@anzusystems/common-admin 2.0.0-rc.1 → 2.0.0-rc.10

package/dist/domains/auth/components/Acl.js.map

@@ -1 +1 @@
-{"version":3,"file":"Acl.js","names":["_sfc_main","Acl_vue_vue_type_script_setup_true_lang_default","Acl_default"],"sources":["../../../../src/domains/auth/components/Acl.vue"],"sourcesContent":["<script lang=\"ts\" setup generic=\"TAclValue extends RegisteredAclValue\">\nimport { computed } from 'vue'\nimport type { RegisteredAclValue } from '@/domains/auth/types/Permission'\nimport { useAuthHelpers } from '@/domains/auth/composables/defineAuth'\n\nconst props = withDefaults(\n  defineProps<{\n    // An array is evaluated with AND. Values from different systems are handled correctly --\n    // every system involved must be loaded, or the slot stays hidden -- but keeping them from one\n    // system is still the clearer thing to write.\n    permission: TAclValue | TAclValue[]\n    subject?: object\n  }>(),\n  {\n    subject: undefined,\n  }\n)\n\nconst { canSafeHelper } = useAuthHelpers<TAclValue>()\n\n/**\n * A computed, not a watcher that latches on the first `true`: it re-evaluates when its own system's\n * current user arrives, and a permission taken away is taken away without a reload.\n *\n * This is the non-throwing variant of `can()`, for templates that may render before their system is\n * there -- `canSafeHelper` answers false where `canHelper` would throw.\n */\nconst allowed = computed<boolean>(() => canSafeHelper(props.permission, props.subject, 'Acl'))\n</script>\n\n<template>\n  <slot v-if=\"allowed\" />\n</template>\n"],"mappings":""}
+{"version":3,"file":"Acl.js","names":["_sfc_main","Acl_vue_vue_type_script_setup_true_lang_default","Acl_default"],"sources":["../../../../src/domains/auth/components/Acl.vue"],"sourcesContent":["<script lang=\"ts\" setup generic=\"TAclValue extends RegisteredAclValue\">\nimport { computed } from 'vue'\nimport type { RegisteredAclValue } from '@/domains/auth/types/Permission'\nimport { useAuthHelpers } from '@/domains/auth/composables/defineAuth'\n\nconst props = withDefaults(\n  defineProps<{\n    // An array is evaluated with AND. Values from different systems work:\n    // every involved system must be loaded, or the slot stays hidden.\n    // Prefer values from one system for clarity.\n    permission: TAclValue | TAclValue[]\n    subject?: object\n  }>(),\n  {\n    subject: undefined,\n  }\n)\n\nconst { canSafeHelper } = useAuthHelpers<TAclValue>()\n\n/**\n * A computed, not a watcher latching on the first `true`. It re-evaluates when its\n * system's current user arrives, and a revoked permission applies without a reload.\n * Uses `canSafeHelper` because the template may render before its system is loaded. `canHelper` would throw.\n */\nconst allowed = computed<boolean>(() => canSafeHelper(props.permission, props.subject, 'Acl'))\n</script>\n\n<template>\n  <slot v-if=\"allowed\" />\n</template>\n"],"mappings":""}

package/dist/domains/auth/components/Acl.vue_vue_type_script_setup_true_lang.js

@@ -1,6 +1,6 @@
 import { useAuthHelpers as e } from "../composables/defineAuth.js";
 import { computed as t, createCommentVNode as n, defineComponent as r, renderSlot as i } from "vue";
-//#region src/domains/auth/components/Acl.vue?vue&type=script&setup=true&lang.ts
+// src/domains/auth/components/Acl.vue?vue&type=script&setup=true&lang.ts
 var a = /*@__PURE__*/ r({
 	__name: "Acl",
 	props: {
@@ -12,7 +12,6 @@ var a = /*@__PURE__*/ r({
 		return (e, t) => s.value ? i(e.$slots, "default", {}, void 0, void 0, 0) : n("", !0);
 	}
 });
-//#endregion
 export { a as default };
 
 //# sourceMappingURL=Acl.vue_vue_type_script_setup_true_lang.js.map

package/dist/domains/auth/components/Acl.vue_vue_type_script_setup_true_lang.js.map

@@ -1 +1 @@
-{"version":3,"file":"Acl.vue_vue_type_script_setup_true_lang.js","names":["_renderSlot","_createCommentVNode","Acl_vue_vue_type_script_setup_true_lang_default","props","__props","useAuthHelpers","allowed","computed","canSafeHelper","renderSlot","_ctx","createCommentVNode"],"sources":["../../../../src/domains/auth/components/Acl.vue"],"sourcesContent":["<script lang=\"ts\" setup generic=\"TAclValue extends RegisteredAclValue\">\nimport { computed } from 'vue'\nimport type { RegisteredAclValue } from '@/domains/auth/types/Permission'\nimport { useAuthHelpers } from '@/domains/auth/composables/defineAuth'\n\nconst props = withDefaults(\n  defineProps<{\n    // An array is evaluated with AND. Values from different systems are handled correctly --\n    // every system involved must be loaded, or the slot stays hidden -- but keeping them from one\n    // system is still the clearer thing to write.\n    permission: TAclValue | TAclValue[]\n    subject?: object\n  }>(),\n  {\n    subject: undefined,\n  }\n)\n\nconst { canSafeHelper } = useAuthHelpers<TAclValue>()\n\n/**\n * A computed, not a watcher that latches on the first `true`: it re-evaluates when its own system's\n * current user arrives, and a permission taken away is taken away without a reload.\n *\n * This is the non-throwing variant of `can()`, for templates that may render before their system is\n * there -- `canSafeHelper` answers false where `canHelper` would throw.\n */\nconst allowed = computed<boolean>(() => canSafeHelper(props.permission, props.subject, 'Acl'))\n</script>\n\n<template>\n  <slot v-if=\"allowed\" />\n</template>\n"],"mappings":";;;;;;;;;;EAKA,IAAMG,IAAQC,GAaR,EAAE,qBAAkBC,EAA0B,GAS9CC,IAAUC,QAAwBC,EAAcL,EAAM,YAAYA,EAAM,SAAS,KAAK,CAAC;E,iBAI/EG,EAAA,QAAZN,EAAuBU,EAAA,QAAA,WAAA,CAAA,GAAA,KAAA,GAAA,KAAA,GAAA,CAAA,I"}
+{"version":3,"file":"Acl.vue_vue_type_script_setup_true_lang.js","names":["_renderSlot","_createCommentVNode","Acl_vue_vue_type_script_setup_true_lang_default","props","__props","useAuthHelpers","allowed","computed","canSafeHelper","renderSlot","_ctx","createCommentVNode"],"sources":["../../../../src/domains/auth/components/Acl.vue"],"sourcesContent":["<script lang=\"ts\" setup generic=\"TAclValue extends RegisteredAclValue\">\nimport { computed } from 'vue'\nimport type { RegisteredAclValue } from '@/domains/auth/types/Permission'\nimport { useAuthHelpers } from '@/domains/auth/composables/defineAuth'\n\nconst props = withDefaults(\n  defineProps<{\n    // An array is evaluated with AND. Values from different systems work:\n    // every involved system must be loaded, or the slot stays hidden.\n    // Prefer values from one system for clarity.\n    permission: TAclValue | TAclValue[]\n    subject?: object\n  }>(),\n  {\n    subject: undefined,\n  }\n)\n\nconst { canSafeHelper } = useAuthHelpers<TAclValue>()\n\n/**\n * A computed, not a watcher latching on the first `true`. It re-evaluates when its\n * system's current user arrives, and a revoked permission applies without a reload.\n * Uses `canSafeHelper` because the template may render before its system is loaded. `canHelper` would throw.\n */\nconst allowed = computed<boolean>(() => canSafeHelper(props.permission, props.subject, 'Acl'))\n</script>\n\n<template>\n  <slot v-if=\"allowed\" />\n</template>\n"],"mappings":";;;;;;;;;;EAKA,IAAMG,IAAQC,GAaR,EAAE,qBAAkBC,EAA0B,GAO9CC,IAAUC,QAAwBC,EAAcL,EAAM,YAAYA,EAAM,SAAS,KAAK,CAAC;E,iBAI/EG,EAAA,QAAZN,EAAuBU,EAAA,QAAA,WAAA,CAAA,GAAA,KAAA,GAAA,KAAA,GAAA,CAAA,I"}

package/dist/domains/auth/composables/aclAllowed.d.ts

@@ -1,8 +1,7 @@
 import { ComputedRef, MaybeRefOrGetter } from 'vue';
 import { RegisteredAclValue } from '../types/Permission';
 /**
- * Whether a component guarded by an optional ACL may show itself. No ACL means no guard, so a component
- * that takes one keeps its old behaviour for callers that pass none. The check never throws (see
- * `canSafeHelper`).
+ * Whether a component guarded by an optional ACL may show itself.
+ * No ACL means no guard, so callers that pass none keep the old behaviour. Never throws (see `canSafeHelper`).
  */
 export declare function useAclAllowed(acl: MaybeRefOrGetter<RegisteredAclValue | RegisteredAclValue[] | undefined>, subject?: MaybeRefOrGetter<object | undefined>): ComputedRef<boolean>;

package/dist/domains/auth/composables/aclAllowed.js

@@ -1,15 +1,14 @@
-import { isUndefined as e } from "../../../shared/utils/common.js";
-import { useAuthHelpers as t } from "./defineAuth.js";
+import { useAuthHelpers as e } from "./defineAuth.js";
+import { isUndefined as t } from "../../../shared/utils/common.js";
 import { computed as n, toValue as r } from "vue";
-//#region src/domains/auth/composables/aclAllowed.ts
+// src/domains/auth/composables/aclAllowed.ts
 function i(i, a = void 0) {
-	let { canSafeHelper: o } = t();
+	let { canSafeHelper: o } = e();
 	return n(() => {
-		let t = r(i);
-		return e(t) ? !0 : o(t, r(a));
+		let e = r(i);
+		return t(e) ? !0 : o(e, r(a));
 	});
 }
-//#endregion
 export { i as useAclAllowed };
 
 //# sourceMappingURL=aclAllowed.js.map

package/dist/domains/auth/composables/aclAllowed.js.map

@@ -1 +1 @@
-{"version":3,"file":"aclAllowed.js","names":["useAclAllowed","useAuthHelpers","computed","value","toValue","acl","isUndefined","canSafeHelper","subject"],"sources":["../../../../src/domains/auth/composables/aclAllowed.ts"],"sourcesContent":["import { computed, type ComputedRef, type MaybeRefOrGetter, toValue } from 'vue'\nimport type { RegisteredAclValue } from '@/domains/auth/types/Permission'\nimport { useAuthHelpers } from '@/domains/auth/composables/defineAuth'\nimport { isUndefined } from '@/shared/utils/common'\n\n/**\n * Whether a component guarded by an optional ACL may show itself. No ACL means no guard, so a component\n * that takes one keeps its old behaviour for callers that pass none. The check never throws (see\n * `canSafeHelper`).\n */\nexport function useAclAllowed(\n  acl: MaybeRefOrGetter<RegisteredAclValue | RegisteredAclValue[] | undefined>,\n  subject: MaybeRefOrGetter<object | undefined> = undefined\n): ComputedRef<boolean> {\n  const { canSafeHelper } = useAuthHelpers<RegisteredAclValue>()\n\n  return computed(() => {\n    const value = toValue(acl)\n    if (isUndefined(value)) return true\n\n    return canSafeHelper(value, toValue(subject))\n  })\n}\n"],"mappings":";;;;AAUA,SAAgBA,EACd,GACA,IAAgD,KAAA,GAC1B;CACtB,IAAM,EAAE,qBAAkBC,EAAmC;CAE7D,OAAOC,QAAe;EACpB,IAAMC,IAAQC,EAAQC,CAAG;EAGzB,OAFIC,EAAYH,CAAK,IAAU,KAExBI,EAAcJ,GAAOC,EAAQI,CAAO,CAAC;CAC9C,CAAC;AACH"}
+{"version":3,"file":"aclAllowed.js","names":["useAclAllowed","useAuthHelpers","computed","value","toValue","acl","isUndefined","canSafeHelper","subject"],"sources":["../../../../src/domains/auth/composables/aclAllowed.ts"],"sourcesContent":["import { computed, type ComputedRef, type MaybeRefOrGetter, toValue } from 'vue'\nimport type { RegisteredAclValue } from '@/domains/auth/types/Permission'\nimport { useAuthHelpers } from '@/domains/auth/composables/defineAuth'\nimport { isUndefined } from '@/shared/utils/common'\n\n/**\n * Whether a component guarded by an optional ACL may show itself.\n * No ACL means no guard, so callers that pass none keep the old behaviour. Never throws (see `canSafeHelper`).\n */\nexport function useAclAllowed(\n  acl: MaybeRefOrGetter<RegisteredAclValue | RegisteredAclValue[] | undefined>,\n  subject: MaybeRefOrGetter<object | undefined> = undefined\n): ComputedRef<boolean> {\n  const { canSafeHelper } = useAuthHelpers<RegisteredAclValue>()\n\n  return computed(() => {\n    const value = toValue(acl)\n    if (isUndefined(value)) return true\n\n    return canSafeHelper(value, toValue(subject))\n  })\n}\n"],"mappings":";;;;AASA,SAAgBA,EACd,GACA,IAAgD,KAAA,GAC1B;CACtB,IAAM,EAAE,qBAAkBC,EAAmC;CAE7D,OAAOC,QAAe;EACpB,IAAMC,IAAQC,EAAQC,CAAG;EAGzB,OAFIC,EAAYH,CAAK,IAAU,KAExBI,EAAcJ,GAAOC,EAAQI,CAAO,CAAC;CAC9C,CAAC;AACH"}

