@anzusystems/common-admin 2.0.0-rc.1 → 2.0.0-rc.10

package/dist/domains/anzuUser/composables/userSystemDescriptor.d.ts

@@ -2,13 +2,11 @@ import { RouteLocationRaw } from 'vue-router';
 import { AxiosClientFn } from '../../api/utils/client';
 import { AnzuUser } from '../../../shared/types/AnzuUser';
 /**
- * A state a system has on top of `enabled`, shown next to it. Today only two systems have one:
- * blog's `status` (guest / waiting_approval / active / ban / gdpr_deleted) and forum's
- * `settings.banned`. Both arrive with the record -- they are `#[Serialize]` on the entity -- so
- * rendering one costs no extra call.
+ * A system state shown next to `enabled`. Today: blog's `status` and forum's `settings.banned`.
+ * Both are serialized on the entity, so rendering costs no extra call.
  */
 export interface UserSystemExtraState {
-    /** "blogger", "commenter" -- the app translates it; the library only prints it. */
+    /** "blogger", "commenter". The app translates it; the library only prints it. */
     label: string;
     /** "active", "banned". */
     value: string;
@@ -25,40 +23,28 @@ export interface BaseUserEndpointPair extends AnzuUserEndpointPair {
     patch: string;
 }
 /**
- * Paired GET + write paths, never loose urls.
- *
- * This is what makes the write invariant expressible: a write body is always the whole object the
- * preceding GET on the *same path* returned. The two paths return different DTOs -- `/adm/users`
- * in cms answers `CmsUserDto` and its PUT runs `updateRelations()` over seven scalars and twelve
- * collections -- so a GET from one path and a PUT to the other silently drops whatever the other
- * DTO carries.
+ * Paired GET and write paths. A write body is always the whole object the GET on the same path returned.
+ * The two paths return different DTOs. A GET from one and a PUT to the other
+ * silently drops fields, e.g. cms `CmsUserDto` with `updateRelations()`.
  */
 export interface UserSystemEndpoints {
     anzuUser: AnzuUserEndpointPair | null;
     base: BaseUserEndpointPair | null;
     permissionGroup: string;
-    /**
-     * Per system, not one constant. contentHub's is `/adm/users/current`, and the admins had this
-     * hard-coded as a single path shared by every backend.
-     */
+    /** Per system. contentHub uses `/adm/users/current`. */
     currentUser: string;
     list: string;
     /**
-     * Which pair the probe reads through. A field rather than something derived, because in dam the
-     * choice is visible to the operator: `GET /adm/v1/anzu-user/{id}` has no gating at all while
-     * `GET /adm/users/{id}` sits behind `DAM_USER_READ`, so only the second can ever render "you
-     * have no access". The rule is "the probe goes the way the write goes".
+     * Which pair the probe reads through. The probe follows the write path.
+     * In dam `GET /adm/v1/anzu-user/{id}` is ungated while `GET /adm/users/{id}`
+     * needs `DAM_USER_READ`, so only the second can show "no access".
      */
     probe: 'anzuUser' | 'base';
 }
 /**
- * Where "manage in X" leads. A callback over the user rather than a static value: a global
- * descriptor does not know which row is being drawn.
- *
- * The return type is a discriminated union so the two cannot be confused in code either -- an
- * internal target is pushed through the router, an external one is an `<a href>` opened in a new
- * tab, and `href: null` is a configured-but-missing url, which renders disabled with a reason
- * rather than as a dead button.
+ * Where "manage in X" leads. A callback because the descriptor does not know which row is drawn.
+ * Internal targets go through the router. External ones open in a new tab.
+ * `href: null` means a missing url and renders disabled with a reason.
  */
 export type UserSystemManageTarget = {
     kind: 'internal';
@@ -73,21 +59,19 @@ export interface UserSystemDescriptor<TSystem extends string = string, TUser ext
     /** Reaches every `useApiRequest` built for this system; see `permissionGroupApi`. */
     entity: string;
     /**
-     * Whether the system is switched on in this admin's configuration. Mandatory, not optional: the
-     * "disabled in configuration" state has to be *shown*, so leaving the system out of the array is
-     * not the same thing. The value is app-specific (`envConfig[system].enabled`) and the library has
-     * no way to read it.
+     * Whether the system is enabled in this admin's config (`envConfig[system].enabled`).
+     * Mandatory because the disabled state must be shown. Omitting the system from the array is not the same.
      */
     isEnabled: () => boolean;
     /**
-     * Which validation profile this system's form uses. `false` means only the e-mail is required;
-     * `true` adds first name, last name, full name, avatar text and avatar colour. It is a property
-     * of the system, and it is the same for creating and for editing.
+     * Validation profile. `false`: only e-mail is required. `true`: also
+     * first name, last name, full name, avatar text and avatar colour.
+     * Same for create and edit.
      */
     requiredMetadata: boolean;
     /**
-     * Whether the id is typed in. False only in cms, where the backend looks it up in SSO from the
-     * e-mail. On an edit the field is read-only regardless.
+     * Whether the id is typed in. False only in cms, where the backend looks it up in SSO by e-mail.
+     * Read-only on edit regardless.
      */
     idInput: boolean;
     extraState?: (user: TUser) => UserSystemExtraState | null;
@@ -98,42 +82,34 @@ export interface UserSystemDescriptor<TSystem extends string = string, TUser ext
     /** In the confirmation dialog when an account is created here. */
     createNote?: string;
     endpoints: UserSystemEndpoints;
-    /** Added in task 2: the system's name as the app translates it. */
+    /** The system's name as the app translates it. */
     label?: string;
-    /** Added in task 2. */
     manage?: (user: TUser) => UserSystemManageTarget;
     /**
-     * Whether the current user may write this system's accounts. `false` takes away create, enable or
-     * disable, manage and the system's part of a bulk action; `undefined`, or no function, leaves it to the
-     * probe and the backend's answer, as before. Only the admin can say: the library has no current user of
-     * another system, and only the admin knows which ones it has loaded.
+     * Whether the current user may write this system's accounts. `false`
+     * removes create, enable/disable, manage and the bulk action part.
+     * `undefined` or no function leaves it to the probe and the
+     * backend. Only the admin knows the other systems' current users.
      */
     canWrite?: (action: UserSystemWriteAction) => boolean | undefined;
 }
 export type UserSystemWriteAction = 'create' | 'update';
 /**
- * The erasure boundary for a heterogeneous array.
- *
- * Descriptors differ in `TUser` -- blog's `extraState` reaches for `status`, forum's for
- * `settings.banned` -- so an array of them cannot keep each one's type. Without a single place to
- * erase it, `strict: true` would demand a cast in every admin, at every call site. This does it
- * once, where the array is built.
+ * Type erasure point for the heterogeneous descriptor array.
+ * Descriptors differ in `TUser`. Erasing here avoids a cast at every call site under `strict: true`.
  */
 export type AnyUserSystemDescriptor = UserSystemDescriptor<string, AnzuUser>;
 export declare const defineUserSystemDescriptor: <TSystem extends string, TUser extends AnzuUser>(descriptor: UserSystemDescriptor<TSystem, TUser>) => AnyUserSystemDescriptor;
 /** False only when the descriptor says no. Not knowing is not a no. */
 export declare const descriptorMayWrite: (descriptor: AnyUserSystemDescriptor, action: UserSystemWriteAction) => boolean;
 /**
- * The pair the probe reads through, with the one invariant the type cannot state: both branches of
- * `endpoints` are nullable, so nothing stops a descriptor naming `probe: 'base'` on a system that
- * has no `/adm/users`. Every admin's descriptor test asserts this resolves for each of its
- * systems.
+ * Both `endpoints` branches are nullable, so `probe: 'base'` may name a system without `/adm/users`.
+ * Each admin's descriptor test asserts this resolves for every system.
  */
 export declare const resolveProbeEndpoint: (descriptor: AnyUserSystemDescriptor) => AnzuUserEndpointPair;
 /**
- * Metadata is written through `PATCH /adm/users/{id}` wherever that path exists: the method behind
- * it can only write e-mail, locale, avatar and person -- it has no setter for roles, permissions,
- * groups or `enabled`. That is a stronger guarantee than being careful about what goes in the body.
+ * Metadata goes through `PATCH /adm/users/{id}` where it exists.
+ * Its method has no setters for roles, permissions, groups or `enabled`.
  */
 export declare const resolveMetadataWrite: (descriptor: AnyUserSystemDescriptor) => {
     method: "PATCH";
@@ -145,8 +121,8 @@ export declare const resolveMetadataWrite: (descriptor: AnyUserSystemDescriptor)
     url: string;
 };
 /**
- * `enabled` has no `PATCH` anywhere: the only method that calls `setEnabled` is the full update.
- * So it goes GET + PUT, on the same path, with the whole DTO the GET returned.
+ * `enabled` has no PATCH. Only the full update calls `setEnabled`.
+ * So it is GET then PUT on the same path with the whole DTO from the GET.
  */
 export declare const resolveEnabledWrite: (descriptor: AnyUserSystemDescriptor) => {
     get: string;

package/dist/domains/anzuUser/composables/userSystemDescriptor.js

@@ -1,4 +1,4 @@
-//#region src/domains/anzuUser/composables/userSystemDescriptor.ts
+// src/domains/anzuUser/composables/userSystemDescriptor.ts
 var e = (e) => e, t = (e, t) => e.canWrite?.(t) !== !1, n = (e) => {
 	let t = e.endpoints[e.endpoints.probe];
 	if (t === null) throw Error(`[userSystemDescriptor] '${e.system}' names probe '${e.endpoints.probe}', which it does not have.`);
@@ -36,7 +36,6 @@ var e = (e) => e, t = (e, t) => e.canWrite?.(t) !== !1, n = (e) => {
 	if (n === null) throw Error(`[userSystemDescriptor] '${e.system}' has no create path.`);
 	return n.post;
 };
-//#endregion
 export { e as defineUserSystemDescriptor, t as descriptorMayWrite, a as resolveCreateEndpoint, i as resolveEnabledWrite, r as resolveMetadataWrite, n as resolveProbeEndpoint };
 
