/userCrossSystemSearch.js

@@ -1,14 +1,14 @@
-import { SortOrder as e } from "../../api/types/SortOrder.js";
-import { useApiFetchList as t } from "../../api/composables/useApiFetchList.js";
-import { usePagination as n } from "../../api/composables/pagination.js";
+import { useApiFetchList as e } from "../../api/composables/useApiFetchList.js";
+import { usePagination as t } from "../../api/composables/pagination.js";
+import { SortOrder as n } from "../../api/types/SortOrder.js";
 import { useAnzuUserEmailLookupFilter as r } from "../filter/anzuUserFilter.js";
-import { UserSystemAccess as i, UserSystemLoad as a, UserSystemPresence as o, isAuthoritativelyAbsent as s } from "../utils/userSystemState.js";
-import { CrossSystemPhase as c, useUserCrossSystemStore as l } from "../store/userCrossSystemStore.js";
-import { useUserSystemProbe as u } from "./userSystemProbe.js";
+import { CrossSystemPhase as i, useUserCrossSystemStore as a } from "../store/userCrossSystemStore.js";
+import { useUserSystemProbe as o } from "./userSystemProbe.js";
+import { UserSystemAccess as s, UserSystemLoad as c, UserSystemPresence as l, isAuthoritativelyAbsent as u } from "../utils/userSystemState.js";
 import { computed as d } from "vue";
-//#region src/domains/anzuUser/composables/userCrossSystemSearch.ts
+// src/domains/anzuUser/composables/userCrossSystemSearch.ts
 var f = /^[^\s@]+@[^\s@]+$/, p = (e) => f.test(e.trim()), m = (f) => {
-	let m = l(), { descriptors: h, refreshHook: g } = f, _ = new Map(h.map((e) => [e.system, u({
+	let m = a(), { descriptors: h, refreshHook: g } = f, _ = new Map(h.map((e) => [e.system, o({
 		descriptor: e,
 		refreshHook: g
 	})])), v = 0, y = () => {
@@ -17,19 +17,19 @@ var f = /^[^\s@]+@[^\s@]+$/, p = (e) => f.test(e.trim()), m = (f) => {
 		let r = _.get(e.system);
 		r && (m.patchAxes(e.system, {
 			...r.axes.value,
-			load: a.Loading
+			load: c.Loading
 		}), await r.probe(t), n === v && m.setResult(e.system, {
 			axes: r.axes.value,
 			user: r.user.value
 		}));
 	}, x = async (e) => {
 		let t = ++v;
-		m.resetResults(), m.resolvedId = e, m.phase = c.VerifyingById, await Promise.allSettled(h.map((n) => b(n, e, t))), t === v && (m.phase = c.Done);
+		m.resetResults(), m.resolvedId = e, m.phase = i.VerifyingById, await Promise.allSettled(h.map((n) => b(n, e, t))), t === v && (m.phase = i.Done);
 	}, S = async (i, a) => {
 		if (!i.isEnabled()) return null;
 		let { filterData: o, filterConfig: s } = r();
 		o.email = a;
-		let { pagination: c } = n("id", e.Desc, { rowsPerPage: 1 }), { execute: l } = t({
+		let { pagination: c } = t("id", n.Desc, { rowsPerPage: 1 }), { execute: l } = e({
 			client: i.client,
 			system: i.system,
 			entity: i.entity,
@@ -42,7 +42,7 @@ var f = /^[^\s@]+@[^\s@]+$/, p = (e) => f.test(e.trim()), m = (f) => {
 		}
 	}, C = async (e) => {
 		let t = ++v;
-		m.resetResults(), m.phase = c.MatchingEmail;
+		m.resetResults(), m.phase = i.MatchingEmail;
 		let n = await Promise.all(h.map(async (t) => ({
 			system: t.system,
 			user: await S(t, e)
@@ -50,22 +50,22 @@ var f = /^[^\s@]+@[^\s@]+$/, p = (e) => f.test(e.trim()), m = (f) => {
 		if (t !== v) return;
 		let r = /* @__PURE__ */ new Map();
 		for (let e of n) e.user?.id && r.set(e.system, e.user.id);
-		let s = new Set(r.values());
-		if (s.size > 1) {
-			m.identityConflict = r, m.phase = c.Done;
+		let a = new Set(r.values());
+		if (a.size > 1) {
+			m.identityConflict = r, m.phase = i.Done;
 			for (let e of n) e.user && m.setResult(e.system, {
 				axes: {
-					load: a.Loaded,
-					presence: o.Present,
-					access: i.Ok,
+					load: c.Loaded,
+					presence: l.Present,
+					access: s.Ok,
 					enabled: e.user.enabled
 				},
 				user: e.user
 			});
 			return;
 		}
-		let l = s.values().next().value;
-		l === void 0 ? m.phase = c.Done : await x(l);
+		let o = a.values().next().value;
+		o === void 0 ? m.phase = i.Done : await x(o);
 	};
 	return {
 		search: async (e) => {
@@ -84,12 +84,11 @@ var f = /^[^\s@]+@[^\s@]+$/, p = (e) => f.test(e.trim()), m = (f) => {
 		resultFor: (e) => m.results.get(e),
 		unresolvedSystems: d(() => h.filter((e) => e.isEnabled()).filter((e) => {
 			let t = m.results.get(e.system);
-			return t === void 0 || !s(t.axes);
+			return t === void 0 || !u(t.axes);
 		}).map((e) => e.system)),
 		cancel: y
 	};
 };
-//#endregion
 export { p as isEmailTerm, m as useUserCrossSystemSearch };
 
 //# sourceMappingURL=userCrossSystemSearch.js.map

package/dist/domains/anzuUser/composables/userCrossSystemSearch.js.map

@@ -1 +1 @@
-{"version":3,"file":"userCrossSystemSearch.js","names":["EMAIL_PATTERN","isEmailTerm","term","useUserCrossSystemSearch","store","useUserCrossSystemStore","params","probes","descriptors","descriptor","useUserSystemProbe","generation","cancel","probe","runProbe","UserSystemLoad","id","token","searchById","CrossSystemPhase","lookupByEmail","useAnzuUserEmailLookupFilter","email","usePagination","SortOrder","useApiFetchList","execute","pagination","filterData","filterConfig","searchByEmail","found","ids","row","distinctIds","UserSystemPresence","UserSystemAccess","trimmed","item","system","computed","result","isAuthoritativelyAbsent"],"sources":["../../../../src/domains/anzuUser/composables/userCrossSystemSearch.ts"],"sourcesContent":["import { computed } from 'vue'\nimport { useApiFetchList } from '@/domains/api/composables/useApiFetchList'\nimport { usePagination } from '@/domains/api/composables/pagination'\nimport { SortOrder } from '@/domains/api/types/SortOrder'\nimport { useAnzuUserEmailLookupFilter } from '@/domains/anzuUser/filter/anzuUserFilter'\nimport {\n  CrossSystemPhase,\n  useUserCrossSystemStore,\n  type UserSystemResult,\n} from '@/domains/anzuUser/store/userCrossSystemStore'\nimport type { AnyUserSystemDescriptor } from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport { useUserSystemProbe, type UserSystemRefreshHook } from '@/domains/anzuUser/composables/userSystemProbe'\nimport {\n  isAuthoritativelyAbsent,\n  UserSystemAccess,\n  UserSystemLoad,\n  UserSystemPresence,\n} from '@/domains/anzuUser/utils/userSystemState'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\n\nexport interface CrossSystemSearchParams {\n  descriptors: AnyUserSystemDescriptor[]\n  refreshHook?: UserSystemRefreshHook | undefined\n}\n\nconst EMAIL_PATTERN = /^[^\\s@]+@[^\\s@]+$/\n\nexport const isEmailTerm = (term: string): boolean => EMAIL_PATTERN.test(term.trim())\n\n/**\n * The cross-system fan-out.\n *\n * No calls to the current-user endpoints go out at all: the buttons in a row are decided by the\n * probe's answer rather than by `<Acl>`, so there is nothing to load nine current users for. The\n * budget is nine calls when searching by id, eighteen when searching by e-mail.\n */\nexport const useUserCrossSystemSearch = (params: CrossSystemSearchParams) => {\n  const store = useUserCrossSystemStore()\n  const { descriptors, refreshHook } = params\n\n  // One probe instance per system, built once: each keeps its own abort token, and rebuilding them\n  // per search would lose the ability to invalidate what is still in flight.