package/dist/domains/auth/composables/defineAuth.js

@@ -1,5 +1,5 @@
-import { isArray as e, isNull as t, isUndefined as n } from "../../../shared/utils/common.js";
-import { useAuthStore as r } from "../store/authStore.js";
+import { useAuthStore as e } from "../store/authStore.js";
+import { isArray as t, isNull as n, isUndefined as r } from "../../../shared/utils/common.js";
 import { objectGetValueByPath as i } from "../../../shared/utils/object.js";
 import { warnOnceInDevelopment as a } from "../../../shared/utils/development.js";
 import { Grant as o } from "../valueObject/Grant.js";
@@ -8,52 +8,52 @@ import { isCreatedByAware as c } from "../../../shared/types/CreatedByAware.js";
 import { useApiRequest as l } from "../../api/composables/useApiRequest.js";
 import { computed as u } from "vue";
 import "axios";
-//#region src/domains/auth/composables/defineAuth.ts
+// src/domains/auth/composables/defineAuth.ts
 var d = "ROLE_SUPER_ADMIN", f = { adminRole: d };
 function p(i, a = {}) {
 	let o = {
 		...f,
 		...a
-	}, s = r(), { canHelper: c, canForAllHelper: d, canOwnerHelper: p, isAdminHelper: h, canSafeHelper: g } = m(), _ = (e, t) => h(e, t), v = (e, t) => c(e, t);
+	}, s = e(), { canHelper: c, canForAllHelper: d, canOwnerHelper: p, isAdminHelper: h, canSafeHelper: g } = m(), _ = (e, t) => h(e, t), v = (e, t) => c(e, t);
 	function y(e) {
 		return p(e, i);
 	}
 	let b = (e, t) => d(e, t), x = (e, t) => g(e, t), S = (e, t) => e.length === 0 || e.some((e) => v(e, t)), C = u(() => {
-		let e = s.getCurrentUserBySystem(i), r = s.isCurrentUserLoadedBySystem(i);
-		if (!n(r) && !(n(e) || n(e.id) || t(e.id) || e.id === 0)) return e.id;
+		let e = s.getCurrentUserBySystem(i), t = s.isCurrentUserLoadedBySystem(i);
+		if (!r(t) && !(r(e) || r(e.id) || n(e.id) || e.id === 0)) return e.id;
 	});
-	function w(t) {
-		let r = (e) => {
-			s.currentUsers.value.set(t, e), s.currentUsersLoaded.value.set(t, !0);
-		}, i = u(() => s.currentUsers.value.get(t)), a = u(() => s.currentUsersLoaded.value.get(t)), c = u(() => i.value ? _(i.value.roles, t) : !1), d = u(() => i.value ?? !1), f = u(() => {
-			if (!n(a.value)) return !d.value;
+	function w(e) {
+		let n = (t) => {
+			s.currentUsers.value.set(e, t), s.currentUsersLoaded.value.set(e, !0);
+		}, i = u(() => s.currentUsers.value.get(e)), a = u(() => s.currentUsersLoaded.value.get(e)), c = u(() => i.value ? _(i.value.roles, e) : !1), d = u(() => i.value ?? !1), f = u(() => {
+			if (!r(a.value)) return !d.value;
 		}), p = () => {
-			if (e(o.adminRole)) {
-				let e = o.adminRole.find((e) => e.system === t);
-				e && s.isAdminRoleBySystem.value.set(t, e.adminRole);
-			} else s.isAdminRoleBySystem.value.set(t, o.adminRole);
+			if (t(o.adminRole)) {
+				let t = o.adminRole.find((t) => t.system === e);
+				t && s.isAdminRoleBySystem.value.set(e, t.adminRole);
+			} else s.isAdminRoleBySystem.value.set(e, o.adminRole);
 		};
 		return {
 			currentUser: i,
-			setCurrentUser: r,
+			setCurrentUser: n,
 			isCurrentUserLoaded: a,
 			isSuperAdmin: c,
 			isAnonymous: f,
 			hasCurrentUser: d,
-			fetchCurrentUser: async (e, n = "/adm/v1/users/current", a = void 0, o = "user", c = {}) => {
+			fetchCurrentUser: async (t, r = "/adm/v1/users/current", a = void 0, o = "user", c = {}) => {
 				try {
 					let { execute: c } = l({
-						client: e,
+						client: t,
 						method: "GET",
-						system: t,
+						system: e,
 						entity: o
 					}), u = await c({
-						urlTemplate: n,
+						urlTemplate: r,
 						urlParams: a
 					});
-					return r(u), s.currentUsersLoaded.value.set(t, !0), p(), i.value;
-				} catch (e) {
-					if (s.currentUsersLoaded.value.set(t, !0), c.throwOnError) throw e;
+					return n(u), s.currentUsersLoaded.value.set(e, !0), p(), i.value;
+				} catch (t) {
+					if (s.currentUsersLoaded.value.set(e, !0), c.throwOnError) throw t;
 					return;
 				}
 			}
@@ -71,41 +71,41 @@ function p(i, a = {}) {
 	};
 }
 function m() {
-	let l = r(), u = (e, r) => {
+	let l = e(), u = (e, t) => {
 		let a = h(e), s = l.getCurrentUserBySystem(a), c = l.isCurrentUserLoadedBySystem(a);
-		if (n(c)) throw Error("Composable defineAuth must try to load currentUser first to use can function.");
-		if (n(s) || n(s.id) || t(s.id) || s.id === 0) return !1;
+		if (r(c)) throw Error("Composable defineAuth must try to load currentUser first to use can function.");
+		if (r(s) || r(s.id) || n(s.id) || s.id === 0) return !1;
 		if (f(s.roles, a)) return !0;
 		let u = i(s, "resolvedPermissions." + e);
-		if (n(u)) return !1;
+		if (r(u)) return !1;
 		switch (u) {
 			case o.Allow: return !0;
 			case o.Deny: return !1;
 			case o.AllowOwner:
-				if (n(r)) throw Error(`Required subject for acl "${e}" to determine an ability to access the resource.`);
-				return p(r, a);
+				if (r(t)) throw Error(`Required subject for acl "${e}" to determine an ability to access the resource.`);
+				return p(t, a);
 			default: return !1;
 		}
-	}, d = (e, t) => e.length === 0 || e.every((e) => u(e, t)), f = (e, t) => {
-		let i = r().getAdminRoleBySystem(t);
-		return !n(i) && e.includes(i);
+	}, d = (e, t) => e.length === 0 || e.every((e) => u(e, t)), f = (t, n) => {
+		let i = e().getAdminRoleBySystem(n);
+		return !r(i) && t.includes(i);
 	};
-	function p(e, r) {
-		let i = l.getCurrentUserBySystem(r), a = l.isCurrentUserLoadedBySystem(r);
-		if (n(a)) throw Error("Composable defineAuth must try to load currentUser first to use canOwner function.");
-		return n(i) || n(i.id) || t(i.id) || i.id === 0 ? !1 : s(e) ? e.owners.includes(i.id) : c(e) ? e.createdBy === i.id : !1;
+	function p(e, t) {
+		let i = l.getCurrentUserBySystem(t), a = l.isCurrentUserLoadedBySystem(t);
+		if (r(a)) throw Error("Composable defineAuth must try to load currentUser first to use canOwner function.");
+		return r(i) || r(i.id) || n(i.id) || i.id === 0 ? !1 : s(e) ? e.owners.includes(i.id) : c(e) ? e.createdBy === i.id : !1;
 	}
 	return {
 		canHelper: u,
 		canForAllHelper: d,
 		canOwnerHelper: p,
 		isAdminHelper: f,
-		canSafeHelper: (t, r, i = "canSafe") => {
-			let o = e(t) ? t : [t];
+		canSafeHelper: (e, n, i = "canSafe") => {
+			let o = t(e) ? e : [e];
 			if (o.length === 0) return !0;
-			for (let e of o.map((e) => h(e))) if (l.currentUsers.value.get(e), n(l.isCurrentUserLoadedBySystem(e))) return !1;
+			for (let e of o.map((e) => h(e))) if (l.currentUsers.value.get(e), r(l.isCurrentUserLoadedBySystem(e))) return !1;
 			try {
-				return d(o, r);
+				return d(o, n);
 			} catch (e) {
 				let t = o.join(", ");
 				return a(`${i}:${t}`, `[${i}] the check of ${t} threw, so it is denied:`, e), !1;
@@ -116,7 +116,6 @@ function m() {
 function h(e) {
 	return e.split("_")[0];
 }
-//#endregion
 export { d as ROLE_SUPER_ADMIN, p as defineAuth, h as getSystemFromAcl, m as useAuthHelpers };
 