 //# sourceMappingURL=userSystemDescriptor.js.map

package/dist/domains/anzuUser/composables/userSystemDescriptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"userSystemDescriptor.js","names":["defineUserSystemDescriptor","descriptor","descriptorMayWrite","action","resolveProbeEndpoint","pair","resolveMetadataWrite","base","anzuUser","resolveEnabledWrite","resolveCreateEndpoint"],"sources":["../../../../src/domains/anzuUser/composables/userSystemDescriptor.ts"],"sourcesContent":["import type { RouteLocationRaw } from 'vue-router'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\n\n/**\n * A state a system has on top of `enabled`, shown next to it. Today only two systems have one:\n * blog's `status` (guest / waiting_approval / active / ban / gdpr_deleted) and forum's\n * `settings.banned`. Both arrive with the record -- they are `#[Serialize]` on the entity -- so\n * rendering one costs no extra call.\n */\nexport interface UserSystemExtraState {\n  /** \"blogger\", \"commenter\" -- the app translates it; the library only prints it. */\n  label: string\n  /** \"active\", \"banned\". */\n  value: string\n  tone: 'ok' | 'warn' | 'error'\n}\n\n/** `/adm/v1/anzu-user`. Absent in contentHub, which has only `/adm/users`. */\nexport interface AnzuUserEndpointPair {\n  get: string\n  put: string\n  post: string\n}\n\n/** `/adm/users`. Only cms, dam and contentHub have it; it is the only path with a `PATCH`. */\nexport interface BaseUserEndpointPair extends AnzuUserEndpointPair {\n  patch: string\n}\n\n/**\n * Paired GET + write paths, never loose urls.\n *\n * This is what makes the write invariant expressible: a write body is always the whole object the\n * preceding GET on the *same path* returned. The two paths return different DTOs -- `/adm/users`\n * in cms answers `CmsUserDto` and its PUT runs `updateRelations()` over seven scalars and twelve\n * collections -- so a GET from one path and a PUT to the other silently drops whatever the other\n * DTO carries.\n */\nexport interface UserSystemEndpoints {\n  anzuUser: AnzuUserEndpointPair | null\n  base: BaseUserEndpointPair | null\n  permissionGroup: string\n  /**\n   * Per system, not one constant. contentHub's is `/adm/users/current`, and the admins had this\n   * hard-coded as a single path shared by every backend.\n   */\n  currentUser: string\n  list: string\n  /**\n   * Which pair the probe reads through. A field rather than something derived, because in dam the\n   * choice is visible to the operator: `GET /adm/v1/anzu-user/{id}` has no gating at all while\n   * `GET /adm/users/{id}` sits behind `DAM_USER_READ`, so only the second can ever render \"you\n   * have no access\". The rule is \"the probe goes the way the write goes\".\n   */\n  probe: 'anzuUser' | 'base'\n}\n\n/**\n * Where \"manage in X\" leads. A callback over the user rather than a static value: a global\n * descriptor does not know which row is being drawn.\n *\n * The return type is a discriminated union so the two cannot be confused in code either -- an\n * internal target is pushed through the router, an external one is an `<a href>` opened in a new\n * tab, and `href: null` is a configured-but-missing url, which renders disabled with a reason\n * rather than as a dead button.\n */\nexport type UserSystemManageTarget =\n  | { kind: 'internal'; to: RouteLocationRaw }\n  | { kind: 'external'; href: string | null }\n\nexport interface UserSystemDescriptor<TSystem extends string = string, TUser extends AnzuUser = AnzuUser> {\n  system: TSystem\n  client: AxiosClientFn\n  /** Reaches every `useApiRequest` built for this system; see `permissionGroupApi`. */\n  entity: string\n  /**\n   * Whether the system is switched on in this admin's configuration. Mandatory, not optional: the\n   * \"disabled in configuration\" state has to be *shown*, so leaving the system out of the array is\n   * not the same thing. The value is app-specific (`envConfig[system].enabled`) and the library has\n   * no way to read it.\n   */\n  isEnabled: () => boolean\n  /**\n   * Which validation profile this system's form uses. `false` means only the e-mail is required;\n   * `true` adds first name, last name, full name, avatar text and avatar colour. It is a property\n   * of the system, and it is the same for creating and for editing.\n   */\n  requiredMetadata: boolean\n  /**\n   * Whether the id is typed in. False only in cms, where the backend looks it up in SSO from the\n   * e-mail. On an edit the field is read-only regardless.\n   */\n  idInput: boolean\n  extraState?: (user: TUser) => UserSystemExtraState | null\n  /** Above the `enabled` switch and in the row of a bulk action. */\n  enabledNote?: string\n  /** In the metadata repair dialog and in the owning form. */\n  metadataNote?: string\n  /** In the confirmation dialog when an account is created here. */\n  createNote?: string\n  endpoints: UserSystemEndpoints\n  /** Added in task 2: the system's name as the app translates it. */\n  label?: string\n  /** Added in task 2. */\n  manage?: (user: TUser) => UserSystemManageTarget\n  /**\n   * Whether the current user may write this system's accounts. `false` takes away create, enable or\n   * disable, manage and the system's part of a bulk action; `undefined`, or no function, leaves it to the\n   * probe and the backend's answer, as before. Only the admin can say: the library has no current user of\n   * another system, and only the admin knows which ones it has loaded.\n   */\n  canWrite?: (action: UserSystemWriteAction) => boolean | undefined\n}\n\nexport type UserSystemWriteAction = 'create' | 'update'\n\n/**\n * The erasure boundary for a heterogeneous array.\n *\n * Descriptors differ in `TUser` -- blog's `extraState` reaches for `status`, forum's for\n * `settings.banned` -- so an array of them cannot keep each one's type. Without a single place to\n * erase it, `strict: true` would demand a cast in every admin, at every call site. This does it\n * once, where the array is built.\n */\nexport type AnyUserSystemDescriptor = UserSystemDescriptor<string, AnzuUser>\n\nexport const defineUserSystemDescriptor = <TSystem extends string, TUser extends AnzuUser>(\n  descriptor: UserSystemDescriptor<TSystem, TUser>\n): AnyUserSystemDescriptor => descriptor as unknown as AnyUserSystemDescriptor\n\n/** False only when the descriptor says no. Not knowing is not a no. */\nexport const descriptorMayWrite = (descriptor: AnyUserSystemDescriptor, action: UserSystemWriteAction): boolean =>\n  descriptor.canWrite?.(action) !== false\n\n/**\n * The pair the probe reads through, with the one invariant the type cannot state: both branches of\n * `endpoints` are nullable, so nothing stops a descriptor naming `probe: 'base'` on a system that\n * has no `/adm/users`. Every admin's descriptor test asserts this resolves for each of its\n * systems.\n */\nexport const resolveProbeEndpoint = (descriptor: AnyUserSystemDescriptor): AnzuUserEndpointPair => {\n  const pair = descriptor.endpoints[descriptor.endpoints.probe]\n  if (pair === null) {\n    throw new Error(\n      `[userSystemDescriptor] '${descriptor.system}' names probe '${descriptor.endpoints.probe}', which it does not have.`\n    )\n  }\n  return pair\n}\n\n/**\n * Metadata is written through `PATCH /adm/users/{id}` wherever that path exists: the method behind\n * it can only write e-mail, locale, avatar and person -- it has no setter for roles, permissions,\n * groups or `enabled`. That is a stronger guarantee than being careful about what goes in the body.\n */\nexport const resolveMetadataWrite = (\n  descriptor: AnyUserSystemDescriptor\n): { method: 'PATCH'; get: string; url: string } | { method: 'PUT'; get: string; url: string } => {\n  const base = descriptor.endpoints.base\n  if (base !== null) return { method: 'PATCH', get: base.get, url: base.patch }\n  const anzuUser = descriptor.endpoints.anzuUser\n  if (anzuUser === null) {\n    throw new Error(`[userSystemDescriptor] '${descriptor.system}' has neither write path.`)\n  }\n  return { method: 'PUT', get: anzuUser.get, url: anzuUser.put }\n}\n\n/**\n * `enabled` has no `PATCH` anywhere: the only method that calls `setEnabled` is the full update.\n * So it goes GET + PUT, on the same path, with the whole DTO the GET returned.\n */\nexport const resolveEnabledWrite = (descriptor: AnyUserSystemDescriptor): { get: string; url: string } => {\n  const base = descriptor.endpoints.base\n  if (base !== null) return { get: base.get, url: base.put }\n  const anzuUser = descriptor.endpoints.anzuUser\n  if (anzuUser === null) {\n    throw new Error(`[userSystemDescriptor] '${descriptor.system}' has neither write path.`)\n  }\n  return { get: anzuUser.get, url: anzuUser.put }\n}\n\n/** Creating an account goes the same way a write does. */\nexport const resolveCreateEndpoint = (descriptor: AnyUserSystemDescriptor): string => {\n  const base = descriptor.endpoints.base\n  if (base !== null) return base.post\n  const anzuUser = descriptor.endpoints.anzuUser\n  if (anzuUser === null) {\n    throw new Error(`[userSystemDescriptor] '${descriptor.system}' has no create path.`)\n  }\n  return anzuUser.post\n}\n"],"mappings":";AA+HA,IAAaA,KACX,MAC4BC,GAGjBC,KAAsB,GAAqC,MACtED,EAAW,WAAWE,CAAM,MAAM,IAQvBC,KAAwB,MAA8D;CACjG,IAAMC,IAAOJ,EAAW,UAAUA,EAAW,UAAU;CACvD,IAAII,MAAS,MACX,MAAU,MACR,2BAA2BJ,EAAW,OAAO,iBAAiBA,EAAW,UAAU,MAAM,2BAC3F;CAEF,OAAOI;AACT,GAOaC,KACX,MACgG;CAChG,IAAMC,IAAON,EAAW,UAAU;CAClC,IAAIM,MAAS,MAAM,OAAO;EAAE,QAAQ;EAAS,KAAKA,EAAK;EAAK,KAAKA,EAAK;CAAM;CAC5E,IAAMC,IAAWP,EAAW,UAAU;CACtC,IAAIO,MAAa,MACf,MAAU,MAAM,2BAA2BP,EAAW,OAAO,0BAA0B;CAEzF,OAAO;EAAE,QAAQ;EAAO,KAAKO,EAAS;EAAK,KAAKA,EAAS;CAAI;AAC/D,GAMaC,KAAuB,MAAsE;CACxG,IAAMF,IAAON,EAAW,UAAU;CAClC,IAAIM,MAAS,MAAM,OAAO;EAAE,KAAKA,EAAK;EAAK,KAAKA,EAAK;CAAI;CACzD,IAAMC,IAAWP,EAAW,UAAU;CACtC,IAAIO,MAAa,MACf,MAAU,MAAM,2BAA2BP,EAAW,OAAO,0BAA0B;CAEzF,OAAO;EAAE,KAAKO,EAAS;EAAK,KAAKA,EAAS;CAAI;AAChD,GAGaE,KAAyB,MAAgD;CACpF,IAAMH,IAAON,EAAW,UAAU;CAClC,IAAIM,MAAS,MAAM,OAAOA,EAAK;CAC/B,IAAMC,IAAWP,EAAW,UAAU;CACtC,IAAIO,MAAa,MACf,MAAU,MAAM,2BAA2BP,EAAW,OAAO,sBAAsB;CAErF,OAAOO,EAAS;AAClB"}
+{"version":3,"file":"userSystemDescriptor.js","names":["defineUserSystemDescriptor","descriptor","descriptorMayWrite","action","resolveProbeEndpoint","pair","resolveMetadataWrite","base","anzuUser","resolveEnabledWrite","resolveCreateEndpoint"],"sources":["../../../../src/domains/anzuUser/composables/userSystemDescriptor.ts"],"sourcesContent":["import type { RouteLocationRaw } from 'vue-router'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\n\n/**\n * A system state shown next to `enabled`. Today: blog's `status` and forum's `settings.banned`.\n * Both are serialized on the entity, so rendering costs no extra call.\n */\nexport interface UserSystemExtraState {\n  /** \"blogger\", \"commenter\". The app translates it; the library only prints it. */\n  label: string\n  /** \"active\", \"banned\". */\n  value: string\n  tone: 'ok' | 'warn' | 'error'\n}\n\n/** `/adm/v1/anzu-user`. Absent in contentHub, which has only `/adm/users`. */\nexport interface AnzuUserEndpointPair {\n  get: string\n  put: string\n  post: string\n}\n\n/** `/adm/users`. Only cms, dam and contentHub have it; it is the only path with a `PATCH`. */\nexport interface BaseUserEndpointPair extends AnzuUserEndpointPair {\n  patch: string\n}\n\n/**\n * Paired GET and write paths. A write body is always the whole object the GET on the same path returned.\n * The two paths return different DTOs. A GET from one and a PUT to the other\n * silently drops fields, e.g. cms `CmsUserDto` with `updateRelations()`.\n */\nexport interface UserSystemEndpoints {\n  anzuUser: AnzuUserEndpointPair | null\n  base: BaseUserEndpointPair | null\n  permissionGroup: string\n  /** Per system. contentHub uses `/adm/users/current`. */\n  currentUser: string\n  list: string\n  /**\n   * Which pair the probe reads through. The probe follows the write path.\n   * In dam `GET /adm/v1/anzu-user/{id}` is ungated while `GET /adm/users/{id}`\n   * needs `DAM_USER_READ`, so only the second can show \"no access\".\n   */\n  probe: 'anzuUser' | 'base'\n}\n\n/**\n * Where \"manage in X\" leads. A callback because the descriptor does not know which row is drawn.\n * Internal targets go through the router. External ones open in a new tab.\n * `href: null` means a missing url and renders disabled with a reason.\n */\nexport type UserSystemManageTarget =\n  | { kind: 'internal'; to: RouteLocationRaw }\n  | { kind: 'external'; href: string | null }\n\nexport interface UserSystemDescriptor<TSystem extends string = string, TUser extends AnzuUser = AnzuUser> {\n  system: TSystem\n  client: AxiosClientFn\n  /** Reaches every `useApiRequest` built for this system; see `permissionGroupApi`. */\n  entity: string\n  /**\n   * Whether the system is enabled in this admin's config (`envConfig[system].enabled`).\n   * Mandatory because the disabled state must be shown. Omitting the system from the array is not the same.\n   */\n  isEnabled: () => boolean\n  /**\n   * Validation profile. `false`: only e-mail is required. `true`: also\n   * first name, last name, full name, avatar text and avatar colour.\n   * Same for create and edit.\n   */\n  requiredMetadata: boolean\n  /**\n   * Whether the id is typed in. False only in cms, where the backend looks it up in SSO by e-mail.\n   * Read-only on edit regardless.\n   */\n  idInput: boolean\n  extraState?: (user: TUser) => UserSystemExtraState | null\n  /** Above the `enabled` switch and in the row of a bulk action. */\n  enabledNote?: string\n  /** In the metadata repair dialog and in the owning form. */\n  metadataNote?: string\n  /** In the confirmation dialog when an account is created here. */\n  createNote?: string\n  endpoints: UserSystemEndpoints\n  /** The system's name as the app translates it. */\n  label?: string\n  manage?: (user: TUser) => UserSystemManageTarget\n  /**\n   * Whether the current user may write this system's accounts. `false`\n   * removes create, enable/disable, manage and the bulk action part.\n   * `undefined` or no function leaves it to the probe and the\n   * backend. Only the admin knows the other systems' current users.\n   */\n  canWrite?: (action: UserSystemWriteAction) => boolean | undefined\n}\n\nexport type UserSystemWriteAction = 'create' | 'update'\n\n/**\n * Type erasure point for the heterogeneous descriptor array.\n * Descriptors differ in `TUser`. Erasing here avoids a cast at every call site under `strict: true`.\n */\nexport type AnyUserSystemDescriptor = UserSystemDescriptor<string, AnzuUser>\n\nexport const defineUserSystemDescriptor = <TSystem extends string, TUser extends AnzuUser>(\n  descriptor: UserSystemDescriptor<TSystem, TUser>\n): AnyUserSystemDescriptor => descriptor as unknown as AnyUserSystemDescriptor\n\n/** False only when the descriptor says no. Not knowing is not a no. */\nexport const descriptorMayWrite = (descriptor: AnyUserSystemDescriptor, action: UserSystemWriteAction): boolean =>\n  descriptor.canWrite?.(action) !== false\n\n/**\n * Both `endpoints` branches are nullable, so `probe: 'base'` may name a system without `/adm/users`.\n * Each admin's descriptor test asserts this resolves for every system.\n */\nexport const resolveProbeEndpoint = (descriptor: AnyUserSystemDescriptor): AnzuUserEndpointPair => {\n  const pair = descriptor.endpoints[descriptor.endpoints.probe]\n  if (pair === null) {\n    throw new Error(\n      `[userSystemDescriptor] '${descriptor.system}' names probe '${descriptor.endpoints.probe}', which it does not have.`\n    )\n  }\n  return pair\n}\n\n/**\n * Metadata goes through `PATCH /adm/users/{id}` where it exists.\n * Its method has no setters for roles, permissions, groups or `enabled`.\n */\nexport const resolveMetadataWrite = (\n  descriptor: AnyUserSystemDescriptor\n): { method: 'PATCH'; get: string; url: string } | { method: 'PUT'; get: string; url: string } => {\n  const base = descriptor.endpoints.base\n  if (base !== null) return { method: 'PATCH', get: base.get, url: base.patch }\n  const anzuUser = descriptor.endpoints.anzuUser\n  if (anzuUser === null) {\n    throw new Error(`[userSystemDescriptor] '${descriptor.system}' has neither write path.`)\n  }\n  return { method: 'PUT', get: anzuUser.get, url: anzuUser.put }\n}\n\n/**\n * `enabled` has no PATCH. Only the full update calls `setEnabled`.\n * So it is GET then PUT on the same path with the whole DTO from the GET.\n */\nexport const resolveEnabledWrite = (descriptor: AnyUserSystemDescriptor): { get: string; url: string } => {\n  const base = descriptor.endpoints.base\n  if (base !== null) return { get: base.get, url: base.put }\n  const anzuUser = descriptor.endpoints.anzuUser\n  if (anzuUser === null) {\n    throw new Error(`[userSystemDescriptor] '${descriptor.system}' has neither write path.`)\n  }\n  return { get: anzuUser.get, url: anzuUser.put }\n}\n\n/** Creating an account goes the same way a write does. */\nexport const resolveCreateEndpoint = (descriptor: AnyUserSystemDescriptor): string => {\n  const base = descriptor.endpoints.base\n  if (base !== null) return base.post\n  const anzuUser = descriptor.endpoints.anzuUser\n  if (anzuUser === null) {\n    throw new Error(`[userSystemDescriptor] '${descriptor.system}' has no create path.`)\n  }\n  return anzuUser.post\n}\n"],"mappings":";AA0GA,IAAaA,KACX,MAC4BC,GAGjBC,KAAsB,GAAqC,MACtED,EAAW,WAAWE,CAAM,MAAM,IAMvBC,KAAwB,MAA8D;CACjG,IAAMC,IAAOJ,EAAW,UAAUA,EAAW,UAAU;CACvD,IAAII,MAAS,MACX,MAAU,MACR,2BAA2BJ,EAAW,OAAO,iBAAiBA,EAAW,UAAU,MAAM,2BAC3F;CAEF,OAAOI;AACT,GAMaC,KACX,MACgG;CAChG,IAAMC,IAAON,EAAW,UAAU;CAClC,IAAIM,MAAS,MAAM,OAAO;EAAE,QAAQ;EAAS,KAAKA,EAAK;EAAK,KAAKA,EAAK;CAAM;CAC5E,IAAMC,IAAWP,EAAW,UAAU;CACtC,IAAIO,MAAa,MACf,MAAU,MAAM,2BAA2BP,EAAW,OAAO,0BAA0B;CAEzF,OAAO;EAAE,QAAQ;EAAO,KAAKO,EAAS;EAAK,KAAKA,EAAS;CAAI;AAC/D,GAMaC,KAAuB,MAAsE;CACxG,IAAMF,IAAON,EAAW,UAAU;CAClC,IAAIM,MAAS,MAAM,OAAO;EAAE,KAAKA,EAAK;EAAK,KAAKA,EAAK;CAAI;CACzD,IAAMC,IAAWP,EAAW,UAAU;CACtC,IAAIO,MAAa,MACf,MAAU,MAAM,2BAA2BP,EAAW,OAAO,0BAA0B;CAEzF,OAAO;EAAE,KAAKO,EAAS;EAAK,KAAKA,EAAS;CAAI;AAChD,GAGaE,KAAyB,MAAgD;CACpF,IAAMH,IAAON,EAAW,UAAU;CAClC,IAAIM,MAAS,MAAM,OAAOA,EAAK;CAC/B,IAAMC,IAAWP,EAAW,UAAU;CACtC,IAAIO,MAAa,MACf,MAAU,MAAM,2BAA2BP,EAAW,OAAO,sBAAsB;CAErF,OAAOO,EAAS;AAClB"}