\n  const probes = new Map(\n    descriptors.map((descriptor) => [descriptor.system, useUserSystemProbe({ descriptor, refreshHook })])\n  )\n\n  /**\n   * Every search gets a number. A late answer from the previous one is dropped rather than written\n   * over the results of the search the operator is looking at now.\n   */\n  let generation = 0\n\n  const cancel = () => {\n    generation++\n    probes.forEach((probe) => probe.cancel())\n  }\n\n  const runProbe = async (descriptor: AnyUserSystemDescriptor, id: IntegerId, token: number) => {\n    const probe = probes.get(descriptor.system)\n    if (!probe) return\n    store.patchAxes(descriptor.system, { ...probe.axes.value, load: UserSystemLoad.Loading })\n    await probe.probe(id)\n    if (token !== generation) return\n    store.setResult(descriptor.system, { axes: probe.axes.value, user: probe.user.value })\n  }\n\n  /** Results are written as they arrive, never through `Promise.all`: one dead backend must not hold up the rest. */\n  const searchById = async (id: IntegerId) => {\n    const token = ++generation\n    store.resetResults()\n    store.resolvedId = id\n    store.phase = CrossSystemPhase.VerifyingById\n    await Promise.allSettled(descriptors.map((descriptor) => runProbe(descriptor, id, token)))\n    if (token !== generation) return\n    store.phase = CrossSystemPhase.Done\n  }\n\n  /** Exact match, `filter_eq[email]`, one row. `startsWith` would match a different person. */\n  const lookupByEmail = async (descriptor: AnyUserSystemDescriptor, email: string): Promise<AnzuUser | null> => {\n    if (!descriptor.isEnabled()) return null\n    const { filterData, filterConfig } = useAnzuUserEmailLookupFilter()\n    filterData.email = email\n    // One row: an exact match either exists or does not, and asking for a page of them would only\n    // cost the backend more.\n    const { pagination } = usePagination('id', SortOrder.Desc, { rowsPerPage: 1 })\n\n    const { execute } = useApiFetchList<AnzuUser>({\n      client: descriptor.client,\n      system: descriptor.system,\n      entity: descriptor.entity,\n      urlTemplate: descriptor.endpoints.list,\n    })\n\n    try {\n      const rows = await execute(pagination, filterData, filterConfig)\n      return rows[0] ?? null\n    } catch {\n      // The second round asks every system by id anyway, so a failure here is not a verdict about\n      // that system -- it only means this round could not contribute an id.\n      return null\n    }\n  }\n\n  /**\n   * Two rounds, and the first one must not lie while the second is still running.\n   *\n   * Between them a row is neither present nor absent: showing \"no account here\" in that window\n   * would invite the operator to press Create for an account that does exist under another address.\n   */\n  const searchByEmail = async (email: string) => {\n    const token = ++generation\n    store.resetResults()\n    store.phase = CrossSystemPhase.MatchingEmail\n\n    const found = await Promise.all(\n      descriptors.map(async (descriptor) => ({\n        system: descriptor.system,\n        user: await lookupByEmail(descriptor, email),\n      }))\n    )\n    if (token !== generation) return\n\n    const ids = new Map<string, IntegerId>()\n    for (const row of found) {\n      if (row.user?.id) ids.set(row.system, row.user.id)\n    }\n\n    const distinctIds = new Set(ids.values())\n    if (distinctIds.size > 1) {\n      // The same address under two identities. Bulk actions stop here rather than guessing.\n      store.identityConflict = ids\n      store.phase = CrossSystemPhase.Done\n      for (const row of found) {\n        if (!row.user) continue\n        store.setResult(row.system, {\n          axes: {\n            load: UserSystemLoad.Loaded,\n            presence: UserSystemPresence.Present,\n            access: UserSystemAccess.Ok,\n            enabled: row.user.enabled,\n          },\n          user: row.user,\n        })\n      }\n      return\n    }\n\n    const id = distinctIds.values().next().value\n    if (id === undefined) {\n      // Nobody anywhere under this address. Every row is still unknown rather than absent: an\n      // address search cannot prove absence, only an id search can.\n      store.phase = CrossSystemPhase.Done\n      return\n    }\n\n    await searchById(id)\n  }\n\n  /**\n   * Runs the fan-out, and answers whether it ran at all.\n   *\n   * A term that is neither an address nor an id has to clear the screen rather than be ignored.\n   * The rows left standing are live: their buttons and all three bulk actions write to\n   * `resolvedId`, which is still the previous person, while the box above them now holds a name\n   * that was never searched for. The plan expects this operator -- the one who knows only a\n   * surname -- so the answer has to be an empty result, not the last one.\n   */\n  const search = async (term: string): Promise<boolean> => {\n    const trimmed = term.trim()\n    if (trimmed.length === 0) return false\n    store.searchTerm = trimmed\n    if (isEmailTerm(trimmed)) {\n      await searchByEmail(trimmed)\n      return true\n    }\n    const id = Number(trimmed)\n    if (!Number.isInteger(id) || id <= 0) {\n      cancel()\n      store.resetResults()\n      store.termRejected = true\n      return false\n    }\n    await searchById(id)\n    return true\n  }\n\n  /** Re-reads one system after a write, so the row stops showing what it showed before it. */\n  const refreshSystem = async (system: string) => {\n    const descriptor = descriptors.find((item) => item.system === system)\n    const id = store.resolvedId\n    if (!descriptor || id === null) return\n    await runProbe(descriptor, id, generation)\n  }\n\n  const resultFor = (system: string): UserSystemResult | undefined => store.results.get(system)\n\n  /**\n   * Whether creating an account may be offered when nobody was found.\n   *\n   * Only when every relevant probe answered an authoritative 404. A 401, a 403 or a timeout means\n   * the record could not be read, which is not the same as not existing -- and a duplicate identity\n   * cannot be taken back.