 //# sourceMappingURL=defineAuth.js.map

package/dist/domains/auth/composables/defineAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"defineAuth.js","names":["ROLE_SUPER_ADMIN","defaultConfig","defineAuth","mergedConfig","config","authStore","useAuthStore","useAuthHelpers","isAdmin","isAdminHelper","userRoles","system","can","canHelper","acl","subject","canOwner","canOwnerHelper","mainCurrentUserSystem","canForAll","canForAllHelper","acls","canSafe","canSafeHelper","canForSome","currentUserId","computed","user","userIsLoaded","isUndefined","isNull","useCurrentUser","setCurrentUser","currentUser","isCurrentUserLoaded","isSuperAdmin","hasCurrentUser","isAnonymous","storeAdminRoleBySystem","isArray","found","role","useApiRequest","res","execute","endPoint","error","options","getSystemFromAcl","permission","objectGetValueByPath","Grant","adminRole","isOwnerAware","isCreatedByAware","value","key","warnOnceInDevelopment","label"],"sources":["../../../../src/domains/auth/composables/defineAuth.ts"],"sourcesContent":["import { computed } from 'vue'\nimport { useAuthStore } from '@/domains/auth/store/authStore'\nimport { type AxiosInstance } from 'axios'\nimport type { AclValue } from '@/domains/auth/types/Permission'\nimport { isArray, isNull, isUndefined } from '@/shared/utils/common'\nimport { objectGetValueByPath } from '@/shared/utils/object'\nimport { warnOnceInDevelopment } from '@/shared/utils/development'\nimport { Grant } from '@/domains/auth/valueObject/Grant'\nimport { isOwnerAware } from '@/shared/types/OwnerAware'\nimport { isCreatedByAware } from '@/shared/types/CreatedByAware'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { UrlParams } from '@/domains/api/utils/apiHelper'\nimport { useApiRequest } from '@/domains/api/composables/useApiRequest'\n\nexport type DefineAuthConfig = {\n  adminRole: string | Array<{ system: string; adminRole: string }>\n}\n\nexport const ROLE_SUPER_ADMIN = 'ROLE_SUPER_ADMIN'\n\nconst defaultConfig: DefineAuthConfig = {\n  adminRole: ROLE_SUPER_ADMIN,\n}\n\n/**\n * @param mainCurrentUserSystem - By this system currentUser object is used to get user ID.\n * @param config\n */\nexport function defineAuth<TAclValue extends AclValue>(\n  mainCurrentUserSystem: string,\n  config: Partial<DefineAuthConfig> = {}\n) {\n  const mergedConfig = { ...defaultConfig, ...config }\n  const authStore = useAuthStore()\n  const { canHelper, canForAllHelper, canOwnerHelper, isAdminHelper, canSafeHelper } = useAuthHelpers()\n\n  const isAdmin = (userRoles: string[], system: string) => {\n    return isAdminHelper(userRoles, system)\n  }\n\n  const can = (acl: TAclValue, subject?: object) => {\n    return canHelper(acl, subject)\n  }\n\n  function canOwner(subject: object) {\n    return canOwnerHelper(subject, mainCurrentUserSystem)\n  }\n\n  const canForAll = (acls: TAclValue[], subject?: object) => {\n    return canForAllHelper(acls, subject)\n  }\n\n  /** `can()` and `canForAll()` that never throw -- for templates and route guards. See `canSafeHelper`. */\n  const canSafe = (acl: TAclValue | TAclValue[], subject?: object) => {\n    return canSafeHelper(acl, subject)\n  }\n\n  const canForSome = (acls: TAclValue[], subject?: object) => {\n    if (acls.length === 0) {\n      return true\n    }\n    return acls.some((acl) => {\n      return can(acl, subject)\n    })\n  }\n\n  const currentUserId = computed(() => {\n    const user = authStore.getCurrentUserBySystem(mainCurrentUserSystem)\n    const userIsLoaded = authStore.isCurrentUserLoadedBySystem(mainCurrentUserSystem)\n    if (isUndefined(userIsLoaded)) {\n      return undefined\n    }\n    if (isUndefined(user) || isUndefined(user.id) || isNull(user.id) || user.id === 0) {\n      return undefined\n    }\n    return user.id\n  })\n\n  function useCurrentUser<TCurrentUser extends AnzuUser | undefined>(system: string) {\n    const setCurrentUser = (user: TCurrentUser) => {\n      authStore.currentUsers.value.set(system, user)\n      authStore.currentUsersLoaded.value.set(system, true)\n    }\n\n    const currentUser = computed((): TCurrentUser | undefined => {\n      return authStore.currentUsers.value.get(system) as TCurrentUser | undefined\n    })\n\n    const isCurrentUserLoaded = computed((): boolean | undefined => {\n      return authStore.currentUsersLoaded.value.get(system) as boolean | undefined\n    })\n\n    const isSuperAdmin = computed(() => {\n      if (currentUser.value) {\n        return isAdmin(currentUser.value.roles, system)\n      }\n      return false\n    })\n\n    const hasCurrentUser = computed(() => {\n      return currentUser.value ?? false\n    })\n\n    const isAnonymous = computed(() => {\n      if (isUndefined(isCurrentUserLoaded.value)) return undefined\n      return !hasCurrentUser.value\n    })\n\n    const storeAdminRoleBySystem = () => {\n      if (isArray(mergedConfig.adminRole)) {\n        const found = mergedConfig.adminRole.find((role) => role.system === system)\n        if (found) {\n          authStore.isAdminRoleBySystem.value.set(system, found.adminRole)\n        }\n      } else {\n        authStore.isAdminRoleBySystem.value.set(system, mergedConfig.adminRole)\n      }\n    }\n\n    /**\n     * Answers `undefined` for every failure by default, which loses the reason. `throwOnError`\n     * hands the original error back, for callers that must tell a lost session from a dead backend.\n     *\n     * A failure leaves `currentUser` as it was: unset before the first successful load, the previous\n     * user on a later call, whose permissions `can()` then keeps answering from. The system still\n     * counts as loaded either way, so `can()` does not throw for a system that was never loaded.\n     */\n    const fetchCurrentUser = async (\n      client: () => AxiosInstance,\n      endPoint = '/adm/v1/users/current',\n      urlParams: UrlParams | undefined = undefined,\n      entity = 'user',\n      options: { throwOnError?: boolean } = {}\n    ) => {\n      try {\n        // `useApiRequest`, not the older `apiFetchOne`: it is where the fleet is going, and it is\n        // the difference between a failure arriving as a bare `AnzuFatalError` and arriving as the\n        // error it actually was -- `AnzuApiAxiosError` with the response on its cause, or\n        // `AnzuApiTimeoutError`. A caller passing `throwOnError` can only tell a dead session from\n        // a dead backend if the error says which it was.\n        const { execute } = useApiRequest<NonNullable<TCurrentUser>>({\n          client,\n          method: 'GET',\n          system,\n          entity,\n        })\n        const res = await execute({ urlTemplate: endPoint, urlParams })\n        setCurrentUser(res)\n        authStore.currentUsersLoaded.value.set(system, true)\n        storeAdminRoleBySystem()\n        return currentUser.value\n      } catch (error) {\n        // Set before rethrowing too, or `can()` throws \"must try to load currentUser first\".\n        authStore.currentUsersLoaded.value.set(system, true)\n        if (options.throwOnError) throw error\n        return undefined\n      }\n    }\n\n    return {\n      currentUser,\n      setCurrentUser,\n      // `undefined` until something has tried to load this system, which is the one state\n      // `currentUser` alone cannot tell apart from \"loaded, but there is no such user\".\n      isCurrentUserLoaded,\n      isSuperAdmin,\n      isAnonymous,\n      hasCurrentUser,\n      fetchCurrentUser,\n    }\n  }\n\n  return {\n    can,\n    canForAll,\n    canForSome,\n    canSafe,\n    canOwner,\n    useCurrentUser,\n    currentUserId,\n    config: mergedConfig,\n  }\n}\n\nexport function useAuthHelpers<TAclValue extends AclValue>() {\n  const authStore = useAuthStore()\n\n  const canHelper = (acl: TAclValue, subject: object | undefined) => {\n    const system = getSystemFromAcl(acl)\n    const user = authStore.getCurrentUserBySystem(system)\n    const userIsLoaded = authStore.isCurrentUserLoadedBySystem(system)\n    if (isUndefined(userIsLoaded)) {\n      throw new Error('Composable defineAuth must try to load currentUser first to use can function.')\n    }\n    if (isUndefined(user) || isUndefined(user.id) || isNull(user.id) || user.id === 0) {\n      return false\n    }\n    if (isAdminHelper(user.roles, system)) return true\n    const permission = objectGetValueByPath(user, 'resolvedPermissions.' + acl)\n    if (isUndefined(permission)) return false\n    switch (permission) {\n      case Grant.Allow:\n        return true\n      case Grant.Deny:\n        return false\n      case Grant.AllowOwner:\n        if (isUndefined(subject))\n          throw new Error(`Required subject for acl \"${acl}\" to determine an ability to access the resource.`)\n        return canOwnerHelper(subject, system)\n      default:\n        return false\n    }\n  }\n\n  const canForAllHelper = (acls: TAclValue[], subject?: object) => {\n    if (acls.length === 0) {\n      return true\n    }\n    return acls.every((acl) => {\n      return canHelper(acl, subject)\n    })\n  }\n\n  const isAdminHelper = (userRoles: string[], system: string) => {\n    const authStore = useAuthStore()\n    const adminRole = authStore.getAdminRoleBySystem(system)\n    if (isUndefined(adminRole)) return false\n\n    return userRoles.includes(adminRole)\n  }\n\n  function canOwnerHelper(subject: object, system: string) {\n    const user = authStore.getCurrentUserBySystem(system)\n    const userIsLoaded = authStore.isCurrentUserLoadedBySystem(system)\n    if (isUndefined(userIsLoaded)) {\n      throw new Error('Composable defineAuth must try to load currentUser first to use canOwner function.')\n    }\n    if (isUndefined(user) || isUndefined(user.id) || isNull(user.id) || user.id === 0) {\n      return false\n    }\n    if (isOwnerAware(subject)) {\n      return subject.owners.includes(user.id)\n    }\n    if (isCreatedByAware(subject)) {\n      return subject.createdBy === user.id\n    }\n    return false\n  }\n\n  /**\n   * `canForAll` that answers false instead of throwing: for a system nothing has tried to load yet, which a\n   * template or a route guard may reach first, and for a check that throws, such as an `allowOwner` grant\n   * with no subject. An array is evaluated with AND.\n   *\n   * Reading each system's current user tracks that key, so a render or a computed re-evaluates when its\n   * own system arrives.\n   */\n  const canSafeHelper = (acl: TAclValue | TAclValue[], subject?: object, label = 'canSafe'): boolean => {\n    const acls = isArray(acl) ? acl : [acl]\n    if (acls.length === 0) {\n      return true\n    }\n    for (const system of acls.map((value) => getSystemFromAcl(value))) {\n      authStore.currentUsers.value.get(system)\n      if (isUndefined(authStore.isCurrentUserLoadedBySystem(system))) {\n        return false\n      }\n    }\n    try {\n      return canForAllHelper(acls, subject)\n    } catch (error) {\n      // Denied either way; without a word it looks exactly like a missing permission.\n      const key = acls.join(', ')\n      warnOnceInDevelopment(`${label}:${key}`, `[${label}] the check of ${key} threw, so it is denied:`, error)\n      return false\n    }\n  }\n\n  return {\n    canHelper,\n    canForAllHelper,\n    canOwnerHelper,\n    isAdminHelper,\n    canSafeHelper,\n  }\n}\n\n/** An ACL value carries its system in front of the first underscore: `weather_location_ui`. */\nexport function getSystemFromAcl(acl: any) {\n  const parts = acl.split('_')\n\n  return parts[0]\n}\n"],"mappings":";;;;;;;;;;;AAkBA,IAAaA,IAAmB,oBAE1BC,IAAkC,EACtC,WAAWD,EACb;AAMA,SAAgBE,EACd,GACA,IAAoC,CAAC,GACrC;CACA,IAAMC,IAAe;EAAE,GAAGF;EAAe,GAAGG;CAAO,GAC7CC,IAAYC,EAAa,GACzB,EAAE,cAAW,oBAAiB,mBAAgB,kBAAe,qBAAkBC,EAAe,GAE9FC,KAAW,GAAqB,MAC7BC,EAAcC,GAAWC,CAAM,GAGlCC,KAAO,GAAgB,MACpBC,EAAUC,GAAKC,CAAO;CAG/B,SAASC,EAAS,GAAiB;EACjC,OAAOC,EAAeF,GAASG,CAAqB;CACtD;CAEA,IAAMC,KAAa,GAAmB,MAC7BC,EAAgBC,GAAMN,CAAO,GAIhCO,KAAW,GAA8B,MACtCC,EAAcT,GAAKC,CAAO,GAG7BS,KAAc,GAAmB,MACjCH,EAAK,WAAW,KAGbA,EAAK,MAAM,MACTT,EAAIE,GAAKC,CAAO,CACxB,GAGGU,IAAgBC,QAAe;EACnC,IAAMC,IAAOtB,EAAU,uBAAuBa,CAAqB,GAC7DU,IAAevB,EAAU,4BAA4Ba,CAAqB;EAChF,IAAI,GAAYU,CAAY,KAGxB,IAAYD,CAAI,KAAKE,EAAYF,EAAK,EAAE,KAAKG,EAAOH,EAAK,EAAE,KAAKA,EAAK,OAAO,IAGhF,OAAOA,EAAK;CACd,CAAC;CAED,SAASI,EAA0D,GAAgB;EACjF,IAAMC,KAAkB,MAAuB;GAE7C,AADA3B,EAAU,aAAa,MAAM,IAAIM,GAAQgB,CAAI,GAC7CtB,EAAU,mBAAmB,MAAM,IAAIM,GAAQ,EAAI;EACrD,GAEMsB,IAAcP,QACXrB,EAAU,aAAa,MAAM,IAAIM,CAAM,CAC/C,GAEKuB,IAAsBR,QACnBrB,EAAU,mBAAmB,MAAM,IAAIM,CAAM,CACrD,GAEKwB,IAAeT,QACfO,EAAY,QACPzB,EAAQyB,EAAY,MAAM,OAAOtB,CAAM,IAEzC,EACR,GAEKyB,IAAiBV,QACdO,EAAY,SAAS,EAC7B,GAEKI,IAAcX,QAAe;GACjC,IAAI,GAAYQ,EAAoB,KAAK,GACzC,OAAO,CAACE,EAAe;EACzB,CAAC,GAEKE,UAA+B;GACnC,IAAIC,EAAQpC,EAAa,SAAS,GAAG;IACnC,IAAMqC,IAAQrC,EAAa,UAAU,MAAM,MAASsC,EAAK,WAAW9B,CAAM;IAC1E,AAAI6B,KACFnC,EAAU,oBAAoB,MAAM,IAAIM,GAAQ6B,EAAM,SAAS;GAEnE,OACE,EAAU,oBAAoB,MAAM,IAAI7B,GAAQR,EAAa,SAAS;EAE1E;EA0CA,OAAO;GACL;GACA;GAGA;GACA;GACA;GACA;GACA,yBAxCA,GACA,IAAW,yBACX,IAAmC,KAAA,GACnC,IAAS,QACT,IAAsC,CAAC,MACpC;IACH,IAAI;KAMF,IAAM,EAAE,eAAYuC,EAAyC;MAC3D;MACA,QAAQ;MACR;MACA;KACF,CAAC,GACKC,IAAM,MAAMC,EAAQ;MAAE,aAAaC;MAAU;KAAU,CAAC;KAI9D,OAHAb,EAAeW,CAAG,GAClBtC,EAAU,mBAAmB,MAAM,IAAIM,GAAQ,EAAI,GACnD2B,EAAuB,GAChBL,EAAY;IACrB,SAASa,GAAO;KAGd,IADAzC,EAAU,mBAAmB,MAAM,IAAIM,GAAQ,EAAI,GAC/CoC,EAAQ,cAAc,MAAMD;KAChC;IACF;GACF;EAYA;CACF;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ3C;CACV;AACF;AAEA,SAAgBI,IAA6C;CAC3D,IAAMF,IAAYC,EAAa,GAEzBO,KAAa,GAAgB,MAAgC;EACjE,IAAMF,IAASqC,EAAiBlC,CAAG,GAC7Ba,IAAOtB,EAAU,uBAAuBM,CAAM,GAC9CiB,IAAevB,EAAU,4BAA4BM,CAAM;EACjE,IAAIkB,EAAYD,CAAY,GAC1B,MAAU,MAAM,+EAA+E;EAEjG,IAAIC,EAAYF,CAAI,KAAKE,EAAYF,EAAK,EAAE,KAAKG,EAAOH,EAAK,EAAE,KAAKA,EAAK,OAAO,GAC9E,OAAO;EAET,IAAIlB,EAAckB,EAAK,OAAOhB,CAAM,GAAG,OAAO;EAC9C,IAAMsC,IAAaC,EAAqBvB,GAAM,yBAAyBb,CAAG;EAC1E,IAAIe,EAAYoB,CAAU,GAAG,OAAO;EACpC,QAAQA,GAAR;GACE,KAAKE,EAAM,OACT,OAAO;GACT,KAAKA,EAAM,MACT,OAAO;GACT,KAAKA,EAAM;IACT,IAAItB,EAAYd,CAAO,GACrB,MAAU,MAAM,6BAA6BD,EAAI,kDAAkD;IACrG,OAAOG,EAAeF,GAASJ,CAAM;GACvC,SACE,OAAO;EACX;CACF,GAEMS,KAAmB,GAAmB,MACtCC,EAAK,WAAW,KAGbA,EAAK,OAAO,MACVR,EAAUC,GAAKC,CAAO,CAC9B,GAGGN,KAAiB,GAAqB,MAAmB;EAE7D,IAAM2C,IADY9C,EACA,CAAA,CAAU,qBAAqBK,CAAM;EAGvD,OAFA,CAAIkB,EAAYuB,CAAS,KAElB1C,EAAU,SAAS0C,CAAS;CACrC;CAEA,SAASnC,EAAe,GAAiB,GAAgB;EACvD,IAAMU,IAAOtB,EAAU,uBAAuBM,CAAM,GAC9CiB,IAAevB,EAAU,4BAA4BM,CAAM;EACjE,IAAIkB,EAAYD,CAAY,GAC1B,MAAU,MAAM,oFAAoF;EAWtG,OATIC,EAAYF,CAAI,KAAKE,EAAYF,EAAK,EAAE,KAAKG,EAAOH,EAAK,EAAE,KAAKA,EAAK,OAAO,IACvE,KAEL0B,EAAatC,CAAO,IACfA,EAAQ,OAAO,SAASY,EAAK,EAAE,IAEpC2B,EAAiBvC,CAAO,IACnBA,EAAQ,cAAcY,EAAK,KAE7B;CACT;CA+BA,OAAO;EACL;EACA;EACA;EACA;EACA,gBA1BqB,GAA8B,GAAkB,IAAQ,cAAuB;GACpG,IAAMN,IAAOkB,EAAQzB,CAAG,IAAIA,IAAM,CAACA,CAAG;GACtC,IAAIO,EAAK,WAAW,GAClB,OAAO;GAET,KAAK,IAAMV,KAAUU,EAAK,KAAK,MAAU2B,EAAiBO,CAAK,CAAC,GAE9D,IADAlD,EAAU,aAAa,MAAM,IAAIM,CAAM,GACnCkB,EAAYxB,EAAU,4BAA4BM,CAAM,CAAC,GAC3D,OAAO;GAGX,IAAI;IACF,OAAOS,EAAgBC,GAAMN,CAAO;GACtC,SAAS+B,GAAO;IAEd,IAAMU,IAAMnC,EAAK,KAAK,IAAI;IAE1B,OADAoC,EAAsB,GAAGC,EAAM,GAAGF,KAAO,IAAIE,EAAM,iBAAiBF,EAAI,2BAA2BV,CAAK,GACjG;GACT;EACF;CAQA;AACF;AAGA,SAAgBE,EAAiB,GAAU;CAGzC,OAFclC,EAAI,MAAM,GAEjB,CAAA,CAAM;AACf"}