package/dist/domains/anzuUser/composables/userSystemProbe.d.ts

@@ -5,29 +5,16 @@ import { UserSystemAxes } from '../utils/userSystemState';
 import { AnzuUser } from '../../../shared/types/AnzuUser';
 import { IntegerId } from '../../../shared/types/common';
 /**
- * How an app refreshes a session for one system, and retries.
- *
- * The probe cannot do this itself: a first 401 is ambiguous -- expired session or no account --
- * and the only way to tell them apart is to refresh and ask again, with the session this admin
- * refreshes (its `createRefreshSession`, shared with its refresh interceptor). Without this hook a
- * panel would show an expired token as "no account here", which is exactly the confusion decision
- * 16 forbids.
- *
- * Returns true when the refresh succeeded and the call is worth repeating.
+ * Refreshes a system's session; returns true when the call is worth retrying.
+ * A first 401 may be an expired session or no account. Only a refresh and retry tells them apart (decision 16).
  */
 export type UserSystemRefreshHook = (system: string) => Promise<boolean>;
 export { USER_PROBE_ENTITY };
 export declare const UserSystemRefreshHookKey: InjectionKey<UserSystemRefreshHook>;
 /**
- * The status the backend answered with, or null when nothing ever answered.
- *
- * Read off the axios failure the mapped error kept as its cause, not off the class. Going by class
- * alone misses exactly the answers that exist *because* the backend replied with a body: a
- * validation failure is `AnzuApiValidationError`, a dependency conflict is
- * `AnzuApiDependencyExistsError`, and both are 422s that have to be reported as such. Reported as
- * "the system did not answer" they would send the operator looking for an outage instead of at the
- * account whose stored data no longer validates -- which, with legacy rows, is the failure that
- * happens most.
+ * The backend status, or null when nothing answered.
+ * Read from the axios cause, not the error class. `AnzuApiValidationError`
+ * and `AnzuApiDependencyExistsError` are 422s and must be reported as such.
  */
 export declare const probeStatusFromError: (error: unknown) => number | null;
 export interface UserSystemProbeResult {
@@ -43,14 +30,7 @@ export interface UserSystemProbeParams {
     refreshHook?: UserSystemRefreshHook | undefined;
 }
 /**
- * One system's answer about one user.
- *
- * Reads through `endpoints[probe].get`, never a hard-coded path: in dam the choice is visible to
- * the operator, because `/adm/v1/anzu-user/{id}` has no gating there while `/adm/users/{id}` sits
- * behind `DAM_USER_READ` -- only the second can ever render "you have no access".
- *
- * Note for the app: a probe answering 404 is an expected result here, not a failure. The default
- * api error logger skips it; a logger of the app's own still receives it and should filter on
- * `status === 404 && entity === USER_PROBE_ENTITY`, or every absent account writes a line into the log.
+ * Reads through `endpoints[probe].get`, never a hard-coded path (dam gates only `/adm/users/{id}`).
+ * A 404 here is expected. A custom app error logger should skip `status === 404 && entity === USER_PROBE_ENTITY`.
  */
 export declare const useUserSystemProbe: (params: UserSystemProbeParams) => UserSystemProbeResult;

package/dist/domains/anzuUser/composables/userSystemProbe.js

@@ -1,28 +1,28 @@
+import { AnzuApiAxiosError as e } from "../../../shared/error/AnzuApiAxiosError.js";
+import { AnzuApiCancelledError as t } from "../../../shared/error/AnzuApiCancelledError.js";
+import { AnzuApiForbiddenError as n } from "../../../shared/error/AnzuApiForbiddenError.js";
+import { AnzuApiResponseCodeError as r } from "../../../shared/error/AnzuApiResponseCodeError.js";
 import "../../../shared/statusCodes.js";
-import { AnzuApiForbiddenError as e } from "../../../shared/error/AnzuApiForbiddenError.js";
-import { AnzuApiResponseCodeError as t } from "../../../shared/error/AnzuApiResponseCodeError.js";
-import { AnzuApiAxiosError as n } from "../../../shared/error/AnzuApiAxiosError.js";
-import { AnzuApiCancelledError as r } from "../../../shared/error/AnzuApiCancelledError.js";
 import { USER_PROBE_ENTITY as i } from "../../api/utils/apiErrors.js";
 import { useApiRequest as a } from "../../api/composables/useApiRequest.js";
 import { resolveProbeEndpoint as o } from "./userSystemDescriptor.js";
 import { UserSystemAccess as s, UserSystemLoad as c, UserSystemPresence as l, classifyProbeStatus as u, emptyUserSystemAxes as d } from "../utils/userSystemState.js";
 import { ref as f } from "vue";
 import p from "axios";
-//#region src/domains/anzuUser/composables/userSystemProbe.ts
-var m = Symbol("UserSystemRefreshHook"), h = (r) => {
-	if (r instanceof t) return r.code;
-	if (r instanceof e) return 403;
-	if (r instanceof n) return r.cause.response?.status ?? null;
-	let i = r?.cause;
-	return p.isAxiosError(i) ? i.response?.status ?? null : p.isAxiosError(r) ? r.response?.status ?? null : null;
+// src/domains/anzuUser/composables/userSystemProbe.ts
+var m = Symbol("UserSystemRefreshHook"), h = (t) => {
+	if (t instanceof r) return t.code;
+	if (t instanceof n) return 403;
+	if (t instanceof e) return t.cause.response?.status ?? null;
+	let i = t?.cause;
+	return p.isAxiosError(i) ? i.response?.status ?? null : p.isAxiosError(t) ? t.response?.status ?? null : null;
 }, g = (e) => {
-	let { descriptor: t, refreshHook: n } = e, p = f(d()), m = f(null), g = 0, _ = null;
+	let { descriptor: n, refreshHook: r } = e, p = f(d()), m = f(null), g = 0, _ = null;
 	return {
 		axes: p,
 		user: m,
 		probe: async (e) => {
-			if (!t.isEnabled()) {
+			if (!n.isEnabled()) {
 				p.value = {
 					load: c.Loaded,
 					presence: l.Unknown,
@@ -36,19 +36,19 @@ var m = Symbol("UserSystemRefreshHook"), h = (r) => {
 				...p.value,
 				load: c.Loading
 			};
-			let f = o(t), v = async () => {
-				let { execute: n, abort: r } = a({
-					client: t.client,
+			let f = o(n), v = async () => {
+				let { execute: t, abort: r } = a({
+					client: n.client,
 					method: "GET",
-					system: t.system,
+					system: n.system,
 					entity: i,
 					validationSystem: "common",
-					validationEntity: t.entity,
+					validationEntity: n.entity,
 					urlTemplate: f.get
 				});
 				_ = r;
 				try {
-					return await n({ urlParams: { id: e } });
+					return await t({ urlParams: { id: e } });
 				} finally {
 					_ = null;
 				}
@@ -63,10 +63,10 @@ var m = Symbol("UserSystemRefreshHook"), h = (r) => {
 					enabled: e.enabled
 				};
 			} catch (e) {
-				if (d !== g || e instanceof r) return;
+				if (d !== g || e instanceof t) return;
 				let i = h(e);
-				if (i === 401 && n) {
-					let e = await n(t.system).catch(() => !1);
+				if (i === 401 && r) {
+					let e = await r(n.system).catch(() => !1);
 					if (d !== g) return;
 					if (e) try {
 						let e = await v();
@@ -98,7 +98,6 @@ var m = Symbol("UserSystemRefreshHook"), h = (r) => {
 		}
 	};
 };
-//#endregion
 export { i as USER_PROBE_ENTITY, m as UserSystemRefreshHookKey, h as probeStatusFromError, g as useUserSystemProbe };
 