\n   */\n  const unresolvedSystems = computed(() =>\n    descriptors\n      .filter((descriptor) => descriptor.isEnabled())\n      .filter((descriptor) => {\n        const result = store.results.get(descriptor.system)\n        return result === undefined || !isAuthoritativelyAbsent(result.axes)\n      })\n      .map((descriptor) => descriptor.system)\n  )\n\n  return {\n    search,\n    searchById,\n    searchByEmail,\n    refreshSystem,\n    resultFor,\n    unresolvedSystems,\n    cancel,\n  }\n}\n"],"mappings":";;;;;;;;;AA0BA,IAAMA,IAAgB,qBAETC,KAAe,MAA0BD,EAAc,KAAKE,EAAK,KAAK,CAAC,GASvEC,KAA4B,MAAoC;CAC3E,IAAMC,IAAQC,EAAwB,GAChC,EAAE,gBAAa,mBAAgBC,GAI/BC,IAAS,IAAI,IACjBC,EAAY,KAAK,MAAe,CAACC,EAAW,QAAQC,EAAmB;EAAE;EAAY;CAAY,CAAC,CAAC,CAAC,CACtG,GAMIC,IAAa,GAEXC,UAAe;EAEnB,AADA,KACAL,EAAO,SAAS,MAAUM,EAAM,OAAO,CAAC;CAC1C,GAEMC,IAAW,OAAO,GAAqC,GAAe,MAAkB;EAC5F,IAAMD,IAAQN,EAAO,IAAIE,EAAW,MAAM;EAC1C,AAAKI,MACLT,EAAM,UAAUK,EAAW,QAAQ;GAAE,GAAGI,EAAM,KAAK;GAAO,MAAME,EAAe;EAAQ,CAAC,GACxF,MAAMF,EAAM,MAAMG,CAAE,GAChBC,MAAUN,KACdP,EAAM,UAAUK,EAAW,QAAQ;GAAE,MAAMI,EAAM,KAAK;GAAO,MAAMA,EAAM,KAAK;EAAM,CAAC;CACvF,GAGMK,IAAa,OAAO,MAAkB;EAC1C,IAAMD,IAAQ,EAAEN;EAKhB,AAJAP,EAAM,aAAa,GACnB,EAAM,aAAaY,GACnB,EAAM,QAAQG,EAAiB,eAC/B,MAAM,QAAQ,WAAWX,EAAY,KAAK,MAAeM,EAASL,GAAYO,GAAIC,CAAK,CAAC,CAAC,GACrFA,MAAUN,MACd,EAAM,QAAQQ,EAAiB;CACjC,GAGMC,IAAgB,OAAO,GAAqC,MAA4C;EAC5G,IAAI,CAACX,EAAW,UAAU,GAAG,OAAO;EACpC,IAAM,EAAE,eAAY,oBAAiBY,EAA6B;EAClE,EAAW,QAAQC;EAGnB,IAAM,EAAE,kBAAeC,EAAc,MAAMC,EAAU,MAAM,EAAE,aAAa,EAAE,CAAC,GAEvE,EAAE,eAAYC,EAA0B;GAC5C,QAAQhB,EAAW;GACnB,QAAQA,EAAW;GACnB,QAAQA,EAAW;GACnB,aAAaA,EAAW,UAAU;EACpC,CAAC;EAED,IAAI;GAEF,QAAO,MADYiB,EAAQC,GAAYC,GAAYC,CAAY,EAAA,CACnD,MAAM;EACpB,QAAQ;GAGN,OAAO;EACT;CACF,GAQMC,IAAgB,OAAO,MAAkB;EAC7C,IAAMb,IAAQ,EAAEN;EAEhB,AADAP,EAAM,aAAa,GACnB,EAAM,QAAQe,EAAiB;EAE/B,IAAMY,IAAQ,MAAM,QAAQ,IAC1BvB,EAAY,IAAI,OAAO,OAAgB;GACrC,QAAQC,EAAW;GACnB,MAAM,MAAMW,EAAcX,GAAYa,CAAK;EAC7C,EAAE,CACJ;EACA,IAAIL,MAAUN,GAAY;EAE1B,IAAMqB,oBAAM,IAAI,IAAuB;EACvC,KAAK,IAAMC,KAAOF,GAChB,AAAIE,EAAI,MAAM,MAAID,EAAI,IAAIC,EAAI,QAAQA,EAAI,KAAK,EAAE;EAGnD,IAAMC,IAAc,IAAI,IAAIF,EAAI,OAAO,CAAC;EACxC,IAAIE,EAAY,OAAO,GAAG;GAGxB,AADA,EAAM,mBAAmBF,GACzB,EAAM,QAAQb,EAAiB;GAC/B,KAAK,IAAMc,KAAOF,GAChB,AAAKE,EAAI,QACT7B,EAAM,UAAU6B,EAAI,QAAQ;IAC1B,MAAM;KACJ,MAAMlB,EAAe;KACrB,UAAUoB,EAAmB;KAC7B,QAAQC,EAAiB;KACzB,SAASH,EAAI,KAAK;IACpB;IACA,MAAMA,EAAI;GACZ,CAAC;GAEH;EACF;EAEA,IAAMjB,IAAKkB,EAAY,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC;EACvC,AAAIlB,MAAO,KAAA,IAGT,EAAM,QAAQG,EAAiB,OAIjC,MAAMD,EAAWF,CAAE;CACrB;CAyDA,OAAO;EACL,eA/CoB,MAAmC;GACvD,IAAMqB,IAAUnC,EAAK,KAAK;GAC1B,IAAImC,EAAQ,WAAW,GAAG,OAAO;GAEjC,IADA,EAAM,aAAaA,GACfpC,EAAYoC,CAAO,GAErB,OADA,MAAMP,EAAcO,CAAO,GACpB;GAET,IAAMrB,IAAK,OAAOqB,CAAO;GAQzB,OAPI,CAAC,OAAO,UAAUrB,CAAE,KAAKA,KAAM,KACjCJ,EAAO,GACPR,EAAM,aAAa,GACnB,EAAM,eAAe,IACd,OAET,MAAMc,EAAWF,CAAE,GACZ;EACT;EA+BE;EACA;EACA,sBA9B2B,MAAmB;GAC9C,IAAMP,IAAaD,EAAY,MAAM,MAAS8B,EAAK,WAAWC,CAAM,GAC9DvB,IAAKZ,EAAM;GACjB,AAAKK,KAAcO,MAAO,QAC1B,MAAMF,EAASL,GAAYO,GAAIL,CAAU;EAC3C;EA0BE,YAxBiB,MAAiDP,EAAM,QAAQ,IAAImC,CAAM;EAyB1F,mBAhBwBC,QACxBhC,EACG,QAAQ,MAAeC,EAAW,UAAU,CAAC,CAAC,CAC9C,QAAQ,MAAe;GACtB,IAAMgC,IAASrC,EAAM,QAAQ,IAAIK,EAAW,MAAM;GAClD,OAAOgC,MAAW,KAAA,KAAa,CAACC,EAAwBD,EAAO,IAAI;EACrE,CAAC,CAAC,CACD,KAAK,MAAehC,EAAW,MAAM,CASxC;EACA;CACF;AACF"}
+{"version":3,"file":"userCrossSystemSearch.js","names":["EMAIL_PATTERN","isEmailTerm","term","useUserCrossSystemSearch","store","useUserCrossSystemStore","params","probes","descriptors","descriptor","useUserSystemProbe","generation","cancel","probe","runProbe","UserSystemLoad","id","token","searchById","CrossSystemPhase","lookupByEmail","useAnzuUserEmailLookupFilter","email","usePagination","SortOrder","useApiFetchList","execute","pagination","filterData","filterConfig","searchByEmail","found","ids","row","distinctIds","UserSystemPresence","UserSystemAccess","trimmed","item","system","computed","result","isAuthoritativelyAbsent"],"sources":["../../../../src/domains/anzuUser/composables/userCrossSystemSearch.ts"],"sourcesContent":["import { computed } from 'vue'\nimport { useApiFetchList } from '@/domains/api/composables/useApiFetchList'\nimport { usePagination } from '@/domains/api/composables/pagination'\nimport { SortOrder } from '@/domains/api/types/SortOrder'\nimport { useAnzuUserEmailLookupFilter } from '@/domains/anzuUser/filter/anzuUserFilter'\nimport {\n  CrossSystemPhase,\n  useUserCrossSystemStore,\n  type UserSystemResult,\n} from '@/domains/anzuUser/store/userCrossSystemStore'\nimport type { AnyUserSystemDescriptor } from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport { useUserSystemProbe, type UserSystemRefreshHook } from '@/domains/anzuUser/composables/userSystemProbe'\nimport {\n  isAuthoritativelyAbsent,\n  UserSystemAccess,\n  UserSystemLoad,\n  UserSystemPresence,\n} from '@/domains/anzuUser/utils/userSystemState'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\n\nexport interface CrossSystemSearchParams {\n  descriptors: AnyUserSystemDescriptor[]\n  refreshHook?: UserSystemRefreshHook | undefined\n}\n\nconst EMAIL_PATTERN = /^[^\\s@]+@[^\\s@]+$/\n\nexport const isEmailTerm = (term: string): boolean => EMAIL_PATTERN.test(term.trim())\n\n/**\n * The cross-system fan-out.\n * No current-user endpoints are called, because row buttons depend on the\n * probe's answer, not `<Acl>`. Budget: nine calls by id, eighteen by e-mail.\n */\nexport const useUserCrossSystemSearch = (params: CrossSystemSearchParams) => {\n  const store = useUserCrossSystemStore()\n  const { descriptors, refreshHook } = params\n\n  // One probe per system, built once. Each keeps its own abort token, and\n  // rebuilding per search would lose the ability to invalidate in-flight requests.\n  const probes = new Map(\n    descriptors.map((descriptor) => [descriptor.system, useUserSystemProbe({ descriptor, refreshHook })])\n  )\n\n  /**\n   * Each search gets a number. A late answer from an older search\n   * is dropped instead of overwriting the current results.\n   */\n  let generation = 0\n\n  const cancel = () => {\n    generation++\n    probes.forEach((probe) => probe.cancel())\n  }\n\n  const runProbe = async (descriptor: AnyUserSystemDescriptor, id: IntegerId, token: number) => {\n    const probe = probes.get(descriptor.system)\n    if (!probe) return\n    store.patchAxes(descriptor.system, { ...probe.axes.value, load: UserSystemLoad.Loading })\n    await probe.probe(id)\n    if (token !== generation) return\n    store.setResult(descriptor.system, { axes: probe.axes.value, user: probe.user.value })\n  }\n\n  /** Results are written as they arrive, never through `Promise.all`: one dead backend must not hold up the rest. */\n  const searchById = async (id: IntegerId) => {\n    const token = ++generation\n    store.resetResults()\n    store.resolvedId = id\n    store.phase = CrossSystemPhase.VerifyingById\n    await Promise.allSettled(descriptors.map((descriptor) => runProbe(descriptor, id, token)))\n    if (token !== generation) return\n    store.phase = CrossSystemPhase.Done\n  }\n\n  /** Exact match, `filter_eq[email]`, one row. `startsWith` would match a different person. */\n  const lookupByEmail = async (descriptor: AnyUserSystemDescriptor, email: string): Promise<AnzuUser | null> => {\n    if (!descriptor.isEnabled()) return null\n    const { filterData, filterConfig } = useAnzuUserEmailLookupFilter()\n    filterData.email = email\n    // One row is enough: an exact match either exists or does not.\n    const { pagination } = usePagination('id', SortOrder.Desc, { rowsPerPage: 1 })\n\n    const { execute } = useApiFetchList<AnzuUser>({\n      client: descriptor.client,\n      system: descriptor.system,\n      entity: descriptor.entity,\n      urlTemplate: descriptor.endpoints.list,\n    })\n\n    try {\n      const rows = await execute(pagination, filterData, filterConfig)\n      return rows[0] ?? null\n    } catch {\n      // The second round asks every system by id anyway.