+{"version":3,"file":"defineAuth.js","names":["ROLE_SUPER_ADMIN","defaultConfig","defineAuth","mergedConfig","config","authStore","useAuthStore","useAuthHelpers","isAdmin","isAdminHelper","userRoles","system","can","canHelper","acl","subject","canOwner","canOwnerHelper","mainCurrentUserSystem","canForAll","canForAllHelper","acls","canSafe","canSafeHelper","canForSome","currentUserId","computed","user","userIsLoaded","isUndefined","isNull","useCurrentUser","setCurrentUser","currentUser","isCurrentUserLoaded","isSuperAdmin","hasCurrentUser","isAnonymous","storeAdminRoleBySystem","isArray","found","role","useApiRequest","res","execute","endPoint","error","options","getSystemFromAcl","permission","objectGetValueByPath","Grant","adminRole","isOwnerAware","isCreatedByAware","value","key","warnOnceInDevelopment","label"],"sources":["../../../../src/domains/auth/composables/defineAuth.ts"],"sourcesContent":["import { computed } from 'vue'\nimport { useAuthStore } from '@/domains/auth/store/authStore'\nimport { type AxiosInstance } from 'axios'\nimport type { AclValue } from '@/domains/auth/types/Permission'\nimport { isArray, isNull, isUndefined } from '@/shared/utils/common'\nimport { objectGetValueByPath } from '@/shared/utils/object'\nimport { warnOnceInDevelopment } from '@/shared/utils/development'\nimport { Grant } from '@/domains/auth/valueObject/Grant'\nimport { isOwnerAware } from '@/shared/types/OwnerAware'\nimport { isCreatedByAware } from '@/shared/types/CreatedByAware'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { UrlParams } from '@/domains/api/utils/apiHelper'\nimport { useApiRequest } from '@/domains/api/composables/useApiRequest'\n\nexport type DefineAuthConfig = {\n  adminRole: string | Array<{ system: string; adminRole: string }>\n}\n\nexport const ROLE_SUPER_ADMIN = 'ROLE_SUPER_ADMIN'\n\nconst defaultConfig: DefineAuthConfig = {\n  adminRole: ROLE_SUPER_ADMIN,\n}\n\n/**\n * @param mainCurrentUserSystem - By this system currentUser object is used to get user ID.\n * @param config\n */\nexport function defineAuth<TAclValue extends AclValue>(\n  mainCurrentUserSystem: string,\n  config: Partial<DefineAuthConfig> = {}\n) {\n  const mergedConfig = { ...defaultConfig, ...config }\n  const authStore = useAuthStore()\n  const { canHelper, canForAllHelper, canOwnerHelper, isAdminHelper, canSafeHelper } = useAuthHelpers()\n\n  const isAdmin = (userRoles: string[], system: string) => {\n    return isAdminHelper(userRoles, system)\n  }\n\n  const can = (acl: TAclValue, subject?: object) => {\n    return canHelper(acl, subject)\n  }\n\n  function canOwner(subject: object) {\n    return canOwnerHelper(subject, mainCurrentUserSystem)\n  }\n\n  const canForAll = (acls: TAclValue[], subject?: object) => {\n    return canForAllHelper(acls, subject)\n  }\n\n  /** `can()` and `canForAll()` that never throw -- for templates and route guards. See `canSafeHelper`. */\n  const canSafe = (acl: TAclValue | TAclValue[], subject?: object) => {\n    return canSafeHelper(acl, subject)\n  }\n\n  const canForSome = (acls: TAclValue[], subject?: object) => {\n    if (acls.length === 0) {\n      return true\n    }\n    return acls.some((acl) => {\n      return can(acl, subject)\n    })\n  }\n\n  const currentUserId = computed(() => {\n    const user = authStore.getCurrentUserBySystem(mainCurrentUserSystem)\n    const userIsLoaded = authStore.isCurrentUserLoadedBySystem(mainCurrentUserSystem)\n    if (isUndefined(userIsLoaded)) {\n      return undefined\n    }\n    if (isUndefined(user) || isUndefined(user.id) || isNull(user.id) || user.id === 0) {\n      return undefined\n    }\n    return user.id\n  })\n\n  function useCurrentUser<TCurrentUser extends AnzuUser | undefined>(system: string) {\n    const setCurrentUser = (user: TCurrentUser) => {\n      authStore.currentUsers.value.set(system, user)\n      authStore.currentUsersLoaded.value.set(system, true)\n    }\n\n    const currentUser = computed((): TCurrentUser | undefined => {\n      return authStore.currentUsers.value.get(system) as TCurrentUser | undefined\n    })\n\n    const isCurrentUserLoaded = computed((): boolean | undefined => {\n      return authStore.currentUsersLoaded.value.get(system) as boolean | undefined\n    })\n\n    const isSuperAdmin = computed(() => {\n      if (currentUser.value) {\n        return isAdmin(currentUser.value.roles, system)\n      }\n      return false\n    })\n\n    const hasCurrentUser = computed(() => {\n      return currentUser.value ?? false\n    })\n\n    const isAnonymous = computed(() => {\n      if (isUndefined(isCurrentUserLoaded.value)) return undefined\n      return !hasCurrentUser.value\n    })\n\n    const storeAdminRoleBySystem = () => {\n      if (isArray(mergedConfig.adminRole)) {\n        const found = mergedConfig.adminRole.find((role) => role.system === system)\n        if (found) {\n          authStore.isAdminRoleBySystem.value.set(system, found.adminRole)\n        }\n      } else {\n        authStore.isAdminRoleBySystem.value.set(system, mergedConfig.adminRole)\n      }\n    }\n\n    /**\n     * Returns `undefined` on any failure by default, which loses the reason.\n     * `throwOnError` rethrows the original error, so callers can tell a lost session from a dead backend.\n     * A failure leaves `currentUser` unchanged, so `can()` keeps using the previous user's permissions.\n     * The system still counts as loaded, so `can()` does not throw.\n     */\n    const fetchCurrentUser = async (\n      client: () => AxiosInstance,\n      endPoint = '/adm/v1/users/current',\n      urlParams: UrlParams | undefined = undefined,\n      entity = 'user',\n      options: { throwOnError?: boolean } = {}\n    ) => {\n      try {\n        // Uses `useApiRequest`, not `apiFetchOne`. `apiFetchOne` wraps failures in a bare `AnzuFatalError`.\n        // Callers with `throwOnError` need the real error (`AnzuApiAxiosError`\n        // or `AnzuApiTimeoutError`) to tell a dead session from a dead backend.\n        const { execute } = useApiRequest<NonNullable<TCurrentUser>>({\n          client,\n          method: 'GET',\n          system,\n          entity,\n        })\n        const res = await execute({ urlTemplate: endPoint, urlParams })\n        setCurrentUser(res)\n        authStore.currentUsersLoaded.value.set(system, true)\n        storeAdminRoleBySystem()\n        return currentUser.value\n      } catch (error) {\n        // Set before rethrowing too, or `can()` throws \"must try to load currentUser first\".\n        authStore.currentUsersLoaded.value.set(system, true)\n        if (options.throwOnError) throw error\n        return undefined\n      }\n    }\n\n    return {\n      currentUser,\n      setCurrentUser,\n      // `undefined` until something tries to load this system.\n      // `currentUser` alone cannot tell this apart from \"loaded, but no such user\".\n      isCurrentUserLoaded,\n      isSuperAdmin,\n      isAnonymous,\n      hasCurrentUser,\n      fetchCurrentUser,\n    }\n  }\n\n  return {\n    can,\n    canForAll,\n    canForSome,\n    canSafe,\n    canOwner,\n    useCurrentUser,\n    currentUserId,\n    config: mergedConfig,\n  }\n}\n\nexport function useAuthHelpers<TAclValue extends AclValue>() {\n  const authStore = useAuthStore()\n\n  const canHelper = (acl: TAclValue, subject: object | undefined) => {\n    const system = getSystemFromAcl(acl)\n    const user = authStore.getCurrentUserBySystem(system)\n    const userIsLoaded = authStore.isCurrentUserLoadedBySystem(system)\n    if (isUndefined(userIsLoaded)) {\n      throw new Error('Composable defineAuth must try to load currentUser first to use can function.')\n    }\n    if (isUndefined(user) || isUndefined(user.id) || isNull(user.id) || user.id === 0) {\n      return false\n    }\n    if (isAdminHelper(user.roles, system)) return true\n    const permission = objectGetValueByPath(user, 'resolvedPermissions.' + acl)\n    if (isUndefined(permission)) return false\n    switch (permission) {\n      case Grant.Allow:\n        return true\n      case Grant.Deny:\n        return false\n      case Grant.AllowOwner:\n        if (isUndefined(subject))\n          throw new Error(`Required subject for acl \"${acl}\" to determine an ability to access the resource.`)\n        return canOwnerHelper(subject, system)\n      default:\n        return false\n    }\n  }\n\n  const canForAllHelper = (acls: TAclValue[], subject?: object) => {\n    if (acls.length === 0) {\n      return true\n    }\n    return acls.every((acl) => {\n      return canHelper(acl, subject)\n    })\n  }\n\n  const isAdminHelper = (userRoles: string[], system: string) => {\n    const authStore = useAuthStore()\n    const adminRole = authStore.getAdminRoleBySystem(system)\n    if (isUndefined(adminRole)) return false\n\n    return userRoles.includes(adminRole)\n  }\n\n  function canOwnerHelper(subject: object, system: string) {\n    const user = authStore.getCurrentUserBySystem(system)\n    const userIsLoaded = authStore.isCurrentUserLoadedBySystem(system)\n    if (isUndefined(userIsLoaded)) {\n      throw new Error('Composable defineAuth must try to load currentUser first to use canOwner function.')\n    }\n    if (isUndefined(user) || isUndefined(user.id) || isNull(user.id) || user.id === 0) {\n      return false\n    }\n    if (isOwnerAware(subject)) {\n      return subject.owners.includes(user.id)\n    }\n    if (isCreatedByAware(subject)) {\n      return subject.createdBy === user.id\n    }\n    return false\n  }\n\n  /**\n   * `canForAll` that returns false instead of throwing.\n   * Covers a system not loaded yet (templates and route guards may get there\n   * first) and checks that throw, such as an `allowOwner` grant with no subject.\n   * An array is evaluated with AND. Reading each system's current user\n   * makes a render or computed re-evaluate when that system loads.\n   */\n  const canSafeHelper = (acl: TAclValue | TAclValue[], subject?: object, label = 'canSafe'): boolean => {\n    const acls = isArray(acl) ? acl : [acl]\n    if (acls.length === 0) {\n      return true\n    }\n    for (const system of acls.map((value) => getSystemFromAcl(value))) {\n      authStore.currentUsers.value.get(system)\n      if (isUndefined(authStore.isCurrentUserLoadedBySystem(system))) {\n        return false\n      }\n    }\n    try {\n      return canForAllHelper(acls, subject)\n    } catch (error) {\n      // Denied either way. Without the warning it looks like a missing permission.\n      const key = acls.join(', ')\n      warnOnceInDevelopment(`${label}:${key}`, `[${label}] the check of ${key} threw, so it is denied:`, error)\n      return false\n    }\n  }\n\n  return {\n    canHelper,\n    canForAllHelper,\n    canOwnerHelper,\n    isAdminHelper,\n    canSafeHelper,\n  }\n}\n\n/** An ACL value carries its system in front of the first underscore: `weather_location_ui`. */\nexport function getSystemFromAcl(acl: any) {\n  const parts = acl.split('_')\n\n  return parts[0]\n}\n"],"mappings":";;;;;;;;;;;AAkBA,IAAaA,IAAmB,oBAE1BC,IAAkC,EACtC,WAAWD,EACb;AAMA,SAAgBE,EACd,GACA,IAAoC,CAAC,GACrC;CACA,IAAMC,IAAe;EAAE,GAAGF;EAAe,GAAGG;CAAO,GAC7CC,IAAYC,EAAa,GACzB,EAAE,cAAW,oBAAiB,mBAAgB,kBAAe,qBAAkBC,EAAe,GAE9FC,KAAW,GAAqB,MAC7BC,EAAcC,GAAWC,CAAM,GAGlCC,KAAO,GAAgB,MACpBC,EAAUC,GAAKC,CAAO;CAG/B,SAASC,EAAS,GAAiB;EACjC,OAAOC,EAAeF,GAASG,CAAqB;CACtD;CAEA,IAAMC,KAAa,GAAmB,MAC7BC,EAAgBC,GAAMN,CAAO,GAIhCO,KAAW,GAA8B,MACtCC,EAAcT,GAAKC,CAAO,GAG7BS,KAAc,GAAmB,MACjCH,EAAK,WAAW,KAGbA,EAAK,MAAM,MACTT,EAAIE,GAAKC,CAAO,CACxB,GAGGU,IAAgBC,QAAe;EACnC,IAAMC,IAAOtB,EAAU,uBAAuBa,CAAqB,GAC7DU,IAAevB,EAAU,4BAA4Ba,CAAqB;EAChF,IAAI,GAAYU,CAAY,KAGxB,IAAYD,CAAI,KAAKE,EAAYF,EAAK,EAAE,KAAKG,EAAOH,EAAK,EAAE,KAAKA,EAAK,OAAO,IAGhF,OAAOA,EAAK;CACd,CAAC;CAED,SAASI,EAA0D,GAAgB;EACjF,IAAMC,KAAkB,MAAuB;GAE7C,AADA3B,EAAU,aAAa,MAAM,IAAIM,GAAQgB,CAAI,GAC7CtB,EAAU,mBAAmB,MAAM,IAAIM,GAAQ,EAAI;EACrD,GAEMsB,IAAcP,QACXrB,EAAU,aAAa,MAAM,IAAIM,CAAM,CAC/C,GAEKuB,IAAsBR,QACnBrB,EAAU,mBAAmB,MAAM,IAAIM,CAAM,CACrD,GAEKwB,IAAeT,QACfO,EAAY,QACPzB,EAAQyB,EAAY,MAAM,OAAOtB,CAAM,IAEzC,EACR,GAEKyB,IAAiBV,QACdO,EAAY,SAAS,EAC7B,GAEKI,IAAcX,QAAe;GACjC,IAAI,GAAYQ,EAAoB,KAAK,GACzC,OAAO,CAACE,EAAe;EACzB,CAAC,GAEKE,UAA+B;GACnC,IAAIC,EAAQpC,EAAa,SAAS,GAAG;IACnC,IAAMqC,IAAQrC,EAAa,UAAU,MAAM,MAASsC,EAAK,WAAW9B,CAAM;IAC1E,AAAI6B,KACFnC,EAAU,oBAAoB,MAAM,IAAIM,GAAQ6B,EAAM,SAAS;GAEnE,OACE,EAAU,oBAAoB,MAAM,IAAI7B,GAAQR,EAAa,SAAS;EAE1E;EAsCA,OAAO;GACL;GACA;GAGA;GACA;GACA;GACA;GACA,yBAtCA,GACA,IAAW,yBACX,IAAmC,KAAA,GACnC,IAAS,QACT,IAAsC,CAAC,MACpC;IACH,IAAI;KAIF,IAAM,EAAE,eAAYuC,EAAyC;MAC3D;MACA,QAAQ;MACR;MACA;KACF,CAAC,GACKC,IAAM,MAAMC,EAAQ;MAAE,aAAaC;MAAU;KAAU,CAAC;KAI9D,OAHAb,EAAeW,CAAG,GAClBtC,EAAU,mBAAmB,MAAM,IAAIM,GAAQ,EAAI,GACnD2B,EAAuB,GAChBL,EAAY;IACrB,SAASa,GAAO;KAGd,IADAzC,EAAU,mBAAmB,MAAM,IAAIM,GAAQ,EAAI,GAC/CoC,EAAQ,cAAc,MAAMD;KAChC;IACF;GACF;EAYA;CACF;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ3C;CACV;AACF;AAEA,SAAgBI,IAA6C;CAC3D,IAAMF,IAAYC,EAAa,GAEzBO,KAAa,GAAgB,MAAgC;EACjE,IAAMF,IAASqC,EAAiBlC,CAAG,GAC7Ba,IAAOtB,EAAU,uBAAuBM,CAAM,GAC9CiB,IAAevB,EAAU,4BAA4BM,CAAM;EACjE,IAAIkB,EAAYD,CAAY,GAC1B,MAAU,MAAM,+EAA+E;EAEjG,IAAIC,EAAYF,CAAI,KAAKE,EAAYF,EAAK,EAAE,KAAKG,EAAOH,EAAK,EAAE,KAAKA,EAAK,OAAO,GAC9E,OAAO;EAET,IAAIlB,EAAckB,EAAK,OAAOhB,CAAM,GAAG,OAAO;EAC9C,IAAMsC,IAAaC,EAAqBvB,GAAM,yBAAyBb,CAAG;EAC1E,IAAIe,EAAYoB,CAAU,GAAG,OAAO;EACpC,QAAQA,GAAR;GACE,KAAKE,EAAM,OACT,OAAO;GACT,KAAKA,EAAM,MACT,OAAO;GACT,KAAKA,EAAM;IACT,IAAItB,EAAYd,CAAO,GACrB,MAAU,MAAM,6BAA6BD,EAAI,kDAAkD;IACrG,OAAOG,EAAeF,GAASJ,CAAM;GACvC,SACE,OAAO;EACX;CACF,GAEMS,KAAmB,GAAmB,MACtCC,EAAK,WAAW,KAGbA,EAAK,OAAO,MACVR,EAAUC,GAAKC,CAAO,CAC9B,GAGGN,KAAiB,GAAqB,MAAmB;EAE7D,IAAM2C,IADY9C,EACA,CAAA,CAAU,qBAAqBK,CAAM;EAGvD,OAFA,CAAIkB,EAAYuB,CAAS,KAElB1C,EAAU,SAAS0C,CAAS;CACrC;CAEA,SAASnC,EAAe,GAAiB,GAAgB;EACvD,IAAMU,IAAOtB,EAAU,uBAAuBM,CAAM,GAC9CiB,IAAevB,EAAU,4BAA4BM,CAAM;EACjE,IAAIkB,EAAYD,CAAY,GAC1B,MAAU,MAAM,oFAAoF;EAWtG,OATIC,EAAYF,CAAI,KAAKE,EAAYF,EAAK,EAAE,KAAKG,EAAOH,EAAK,EAAE,KAAKA,EAAK,OAAO,IACvE,KAEL0B,EAAatC,CAAO,IACfA,EAAQ,OAAO,SAASY,EAAK,EAAE,IAEpC2B,EAAiBvC,CAAO,IACnBA,EAAQ,cAAcY,EAAK,KAE7B;CACT;CA8BA,OAAO;EACL;EACA;EACA;EACA;EACA,gBA1BqB,GAA8B,GAAkB,IAAQ,cAAuB;GACpG,IAAMN,IAAOkB,EAAQzB,CAAG,IAAIA,IAAM,CAACA,CAAG;GACtC,IAAIO,EAAK,WAAW,GAClB,OAAO;GAET,KAAK,IAAMV,KAAUU,EAAK,KAAK,MAAU2B,EAAiBO,CAAK,CAAC,GAE9D,IADAlD,EAAU,aAAa,MAAM,IAAIM,CAAM,GACnCkB,EAAYxB,EAAU,4BAA4BM,CAAM,CAAC,GAC3D,OAAO;GAGX,IAAI;IACF,OAAOS,EAAgBC,GAAMN,CAAO;GACtC,SAAS+B,GAAO;IAEd,IAAMU,IAAMnC,EAAK,KAAK,IAAI;IAE1B,OADAoC,EAAsB,GAAGC,EAAM,GAAGF,KAAO,IAAIE,EAAM,iBAAiBF,EAAI,2BAA2BV,CAAK,GACjG;GACT;EACF;CAQA;AACF;AAGA,SAAgBE,EAAiB,GAAU;CAGzC,OAFclC,EAAI,MAAM,GAEjB,CAAA,CAAM;AACf"}