 //# sourceMappingURL=userSystemProbe.js.map

package/dist/domains/anzuUser/composables/userSystemProbe.js.map

@@ -1 +1 @@
-{"version":3,"file":"userSystemProbe.js","names":["axios","UserSystemRefreshHookKey","probeStatusFromError","error","AnzuApiResponseCodeError","AnzuApiForbiddenError","AnzuApiAxiosError","cause","useUserSystemProbe","params","axes","ref","emptyUserSystemAxes","user","generation","abortInFlight","descriptor","UserSystemLoad","UserSystemPresence","UserSystemAccess","token","endpoint","resolveProbeEndpoint","ask","useApiRequest","USER_PROBE_ENTITY","abort","execute","found","AnzuApiCancelledError","status","refreshHook","refreshed","retryError","classifyProbeStatus"],"sources":["../../../../src/domains/anzuUser/composables/userSystemProbe.ts"],"sourcesContent":["import { ref, type InjectionKey, type Ref } from 'vue'\nimport axios from 'axios'\nimport { AnzuApiAxiosError } from '@/shared/error/AnzuApiAxiosError'\nimport { AnzuApiCancelledError } from '@/shared/error/AnzuApiCancelledError'\nimport { AnzuApiForbiddenError } from '@/shared/error/AnzuApiForbiddenError'\nimport { AnzuApiResponseCodeError } from '@/shared/error/AnzuApiResponseCodeError'\nimport { HTTP_STATUS_FORBIDDEN, HTTP_STATUS_UNAUTHORIZED } from '@/shared/statusCodes'\nimport { USER_PROBE_ENTITY } from '@/domains/api/utils/apiErrors'\nimport { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport { type AnyUserSystemDescriptor, resolveProbeEndpoint } from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport {\n  classifyProbeStatus,\n  emptyUserSystemAxes,\n  UserSystemAccess,\n  UserSystemLoad,\n  UserSystemPresence,\n  type UserSystemAxes,\n} from '@/domains/anzuUser/utils/userSystemState'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\n\n/**\n * How an app refreshes a session for one system, and retries.\n *\n * The probe cannot do this itself: a first 401 is ambiguous -- expired session or no account --\n * and the only way to tell them apart is to refresh and ask again, with the session this admin\n * refreshes (its `createRefreshSession`, shared with its refresh interceptor). Without this hook a\n * panel would show an expired token as \"no account here\", which is exactly the confusion decision\n * 16 forbids.\n *\n * Returns true when the refresh succeeded and the call is worth repeating.\n */\nexport type UserSystemRefreshHook = (system: string) => Promise<boolean>\n\nexport { USER_PROBE_ENTITY }\n\nexport const UserSystemRefreshHookKey: InjectionKey<UserSystemRefreshHook> = Symbol('UserSystemRefreshHook')\n\n/**\n * The status the backend answered with, or null when nothing ever answered.\n *\n * Read off the axios failure the mapped error kept as its cause, not off the class. Going by class\n * alone misses exactly the answers that exist *because* the backend replied with a body: a\n * validation failure is `AnzuApiValidationError`, a dependency conflict is\n * `AnzuApiDependencyExistsError`, and both are 422s that have to be reported as such. Reported as\n * \"the system did not answer\" they would send the operator looking for an outage instead of at the\n * account whose stored data no longer validates -- which, with legacy rows, is the failure that\n * happens most.\n */\nexport const probeStatusFromError = (error: unknown): number | null => {\n  if (error instanceof AnzuApiResponseCodeError) return error.code\n  if (error instanceof AnzuApiForbiddenError) return HTTP_STATUS_FORBIDDEN\n  if (error instanceof AnzuApiAxiosError) return error.cause.response?.status ?? null\n  const cause = (error as { cause?: unknown } | null)?.cause\n  if (axios.isAxiosError(cause)) return cause.response?.status ?? null\n  if (axios.isAxiosError(error)) return error.response?.status ?? null\n\n  return null\n}\n\nexport interface UserSystemProbeResult {\n  axes: Ref<UserSystemAxes>\n  user: Ref<AnzuUser | null>\n  probe: (id: IntegerId) => Promise<void>\n  reset: () => void\n  cancel: () => void\n}\n\nexport interface UserSystemProbeParams {\n  descriptor: AnyUserSystemDescriptor\n  /** Usually injected once per page; passing it explicitly is for tests and one-off panels. */\n  refreshHook?: UserSystemRefreshHook | undefined\n}\n\n/**\n * One system's answer about one user.\n *\n * Reads through `endpoints[probe].get`, never a hard-coded path: in dam the choice is visible to\n * the operator, because `/adm/v1/anzu-user/{id}` has no gating there while `/adm/users/{id}` sits\n * behind `DAM_USER_READ` -- only the second can ever render \"you have no access\".\n *\n * Note for the app: a probe answering 404 is an expected result here, not a failure. The default\n * api error logger skips it; a logger of the app's own still receives it and should filter on\n * `status === 404 && entity === USER_PROBE_ENTITY`, or every absent account writes a line into the log.\n */\nexport const useUserSystemProbe = (params: UserSystemProbeParams): UserSystemProbeResult => {\n  const { descriptor, refreshHook } = params\n\n  const axes = ref<UserSystemAxes>(emptyUserSystemAxes())\n  const user = ref<AnzuUser | null>(null)\n\n  let generation = 0\n  /**\n   * The helper's abort handle for the request that is in flight.\n   *\n   * The generation token alone already stops a stale answer from being written; this is what stops\n   * the request itself. Leaving a page mid-search would otherwise leave up to eighteen calls\n   * running against backends nobody is waiting for any more.\n   */\n  let abortInFlight: (() => void) | null = null\n\n  const reset = () => {\n    axes.value = emptyUserSystemAxes()\n    user.value = null\n  }\n\n  const cancel = () => {\n    generation++\n    abortInFlight?.()\n    abortInFlight = null\n  }\n\n  const probe = async (id: IntegerId) => {\n    // A system switched off in configuration is a state to show, not a call to make.\n    if (!descriptor.isEnabled()) {\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        presence: UserSystemPresence.Unknown,\n        access: UserSystemAccess.ConfigDisabled,\n        enabled: 'unknown',\n      }\n      user.value = null\n      return\n    }\n\n    const token = ++generation\n    axes.value = { ...axes.value, load: UserSystemLoad.Loading }\n\n    const endpoint = resolveProbeEndpoint(descriptor)\n\n    const ask = async () => {\n      const { execute, abort } = useApiRequest<AnzuUser, null>({\n        client: descriptor.client,\n        method: 'GET',\n        system: descriptor.system,\n        entity: USER_PROBE_ENTITY,\n        validationSystem: 'common',\n        validationEntity: descriptor.entity,\n        urlTemplate: endpoint.get,\n      })\n      abortInFlight = abort\n      try {\n        return await execute({ urlParams: { id } })\n      } finally {\n        abortInFlight = null\n      }\n    }\n\n    try {\n      const found = await ask()\n      if (token !== generation) return\n      user.value = found\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        presence: UserSystemPresence.Present,\n        access: UserSystemAccess.Ok,\n        enabled: found.enabled,\n      }\n    } catch (error) {\n      if (token !== generation) return\n      if (error instanceof AnzuApiCancelledError) return\n\n      let status = probeStatusFromError(error)\n\n      // The one retry the classification depends on. Only after it has happened is a 401 a verdict\n      // rather than a question.\n      if (status === HTTP_STATUS_UNAUTHORIZED && refreshHook) {\n        const refreshed = await refreshHook(descriptor.system).catch(() => false)\n        if (token !== generation) return\n        if (refreshed) {\n          try {\n            const found = await ask()\n            if (token !== generation) return\n            user.value = found\n            axes.value = {\n              load: UserSystemLoad.Loaded,\n              presence: UserSystemPresence.Present,\n              access: UserSystemAccess.Ok,\n              enabled: found.enabled,\n            }\n            return\n          } catch (retryError) {\n            if (token !== generation) return\n            status = probeStatusFromError(retryError)\n          }\n        }\n      }\n\n      user.value = null\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        ...classifyProbeStatus(status),\n        enabled: 'unknown',\n      }\n    }\n  }\n\n  return { axes, user, probe, reset, cancel }\n}\n"],"mappings":";;;;;;;;;;;;AAoCA,IAAaC,IAAgE,OAAO,uBAAuB,GAa9FC,KAAwB,MAAkC;CACrE,IAAIC,aAAiBC,GAA0B,OAAOD,EAAM;CAC5D,IAAIA,aAAiBE,GAAuB,OAAA;CAC5C,IAAIF,aAAiBG,GAAmB,OAAOH,EAAM,MAAM,UAAU,UAAU;CAC/E,IAAMI,IAASJ,GAAsC;CAIrD,OAHIH,EAAM,aAAaO,CAAK,IAAUA,EAAM,UAAU,UAAU,OAC5DP,EAAM,aAAaG,CAAK,IAAUA,EAAM,UAAU,UAAU,OAEzD;AACT,GA2BaK,KAAsB,MAAyD;CAC1F,IAAM,EAAE,eAAY,mBAAgBC,GAE9BC,IAAOC,EAAoBC,EAAoB,CAAC,GAChDC,IAAOF,EAAqB,IAAI,GAElCG,IAAa,GAQbC,IAAqC;CAkGzC,OAAO;EAAE;EAAM;EAAM,cArFA,MAAkB;GAErC,IAAI,CAACC,EAAW,UAAU,GAAG;IAO3B,AANA,EAAK,QAAQ;KACX,MAAMC,EAAe;KACrB,UAAUC,EAAmB;KAC7B,QAAQC,EAAiB;KACzB,SAAS;IACX,GACA,EAAK,QAAQ;IACb;GACF;GAEA,IAAMC,IAAQ,EAAEN;GAChB,EAAK,QAAQ;IAAE,GAAGJ,EAAK;IAAO,MAAMO,EAAe;GAAQ;GAE3D,IAAMI,IAAWC,EAAqBN,CAAU,GAE1CO,IAAM,YAAY;IACtB,IAAM,EAAE,YAAS,aAAUC,EAA8B;KACvD,QAAQR,EAAW;KACnB,QAAQ;KACR,QAAQA,EAAW;KACnB,QAAQS;KACR,kBAAkB;KAClB,kBAAkBT,EAAW;KAC7B,aAAaK,EAAS;IACxB,CAAC;IACD,IAAgBK;IAChB,IAAI;KACF,OAAO,MAAMC,EAAQ,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;IAC5C,UAAU;KACR,IAAgB;IAClB;GACF;GAEA,IAAI;IACF,IAAMC,IAAQ,MAAML,EAAI;IACxB,IAAIH,MAAUN,GAAY;IAE1B,AADA,EAAK,QAAQc,GACb,EAAK,QAAQ;KACX,MAAMX,EAAe;KACrB,UAAUC,EAAmB;KAC7B,QAAQC,EAAiB;KACzB,SAASS,EAAM;IACjB;GACF,SAASzB,GAAO;IAEd,IADIiB,MAAUN,KACVX,aAAiB0B,GAAuB;IAE5C,IAAIC,IAAS5B,EAAqBC,CAAK;IAIvC,IAAI2B,MAAA,OAAuCC,GAAa;KACtD,IAAMC,IAAY,MAAMD,EAAYf,EAAW,MAAM,CAAC,CAAC,YAAY,EAAK;KACxE,IAAII,MAAUN,GAAY;KAC1B,IAAIkB,GACF,IAAI;MACF,IAAMJ,IAAQ,MAAML,EAAI;MACxB,IAAIH,MAAUN,GAAY;MAE1B,AADA,EAAK,QAAQc,GACb,EAAK,QAAQ;OACX,MAAMX,EAAe;OACrB,UAAUC,EAAmB;OAC7B,QAAQC,EAAiB;OACzB,SAASS,EAAM;MACjB;MACA;KACF,SAASK,GAAY;MACnB,IAAIb,MAAUN,GAAY;MAC1B,IAASZ,EAAqB+B,CAAU;KAC1C;IAEJ;IAGA,AADA,EAAK,QAAQ,MACb,EAAK,QAAQ;KACX,MAAMhB,EAAe;KACrB,GAAGiB,EAAoBJ,CAAM;KAC7B,SAAS;IACX;GACF;EACF;EAE4B,aAhGR;GAElB,AADA,EAAK,QAAQlB,EAAoB,GACjC,EAAK,QAAQ;EACf;EA6FmC,cA3Fd;GAGnB,AAFA,KACAG,IAAgB,GAChB,IAAgB;EAClB;CAuF0C;AAC5C"}