\n      // A failure here only means this round found no id. It is not a verdict about the system.\n      return null\n    }\n  }\n\n  /**\n   * Two rounds. Between them a row is neither present nor absent.\n   * Showing \"no account here\" in that window would invite Create for an account that exists under another address.\n   */\n  const searchByEmail = async (email: string) => {\n    const token = ++generation\n    store.resetResults()\n    store.phase = CrossSystemPhase.MatchingEmail\n\n    const found = await Promise.all(\n      descriptors.map(async (descriptor) => ({\n        system: descriptor.system,\n        user: await lookupByEmail(descriptor, email),\n      }))\n    )\n    if (token !== generation) return\n\n    const ids = new Map<string, IntegerId>()\n    for (const row of found) {\n      if (row.user?.id) ids.set(row.system, row.user.id)\n    }\n\n    const distinctIds = new Set(ids.values())\n    if (distinctIds.size > 1) {\n      // The same address under two identities. Bulk actions stop here instead of guessing.\n      store.identityConflict = ids\n      store.phase = CrossSystemPhase.Done\n      for (const row of found) {\n        if (!row.user) continue\n        store.setResult(row.system, {\n          axes: {\n            load: UserSystemLoad.Loaded,\n            presence: UserSystemPresence.Present,\n            access: UserSystemAccess.Ok,\n            enabled: row.user.enabled,\n          },\n          user: row.user,\n        })\n      }\n      return\n    }\n\n    const id = distinctIds.values().next().value\n    if (id === undefined) {\n      // Rows stay unknown, not absent. An address search cannot prove absence, only an id search can.\n      store.phase = CrossSystemPhase.Done\n      return\n    }\n\n    await searchById(id)\n  }\n\n  /**\n   * Runs the fan-out and returns whether it ran.\n   * A term that is neither an address nor an id clears the results.\n   * Stale rows stay live: their buttons and bulk actions write to `resolvedId`, the previous person.\n   */\n  const search = async (term: string): Promise<boolean> => {\n    const trimmed = term.trim()\n    if (trimmed.length === 0) return false\n    store.searchTerm = trimmed\n    if (isEmailTerm(trimmed)) {\n      await searchByEmail(trimmed)\n      return true\n    }\n    const id = Number(trimmed)\n    if (!Number.isInteger(id) || id <= 0) {\n      cancel()\n      store.resetResults()\n      store.termRejected = true\n      return false\n    }\n    await searchById(id)\n    return true\n  }\n\n  /** Re-reads one system after a write so the row shows the new state. */\n  const refreshSystem = async (system: string) => {\n    const descriptor = descriptors.find((item) => item.system === system)\n    const id = store.resolvedId\n    if (!descriptor || id === null) return\n    await runProbe(descriptor, id, generation)\n  }\n\n  const resultFor = (system: string): UserSystemResult | undefined => store.results.get(system)\n\n  /**\n   * Create is offered only when every relevant probe answered an authoritative 404.\n   * A 401, 403 or timeout means the record could not be read, not that it is missing.\n   * A duplicate identity cannot be undone.\n   */\n  const unresolvedSystems = computed(() =>\n    descriptors\n      .filter((descriptor) => descriptor.isEnabled())\n      .filter((descriptor) => {\n        const result = store.results.get(descriptor.system)\n        return result === undefined || !isAuthoritativelyAbsent(result.axes)\n      })\n      .map((descriptor) => descriptor.system)\n  )\n\n  return {\n    search,\n    searchById,\n    searchByEmail,\n    refreshSystem,\n    resultFor,\n    unresolvedSystems,\n    cancel,\n  }\n}\n"],"mappings":";;;;;;;;;AA0BA,IAAMA,IAAgB,qBAETC,KAAe,MAA0BD,EAAc,KAAKE,EAAK,KAAK,CAAC,GAOvEC,KAA4B,MAAoC;CAC3E,IAAMC,IAAQC,EAAwB,GAChC,EAAE,gBAAa,mBAAgBC,GAI/BC,IAAS,IAAI,IACjBC,EAAY,KAAK,MAAe,CAACC,EAAW,QAAQC,EAAmB;EAAE;EAAY;CAAY,CAAC,CAAC,CAAC,CACtG,GAMIC,IAAa,GAEXC,UAAe;EAEnB,AADA,KACAL,EAAO,SAAS,MAAUM,EAAM,OAAO,CAAC;CAC1C,GAEMC,IAAW,OAAO,GAAqC,GAAe,MAAkB;EAC5F,IAAMD,IAAQN,EAAO,IAAIE,EAAW,MAAM;EAC1C,AAAKI,MACLT,EAAM,UAAUK,EAAW,QAAQ;GAAE,GAAGI,EAAM,KAAK;GAAO,MAAME,EAAe;EAAQ,CAAC,GACxF,MAAMF,EAAM,MAAMG,CAAE,GAChBC,MAAUN,KACdP,EAAM,UAAUK,EAAW,QAAQ;GAAE,MAAMI,EAAM,KAAK;GAAO,MAAMA,EAAM,KAAK;EAAM,CAAC;CACvF,GAGMK,IAAa,OAAO,MAAkB;EAC1C,IAAMD,IAAQ,EAAEN;EAKhB,AAJAP,EAAM,aAAa,GACnB,EAAM,aAAaY,GACnB,EAAM,QAAQG,EAAiB,eAC/B,MAAM,QAAQ,WAAWX,EAAY,KAAK,MAAeM,EAASL,GAAYO,GAAIC,CAAK,CAAC,CAAC,GACrFA,MAAUN,MACd,EAAM,QAAQQ,EAAiB;CACjC,GAGMC,IAAgB,OAAO,GAAqC,MAA4C;EAC5G,IAAI,CAACX,EAAW,UAAU,GAAG,OAAO;EACpC,IAAM,EAAE,eAAY,oBAAiBY,EAA6B;EAClE,EAAW,QAAQC;EAEnB,IAAM,EAAE,kBAAeC,EAAc,MAAMC,EAAU,MAAM,EAAE,aAAa,EAAE,CAAC,GAEvE,EAAE,eAAYC,EAA0B;GAC5C,QAAQhB,EAAW;GACnB,QAAQA,EAAW;GACnB,QAAQA,EAAW;GACnB,aAAaA,EAAW,UAAU;EACpC,CAAC;EAED,IAAI;GAEF,QAAO,MADYiB,EAAQC,GAAYC,GAAYC,CAAY,EAAA,CACnD,MAAM;EACpB,QAAQ;GAGN,OAAO;EACT;CACF,GAMMC,IAAgB,OAAO,MAAkB;EAC7C,IAAMb,IAAQ,EAAEN;EAEhB,AADAP,EAAM,aAAa,GACnB,EAAM,QAAQe,EAAiB;EAE/B,IAAMY,IAAQ,MAAM,QAAQ,IAC1BvB,EAAY,IAAI,OAAO,OAAgB;GACrC,QAAQC,EAAW;GACnB,MAAM,MAAMW,EAAcX,GAAYa,CAAK;EAC7C,EAAE,CACJ;EACA,IAAIL,MAAUN,GAAY;EAE1B,IAAMqB,oBAAM,IAAI,IAAuB;EACvC,KAAK,IAAMC,KAAOF,GAChB,AAAIE,EAAI,MAAM,MAAID,EAAI,IAAIC,EAAI,QAAQA,EAAI,KAAK,EAAE;EAGnD,IAAMC,IAAc,IAAI,IAAIF,EAAI,OAAO,CAAC;EACxC,IAAIE,EAAY,OAAO,GAAG;GAGxB,AADA,EAAM,mBAAmBF,GACzB,EAAM,QAAQb,EAAiB;GAC/B,KAAK,IAAMc,KAAOF,GAChB,AAAKE,EAAI,QACT7B,EAAM,UAAU6B,EAAI,QAAQ;IAC1B,MAAM;KACJ,MAAMlB,EAAe;KACrB,UAAUoB,EAAmB;KAC7B,QAAQC,EAAiB;KACzB,SAASH,EAAI,KAAK;IACpB;IACA,MAAMA,EAAI;GACZ,CAAC;GAEH;EACF;EAEA,IAAMjB,IAAKkB,EAAY,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC;EACvC,AAAIlB,MAAO,KAAA,IAET,EAAM,QAAQG,EAAiB,OAIjC,MAAMD,EAAWF,CAAE;CACrB;CAmDA,OAAO;EACL,eA7CoB,MAAmC;GACvD,IAAMqB,IAAUnC,EAAK,KAAK;GAC1B,IAAImC,EAAQ,WAAW,GAAG,OAAO;GAEjC,IADA,EAAM,aAAaA,GACfpC,EAAYoC,CAAO,GAErB,OADA,MAAMP,EAAcO,CAAO,GACpB;GAET,IAAMrB,IAAK,OAAOqB,CAAO;GAQzB,OAPI,CAAC,OAAO,UAAUrB,CAAE,KAAKA,KAAM,KACjCJ,EAAO,GACPR,EAAM,aAAa,GACnB,EAAM,eAAe,IACd,OAET,MAAMc,EAAWF,CAAE,GACZ;EACT;EA6BE;EACA;EACA,sBA5B2B,MAAmB;GAC9C,IAAMP,IAAaD,EAAY,MAAM,MAAS8B,EAAK,WAAWC,CAAM,GAC9DvB,IAAKZ,EAAM;GACjB,AAAKK,KAAcO,MAAO,QAC1B,MAAMF,EAASL,GAAYO,GAAIL,CAAU;EAC3C;EAwBE,YAtBiB,MAAiDP,EAAM,QAAQ,IAAImC,CAAM;EAuB1F,mBAhBwBC,QACxBhC,EACG,QAAQ,MAAeC,EAAW,UAAU,CAAC,CAAC,CAC9C,QAAQ,MAAe;GACtB,IAAMgC,IAASrC,EAAM,QAAQ,IAAIK,EAAW,MAAM;GAClD,OAAOgC,MAAW,KAAA,KAAa,CAACC,EAAwBD,EAAO,IAAI;EACrE,CAAC,CAAC,CACD,KAAK,MAAehC,EAAW,MAAM,CASxC;EACA;CACF;AACF"}

package/dist/domains/anzuUser/composables/userCrossSystemWrites.d.ts

@@ -5,24 +5,18 @@ import { AnzuUser, BaseUser } from '../../../shared/types/AnzuUser';
 import { IntegerId } from '../../../shared/types/common';
 export interface WriteResult {
     outcome: BulkOutcomeType;
-    /** What the server holds afterwards, when it answered with the record. */
+    /** The server's record after the write, when it returned one. */
     user?: AnzuUser;
     /**
-     * Fields whose stored value had moved away from both the target and what the search saw.