package/dist/domains/auth/composables/refreshSession.d.ts

@@ -7,19 +7,17 @@ export type RefreshResult = {
     type: 'auth-unavailable';
     error: unknown;
 };
-/** What the refresh needs to know about the auth cookies. */
 export interface AuthCookieState {
     refreshTokenExists: unknown;
     jwtPayload: string | null | undefined;
 }
 /**
- * The session refresh, single flight: a refresh already running is joined, otherwise a new one
- * starts; a finished result is never reused.
- *
- * Only a 401 means the session is gone. A 400 (`unable_to_refresh`) can equally mean another tab
- * rotated the token first -- the backend rotation is not atomic -- which a changed JWT cookie shows,
- * up to a second later when that tab's answer arrives after this one's.
- * Everything else is the auth backend being unavailable, never a reason to log out.
+ * Single-flight session refresh. A running refresh is joined,
+ * otherwise a new one starts. A finished result is never reused.
+ * Only a 401 means the session is gone.
+ * A 400 (`unable_to_refresh`) can also mean another tab rotated the token first, because
+ * backend rotation is not atomic. A changed JWT cookie shows this, up to a second later.
+ * Any other error means the auth backend is unavailable and never causes a logout.
  */
 export declare function createRefreshSession(options: {
     /** Calls the refresh endpoint; rejects with whatever the api helper throws. */
@@ -28,10 +26,9 @@ export declare function createRefreshSession(options: {
     jwtPayload: () => string | null | undefined;
 }): () => Promise<RefreshResult>;
 /**
- * The axios request interceptor that refreshes an expired JWT before a request goes out, with the
- * `runWhen` that keeps it off the auth endpoints themselves. Concurrent requests share one refresh
- * (`refreshSession`), and a request is rejected with `SessionExpiredError` (after `logout`) or
- * `AuthUnavailableError` (the user stays logged in).
+ * Request interceptor that refreshes an expired JWT before a request goes out. Its `runWhen` skips the auth endpoints.
+ * Concurrent requests share one refresh (`refreshSession`). A request is rejected with
+ * `SessionExpiredError` (after `logout`) or `AuthUnavailableError` (the user stays logged in).
  */
 export declare function createRefreshRequestInterceptor(options: {
     cookies: () => AuthCookieState;
@@ -39,7 +36,7 @@ export declare function createRefreshRequestInterceptor(options: {
     logout: () => void;
     /** Requests to these urls (the auth endpoints) are never held for a refresh. */
     skipUrlPrefix: string;
-    /** A JWT that is still there but past its expiry also needs a refresh (default: only a missing one). */
+    /** Also refresh a JWT that exists but is expired. By default only a missing JWT is refreshed. */
     jwtExpired?: () => boolean;
 }): {
     interceptor: (requestConfig: InternalAxiosRequestConfig) => Promise<InternalAxiosRequestConfig>;