+{"version":3,"file":"userSystemProbe.js","names":["axios","UserSystemRefreshHookKey","probeStatusFromError","error","AnzuApiResponseCodeError","AnzuApiForbiddenError","AnzuApiAxiosError","cause","useUserSystemProbe","params","axes","ref","emptyUserSystemAxes","user","generation","abortInFlight","descriptor","UserSystemLoad","UserSystemPresence","UserSystemAccess","token","endpoint","resolveProbeEndpoint","ask","useApiRequest","USER_PROBE_ENTITY","abort","execute","found","AnzuApiCancelledError","status","refreshHook","refreshed","retryError","classifyProbeStatus"],"sources":["../../../../src/domains/anzuUser/composables/userSystemProbe.ts"],"sourcesContent":["import { ref, type InjectionKey, type Ref } from 'vue'\nimport axios from 'axios'\nimport { AnzuApiAxiosError } from '@/shared/error/AnzuApiAxiosError'\nimport { AnzuApiCancelledError } from '@/shared/error/AnzuApiCancelledError'\nimport { AnzuApiForbiddenError } from '@/shared/error/AnzuApiForbiddenError'\nimport { AnzuApiResponseCodeError } from '@/shared/error/AnzuApiResponseCodeError'\nimport { HTTP_STATUS_FORBIDDEN, HTTP_STATUS_UNAUTHORIZED } from '@/shared/statusCodes'\nimport { USER_PROBE_ENTITY } from '@/domains/api/utils/apiErrors'\nimport { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport { type AnyUserSystemDescriptor, resolveProbeEndpoint } from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport {\n  classifyProbeStatus,\n  emptyUserSystemAxes,\n  UserSystemAccess,\n  UserSystemLoad,\n  UserSystemPresence,\n  type UserSystemAxes,\n} from '@/domains/anzuUser/utils/userSystemState'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\n\n/**\n * Refreshes a system's session; returns true when the call is worth retrying.\n * A first 401 may be an expired session or no account. Only a refresh and retry tells them apart (decision 16).\n */\nexport type UserSystemRefreshHook = (system: string) => Promise<boolean>\n\nexport { USER_PROBE_ENTITY }\n\nexport const UserSystemRefreshHookKey: InjectionKey<UserSystemRefreshHook> = Symbol('UserSystemRefreshHook')\n\n/**\n * The backend status, or null when nothing answered.\n * Read from the axios cause, not the error class. `AnzuApiValidationError`\n * and `AnzuApiDependencyExistsError` are 422s and must be reported as such.\n */\nexport const probeStatusFromError = (error: unknown): number | null => {\n  if (error instanceof AnzuApiResponseCodeError) return error.code\n  if (error instanceof AnzuApiForbiddenError) return HTTP_STATUS_FORBIDDEN\n  if (error instanceof AnzuApiAxiosError) return error.cause.response?.status ?? null\n  const cause = (error as { cause?: unknown } | null)?.cause\n  if (axios.isAxiosError(cause)) return cause.response?.status ?? null\n  if (axios.isAxiosError(error)) return error.response?.status ?? null\n\n  return null\n}\n\nexport interface UserSystemProbeResult {\n  axes: Ref<UserSystemAxes>\n  user: Ref<AnzuUser | null>\n  probe: (id: IntegerId) => Promise<void>\n  reset: () => void\n  cancel: () => void\n}\n\nexport interface UserSystemProbeParams {\n  descriptor: AnyUserSystemDescriptor\n  /** Usually injected once per page; passing it explicitly is for tests and one-off panels. */\n  refreshHook?: UserSystemRefreshHook | undefined\n}\n\n/**\n * Reads through `endpoints[probe].get`, never a hard-coded path (dam gates only `/adm/users/{id}`).\n * A 404 here is expected. A custom app error logger should skip `status === 404 && entity === USER_PROBE_ENTITY`.\n */\nexport const useUserSystemProbe = (params: UserSystemProbeParams): UserSystemProbeResult => {\n  const { descriptor, refreshHook } = params\n\n  const axes = ref<UserSystemAxes>(emptyUserSystemAxes())\n  const user = ref<AnzuUser | null>(null)\n\n  let generation = 0\n  /**\n   * Aborts the in-flight request. The generation token only drops stale answers.\n   * Without this, leaving mid-search leaves up to eighteen calls running.\n   */\n  let abortInFlight: (() => void) | null = null\n\n  const reset = () => {\n    axes.value = emptyUserSystemAxes()\n    user.value = null\n  }\n\n  const cancel = () => {\n    generation++\n    abortInFlight?.()\n    abortInFlight = null\n  }\n\n  const probe = async (id: IntegerId) => {\n    // A system disabled in config is shown as a state, not called.\n    if (!descriptor.isEnabled()) {\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        presence: UserSystemPresence.Unknown,\n        access: UserSystemAccess.ConfigDisabled,\n        enabled: 'unknown',\n      }\n      user.value = null\n      return\n    }\n\n    const token = ++generation\n    axes.value = { ...axes.value, load: UserSystemLoad.Loading }\n\n    const endpoint = resolveProbeEndpoint(descriptor)\n\n    const ask = async () => {\n      const { execute, abort } = useApiRequest<AnzuUser, null>({\n        client: descriptor.client,\n        method: 'GET',\n        system: descriptor.system,\n        entity: USER_PROBE_ENTITY,\n        validationSystem: 'common',\n        validationEntity: descriptor.entity,\n        urlTemplate: endpoint.get,\n      })\n      abortInFlight = abort\n      try {\n        return await execute({ urlParams: { id } })\n      } finally {\n        abortInFlight = null\n      }\n    }\n\n    try {\n      const found = await ask()\n      if (token !== generation) return\n      user.value = found\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        presence: UserSystemPresence.Present,\n        access: UserSystemAccess.Ok,\n        enabled: found.enabled,\n      }\n    } catch (error) {\n      if (token !== generation) return\n      if (error instanceof AnzuApiCancelledError) return\n\n      let status = probeStatusFromError(error)\n\n      // A 401 is only a verdict after this refresh and retry.\n      if (status === HTTP_STATUS_UNAUTHORIZED && refreshHook) {\n        const refreshed = await refreshHook(descriptor.system).catch(() => false)\n        if (token !== generation) return\n        if (refreshed) {\n          try {\n            const found = await ask()\n            if (token !== generation) return\n            user.value = found\n            axes.value = {\n              load: UserSystemLoad.Loaded,\n              presence: UserSystemPresence.Present,\n              access: UserSystemAccess.Ok,\n              enabled: found.enabled,\n            }\n            return\n          } catch (retryError) {\n            if (token !== generation) return\n            status = probeStatusFromError(retryError)\n          }\n        }\n      }\n\n      user.value = null\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        ...classifyProbeStatus(status),\n        enabled: 'unknown',\n      }\n    }\n  }\n\n  return { axes, user, probe, reset, cancel }\n}\n"],"mappings":";;;;;;;;;;;;AA6BA,IAAaC,IAAgE,OAAO,uBAAuB,GAO9FC,KAAwB,MAAkC;CACrE,IAAIC,aAAiBC,GAA0B,OAAOD,EAAM;CAC5D,IAAIA,aAAiBE,GAAuB,OAAA;CAC5C,IAAIF,aAAiBG,GAAmB,OAAOH,EAAM,MAAM,UAAU,UAAU;CAC/E,IAAMI,IAASJ,GAAsC;CAIrD,OAHIH,EAAM,aAAaO,CAAK,IAAUA,EAAM,UAAU,UAAU,OAC5DP,EAAM,aAAaG,CAAK,IAAUA,EAAM,UAAU,UAAU,OAEzD;AACT,GAoBaK,KAAsB,MAAyD;CAC1F,IAAM,EAAE,eAAY,mBAAgBC,GAE9BC,IAAOC,EAAoBC,EAAoB,CAAC,GAChDC,IAAOF,EAAqB,IAAI,GAElCG,IAAa,GAKbC,IAAqC;CAiGzC,OAAO;EAAE;EAAM;EAAM,cApFA,MAAkB;GAErC,IAAI,CAACC,EAAW,UAAU,GAAG;IAO3B,AANA,EAAK,QAAQ;KACX,MAAMC,EAAe;KACrB,UAAUC,EAAmB;KAC7B,QAAQC,EAAiB;KACzB,SAAS;IACX,GACA,EAAK,QAAQ;IACb;GACF;GAEA,IAAMC,IAAQ,EAAEN;GAChB,EAAK,QAAQ;IAAE,GAAGJ,EAAK;IAAO,MAAMO,EAAe;GAAQ;GAE3D,IAAMI,IAAWC,EAAqBN,CAAU,GAE1CO,IAAM,YAAY;IACtB,IAAM,EAAE,YAAS,aAAUC,EAA8B;KACvD,QAAQR,EAAW;KACnB,QAAQ;KACR,QAAQA,EAAW;KACnB,QAAQS;KACR,kBAAkB;KAClB,kBAAkBT,EAAW;KAC7B,aAAaK,EAAS;IACxB,CAAC;IACD,IAAgBK;IAChB,IAAI;KACF,OAAO,MAAMC,EAAQ,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;IAC5C,UAAU;KACR,IAAgB;IAClB;GACF;GAEA,IAAI;IACF,IAAMC,IAAQ,MAAML,EAAI;IACxB,IAAIH,MAAUN,GAAY;IAE1B,AADA,EAAK,QAAQc,GACb,EAAK,QAAQ;KACX,MAAMX,EAAe;KACrB,UAAUC,EAAmB;KAC7B,QAAQC,EAAiB;KACzB,SAASS,EAAM;IACjB;GACF,SAASzB,GAAO;IAEd,IADIiB,MAAUN,KACVX,aAAiB0B,GAAuB;IAE5C,IAAIC,IAAS5B,EAAqBC,CAAK;IAGvC,IAAI2B,MAAA,OAAuCC,GAAa;KACtD,IAAMC,IAAY,MAAMD,EAAYf,EAAW,MAAM,CAAC,CAAC,YAAY,EAAK;KACxE,IAAII,MAAUN,GAAY;KAC1B,IAAIkB,GACF,IAAI;MACF,IAAMJ,IAAQ,MAAML,EAAI;MACxB,IAAIH,MAAUN,GAAY;MAE1B,AADA,EAAK,QAAQc,GACb,EAAK,QAAQ;OACX,MAAMX,EAAe;OACrB,UAAUC,EAAmB;OAC7B,QAAQC,EAAiB;OACzB,SAASS,EAAM;MACjB;MACA;KACF,SAASK,GAAY;MACnB,IAAIb,MAAUN,GAAY;MAC1B,IAASZ,EAAqB+B,CAAU;KAC1C;IAEJ;IAGA,AADA,EAAK,QAAQ,MACb,EAAK,QAAQ;KACX,MAAMhB,EAAe;KACrB,GAAGiB,EAAoBJ,CAAM;KAC7B,SAAS;IACX;GACF;EACF;EAE4B,aA/FR;GAElB,AADA,EAAK,QAAQlB,EAAoB,GACjC,EAAK,QAAQ;EACf;EA4FmC,cA1Fd;GAGnB,AAFA,KACAG,IAAgB,GAChB,IAAgB;EAClB;CAsF0C;AAC5C"}