-     *
-     * The write still goes through -- decision 24 says the operator's value wins -- but somebody
-     * edited the record in between, and the log line says so rather than letting it pass unnoticed.
+     * Fields whose stored value differed from both the target and what the search saw.
+     * The write still goes through (decision 24: the operator's value wins). The log reports the concurrent edit.
      */
     concurrentFields?: UserMetadataField[];
     detail?: string;
 }
 /**
- * What the operator is told about a failed write.
- *
- * 422 and 400 are their own line and not a generic failure: a PUT validates the whole body, and an
- * account carrying a colour or an e-mail that no longer passes validation will fail even on a plain
- * "disable". With legacy data that is an ordinary outcome, and "could not be saved" would send
- * somebody looking for a bug that is not there.
+ * 422 and 400 get their own outcome. A PUT validates the whole body.
+ * Legacy data that no longer validates fails even a plain disable. That is not a bug.
  */
 export declare const classifyWriteStatus: (status: number | null) => BulkOutcomeType;
 export declare const useUserCrossSystemWrites: () => {

package/dist/domains/anzuUser/composables/userCrossSystemWrites.js

@@ -1,87 +1,87 @@
-import { cloneDeep as e, isNull as t } from "../../../shared/utils/common.js";
+import { useApiRequest as e } from "../../api/composables/useApiRequest.js";
 import "../../../shared/statusCodes.js";
-import { useApiRequest as n } from "../../api/composables/useApiRequest.js";
-import { descriptorMayWrite as r, resolveCreateEndpoint as i, resolveEnabledWrite as a, resolveMetadataWrite as o } from "./userSystemDescriptor.js";
-import { BulkOutcome as s } from "../store/userCrossSystemStore.js";
-import { probeStatusFromError as c } from "./userSystemProbe.js";
-import { USER_METADATA_FIELDS as l, readMetadataField as u, writeMetadataField as d } from "../utils/userMetadataDiff.js";
-//#region src/domains/anzuUser/composables/userCrossSystemWrites.ts
-var f = (e) => e === null ? s.Unavailable : e === 403 ? s.Forbidden : e === 401 ? s.Unauthenticated : e === 404 ? s.NotFound : e === 422 || e === 400 ? s.Invalid : s.Unavailable, p = (e, t, r) => n({
-	client: e.client,
-	method: t,
-	system: e.system,
-	entity: e.entity,
+import { descriptorMayWrite as t, resolveCreateEndpoint as n, resolveEnabledWrite as r, resolveMetadataWrite as i } from "./userSystemDescriptor.js";
+import { BulkOutcome as a } from "../store/userCrossSystemStore.js";
+import { probeStatusFromError as o } from "./userSystemProbe.js";
+import { USER_METADATA_FIELDS as s, readMetadataField as c, writeMetadataField as l } from "../utils/userMetadataDiff.js";
+import { cloneDeep as u, isNull as d } from "../../../shared/utils/common.js";
+// src/domains/anzuUser/composables/userCrossSystemWrites.ts
+var f = (e) => e === null ? a.Unavailable : e === 403 ? a.Forbidden : e === 401 ? a.Unauthenticated : e === 404 ? a.NotFound : e === 422 || e === 400 ? a.Invalid : a.Unavailable, p = (t, n, r) => e({
+	client: t.client,
+	method: n,
+	system: t.system,
+	entity: t.entity,
 	urlTemplate: r
 }), m = () => ({
-	setEnabled: async (t, n, i) => {
-		let { get: o, url: l } = a(t);
+	setEnabled: async (e, n, i) => {
+		let { get: s, url: c } = r(e);
 		try {
-			let { execute: a } = p(t, "GET", o), c = await a({ urlParams: { id: n } });
-			if (c.enabled === i) return {
-				outcome: s.Done,
-				user: c
+			let { execute: r } = p(e, "GET", s), o = await r({ urlParams: { id: n } });
+			if (o.enabled === i) return {
+				outcome: a.Done,
+				user: o
 			};
-			if (!r(t, "update")) return { outcome: s.Forbidden };
-			let u = e(c);
-			u.enabled = i;
-			let { execute: d } = p(t, "PUT", l), f = await d({
+			if (!t(e, "update")) return { outcome: a.Forbidden };
+			let l = u(o);
+			l.enabled = i;
+			let { execute: d } = p(e, "PUT", c), f = await d({
 				urlParams: { id: n },
-				body: u
+				body: l
 			});
 			return {
-				outcome: s.Done,
+				outcome: a.Done,
 				user: f
 			};
 		} catch (e) {
-			return { outcome: f(c(e)) };
+			return { outcome: f(o(e)) };
 		}
 	},
-	writeMetadata: async (n, i, a, m = l, h = null) => {
-		let { method: g, get: _, url: v } = o(n);
+	writeMetadata: async (e, n, r, m = s, h = null) => {
+		let { method: g, get: _, url: v } = i(e);
 		try {
-			let { execute: o } = p(n, "GET", _), c = await o({ urlParams: { id: i } });
-			if (!m.some((e) => u(c, e) !== u(a, e))) return {
-				outcome: s.Done,
-				user: c,
+			let { execute: i } = p(e, "GET", _), o = await i({ urlParams: { id: n } });
+			if (!m.some((e) => c(o, e) !== c(r, e))) return {
+				outcome: a.Done,
+				user: o,
 				changed: !1
 			};
-			let l = t(h) ? [] : m.filter((e) => u(c, e) !== u(h, e) && u(c, e) !== u(a, e));
-			if (!r(n, "update")) return {
-				outcome: s.Forbidden,
+			let s = d(h) ? [] : m.filter((e) => c(o, e) !== c(h, e) && c(o, e) !== c(r, e));
+			if (!t(e, "update")) return {
+				outcome: a.Forbidden,
 				changed: !1
 			};
-			let f = e(c);
-			m.forEach((e) => d(f, e, u(a, e)));
-			let { execute: y } = p(n, g, v), b = await y({
-				urlParams: { id: i },
+			let f = u(o);
+			m.forEach((e) => l(f, e, c(r, e)));
+			let { execute: y } = p(e, g, v), b = await y({
+				urlParams: { id: n },
 				body: f
 			});
 			return {
-				outcome: s.Done,
+				outcome: a.Done,
 				user: b,
 				changed: !0,
-				concurrentFields: l
+				concurrentFields: s
 			};
 		} catch (e) {
 			return {
-				outcome: f(c(e)),
+				outcome: f(o(e)),
 				changed: !1
 			};
 		}
 	},
 	createInSystem: async (e, t) => {
 		try {
-			let { execute: n } = p(e, "POST", i(e)), r = await n({ body: t });
+			let { execute: r } = p(e, "POST", n(e)), i = await r({ body: t });
 			return {
-				outcome: s.Done,
-				user: r
+				outcome: a.Done,
+				user: i
 			};
 		} catch (e) {
-			return { outcome: f(c(e)) };
+			return { outcome: f(o(e)) };
 		}
 	},
 	readSourceUser: async (e, t) => {
-		let { get: n } = a(e);
+		let { get: n } = r(e);
 		try {
 			let { execute: r } = p(e, "GET", n);
 			return await r({ urlParams: { id: t } });
@@ -90,7 +90,6 @@ var f = (e) => e === null ? s.Unavailable : e === 403 ? s.Forbidden : e === 401
 		}
 	}
 });
-//#endregion
 export { f as classifyWriteStatus, m as useUserCrossSystemWrites };
 
 //# sourceMappingURL=userCrossSystemWrites.js.map

package/dist/domains/anzuUser/composables/userCrossSystemWrites.js.map

@@ -1 +1 @@