package/dist/domains/auth/composables/refreshSession.js

@@ -1,10 +1,10 @@
 import { isDefined as e, isNull as t } from "../../../shared/utils/common.js";
-import { AuthUnavailableError as n } from "../../../shared/error/AuthUnavailableError.js";
-import { SessionExpiredError as r } from "../../../shared/error/SessionExpiredError.js";
+import { skipUrlPrefixes as n } from "../../api/composables/defineApiClient.js";
+import { AuthUnavailableError as r } from "../../../shared/error/AuthUnavailableError.js";
 import { isInCauseChain as i } from "../../../shared/error/isInCauseChain.js";
-import { skipUrlPrefixes as a } from "../../api/composables/defineApiClient.js";
+import { SessionExpiredError as a } from "../../../shared/error/SessionExpiredError.js";
 import o from "axios";
-//#region src/domains/auth/composables/refreshSession.ts
+// src/domains/auth/composables/refreshSession.ts
 var s = 400, c = 401, l = 1e3, u = 100, d = (t) => {
 	let n;
 	return i(t, (t) => !o.isAxiosError(t) || !e(t.response) ? !1 : (n = t.response.status, !0)), n;
@@ -36,21 +36,20 @@ function f(n) {
 function p(e) {
 	let t = /* @__PURE__ */ new WeakSet();
 	return {
-		interceptor: async (i) => {
-			let { refreshTokenExists: a, jwtPayload: s } = e.cookies();
-			if (!a && !s) throw e.logout(), new r();
-			if (a && (!s || e.jwtExpired?.())) {
-				let a = await e.refreshSession();
-				if (a.type === "session-expired") throw t.has(a) || (t.add(a), e.logout()), new r();
-				if (i.signal?.aborted) throw new o.CanceledError();
-				if (a.type === "auth-unavailable") throw new n(a.error);
+		interceptor: async (n) => {
+			let { refreshTokenExists: i, jwtPayload: s } = e.cookies();
+			if (!i && !s) throw e.logout(), new a();
+			if (i && (!s || e.jwtExpired?.())) {
+				let i = await e.refreshSession();
+				if (i.type === "session-expired") throw t.has(i) || (t.add(i), e.logout()), new a();
+				if (n.signal?.aborted) throw new o.CanceledError();
+				if (i.type === "auth-unavailable") throw new r(i.error);
 			}
-			return i;
+			return n;
 		},
-		options: { runWhen: a(e.skipUrlPrefix) }
+		options: { runWhen: n(e.skipUrlPrefix) }
 	};
 }
-//#endregion
 export { p as createRefreshRequestInterceptor, f as createRefreshSession };
 