package/dist/domains/anzuUser/factory/AnzuUserFactory.js

@@ -1,9 +1,9 @@
-import { isString as e } from "../../../shared/utils/common.js";
-import { dateTimeNow as t } from "../../../shared/utils/datetime.js";
-//#region src/domains/anzuUser/factory/AnzuUserFactory.ts
+import { dateTimeNow as e } from "../../../shared/utils/datetime.js";
+import { isString as t } from "../../../shared/utils/common.js";
+// src/domains/anzuUser/factory/AnzuUserFactory.ts
 function n(n = "", r = "user") {
 	let i = n, a = r;
-	return { createAnzuUser: (n, r) => (e(n) && (i = n), e(r) && (a = r), {
+	return { createAnzuUser: (n, r) => (t(n) && (i = n), t(r) && (a = r), {
 		id: null,
 		email: "",
 		avatar: {
@@ -21,15 +21,14 @@ function n(n = "", r = "user") {
 		permissions: {},
 		resolvedPermissions: {},
 		roles: [],
-		modifiedAt: t(),
+		modifiedAt: e(),
 		modifiedBy: null,
-		createdAt: t(),
+		createdAt: e(),
 		createdBy: null,
 		_system: i,
 		_resourceName: a
 	}) };
 }
-//#endregion
 export { n as useAnzuUserFactory };
 