-{"version":3,"file":"userCrossSystemWrites.js","names":["classifyWriteStatus","status","BulkOutcome","request","useApiRequest","descriptor","url","useUserCrossSystemWrites","resolveEnabledWrite","read","get","current","enabled","descriptorMayWrite","body","cloneDeep","write","saved","error","probeStatusFromError","USER_METADATA_FIELDS","resolveMetadataWrite","fields","readMetadataField","field","target","concurrentFields","isNull","seen","writeMetadataField","method","resolveCreateEndpoint","created","execute"],"sources":["../../../../src/domains/anzuUser/composables/userCrossSystemWrites.ts"],"sourcesContent":["import { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport { HTTP_STATUS_BAD_REQUEST, HTTP_STATUS_UNPROCESSABLE_ENTITY } from '@/shared/statusCodes'\nimport {\n  type AnyUserSystemDescriptor,\n  descriptorMayWrite,\n  resolveCreateEndpoint,\n  resolveEnabledWrite,\n  resolveMetadataWrite,\n} from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport { BulkOutcome, type BulkOutcomeType } from '@/domains/anzuUser/store/userCrossSystemStore'\nimport { probeStatusFromError } from '@/domains/anzuUser/composables/userSystemProbe'\nimport {\n  readMetadataField,\n  USER_METADATA_FIELDS,\n  writeMetadataField,\n  type UserMetadataField,\n} from '@/domains/anzuUser/utils/userMetadataDiff'\nimport type { AnzuUser, BaseUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\nimport { cloneDeep, isNull } from '@/shared/utils/common'\n\nexport interface WriteResult {\n  outcome: BulkOutcomeType\n  /** What the server holds afterwards, when it answered with the record. */\n  user?: AnzuUser\n  /**\n   * Fields whose stored value had moved away from both the target and what the search saw.\n   *\n   * The write still goes through -- decision 24 says the operator's value wins -- but somebody\n   * edited the record in between, and the log line says so rather than letting it pass unnoticed.\n   */\n  concurrentFields?: UserMetadataField[]\n  detail?: string\n}\n\n/**\n * What the operator is told about a failed write.\n *\n * 422 and 400 are their own line and not a generic failure: a PUT validates the whole body, and an\n * account carrying a colour or an e-mail that no longer passes validation will fail even on a plain\n * \"disable\". With legacy data that is an ordinary outcome, and \"could not be saved\" would send\n * somebody looking for a bug that is not there.\n */\nexport const classifyWriteStatus = (status: number | null): BulkOutcomeType => {\n  if (status === null) return BulkOutcome.Unavailable\n  if (status === 403) return BulkOutcome.Forbidden\n  if (status === 401) return BulkOutcome.Unauthenticated\n  if (status === 404) return BulkOutcome.NotFound\n  if (status === HTTP_STATUS_UNPROCESSABLE_ENTITY || status === HTTP_STATUS_BAD_REQUEST) return BulkOutcome.Invalid\n  return BulkOutcome.Unavailable\n}\n\nconst request = <R extends object, B>(\n  descriptor: AnyUserSystemDescriptor,\n  method: 'GET' | 'PUT' | 'PATCH' | 'POST',\n  url: string\n) =>\n  useApiRequest<R, B>({\n    client: descriptor.client,\n    method,\n    system: descriptor.system,\n    entity: descriptor.entity,\n    urlTemplate: url,\n  })\n\nexport const useUserCrossSystemWrites = () => {\n  /**\n   * Switching an account on or off.\n   *\n   * There is no PATCH for this anywhere -- the only method that calls `setEnabled` is the full\n   * update -- so it is a read followed by a write on the same path, with the whole record the read\n   * returned. That is not caution, it is the contract: the DTO defaults roles to `[ROLE_USER]`,\n   * `enabled` to true and both permission collections to empty, and the manager writes all four\n   * unconditionally. A body of \"just the enabled flag\" resets the roles, wipes the grants, detaches\n   * the groups and switches a disabled account back on.\n   *\n   * On `/adm/users` in cms it goes further still: that PUT runs `updateRelations()` over seven\n   * scalars and twelve collections, so an omitted `desks` does not mean \"unchanged\", it means\n   * \"remove from every desk\".\n   */\n  const setEnabled = async (\n    descriptor: AnyUserSystemDescriptor,\n    id: IntegerId,\n    enabled: boolean\n  ): Promise<WriteResult> => {\n    const { get, url } = resolveEnabledWrite(descriptor)\n    try {\n      const { execute: read } = request<AnzuUser, null>(descriptor, 'GET', get)\n      const current = await read({ urlParams: { id } })\n      if (current.enabled === enabled) {\n        // Already there. A no-op PUT would still run `updateRelations()` in cms -- risk for nothing.\n        return { outcome: BulkOutcome.Done, user: current }\n      }\n      // The right may have gone while the record was read: reported as the server would refuse it.\n      if (!descriptorMayWrite(descriptor, 'update')) return { outcome: BulkOutcome.Forbidden }\n      const body = cloneDeep(current)\n      body.enabled = enabled\n      const { execute: write } = request<AnzuUser, AnzuUser>(descriptor, 'PUT', url)\n      const saved = await write({ urlParams: { id }, body })\n      return { outcome: BulkOutcome.Done, user: saved }\n    } catch (error) {\n      return { outcome: classifyWriteStatus(probeStatusFromError(error)) }\n    }\n  }\n\n  /**\n   * Writing the shared metadata.\n   *\n   * Through `PATCH /adm/users/{id}` wherever that path exists, because the method behind it\n   * physically cannot write roles, permissions, groups or `enabled` -- it has no setters for them.\n   * That is a stronger guarantee than assembling a careful body, and it is why the plan sends\n   * metadata this way rather than through the full update.\n   *\n   * The body is still the whole record the read returned. `id` in particular has to be in it: the\n   * uniqueness validator only excludes the record itself when the DTO carries a non-empty id, and\n   * without it the server reports the user's own e-mail as already taken -- on every account.\n   */\n  const writeMetadata = async (\n    descriptor: AnyUserSystemDescriptor,\n    id: IntegerId,\n    target: BaseUser,\n    fields: readonly UserMetadataField[] = USER_METADATA_FIELDS,\n    /** What the search showed for this system, so a change made in between can be recognised. */\n    seen: BaseUser | null = null\n  ): Promise<WriteResult & { changed: boolean }> => {\n    const { method, get, url } = resolveMetadataWrite(descriptor)\n    try {\n      const { execute: read } = request<AnzuUser, null>(descriptor, 'GET', get)\n      // Read again immediately before writing, not reused from the search: those results can be\n      // hours old, and a system whose value already matches must not be written to at all.\n      const current = await read({ urlParams: { id } })\n\n      const differs = fields.some((field) => readMetadataField(current, field) !== readMetadataField(target, field))\n      if (!differs) return { outcome: BulkOutcome.Done, user: current, changed: false }\n\n      // Different from what the operator chose *and* from what they were shown when they chose it:\n      // somebody else wrote to this record in between. The value still goes in -- that is what was\n      // asked for -- and the log names the fields.\n      const concurrentFields = isNull(seen)\n        ? []\n        : fields.filter(\n            (field) =>\n              readMetadataField(current, field) !== readMetadataField(seen, field) &&\n              readMetadataField(current, field) !== readMetadataField(target, field)\n          )\n\n      // The right may have gone while the record was read: reported as the server would refuse it.\n      if (!descriptorMayWrite(descriptor, 'update')) return { outcome: BulkOutcome.Forbidden, changed: false }\n      const body = cloneDeep(current)\n      fields.forEach((field) => writeMetadataField(body, field, readMetadataField(target, field)))\n\n      const { execute: write } = request<AnzuUser, AnzuUser>(descriptor, method, url)\n      const saved = await write({ urlParams: { id }, body })\n      return { outcome: BulkOutcome.Done, user: saved, changed: true, concurrentFields }\n    } catch (error) {\n      return { outcome: classifyWriteStatus(probeStatusFromError(error)), changed: false }\n    }\n  }\n\n  /**\n   * Creating an account in another system.