 //# sourceMappingURL=refreshSession.js.map

package/dist/domains/auth/composables/refreshSession.js.map

@@ -1 +1 @@
-{"version":3,"file":"refreshSession.js","names":["axios","HTTP_BAD_REQUEST","HTTP_UNAUTHORIZED","ROTATION_GRACE_MS","ROTATION_POLL_MS","httpStatusInCauseChain","status","isInCauseChain","error","value","isDefined","createRefreshSession","inFlight","rotatedMeanwhile","waited","now","options","isNull","before","resolve","run","jwtPayloadBefore","createRefreshRequestInterceptor","loggedOut","refreshTokenExists","jwtPayload","SessionExpiredError","result","requestConfig","AuthUnavailableError","skipUrlPrefixes"],"sources":["../../../../src/domains/auth/composables/refreshSession.ts"],"sourcesContent":["import axios, { type InternalAxiosRequestConfig } from 'axios'\nimport { isDefined, isNull } from '@/shared/utils/common'\nimport { skipUrlPrefixes } from '@/domains/api/composables/defineApiClient'\nimport { AuthUnavailableError } from '@/shared/error/AuthUnavailableError'\nimport { isInCauseChain } from '@/shared/error/isInCauseChain'\nimport { SessionExpiredError } from '@/shared/error/SessionExpiredError'\n\nconst HTTP_BAD_REQUEST = 400\nconst HTTP_UNAUTHORIZED = 401\n// How long a 400 waits for the cookie of the tab whose refresh won: its answer can come after this one's.\nconst ROTATION_GRACE_MS = 1000\nconst ROTATION_POLL_MS = 100\n\nexport type RefreshResult =\n  | { type: 'refreshed' }\n  | { type: 'session-expired' }\n  | { type: 'auth-unavailable'; error: unknown }\n\n/** What the refresh needs to know about the auth cookies. */\nexport interface AuthCookieState {\n  refreshTokenExists: unknown\n  jwtPayload: string | null | undefined\n}\n\n// `undefined`: no response anywhere in the chain -- a timeout or a network failure.\nconst httpStatusInCauseChain = (error: unknown): number | undefined => {\n  let status: number | undefined\n  isInCauseChain(error, (value) => {\n    if (!axios.isAxiosError(value) || !isDefined(value.response)) return false\n    status = value.response.status\n    return true\n  })\n  return status\n}\n\n/**\n * The session refresh, single flight: a refresh already running is joined, otherwise a new one\n * starts; a finished result is never reused.\n *\n * Only a 401 means the session is gone. A 400 (`unable_to_refresh`) can equally mean another tab\n * rotated the token first -- the backend rotation is not atomic -- which a changed JWT cookie shows,\n * up to a second later when that tab's answer arrives after this one's.\n * Everything else is the auth backend being unavailable, never a reason to log out.\n */\nexport function createRefreshSession(options: {\n  /** Calls the refresh endpoint; rejects with whatever the api helper throws. */\n  refresh: () => Promise<unknown>\n  /** The JWT payload cookie as it is now. */\n  jwtPayload: () => string | null | undefined\n}): () => Promise<RefreshResult> {\n  let inFlight: Promise<RefreshResult> | null = null\n\n  const rotatedMeanwhile = async (before: string | null | undefined): Promise<boolean> => {\n    for (let waited = 0; ; waited += ROTATION_POLL_MS) {\n      const now = options.jwtPayload()\n      if (isDefined(now) && !isNull(now) && now !== before) return true\n      if (waited >= ROTATION_GRACE_MS) return false\n      await new Promise((resolve) => setTimeout(resolve, ROTATION_POLL_MS))\n    }\n  }\n\n  const run = async (): Promise<RefreshResult> => {\n    // Before the request: with a refresh in flight the cookie is already there, so only a changed\n    // value says something afterwards.\n    const jwtPayloadBefore = options.jwtPayload()\n    try {\n      await options.refresh()\n      return { type: 'refreshed' }\n    } catch (error) {\n      const status = httpStatusInCauseChain(error)\n      if (status === HTTP_UNAUTHORIZED) return { type: 'session-expired' }\n      if (status === HTTP_BAD_REQUEST) {\n        return (await rotatedMeanwhile(jwtPayloadBefore)) ? { type: 'refreshed' } : { type: 'session-expired' }\n      }\n      return { type: 'auth-unavailable', error }\n    }\n  }\n\n  return () => {\n    if (isNull(inFlight)) {\n      inFlight = run().finally(() => {\n        inFlight = null\n      })\n    }\n    return inFlight\n  }\n}\n\n/**\n * The axios request interceptor that refreshes an expired JWT before a request goes out, with the\n * `runWhen` that keeps it off the auth endpoints themselves. Concurrent requests share one refresh\n * (`refreshSession`), and a request is rejected with `SessionExpiredError` (after `logout`) or\n * `AuthUnavailableError` (the user stays logged in).\n */\nexport function createRefreshRequestInterceptor(options: {\n  cookies: () => AuthCookieState\n  refreshSession: () => Promise<RefreshResult>\n  logout: () => void\n  /** Requests to these urls (the auth endpoints) are never held for a refresh. */\n  skipUrlPrefix: string\n  /** A JWT that is still there but past its expiry also needs a refresh (default: only a missing one). */\n  jwtExpired?: () => boolean\n}) {\n  // Requests waiting on one refresh share its result: log out once for it, not once per request.\n  const loggedOut = new WeakSet<RefreshResult>()\n\n  const interceptor = async (requestConfig: InternalAxiosRequestConfig): Promise<InternalAxiosRequestConfig> => {\n    const { refreshTokenExists, jwtPayload } = options.cookies()\n    if (!refreshTokenExists && !jwtPayload) {\n      options.logout()\n      throw new SessionExpiredError()\n    }\n    if (refreshTokenExists && (!jwtPayload || options.jwtExpired?.())) {\n      const result = await options.refreshSession()\n      if (result.type === 'session-expired') {\n        if (!loggedOut.has(result)) {\n          loggedOut.add(result)\n          options.logout()\n        }\n        throw new SessionExpiredError()\n      }\n      // Stopped while it waited (its page is gone): cancelled, as it would have been on its way out, and not a\n      // failure to show on the page the user went to. Axios checks the signal only once the interceptors are done.\n      if (requestConfig.signal?.aborted) throw new axios.CanceledError()\n      if (result.type === 'auth-unavailable') throw new AuthUnavailableError(result.error)\n    }\n    return requestConfig\n  }\n\n  return {\n    interceptor,\n    options: { runWhen: skipUrlPrefixes(options.skipUrlPrefix) },\n  }\n}\n"],"mappings":";;;;;;;AAOA,IAAMC,IAAmB,KACnBC,IAAoB,KAEpBC,IAAoB,KACpBC,IAAmB,KAcnBC,KAA0B,MAAuC;CACrE,IAAIC;CAMJ,OALAC,EAAeC,IAAQ,MACjB,CAACR,EAAM,aAAaS,CAAK,KAAK,CAACC,EAAUD,EAAM,QAAQ,IAAU,MACrE,IAASA,EAAM,SAAS,QACjB,GACR,GACMH;AACT;AAWA,SAAgBK,EAAqB,GAKJ;CAC/B,IAAIC,IAA0C,MAExCC,IAAmB,OAAO,MAAwD;EACtF,KAAK,IAAIC,IAAS,IAAK,KAAUV,GAAkB;GACjD,IAAMW,IAAMC,EAAQ,WAAW;GAC/B,IAAIN,EAAUK,CAAG,KAAK,CAACE,EAAOF,CAAG,KAAKA,MAAQG,GAAQ,OAAO;GAC7D,IAAIJ,KAAUX,GAAmB,OAAO;GACxC,MAAM,IAAI,SAAS,MAAY,WAAWgB,GAASf,CAAgB,CAAC;EACtE;CACF,GAEMgB,IAAM,YAAoC;EAG9C,IAAMC,IAAmBL,EAAQ,WAAW;EAC5C,IAAI;GAEF,OADA,MAAMA,EAAQ,QAAQ,GACf,EAAE,MAAM,YAAY;EAC7B,SAASR,GAAO;GACd,IAAMF,IAASD,EAAuBG,CAAK;GAK3C,OAJIF,MAAWJ,IAA0B,EAAE,MAAM,kBAAkB,IAC/DI,MAAWL,IACL,MAAMY,EAAiBQ,CAAgB,IAAK,EAAE,MAAM,YAAY,IAAI,EAAE,MAAM,kBAAkB,IAEjG;IAAE,MAAM;IAAoB;GAAM;EAC3C;CACF;CAEA,cACMJ,EAAOL,CAAQ,MACjB,IAAWQ,EAAI,CAAC,CAAC,cAAc;EAC7B,IAAW;CACb,CAAC,IAEIR;AAEX;AAQA,SAAgBU,EAAgC,GAQ7C;CAED,IAAMC,oBAAY,IAAI,QAAuB;CAyB7C,OAAO;EACL,oBAxByB,MAAmF;GAC5G,IAAM,EAAE,uBAAoB,kBAAeP,EAAQ,QAAQ;GAC3D,IAAI,CAACQ,KAAsB,CAACC,GAE1B,MADAT,EAAQ,OAAO,GACT,IAAIU,EAAoB;GAEhC,IAAIF,MAAuB,CAACC,KAAcT,EAAQ,aAAa,IAAI;IACjE,IAAMW,IAAS,MAAMX,EAAQ,eAAe;IAC5C,IAAIW,EAAO,SAAS,mBAKlB,MAJKJ,EAAU,IAAII,CAAM,MACvBJ,EAAU,IAAII,CAAM,GACpBX,EAAQ,OAAO,IAEX,IAAIU,EAAoB;IAIhC,IAAIE,EAAc,QAAQ,SAAS,MAAM,IAAI5B,EAAM,cAAc;IACjE,IAAI2B,EAAO,SAAS,oBAAoB,MAAM,IAAIE,EAAqBF,EAAO,KAAK;GACrF;GACA,OAAOC;EACT;EAIE,SAAS,EAAE,SAASE,EAAgBd,EAAQ,aAAa,EAAE;CAC7D;AACF"}
+{"version":3,"file":"refreshSession.js","names":["axios","HTTP_BAD_REQUEST","HTTP_UNAUTHORIZED","ROTATION_GRACE_MS","ROTATION_POLL_MS","httpStatusInCauseChain","status","isInCauseChain","error","value","isDefined","createRefreshSession","inFlight","rotatedMeanwhile","waited","now","options","isNull","before","resolve","run","jwtPayloadBefore","createRefreshRequestInterceptor","loggedOut","refreshTokenExists","jwtPayload","SessionExpiredError","result","requestConfig","AuthUnavailableError","skipUrlPrefixes"],"sources":["../../../../src/domains/auth/composables/refreshSession.ts"],"sourcesContent":["import axios, { type InternalAxiosRequestConfig } from 'axios'\nimport { isDefined, isNull } from '@/shared/utils/common'\nimport { skipUrlPrefixes } from '@/domains/api/composables/defineApiClient'\nimport { AuthUnavailableError } from '@/shared/error/AuthUnavailableError'\nimport { isInCauseChain } from '@/shared/error/isInCauseChain'\nimport { SessionExpiredError } from '@/shared/error/SessionExpiredError'\n\nconst HTTP_BAD_REQUEST = 400\nconst HTTP_UNAUTHORIZED = 401\n// How long a 400 waits for the cookie from the tab whose refresh won. That tab's response can arrive after this one.\nconst ROTATION_GRACE_MS = 1000\nconst ROTATION_POLL_MS = 100\n\nexport type RefreshResult =\n  | { type: 'refreshed' }\n  | { type: 'session-expired' }\n  | { type: 'auth-unavailable'; error: unknown }\n\nexport interface AuthCookieState {\n  refreshTokenExists: unknown\n  jwtPayload: string | null | undefined\n}\n\n// `undefined` means no response in the chain: a timeout or a network failure.\nconst httpStatusInCauseChain = (error: unknown): number | undefined => {\n  let status: number | undefined\n  isInCauseChain(error, (value) => {\n    if (!axios.isAxiosError(value) || !isDefined(value.response)) return false\n    status = value.response.status\n    return true\n  })\n  return status\n}\n\n/**\n * Single-flight session refresh. A running refresh is joined,\n * otherwise a new one starts. A finished result is never reused.\n * Only a 401 means the session is gone.\n * A 400 (`unable_to_refresh`) can also mean another tab rotated the token first, because\n * backend rotation is not atomic. A changed JWT cookie shows this, up to a second later.\n * Any other error means the auth backend is unavailable and never causes a logout.\n */\nexport function createRefreshSession(options: {\n  /** Calls the refresh endpoint; rejects with whatever the api helper throws. */\n  refresh: () => Promise<unknown>\n  /** The JWT payload cookie as it is now. */\n  jwtPayload: () => string | null | undefined\n}): () => Promise<RefreshResult> {\n  let inFlight: Promise<RefreshResult> | null = null\n\n  const rotatedMeanwhile = async (before: string | null | undefined): Promise<boolean> => {\n    for (let waited = 0; ; waited += ROTATION_POLL_MS) {\n      const now = options.jwtPayload()\n      if (isDefined(now) && !isNull(now) && now !== before) return true\n      if (waited >= ROTATION_GRACE_MS) return false\n      await new Promise((resolve) => setTimeout(resolve, ROTATION_POLL_MS))\n    }\n  }\n\n  const run = async (): Promise<RefreshResult> => {\n    // Read before the request. During an in-flight refresh the\n    // cookie already exists, so only a changed value is meaningful.\n    const jwtPayloadBefore = options.jwtPayload()\n    try {\n      await options.refresh()\n      return { type: 'refreshed' }\n    } catch (error) {\n      const status = httpStatusInCauseChain(error)\n      if (status === HTTP_UNAUTHORIZED) return { type: 'session-expired' }\n      if (status === HTTP_BAD_REQUEST) {\n        return (await rotatedMeanwhile(jwtPayloadBefore)) ? { type: 'refreshed' } : { type: 'session-expired' }\n      }\n      return { type: 'auth-unavailable', error }\n    }\n  }\n\n  return () => {\n    if (isNull(inFlight)) {\n      inFlight = run().finally(() => {\n        inFlight = null\n      })\n    }\n    return inFlight\n  }\n}\n\n/**\n * Request interceptor that refreshes an expired JWT before a request goes out. Its `runWhen` skips the auth endpoints.\n * Concurrent requests share one refresh (`refreshSession`). A request is rejected with\n * `SessionExpiredError` (after `logout`) or `AuthUnavailableError` (the user stays logged in).\n */\nexport function createRefreshRequestInterceptor(options: {\n  cookies: () => AuthCookieState\n  refreshSession: () => Promise<RefreshResult>\n  logout: () => void\n  /** Requests to these urls (the auth endpoints) are never held for a refresh. */\n  skipUrlPrefix: string\n  /** Also refresh a JWT that exists but is expired. By default only a missing JWT is refreshed. */\n  jwtExpired?: () => boolean\n}) {\n  // Requests waiting on one refresh share its result. Log out once per refresh, not once per request.\n  const loggedOut = new WeakSet<RefreshResult>()\n\n  const interceptor = async (requestConfig: InternalAxiosRequestConfig): Promise<InternalAxiosRequestConfig> => {\n    const { refreshTokenExists, jwtPayload } = options.cookies()\n    if (!refreshTokenExists && !jwtPayload) {\n      options.logout()\n      throw new SessionExpiredError()\n    }\n    if (refreshTokenExists && (!jwtPayload || options.jwtExpired?.())) {\n      const result = await options.refreshSession()\n      if (result.type === 'session-expired') {\n        if (!loggedOut.has(result)) {\n          loggedOut.add(result)\n          options.logout()\n        }\n        throw new SessionExpiredError()\n      }\n      // Aborted while waiting (its page is gone): treat as cancelled, not as a failure to show on the new page.\n      // Axios checks the signal only after the interceptors finish.\n      if (requestConfig.signal?.aborted) throw new axios.CanceledError()\n      if (result.type === 'auth-unavailable') throw new AuthUnavailableError(result.error)\n    }\n    return requestConfig\n  }\n\n  return {\n    interceptor,\n    options: { runWhen: skipUrlPrefixes(options.skipUrlPrefix) },\n  }\n}\n"],"mappings":";;;;;;;AAOA,IAAMC,IAAmB,KACnBC,IAAoB,KAEpBC,IAAoB,KACpBC,IAAmB,KAanBC,KAA0B,MAAuC;CACrE,IAAIC;CAMJ,OALAC,EAAeC,IAAQ,MACjB,CAACR,EAAM,aAAaS,CAAK,KAAK,CAACC,EAAUD,EAAM,QAAQ,IAAU,MACrE,IAASA,EAAM,SAAS,QACjB,GACR,GACMH;AACT;AAUA,SAAgBK,EAAqB,GAKJ;CAC/B,IAAIC,IAA0C,MAExCC,IAAmB,OAAO,MAAwD;EACtF,KAAK,IAAIC,IAAS,IAAK,KAAUV,GAAkB;GACjD,IAAMW,IAAMC,EAAQ,WAAW;GAC/B,IAAIN,EAAUK,CAAG,KAAK,CAACE,EAAOF,CAAG,KAAKA,MAAQG,GAAQ,OAAO;GAC7D,IAAIJ,KAAUX,GAAmB,OAAO;GACxC,MAAM,IAAI,SAAS,MAAY,WAAWgB,GAASf,CAAgB,CAAC;EACtE;CACF,GAEMgB,IAAM,YAAoC;EAG9C,IAAMC,IAAmBL,EAAQ,WAAW;EAC5C,IAAI;GAEF,OADA,MAAMA,EAAQ,QAAQ,GACf,EAAE,MAAM,YAAY;EAC7B,SAASR,GAAO;GACd,IAAMF,IAASD,EAAuBG,CAAK;GAK3C,OAJIF,MAAWJ,IAA0B,EAAE,MAAM,kBAAkB,IAC/DI,MAAWL,IACL,MAAMY,EAAiBQ,CAAgB,IAAK,EAAE,MAAM,YAAY,IAAI,EAAE,MAAM,kBAAkB,IAEjG;IAAE,MAAM;IAAoB;GAAM;EAC3C;CACF;CAEA,cACMJ,EAAOL,CAAQ,MACjB,IAAWQ,EAAI,CAAC,CAAC,cAAc;EAC7B,IAAW;CACb,CAAC,IAEIR;AAEX;AAOA,SAAgBU,EAAgC,GAQ7C;CAED,IAAMC,oBAAY,IAAI,QAAuB;CAyB7C,OAAO;EACL,oBAxByB,MAAmF;GAC5G,IAAM,EAAE,uBAAoB,kBAAeP,EAAQ,QAAQ;GAC3D,IAAI,CAACQ,KAAsB,CAACC,GAE1B,MADAT,EAAQ,OAAO,GACT,IAAIU,EAAoB;GAEhC,IAAIF,MAAuB,CAACC,KAAcT,EAAQ,aAAa,IAAI;IACjE,IAAMW,IAAS,MAAMX,EAAQ,eAAe;IAC5C,IAAIW,EAAO,SAAS,mBAKlB,MAJKJ,EAAU,IAAII,CAAM,MACvBJ,EAAU,IAAII,CAAM,GACpBX,EAAQ,OAAO,IAEX,IAAIU,EAAoB;IAIhC,IAAIE,EAAc,QAAQ,SAAS,MAAM,IAAI5B,EAAM,cAAc;IACjE,IAAI2B,EAAO,SAAS,oBAAoB,MAAM,IAAIE,EAAqBF,EAAO,KAAK;GACrF;GACA,OAAOC;EACT;EAIE,SAAS,EAAE,SAASE,EAAgBd,EAAQ,aAAa,EAAE;CAC7D;AACF"}

package/dist/domains/auth/store/authStore.js

@@ -1,5 +1,5 @@
 import { ref as e } from "vue";
-//#region src/domains/auth/store/authStore.ts
+// src/domains/auth/store/authStore.ts
 var t = e(/* @__PURE__ */ new Map()), n = e(/* @__PURE__ */ new Map()), r = e(/* @__PURE__ */ new Map()), i = () => {
 	function e(e) {
 		return t.value.get(e);
@@ -23,7 +23,6 @@ var t = e(/* @__PURE__ */ new Map()), n = e(/* @__PURE__ */ new Map()), r = e(/*
 		reset: o
 	};
 };
-//#endregion
 export { i as useAuthStore };
 
 //# sourceMappingURL=authStore.js.map

package/dist/domains/auth/valueObject/Grant.js

@@ -1,6 +1,6 @@
 import { ref as e } from "vue";
 import { useI18n as t } from "vue-i18n";
-//#region src/domains/auth/valueObject/Grant.ts
+// src/domains/auth/valueObject/Grant.ts
 var n = {
 	Deny: 0,
 	AllowOwner: 1,
@@ -29,7 +29,6 @@ function r() {
 		getGrantOption: (e) => i.value.find((t) => t.value === e)
 	};
 }
-//#endregion
 export { n as Grant, r as useGrant };
 
 //# sourceMappingURL=Grant.js.map

package/dist/domains/cached/components/ACachedChip.js

@@ -1,8 +1,7 @@
 import e from "./ACachedChip.vue_vue_type_script_setup_true_lang.js";
 /* empty css                                            */
-//#region src/domains/cached/components/ACachedChip.vue
+// src/domains/cached/components/ACachedChip.vue
 var t = e;
-//#endregion
 export { t as default };
 