 //# sourceMappingURL=AnzuUserFactory.js.map

package/dist/domains/anzuUser/filter/anzuUserFilter.d.ts

@@ -23,28 +23,18 @@ declare const anzuUserListFields: ({
 type ListFields = typeof anzuUserListFields;
 export declare const anzuUserFilterStorageKey: (system: string) => string;
 /**
- * The three fields every system has, plus whatever that system adds.
- *
- * The extras are a parameter rather than fields in the list above because the same filter is not
- * the same query everywhere: cms asks for permission groups with `memberOf` and dam with `custom`,
- * and cms has `allowedSites`, which exists nowhere else. Hard-coding either variant would send the
- * wrong query to the other backend, and leaving them out costs those two lists filters they have
- * today.
- *
- * `AFilterWrapper` draws any field that is not `render.skip` by itself, so a plain extra field
- * needs nothing else; one that wants its own widget -- a remote autocomplete -- is passed through
- * the matching slot.
+ * Common fields plus per-system extras.
+ * Extras are a parameter because backends differ: cms filters groups
+ * with `memberOf`, dam with `custom`, and only cms has `allowedSites`.
+ * Extra fields render automatically; a custom widget goes through the matching slot.
  */
 export declare function useAnzuUserListFilter<E extends readonly MakeFilterOption[] = []>(system: string, extraFields?: E): {
     filterConfig: FilterConfig<readonly [...ListFields, ...E]>;
     filterData: FilterData<readonly [...ListFields, ...E]>;
 };
 /**
- * Exact match on e-mail, for the cross-system search.
- *
- * `startsWith` -- what the list filter uses and what admin-inhouse's search used -- cannot answer
- * the question that search asks. "Is this person here under this address" has to be `eq`, or
- * `jozko@sme.sk` matches `jozko.mrkvicka@sme.sk` and the fan-out reports the wrong identity.
+ * Exact e-mail match for cross-system search.
+ * `startsWith` would match `jozko@sme.sk` to `jozko.mrkvicka@sme.sk` and report the wrong identity.
  */
 export declare function useAnzuUserEmailLookupFilter(): {
     filterConfig: FilterConfig<{

package/dist/domains/anzuUser/filter/anzuUserFilter.js

@@ -1,6 +1,6 @@
 import { createFilter as e, createFilterStore as t } from "../../filters/composables/filterFactory.js";
 import { ANZU_USER_ENTITY as n } from "../api/anzuUserApi.js";
-//#region src/domains/anzuUser/filter/anzuUserFilter.ts
+// src/domains/anzuUser/filter/anzuUserFilter.ts
 var r = [
 	{
 		name: "id",
@@ -47,7 +47,6 @@ function s() {
 		filterData: a
 	};
 }
-//#endregion
 export { a as anzuUserFilterStorageKey, s as useAnzuUserEmailLookupFilter, o as useAnzuUserListFilter };
 
 //# sourceMappingURL=anzuUserFilter.js.map

package/dist/domains/anzuUser/filter/anzuUserFilter.js.map

@@ -1 +1 @@
-{"version":3,"file":"anzuUserFilter.js","names":["anzuUserListFields","listStores","anzuUserFilterStorageKey","system","useAnzuUserListFilter","extras","extraFields","fields","key","field","store","createFilterStore","createFilter","ANZU_USER_ENTITY","useAnzuUserEmailLookupFilter"],"sources":["../../../../src/domains/anzuUser/filter/anzuUserFilter.ts"],"sourcesContent":["import {\n  createFilter,\n  createFilterStore,\n  type FilterConfig,\n  type FilterData,\n  type MakeFilterOption,\n} from '@/domains/filters/composables/filterFactory'\nimport { ANZU_USER_ENTITY } from '@/domains/anzuUser/api/anzuUserApi'\n\nconst anzuUserListFields = [\n  { name: 'id' as const, default: null, type: 'integer' },\n  { name: 'email' as const, variant: 'startsWith', default: null, type: 'string', render: { skip: true } },\n  { name: 'enabled' as const, default: null, type: 'boolean' },\n] satisfies readonly MakeFilterOption[]\n\ntype ListFields = typeof anzuUserListFields\n\n/** One store per system; see the note in `permissionGroupFilter`. */\nconst listStores = new Map<string, FilterData<readonly MakeFilterOption[]>>()\n\nexport const anzuUserFilterStorageKey = (system: string) => `commonAnzuUser_${system}`\n\n/**\n * The three fields every system has, plus whatever that system adds.\n *\n * The extras are a parameter rather than fields in the list above because the same filter is not\n * the same query everywhere: cms asks for permission groups with `memberOf` and dam with `custom`,\n * and cms has `allowedSites`, which exists nowhere else. Hard-coding either variant would send the\n * wrong query to the other backend, and leaving them out costs those two lists filters they have\n * today.\n *\n * `AFilterWrapper` draws any field that is not `render.skip` by itself, so a plain extra field\n * needs nothing else; one that wants its own widget -- a remote autocomplete -- is passed through\n * the matching slot.\n */\nexport function useAnzuUserListFilter<E extends readonly MakeFilterOption[] = []>(\n  system: string,\n  extraFields?: E\n): {\n  filterConfig: FilterConfig<readonly [...ListFields, ...E]>\n  filterData: FilterData<readonly [...ListFields, ...E]>\n} {\n  const extras = (extraFields ?? []) as readonly MakeFilterOption[]\n  const fields = [...anzuUserListFields, ...extras] as unknown as readonly [...ListFields, ...E]\n  // The extras are part of the identity: one list asking for `allowedSites` and another that does\n  // not are two different stores, and sharing one would carry a value the second cannot clear.\n  const key = [system, ...extras.map((field) => field.name)].join('|')\n\n  let store = listStores.get(key)\n  if (!store) {\n    store = createFilterStore(fields) as FilterData<readonly MakeFilterOption[]>\n    listStores.set(key, store)\n  }\n\n  const { filterConfig, filterData } = createFilter(fields, store as FilterData<readonly [...ListFields, ...E]>, {\n    system: 'common',\n    subject: ANZU_USER_ENTITY,\n  })\n\n  return { filterConfig, filterData }\n}\n\n/**\n * Exact match on e-mail, for the cross-system search.\n *\n * `startsWith` -- what the list filter uses and what admin-inhouse's search used -- cannot answer\n * the question that search asks. \"Is this person here under this address\" has to be `eq`, or\n * `jozko@sme.sk` matches `jozko.mrkvicka@sme.sk` and the fan-out reports the wrong identity.\n */\nexport function useAnzuUserEmailLookupFilter() {\n  const fields = [\n    { name: 'email' as const, variant: 'eq', default: null, type: 'string' },\n  ] satisfies readonly MakeFilterOption[]\n\n  const { filterConfig, filterData } = createFilter(fields, createFilterStore(fields), {\n    system: 'common',\n    subject: ANZU_USER_ENTITY,\n  })\n\n  return { filterConfig, filterData }\n}\n\n/** Test seam; the list stores are module state. */\nexport const resetAnzuUserListFilters = () => {\n  listStores.clear()\n}\n"],"mappings":";;;AASA,IAAMA,IAAqB;CACzB;EAAE,MAAM;EAAe,SAAS;EAAM,MAAM;CAAU;CACtD;EAAE,MAAM;EAAkB,SAAS;EAAc,SAAS;EAAM,MAAM;EAAU,QAAQ,EAAE,MAAM,GAAK;CAAE;CACvG;EAAE,MAAM;EAAoB,SAAS;EAAM,MAAM;CAAU;AAC7D,GAKMC,oBAAa,IAAI,IAAqD,GAE/DC,KAA4B,MAAmB,kBAAkBC;AAe9E,SAAgBC,EACd,GACA,GAIA;CACA,IAAMC,IAAUC,KAAe,CAAC,GAC1BC,IAAS,CAAC,GAAGP,GAAoB,GAAGK,CAAM,GAG1CG,IAAM,CAACL,GAAQ,GAAGE,EAAO,KAAK,MAAUI,EAAM,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,GAE/DC,IAAQT,EAAW,IAAIO,CAAG;CAC9B,AAAKE,MACH,IAAQC,EAAkBJ,CAAM,GAChCN,EAAW,IAAIO,GAAKE,CAAK;CAG3B,IAAM,EAAE,iBAAc,kBAAeE,EAAaL,GAAQG,GAAqD;EAC7G,QAAQ;EACR,SAASG;CACX,CAAC;CAED,OAAO;EAAE;EAAc;CAAW;AACpC;AASA,SAAgBC,IAA+B;CAC7C,IAAMP,IAAS,CACb;EAAE,MAAM;EAAkB,SAAS;EAAM,SAAS;EAAM,MAAM;CAAS,CACzE,GAEM,EAAE,iBAAc,kBAAeK,EAAaL,GAAQI,EAAkBJ,CAAM,GAAG;EACnF,QAAQ;EACR,SAASM;CACX,CAAC;CAED,OAAO;EAAE;EAAc;CAAW;AACpC"}
+{"version":3,"file":"anzuUserFilter.js","names":["anzuUserListFields","listStores","anzuUserFilterStorageKey","system","useAnzuUserListFilter","extras","extraFields","fields","key","field","store","createFilterStore","createFilter","ANZU_USER_ENTITY","useAnzuUserEmailLookupFilter"],"sources":["../../../../src/domains/anzuUser/filter/anzuUserFilter.ts"],"sourcesContent":["import {\n  createFilter,\n  createFilterStore,\n  type FilterConfig,\n  type FilterData,\n  type MakeFilterOption,\n} from '@/domains/filters/composables/filterFactory'\nimport { ANZU_USER_ENTITY } from '@/domains/anzuUser/api/anzuUserApi'\n\nconst anzuUserListFields = [\n  { name: 'id' as const, default: null, type: 'integer' },\n  { name: 'email' as const, variant: 'startsWith', default: null, type: 'string', render: { skip: true } },\n  { name: 'enabled' as const, default: null, type: 'boolean' },\n] satisfies readonly MakeFilterOption[]\n\ntype ListFields = typeof anzuUserListFields\n\n/** One store per system; see the note in `permissionGroupFilter`. */\nconst listStores = new Map<string, FilterData<readonly MakeFilterOption[]>>()\n\nexport const anzuUserFilterStorageKey = (system: string) => `commonAnzuUser_${system}`\n\n/**\n * Common fields plus per-system extras.\n * Extras are a parameter because backends differ: cms filters groups\n * with `memberOf`, dam with `custom`, and only cms has `allowedSites`.\n * Extra fields render automatically; a custom widget goes through the matching slot.\n */\nexport function useAnzuUserListFilter<E extends readonly MakeFilterOption[] = []>(\n  system: string,\n  extraFields?: E\n): {\n  filterConfig: FilterConfig<readonly [...ListFields, ...E]>\n  filterData: FilterData<readonly [...ListFields, ...E]>\n} {\n  const extras = (extraFields ?? []) as readonly MakeFilterOption[]\n  const fields = [...anzuUserListFields, ...extras] as unknown as readonly [...ListFields, ...E]\n  // Extras are part of the store key. A shared store would carry a value the other list cannot clear.\n  const key = [system, ...extras.map((field) => field.name)].join('|')\n\n  let store = listStores.get(key)\n  if (!store) {\n    store = createFilterStore(fields) as FilterData<readonly MakeFilterOption[]>\n    listStores.set(key, store)\n  }\n\n  const { filterConfig, filterData } = createFilter(fields, store as FilterData<readonly [...ListFields, ...E]>, {\n    system: 'common',\n    subject: ANZU_USER_ENTITY,\n  })\n\n  return { filterConfig, filterData }\n}\n\n/**\n * Exact e-mail match for cross-system search.\n * `startsWith` would match `jozko@sme.sk` to `jozko.mrkvicka@sme.sk` and report the wrong identity.\n */\nexport function useAnzuUserEmailLookupFilter() {\n  const fields = [\n    { name: 'email' as const, variant: 'eq', default: null, type: 'string' },\n  ] satisfies readonly MakeFilterOption[]\n\n  const { filterConfig, filterData } = createFilter(fields, createFilterStore(fields), {\n    system: 'common',\n    subject: ANZU_USER_ENTITY,\n  })\n\n  return { filterConfig, filterData }\n}\n\n/** Test seam; the list stores are module state. */\nexport const resetAnzuUserListFilters = () => {\n  listStores.clear()\n}\n"],"mappings":";;;AASA,IAAMA,IAAqB;CACzB;EAAE,MAAM;EAAe,SAAS;EAAM,MAAM;CAAU;CACtD;EAAE,MAAM;EAAkB,SAAS;EAAc,SAAS;EAAM,MAAM;EAAU,QAAQ,EAAE,MAAM,GAAK;CAAE;CACvG;EAAE,MAAM;EAAoB,SAAS;EAAM,MAAM;CAAU;AAC7D,GAKMC,oBAAa,IAAI,IAAqD,GAE/DC,KAA4B,MAAmB,kBAAkBC;AAQ9E,SAAgBC,EACd,GACA,GAIA;CACA,IAAMC,IAAUC,KAAe,CAAC,GAC1BC,IAAS,CAAC,GAAGP,GAAoB,GAAGK,CAAM,GAE1CG,IAAM,CAACL,GAAQ,GAAGE,EAAO,KAAK,MAAUI,EAAM,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,GAE/DC,IAAQT,EAAW,IAAIO,CAAG;CAC9B,AAAKE,MACH,IAAQC,EAAkBJ,CAAM,GAChCN,EAAW,IAAIO,GAAKE,CAAK;CAG3B,IAAM,EAAE,iBAAc,kBAAeE,EAAaL,GAAQG,GAAqD;EAC7G,QAAQ;EACR,SAASG;CACX,CAAC;CAED,OAAO;EAAE;EAAc;CAAW;AACpC;AAMA,SAAgBC,IAA+B;CAC7C,IAAMP,IAAS,CACb;EAAE,MAAM;EAAkB,SAAS;EAAM,SAAS;EAAM,MAAM;CAAS,CACzE,GAEM,EAAE,iBAAc,kBAAeK,EAAaL,GAAQI,EAAkBJ,CAAM,GAAG;EACnF,QAAQ;EACR,SAASM;CACX,CAAC;CAED,OAAO;EAAE;EAAc;CAAW;AACpC"}