\n   *\n   * The body comes from the library factory -- `roles: []`, `enabled: false` -- with the metadata\n   * copied over. Assembling it by hand from base fields is what would have the backend fill in\n   * `ROLE_USER`, leaving an account with a role nobody granted.\n   */\n  const createInSystem = async (descriptor: AnyUserSystemDescriptor, body: AnzuUser): Promise<WriteResult> => {\n    try {\n      const { execute } = request<AnzuUser, AnzuUser>(descriptor, 'POST', resolveCreateEndpoint(descriptor))\n      const created = await execute({ body })\n      return { outcome: BulkOutcome.Done, user: created }\n    } catch (error) {\n      return { outcome: classifyWriteStatus(probeStatusFromError(error)) }\n    }\n  }\n\n  /** The source account, read fresh from the server rather than taken from a store or a form. */\n  const readSourceUser = async (descriptor: AnyUserSystemDescriptor, id: IntegerId): Promise<AnzuUser | null> => {\n    const { get } = resolveEnabledWrite(descriptor)\n    try {\n      const { execute } = request<AnzuUser, null>(descriptor, 'GET', get)\n      return await execute({ urlParams: { id } })\n    } catch {\n      return null\n    }\n  }\n\n  return {\n    setEnabled,\n    writeMetadata,\n    createInSystem,\n    readSourceUser,\n  }\n}\n"],"mappings":";;;;;;;;AA2CA,IAAaA,KAAuB,MAC9BC,MAAW,OAAaC,EAAY,cACpCD,MAAW,MAAYC,EAAY,YACnCD,MAAW,MAAYC,EAAY,kBACnCD,MAAW,MAAYC,EAAY,WACnCD,MAAA,OAA+CA,MAAA,MAA2CC,EAAY,UACnGA,EAAY,aAGfC,KACJ,GACA,GACA,MAEAC,EAAoB;CAClB,QAAQC,EAAW;CACnB;CACA,QAAQA,EAAW;CACnB,QAAQA,EAAW;CACnB,aAAaC;AACf,CAAC,GAEUC,WA0HJ;CACL,mBA3GA,GACA,GACA,MACyB;EACzB,IAAM,EAAE,QAAK,WAAQC,EAAoBH,CAAU;EACnD,IAAI;GACF,IAAM,EAAE,SAASI,MAASN,EAAwBE,GAAY,OAAOK,CAAG,GAClEC,IAAU,MAAMF,EAAK,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;GAChD,IAAIE,EAAQ,YAAYC,GAEtB,OAAO;IAAE,SAASV,EAAY;IAAM,MAAMS;GAAQ;GAGpD,IAAI,CAACE,EAAmBR,GAAY,QAAQ,GAAG,OAAO,EAAE,SAASH,EAAY,UAAU;GACvF,IAAMY,IAAOC,EAAUJ,CAAO;GAC9B,EAAK,UAAUC;GACf,IAAM,EAAE,SAASI,MAAUb,EAA4BE,GAAY,OAAOC,CAAG,GACvEW,IAAQ,MAAMD,EAAM;IAAE,WAAW,EAAE,MAAG;IAAG;GAAK,CAAC;GACrD,OAAO;IAAE,SAASd,EAAY;IAAM,MAAMe;GAAM;EAClD,SAASC,GAAO;GACd,OAAO,EAAE,SAASlB,EAAoBmB,EAAqBD,CAAK,CAAC,EAAE;EACrE;CACF;CAsFE,sBAvEA,GACA,GACA,GACA,IAAuCE,GAEvC,IAAwB,SACwB;EAChD,IAAM,EAAE,WAAQ,QAAK,WAAQC,EAAqBhB,CAAU;EAC5D,IAAI;GACF,IAAM,EAAE,SAASI,MAASN,EAAwBE,GAAY,OAAOK,CAAG,GAGlEC,IAAU,MAAMF,EAAK,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;GAGhD,IAAI,CADYa,EAAO,MAAM,MAAUC,EAAkBZ,GAASa,CAAK,MAAMD,EAAkBE,GAAQD,CAAK,CACvG,GAAS,OAAO;IAAE,SAAStB,EAAY;IAAM,MAAMS;IAAS,SAAS;GAAM;GAKhF,IAAMe,IAAmBC,EAAOC,CAAI,IAChC,CAAC,IACDN,EAAO,QACJ,MACCC,EAAkBZ,GAASa,CAAK,MAAMD,EAAkBK,GAAMJ,CAAK,KACnED,EAAkBZ,GAASa,CAAK,MAAMD,EAAkBE,GAAQD,CAAK,CACzE;GAGJ,IAAI,CAACX,EAAmBR,GAAY,QAAQ,GAAG,OAAO;IAAE,SAASH,EAAY;IAAW,SAAS;GAAM;GACvG,IAAMY,IAAOC,EAAUJ,CAAO;GAC9B,EAAO,SAAS,MAAUkB,EAAmBf,GAAMU,GAAOD,EAAkBE,GAAQD,CAAK,CAAC,CAAC;GAE3F,IAAM,EAAE,SAASR,MAAUb,EAA4BE,GAAYyB,GAAQxB,CAAG,GACxEW,IAAQ,MAAMD,EAAM;IAAE,WAAW,EAAE,MAAG;IAAG;GAAK,CAAC;GACrD,OAAO;IAAE,SAASd,EAAY;IAAM,MAAMe;IAAO,SAAS;IAAM;GAAiB;EACnF,SAASC,GAAO;GACd,OAAO;IAAE,SAASlB,EAAoBmB,EAAqBD,CAAK,CAAC;IAAG,SAAS;GAAM;EACrF;CACF;CAiCE,uBAxB4B,GAAqC,MAAyC;EAC1G,IAAI;GACF,IAAM,EAAE,eAAYf,EAA4BE,GAAY,QAAQ0B,EAAsB1B,CAAU,CAAC,GAC/F2B,IAAU,MAAMC,EAAQ,EAAE,QAAK,CAAC;GACtC,OAAO;IAAE,SAAS/B,EAAY;IAAM,MAAM8B;GAAQ;EACpD,SAASd,GAAO;GACd,OAAO,EAAE,SAASlB,EAAoBmB,EAAqBD,CAAK,CAAC,EAAE;EACrE;CACF;CAiBE,uBAd4B,GAAqC,MAA4C;EAC7G,IAAM,EAAE,WAAQV,EAAoBH,CAAU;EAC9C,IAAI;GACF,IAAM,EAAE,eAAYF,EAAwBE,GAAY,OAAOK,CAAG;GAClE,OAAO,MAAMuB,EAAQ,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;EAC5C,QAAQ;GACN,OAAO;EACT;CACF;AAOA"}
+{"version":3,"file":"userCrossSystemWrites.js","names":["classifyWriteStatus","status","BulkOutcome","request","useApiRequest","descriptor","url","useUserCrossSystemWrites","resolveEnabledWrite","read","get","current","enabled","descriptorMayWrite","body","cloneDeep","write","saved","error","probeStatusFromError","USER_METADATA_FIELDS","resolveMetadataWrite","fields","readMetadataField","field","target","concurrentFields","isNull","seen","writeMetadataField","method","resolveCreateEndpoint","created","execute"],"sources":["../../../../src/domains/anzuUser/composables/userCrossSystemWrites.ts"],"sourcesContent":["import { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport { HTTP_STATUS_BAD_REQUEST, HTTP_STATUS_UNPROCESSABLE_ENTITY } from '@/shared/statusCodes'\nimport {\n  type AnyUserSystemDescriptor,\n  descriptorMayWrite,\n  resolveCreateEndpoint,\n  resolveEnabledWrite,\n  resolveMetadataWrite,\n} from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport { BulkOutcome, type BulkOutcomeType } from '@/domains/anzuUser/store/userCrossSystemStore'\nimport { probeStatusFromError } from '@/domains/anzuUser/composables/userSystemProbe'\nimport {\n  readMetadataField,\n  USER_METADATA_FIELDS,\n  writeMetadataField,\n  type UserMetadataField,\n} from '@/domains/anzuUser/utils/userMetadataDiff'\nimport type { AnzuUser, BaseUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\nimport { cloneDeep, isNull } from '@/shared/utils/common'\n\nexport interface WriteResult {\n  outcome: BulkOutcomeType\n  /** The server's record after the write, when it returned one. */\n  user?: AnzuUser\n  /**\n   * Fields whose stored value differed from both the target and what the search saw.\n   * The write still goes through (decision 24: the operator's value wins). The log reports the concurrent edit.\n   */\n  concurrentFields?: UserMetadataField[]\n  detail?: string\n}\n\n/**\n * 422 and 400 get their own outcome. A PUT validates the whole body.\n * Legacy data that no longer validates fails even a plain disable. That is not a bug.\n */\nexport const classifyWriteStatus = (status: number | null): BulkOutcomeType => {\n  if (status === null) return BulkOutcome.Unavailable\n  if (status === 403) return BulkOutcome.Forbidden\n  if (status === 401) return BulkOutcome.Unauthenticated\n  if (status === 404) return BulkOutcome.NotFound\n  if (status === HTTP_STATUS_UNPROCESSABLE_ENTITY || status === HTTP_STATUS_BAD_REQUEST) return BulkOutcome.Invalid\n  return BulkOutcome.Unavailable\n}\n\nconst request = <R extends object, B>(\n  descriptor: AnyUserSystemDescriptor,\n  method: 'GET' | 'PUT' | 'PATCH' | 'POST',\n  url: string\n) =>\n  useApiRequest<R, B>({\n    client: descriptor.client,\n    method,\n    system: descriptor.system,\n    entity: descriptor.entity,\n    urlTemplate: url,\n  })\n\nexport const useUserCrossSystemWrites = () => {\n  /**\n   * No PATCH exists for `enabled`. Only the full update calls `setEnabled`,\n   * so this is a GET then PUT on the same path with the whole record.\n   * The DTO defaults roles to `[ROLE_USER]`, `enabled` to true and permissions to empty. A\n   * partial body resets roles, wipes grants, detaches groups and re-enables the account.