 //# sourceMappingURL=ACachedChip.js.map

package/dist/domains/cached/components/ACachedChip.js.map

@@ -1 +1 @@
-{"version":3,"file":"ACachedChip.js","names":["_sfc_main","ACachedChip_vue_vue_type_script_setup_true_lang_default","ACachedChip_default"],"sources":["../../../../src/domains/cached/components/ACachedChip.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport { useRouter } from 'vue-router'\nimport type { DocId, IntegerId } from '@/shared/types/common'\nimport { objectGetValueByPath } from '@/shared/utils/object'\nimport { isNull, isUndefined } from '@/shared/utils/common'\nimport { COMMON_CONFIG } from '@/shared/commonConfig'\nimport { useCachedItem } from '@/domains/cached/composables/useCachedItem'\n\nconst props = withDefaults(\n  defineProps<{\n    id?: null | undefined | IntegerId | DocId\n    title?: string\n    containerClass?: undefined | string\n    getCachedFn: (id: any) => any\n    displayTextPath: string\n    route: string\n    disableClick?: boolean\n    openInNew?: boolean\n    size?: string\n    forceRounded?: boolean\n    textOnly?: boolean\n    fallbackIdText?: boolean\n    wrapText?: boolean\n    closable?: boolean\n    customTitleFn?: (\n      cachedItem: any,\n      defaultTitle: string,\n      displayTextPath: string,\n      fallbackIdText: boolean\n    ) => string | undefined\n  }>(),\n  {\n    id: null,\n    title: '',\n    containerClass: 'd-inline-flex',\n    disableClick: false,\n    openInNew: false,\n    size: 'small',\n    forceRounded: false,\n    textOnly: false,\n    fallbackIdText: false,\n    wrapText: false,\n    closable: false,\n    customTitleFn: undefined,\n  }\n)\n\nconst emit = defineEmits<{\n  (e: 'close', id: null | undefined | IntegerId | DocId): void\n}>()\n\nconst { t } = useI18n()\nconst router = useRouter()\nconst { cached, loaded, unresolved } = useCachedItem(() => props.getCachedFn(props.id as any))\n\n// An item the fetch could not resolve has only its placeholder to show: its id, and no link to a\n// detail that would not load either.\nconst linkDisabled = computed(() => props.disableClick || unresolved.value)\n\nconst containerClassComputed = computed(() => {\n  return props.wrapText ? props.containerClass + ' a-chip--wrap' : props.containerClass\n})\n\n// A title given by the caller still wins over the placeholder.\nconst showUnresolved = computed(() => unresolved.value && props.title.length === 0)\n\nconst displayTitle = computed(() => {\n  if (showUnresolved.value) return '#' + props.id\n  if (props.customTitleFn && cached.value) {\n    const customTitle = props.customTitleFn(cached.value, props.title, props.displayTextPath, props.fallbackIdText)\n    if (customTitle !== undefined) {\n      return customTitle\n    }\n  }\n  if (props.title.length > 0) return props.title\n  if (cached.value) {\n    return objectGetValueByPath(cached.value, props.displayTextPath)\n  }\n  return props.fallbackIdText ? props.id : ''\n})\n\nconst onClick = () => {\n  router.push({ name: props.route, params: { id: props.id } })\n}\n</script>\n\n<template>\n  <div :class=\"containerClassComputed\">\n    <template v-if=\"isNull(id) || isUndefined(id)\">\n      <slot name=\"empty\">-</slot>\n    </template>\n    <div\n      v-else-if=\"textOnly\"\n      :title=\"unresolved ? t('common.model.cachedUnavailable') : undefined\"\n    >\n      <slot\n        v-if=\"showUnresolved\"\n        :id=\"id\"\n        name=\"unresolved\"\n      >\n        {{ displayTitle }}\n      </slot>\n      <template v-else>{{ displayTitle }}</template>\n      <VProgressCircular\n        v-if=\"!loaded && title.length === 0\"\n        :size=\"12\"\n        :width=\"2\"\n        indeterminate\n        class=\"mx-1\"\n      />\n    </div>\n    <VChip\n      v-else-if=\"linkDisabled\"\n      :size=\"size\"\n      :label=\"forceRounded ? undefined : true\"\n      :closable=\"closable\"\n      close-label=\"common.button.remove\"\n      @click:close=\"() => emit('close', id)\"\n    >\n      <slot\n        v-if=\"showUnresolved\"\n        :id=\"id\"\n        name=\"unresolved\"\n      >\n        {{ displayTitle }}\n      </slot>\n      <template v-else>{{ displayTitle }}</template>\n      <VTooltip\n        v-if=\"unresolved\"\n        activator=\"parent\"\n        location=\"bottom\"\n      >\n        {{ t('common.model.cachedUnavailable') }}\n      </VTooltip>\n      <VProgressCircular\n        v-if=\"!loaded && title.length === 0\"\n        :size=\"12\"\n        :width=\"2\"\n        indeterminate\n        class=\"mx-1\"\n      />\n    </VChip>\n    <VChip\n      v-else\n      :size=\"size\"\n      :append-icon=\"openInNew ? COMMON_CONFIG.CHIP.ICON.LINK_EXTERNAL : COMMON_CONFIG.CHIP.ICON.LINK\"\n      :label=\"forceRounded ? undefined : true\"\n      :closable=\"closable\"\n      close-label=\"common.button.remove\"\n      @click.stop=\"onClick\"\n      @click:close=\"() => emit('close', id)\"\n    >\n      {{ displayTitle }}\n      <VProgressCircular\n        v-if=\"!loaded && title.length === 0\"\n        :size=\"12\"\n        :width=\"2\"\n        indeterminate\n        class=\"mx-1\"\n      />\n    </VChip>\n  </div>\n</template>\n\n<style lang=\"scss\">\n.a-chip--wrap {\n  .v-chip {\n    height: auto !important;\n  }\n\n  .v-chip .v-chip__content {\n    max-width: 100%;\n    height: auto;\n    min-height: 26px;\n    white-space: pre-wrap;\n  }\n}\n</style>\n"],"mappings":""}
+{"version":3,"file":"ACachedChip.js","names":["_sfc_main","ACachedChip_vue_vue_type_script_setup_true_lang_default","ACachedChip_default"],"sources":["../../../../src/domains/cached/components/ACachedChip.vue"],"sourcesContent":["<script lang=\"ts\" setup>\nimport { computed } from 'vue'\nimport { useI18n } from 'vue-i18n'\nimport { useRouter } from 'vue-router'\nimport type { DocId, IntegerId } from '@/shared/types/common'\nimport { objectGetValueByPath } from '@/shared/utils/object'\nimport { isNull, isUndefined } from '@/shared/utils/common'\nimport { COMMON_CONFIG } from '@/shared/commonConfig'\nimport { useCachedItem } from '@/domains/cached/composables/useCachedItem'\n\nconst props = withDefaults(\n  defineProps<{\n    id?: null | undefined | IntegerId | DocId\n    title?: string\n    containerClass?: undefined | string\n    getCachedFn: (id: any) => any\n    displayTextPath: string\n    route: string\n    disableClick?: boolean\n    openInNew?: boolean\n    size?: string\n    forceRounded?: boolean\n    textOnly?: boolean\n    fallbackIdText?: boolean\n    wrapText?: boolean\n    closable?: boolean\n    customTitleFn?: (\n      cachedItem: any,\n      defaultTitle: string,\n      displayTextPath: string,\n      fallbackIdText: boolean\n    ) => string | undefined\n  }>(),\n  {\n    id: null,\n    title: '',\n    containerClass: 'd-inline-flex',\n    disableClick: false,\n    openInNew: false,\n    size: 'small',\n    forceRounded: false,\n    textOnly: false,\n    fallbackIdText: false,\n    wrapText: false,\n    closable: false,\n    customTitleFn: undefined,\n  }\n)\n\nconst emit = defineEmits<{\n  (e: 'close', id: null | undefined | IntegerId | DocId): void\n}>()\n\nconst { t } = useI18n()\nconst router = useRouter()\nconst { cached, loaded, unresolved } = useCachedItem(() => props.getCachedFn(props.id as any))\n\n// An item the fetch could not resolve shows only its id placeholder.\n// It gets no link, because its detail would not load either.\nconst linkDisabled = computed(() => props.disableClick || unresolved.value)\n\nconst containerClassComputed = computed(() => {\n  return props.wrapText ? props.containerClass + ' a-chip--wrap' : props.containerClass\n})\n\n// A title given by the caller still wins over the placeholder.\nconst showUnresolved = computed(() => unresolved.value && props.title.length === 0)\n\nconst displayTitle = computed(() => {\n  if (showUnresolved.value) return '#' + props.id\n  if (props.customTitleFn && cached.value) {\n    const customTitle = props.customTitleFn(cached.value, props.title, props.displayTextPath, props.fallbackIdText)\n    if (customTitle !== undefined) {\n      return customTitle\n    }\n  }\n  if (props.title.length > 0) return props.title\n  if (cached.value) {\n    return objectGetValueByPath(cached.value, props.displayTextPath)\n  }\n  return props.fallbackIdText ? props.id : ''\n})\n\nconst onClick = () => {\n  router.push({ name: props.route, params: { id: props.id } })\n}\n</script>\n\n<template>\n  <div :class=\"containerClassComputed\">\n    <template v-if=\"isNull(id) || isUndefined(id)\">\n      <slot name=\"empty\">-</slot>\n    </template>\n    <div\n      v-else-if=\"textOnly\"\n      :title=\"unresolved ? t('common.model.cachedUnavailable') : undefined\"\n    >\n      <slot\n        v-if=\"showUnresolved\"\n        :id=\"id\"\n        name=\"unresolved\"\n      >\n        {{ displayTitle }}\n      </slot>\n      <template v-else>{{ displayTitle }}</template>\n      <VProgressCircular\n        v-if=\"!loaded && title.length === 0\"\n        :size=\"12\"\n        :width=\"2\"\n        indeterminate\n        class=\"mx-1\"\n      />\n    </div>\n    <VChip\n      v-else-if=\"linkDisabled\"\n      :size=\"size\"\n      :label=\"forceRounded ? undefined : true\"\n      :closable=\"closable\"\n      close-label=\"common.button.remove\"\n      @click:close=\"() => emit('close', id)\"\n    >\n      <slot\n        v-if=\"showUnresolved\"\n        :id=\"id\"\n        name=\"unresolved\"\n      >\n        {{ displayTitle }}\n      </slot>\n      <template v-else>{{ displayTitle }}</template>\n      <VTooltip\n        v-if=\"unresolved\"\n        activator=\"parent\"\n        location=\"bottom\"\n      >\n        {{ t('common.model.cachedUnavailable') }}\n      </VTooltip>\n      <VProgressCircular\n        v-if=\"!loaded && title.length === 0\"\n        :size=\"12\"\n        :width=\"2\"\n        indeterminate\n        class=\"mx-1\"\n      />\n    </VChip>\n    <VChip\n      v-else\n      :size=\"size\"\n      :append-icon=\"openInNew ? COMMON_CONFIG.CHIP.ICON.LINK_EXTERNAL : COMMON_CONFIG.CHIP.ICON.LINK\"\n      :label=\"forceRounded ? undefined : true\"\n      :closable=\"closable\"\n      close-label=\"common.button.remove\"\n      @click.stop=\"onClick\"\n      @click:close=\"() => emit('close', id)\"\n    >\n      {{ displayTitle }}\n      <VProgressCircular\n        v-if=\"!loaded && title.length === 0\"\n        :size=\"12\"\n        :width=\"2\"\n        indeterminate\n        class=\"mx-1\"\n      />\n    </VChip>\n  </div>\n</template>\n\n<style lang=\"scss\">\n.a-chip--wrap {\n  .v-chip {\n    height: auto !important;\n  }\n\n  .v-chip .v-chip__content {\n    max-width: 100%;\n    height: auto;\n    min-height: 26px;\n    white-space: pre-wrap;\n  }\n}\n</style>\n"],"mappings":""}

package/dist/domains/cached/components/ACachedChip.vue.d.ts

@@ -16,18 +16,20 @@ type __VLS_Props = {
     closable?: boolean;
     customTitleFn?: (cachedItem: any, defaultTitle: string, displayTextPath: string, fallbackIdText: boolean) => string | undefined;
 };
-declare var __VLS_1: {}, __VLS_3: {
-    id: string | number;
-}, __VLS_18: {
-    id: string | number;
-};
-type __VLS_Slots = {} & {
-    empty?: (props: typeof __VLS_1) => any;
-} & {
-    unresolved?: (props: typeof __VLS_3) => any;
-} & {
-    unresolved?: (props: typeof __VLS_18) => any;
+declare const __VLS_template: () => {
+    __VLS_Slots: {
+        empty?: (props: {}) => any;
+    } & {
+        unresolved?: (props: {
+            id: string | number;
+        }) => any;
+    } & {
+        unresolved?: (props: {
+            id: string | number;
+        }) => any;
+    };
 };
+type __VLS_Slots = ReturnType<typeof __VLS_template>['__VLS_Slots'];
 declare const __VLS_base: import('vue').DefineComponent<__VLS_Props, {}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {} & {
     close: (id: string | number | null | undefined) => any;
 }, string, import('vue').PublicProps, Readonly<__VLS_Props> & Readonly<{