package/dist/domains/anzuUser/store/anzuUserStore.d.ts

@@ -1,9 +1,5 @@
 import { AnzuUser } from '../../../shared/types/AnzuUser';
-/**
- * The one user the owning form is editing. Cross-system pages do not use this -- they hold a
- * result per system and never a single "current" user -- so it stays a single record, the way the
- * admins have it.
- */
+/** The single user the owning form edits. Cross-system pages keep per-system results instead. */
 export declare const useAnzuUserOneStore: import('pinia').SetupStoreDefinition<"commonAdminAnzuUserOneStore", {
     anzuUser: import('vue').Ref<{
         enabled: boolean;

package/dist/domains/anzuUser/store/anzuUserStore.js

@@ -1,7 +1,7 @@
 import { useAnzuUserFactory as e } from "../factory/AnzuUserFactory.js";
 import { ref as t } from "vue";
 import { defineStore as n } from "pinia";
-//#region src/domains/anzuUser/store/anzuUserStore.ts
+// src/domains/anzuUser/store/anzuUserStore.ts
 var r = n("commonAdminAnzuUserOneStore", () => {
 	let { createAnzuUser: n } = e(), r = t(n()), i = t(!1);
 	function a(e) {
@@ -21,7 +21,6 @@ var r = n("commonAdminAnzuUserOneStore", () => {
 		reset: s
 	};
 });
-//#endregion
 export { r as useAnzuUserOneStore };
 
 //# sourceMappingURL=anzuUserStore.js.map

package/dist/domains/anzuUser/store/anzuUserStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"anzuUserStore.js","names":["useAnzuUserOneStore","defineStore","useAnzuUserFactory","anzuUser","ref","createAnzuUser","loadingAnzuUser","setAnzuUser","newAnzuUser","setLoadingAnzuUser","loading","reset","system","resourceName"],"sources":["../../../../src/domains/anzuUser/store/anzuUserStore.ts"],"sourcesContent":["import { acceptHMRUpdate, defineStore } from 'pinia'\nimport { ref } from 'vue'\nimport { useAnzuUserFactory } from '@/domains/anzuUser/factory/AnzuUserFactory'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\n\n/**\n * The one user the owning form is editing. Cross-system pages do not use this -- they hold a\n * result per system and never a single \"current\" user -- so it stays a single record, the way the\n * admins have it.\n */\nexport const useAnzuUserOneStore = defineStore('commonAdminAnzuUserOneStore', () => {\n  const { createAnzuUser } = useAnzuUserFactory()\n\n  const anzuUser = ref<AnzuUser>(createAnzuUser())\n  const loadingAnzuUser = ref(false)\n\n  function setAnzuUser(newAnzuUser: AnzuUser) {\n    anzuUser.value = newAnzuUser\n  }\n\n  function setLoadingAnzuUser(loading: boolean) {\n    loadingAnzuUser.value = loading\n  }\n\n  function reset(system = '', resourceName = 'user') {\n    anzuUser.value = createAnzuUser(system, resourceName)\n    loadingAnzuUser.value = false\n  }\n\n  return {\n    anzuUser,\n    loadingAnzuUser,\n    setAnzuUser,\n    setLoadingAnzuUser,\n    reset,\n  }\n})\n\nif (import.meta.hot) {\n  import.meta.hot.accept(acceptHMRUpdate(useAnzuUserOneStore, import.meta.hot))\n}\n"],"mappings":";;;;AAUA,IAAaA,IAAsBC,EAAY,qCAAqC;CAClF,IAAM,EAAE,sBAAmBC,EAAmB,GAExCC,IAAWC,EAAcC,EAAe,CAAC,GACzCC,IAAkBF,EAAI,EAAK;CAEjC,SAASG,EAAY,GAAuB;EAC1C,EAAS,QAAQC;CACnB;CAEA,SAASC,EAAmB,GAAkB;EAC5C,EAAgB,QAAQC;CAC1B;CAEA,SAASC,EAAM,IAAS,IAAI,IAAe,QAAQ;EAEjD,AADA,EAAS,QAAQN,EAAeO,GAAQC,CAAY,GACpD,EAAgB,QAAQ;CAC1B;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;CACF;AACF,CAAC"}
+{"version":3,"file":"anzuUserStore.js","names":["useAnzuUserOneStore","defineStore","useAnzuUserFactory","anzuUser","ref","createAnzuUser","loadingAnzuUser","setAnzuUser","newAnzuUser","setLoadingAnzuUser","loading","reset","system","resourceName"],"sources":["../../../../src/domains/anzuUser/store/anzuUserStore.ts"],"sourcesContent":["import { acceptHMRUpdate, defineStore } from 'pinia'\nimport { ref } from 'vue'\nimport { useAnzuUserFactory } from '@/domains/anzuUser/factory/AnzuUserFactory'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\n\n/** The single user the owning form edits. Cross-system pages keep per-system results instead. */\nexport const useAnzuUserOneStore = defineStore('commonAdminAnzuUserOneStore', () => {\n  const { createAnzuUser } = useAnzuUserFactory()\n\n  const anzuUser = ref<AnzuUser>(createAnzuUser())\n  const loadingAnzuUser = ref(false)\n\n  function setAnzuUser(newAnzuUser: AnzuUser) {\n    anzuUser.value = newAnzuUser\n  }\n\n  function setLoadingAnzuUser(loading: boolean) {\n    loadingAnzuUser.value = loading\n  }\n\n  function reset(system = '', resourceName = 'user') {\n    anzuUser.value = createAnzuUser(system, resourceName)\n    loadingAnzuUser.value = false\n  }\n\n  return {\n    anzuUser,\n    loadingAnzuUser,\n    setAnzuUser,\n    setLoadingAnzuUser,\n    reset,\n  }\n})\n\nif (import.meta.hot) {\n  import.meta.hot.accept(acceptHMRUpdate(useAnzuUserOneStore, import.meta.hot))\n}\n"],"mappings":";;;;AAMA,IAAaA,IAAsBC,EAAY,qCAAqC;CAClF,IAAM,EAAE,sBAAmBC,EAAmB,GAExCC,IAAWC,EAAcC,EAAe,CAAC,GACzCC,IAAkBF,EAAI,EAAK;CAEjC,SAASG,EAAY,GAAuB;EAC1C,EAAS,QAAQC;CACnB;CAEA,SAASC,EAAmB,GAAkB;EAC5C,EAAgB,QAAQC;CAC1B;CAEA,SAASC,EAAM,IAAS,IAAI,IAAe,QAAQ;EAEjD,AADA,EAAS,QAAQN,EAAeO,GAAQC,CAAY,GACpD,EAAgB,QAAQ;CAC1B;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;CACF;AACF,CAAC"}

package/dist/domains/anzuUser/store/userCrossSystemStore.d.ts

@@ -35,25 +35,14 @@ export interface BulkLogEntry {
     system: string;
     outcome: BulkOutcomeType;
     /**
-     * Which run the line belongs to.
-     *
-     * The log survives a run so that a retry does not erase the systems that succeeded a minute ago,
-     * and the retry button acts on whatever the log calls failed. Without these two fields a failed
-     * metadata write would be retried as a disable, and a previous person's failures would be retried
-     * against the id currently on screen -- neither `setEnabled` nor `writeMetadata` can tell it is
-     * being asked about a different action or a different account.
+     * The run this line belongs to. The log survives so a retry keeps earlier successes.
+     * Without these fields a retry could repeat the wrong action or target the person now on screen.
      */
     action: BulkActionType;
     subjectId: IntegerIdNullable;
     detail?: string;
 }
-/**
- * Search results and the bulk run live here, not inside the dialog's component.
- *
- * The dialog can be closed while the calls are still going -- one dead backend running into its
- * timeout must not lock the screen -- and state owned by the component would be thrown away with
- * it. The results stay on the page either way.
- */
+/** Kept in a store, not the dialog. The dialog can close while calls run, and the results must survive. */
 export declare const useUserCrossSystemStore: import('pinia').SetupStoreDefinition<"commonAdminUserCrossSystemStore", {
     searchTerm: import('vue').Ref<string, string>;
     resolvedId: import('vue').Ref<IntegerIdNullable, IntegerIdNullable>;