\n   * In cms `/adm/users` PUT runs `updateRelations()`, so an omitted `desks` removes the user from every desk.\n   */\n  const setEnabled = async (\n    descriptor: AnyUserSystemDescriptor,\n    id: IntegerId,\n    enabled: boolean\n  ): Promise<WriteResult> => {\n    const { get, url } = resolveEnabledWrite(descriptor)\n    try {\n      const { execute: read } = request<AnzuUser, null>(descriptor, 'GET', get)\n      const current = await read({ urlParams: { id } })\n      if (current.enabled === enabled) {\n        // Already in the target state. A no-op PUT would still run `updateRelations()` in cms.\n        return { outcome: BulkOutcome.Done, user: current }\n      }\n      // The right may have been revoked during the read. Report it as the server would refuse it.\n      if (!descriptorMayWrite(descriptor, 'update')) return { outcome: BulkOutcome.Forbidden }\n      const body = cloneDeep(current)\n      body.enabled = enabled\n      const { execute: write } = request<AnzuUser, AnzuUser>(descriptor, 'PUT', url)\n      const saved = await write({ urlParams: { id }, body })\n      return { outcome: BulkOutcome.Done, user: saved }\n    } catch (error) {\n      return { outcome: classifyWriteStatus(probeStatusFromError(error)) }\n    }\n  }\n\n  /**\n   * Uses `PATCH /adm/users/{id}` where it exists. Its method\n   * has no setters for roles, permissions, groups or `enabled`.\n   * The body is still the whole record from the read. It must include `id`:\n   * without it the uniqueness validator reports the user's own e-mail as taken.\n   */\n  const writeMetadata = async (\n    descriptor: AnyUserSystemDescriptor,\n    id: IntegerId,\n    target: BaseUser,\n    fields: readonly UserMetadataField[] = USER_METADATA_FIELDS,\n    /** What the search showed for this system, to detect a change made in between. */\n    seen: BaseUser | null = null\n  ): Promise<WriteResult & { changed: boolean }> => {\n    const { method, get, url } = resolveMetadataWrite(descriptor)\n    try {\n      const { execute: read } = request<AnzuUser, null>(descriptor, 'GET', get)\n      // Read again right before writing. Search results can be hours\n      // old, and a system that already matches must not be written.\n      const current = await read({ urlParams: { id } })\n\n      const differs = fields.some((field) => readMetadataField(current, field) !== readMetadataField(target, field))\n      if (!differs) return { outcome: BulkOutcome.Done, user: current, changed: false }\n\n      // Differs from both the target and what the operator saw: someone else wrote in between.\n      // The value is still written, and the log names the fields.\n      const concurrentFields = isNull(seen)\n        ? []\n        : fields.filter(\n            (field) =>\n              readMetadataField(current, field) !== readMetadataField(seen, field) &&\n              readMetadataField(current, field) !== readMetadataField(target, field)\n          )\n\n      // The right may have been revoked during the read. Report it as the server would refuse it.\n      if (!descriptorMayWrite(descriptor, 'update')) return { outcome: BulkOutcome.Forbidden, changed: false }\n      const body = cloneDeep(current)\n      fields.forEach((field) => writeMetadataField(body, field, readMetadataField(target, field)))\n\n      const { execute: write } = request<AnzuUser, AnzuUser>(descriptor, method, url)\n      const saved = await write({ urlParams: { id }, body })\n      return { outcome: BulkOutcome.Done, user: saved, changed: true, concurrentFields }\n    } catch (error) {\n      return { outcome: classifyWriteStatus(probeStatusFromError(error)), changed: false }\n    }\n  }\n\n  /**\n   * The body comes from the library factory (`roles: []`, `enabled: false`) with metadata copied over.\n   * A hand-built body would let the backend default to `ROLE_USER`, a role nobody granted.\n   */\n  const createInSystem = async (descriptor: AnyUserSystemDescriptor, body: AnzuUser): Promise<WriteResult> => {\n    try {\n      const { execute } = request<AnzuUser, AnzuUser>(descriptor, 'POST', resolveCreateEndpoint(descriptor))\n      const created = await execute({ body })\n      return { outcome: BulkOutcome.Done, user: created }\n    } catch (error) {\n      return { outcome: classifyWriteStatus(probeStatusFromError(error)) }\n    }\n  }\n\n  /** Reads the source account fresh from the server, not from a store or form. */\n  const readSourceUser = async (descriptor: AnyUserSystemDescriptor, id: IntegerId): Promise<AnzuUser | null> => {\n    const { get } = resolveEnabledWrite(descriptor)\n    try {\n      const { execute } = request<AnzuUser, null>(descriptor, 'GET', get)\n      return await execute({ urlParams: { id } })\n    } catch {\n      return null\n    }\n  }\n\n  return {\n    setEnabled,\n    writeMetadata,\n    createInSystem,\n    readSourceUser,\n  }\n}\n"],"mappings":";;;;;;;;AAqCA,IAAaA,KAAuB,MAC9BC,MAAW,OAAaC,EAAY,cACpCD,MAAW,MAAYC,EAAY,YACnCD,MAAW,MAAYC,EAAY,kBACnCD,MAAW,MAAYC,EAAY,WACnCD,MAAA,OAA+CA,MAAA,MAA2CC,EAAY,UACnGA,EAAY,aAGfC,KACJ,GACA,GACA,MAEAC,EAAoB;CAClB,QAAQC,EAAW;CACnB;CACA,QAAQA,EAAW;CACnB,QAAQA,EAAW;CACnB,aAAaC;AACf,CAAC,GAEUC,WAyGJ;CACL,mBAjGA,GACA,GACA,MACyB;EACzB,IAAM,EAAE,QAAK,WAAQC,EAAoBH,CAAU;EACnD,IAAI;GACF,IAAM,EAAE,SAASI,MAASN,EAAwBE,GAAY,OAAOK,CAAG,GAClEC,IAAU,MAAMF,EAAK,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;GAChD,IAAIE,EAAQ,YAAYC,GAEtB,OAAO;IAAE,SAASV,EAAY;IAAM,MAAMS;GAAQ;GAGpD,IAAI,CAACE,EAAmBR,GAAY,QAAQ,GAAG,OAAO,EAAE,SAASH,EAAY,UAAU;GACvF,IAAMY,IAAOC,EAAUJ,CAAO;GAC9B,EAAK,UAAUC;GACf,IAAM,EAAE,SAASI,MAAUb,EAA4BE,GAAY,OAAOC,CAAG,GACvEW,IAAQ,MAAMD,EAAM;IAAE,WAAW,EAAE,MAAG;IAAG;GAAK,CAAC;GACrD,OAAO;IAAE,SAASd,EAAY;IAAM,MAAMe;GAAM;EAClD,SAASC,GAAO;GACd,OAAO,EAAE,SAASlB,EAAoBmB,EAAqBD,CAAK,CAAC,EAAE;EACrE;CACF;CA4EE,sBAnEA,GACA,GACA,GACA,IAAuCE,GAEvC,IAAwB,SACwB;EAChD,IAAM,EAAE,WAAQ,QAAK,WAAQC,EAAqBhB,CAAU;EAC5D,IAAI;GACF,IAAM,EAAE,SAASI,MAASN,EAAwBE,GAAY,OAAOK,CAAG,GAGlEC,IAAU,MAAMF,EAAK,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;GAGhD,IAAI,CADYa,EAAO,MAAM,MAAUC,EAAkBZ,GAASa,CAAK,MAAMD,EAAkBE,GAAQD,CAAK,CACvG,GAAS,OAAO;IAAE,SAAStB,EAAY;IAAM,MAAMS;IAAS,SAAS;GAAM;GAIhF,IAAMe,IAAmBC,EAAOC,CAAI,IAChC,CAAC,IACDN,EAAO,QACJ,MACCC,EAAkBZ,GAASa,CAAK,MAAMD,EAAkBK,GAAMJ,CAAK,KACnED,EAAkBZ,GAASa,CAAK,MAAMD,EAAkBE,GAAQD,CAAK,CACzE;GAGJ,IAAI,CAACX,EAAmBR,GAAY,QAAQ,GAAG,OAAO;IAAE,SAASH,EAAY;IAAW,SAAS;GAAM;GACvG,IAAMY,IAAOC,EAAUJ,CAAO;GAC9B,EAAO,SAAS,MAAUkB,EAAmBf,GAAMU,GAAOD,EAAkBE,GAAQD,CAAK,CAAC,CAAC;GAE3F,IAAM,EAAE,SAASR,MAAUb,EAA4BE,GAAYyB,GAAQxB,CAAG,GACxEW,IAAQ,MAAMD,EAAM;IAAE,WAAW,EAAE,MAAG;IAAG;GAAK,CAAC;GACrD,OAAO;IAAE,SAASd,EAAY;IAAM,MAAMe;IAAO,SAAS;IAAM;GAAiB;EACnF,SAASC,GAAO;GACd,OAAO;IAAE,SAASlB,EAAoBmB,EAAqBD,CAAK,CAAC;IAAG,SAAS;GAAM;EACrF;CACF;CA8BE,uBAxB4B,GAAqC,MAAyC;EAC1G,IAAI;GACF,IAAM,EAAE,eAAYf,EAA4BE,GAAY,QAAQ0B,EAAsB1B,CAAU,CAAC,GAC/F2B,IAAU,MAAMC,EAAQ,EAAE,QAAK,CAAC;GACtC,OAAO;IAAE,SAAS/B,EAAY;IAAM,MAAM8B;GAAQ;EACpD,SAASd,GAAO;GACd,OAAO,EAAE,SAASlB,EAAoBmB,EAAqBD,CAAK,CAAC,EAAE;EACrE;CACF;CAiBE,uBAd4B,GAAqC,MAA4C;EAC7G,IAAM,EAAE,WAAQV,EAAoBH,CAAU;EAC9C,IAAI;GACF,IAAM,EAAE,eAAYF,EAAwBE,GAAY,OAAOK,CAAG;GAClE,OAAO,MAAMuB,EAAQ,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;EAC5C,QAAQ;GACN,OAAO;EACT;CACF;AAOA"}