@anzusystems/common-admin 2.0.0-rc.4 → 2.0.0-rc.6

package/dist/domains/anzuUser/composables/userCrossSystemWrites.js.map

@@ -1 +1 @@
-{"version":3,"file":"userCrossSystemWrites.js","names":["classifyWriteStatus","status","BulkOutcome","request","useApiRequest","descriptor","url","useUserCrossSystemWrites","resolveEnabledWrite","read","get","current","enabled","descriptorMayWrite","body","cloneDeep","write","saved","error","probeStatusFromError","USER_METADATA_FIELDS","resolveMetadataWrite","fields","readMetadataField","field","target","concurrentFields","isNull","seen","writeMetadataField","method","resolveCreateEndpoint","created","execute"],"sources":["../../../../src/domains/anzuUser/composables/userCrossSystemWrites.ts"],"sourcesContent":["import { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport { HTTP_STATUS_BAD_REQUEST, HTTP_STATUS_UNPROCESSABLE_ENTITY } from '@/shared/statusCodes'\nimport {\n  type AnyUserSystemDescriptor,\n  descriptorMayWrite,\n  resolveCreateEndpoint,\n  resolveEnabledWrite,\n  resolveMetadataWrite,\n} from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport { BulkOutcome, type BulkOutcomeType } from '@/domains/anzuUser/store/userCrossSystemStore'\nimport { probeStatusFromError } from '@/domains/anzuUser/composables/userSystemProbe'\nimport {\n  readMetadataField,\n  USER_METADATA_FIELDS,\n  writeMetadataField,\n  type UserMetadataField,\n} from '@/domains/anzuUser/utils/userMetadataDiff'\nimport type { AnzuUser, BaseUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\nimport { cloneDeep, isNull } from '@/shared/utils/common'\n\nexport interface WriteResult {\n  outcome: BulkOutcomeType\n  /** What the server holds afterwards, when it answered with the record. */\n  user?: AnzuUser\n  /**\n   * Fields whose stored value had moved away from both the target and what the search saw.\n   *\n   * The write still goes through -- decision 24 says the operator's value wins -- but somebody\n   * edited the record in between, and the log line says so rather than letting it pass unnoticed.\n   */\n  concurrentFields?: UserMetadataField[]\n  detail?: string\n}\n\n/**\n * What the operator is told about a failed write.\n *\n * 422 and 400 are their own line and not a generic failure: a PUT validates the whole body, and an\n * account carrying a colour or an e-mail that no longer passes validation will fail even on a plain\n * \"disable\". With legacy data that is an ordinary outcome, and \"could not be saved\" would send\n * somebody looking for a bug that is not there.\n */\nexport const classifyWriteStatus = (status: number | null): BulkOutcomeType => {\n  if (status === null) return BulkOutcome.Unavailable\n  if (status === 403) return BulkOutcome.Forbidden\n  if (status === 401) return BulkOutcome.Unauthenticated\n  if (status === 404) return BulkOutcome.NotFound\n  if (status === HTTP_STATUS_UNPROCESSABLE_ENTITY || status === HTTP_STATUS_BAD_REQUEST) return BulkOutcome.Invalid\n  return BulkOutcome.Unavailable\n}\n\nconst request = <R extends object, B>(\n  descriptor: AnyUserSystemDescriptor,\n  method: 'GET' | 'PUT' | 'PATCH' | 'POST',\n  url: string\n) =>\n  useApiRequest<R, B>({\n    client: descriptor.client,\n    method,\n    system: descriptor.system,\n    entity: descriptor.entity,\n    urlTemplate: url,\n  })\n\nexport const useUserCrossSystemWrites = () => {\n  /**\n   * Switching an account on or off.\n   *\n   * There is no PATCH for this anywhere -- the only method that calls `setEnabled` is the full\n   * update -- so it is a read followed by a write on the same path, with the whole record the read\n   * returned. That is not caution, it is the contract: the DTO defaults roles to `[ROLE_USER]`,\n   * `enabled` to true and both permission collections to empty, and the manager writes all four\n   * unconditionally. A body of \"just the enabled flag\" resets the roles, wipes the grants, detaches\n   * the groups and switches a disabled account back on.\n   *\n   * On `/adm/users` in cms it goes further still: that PUT runs `updateRelations()` over seven\n   * scalars and twelve collections, so an omitted `desks` does not mean \"unchanged\", it means\n   * \"remove from every desk\".\n   */\n  const setEnabled = async (\n    descriptor: AnyUserSystemDescriptor,\n    id: IntegerId,\n    enabled: boolean\n  ): Promise<WriteResult> => {\n    const { get, url } = resolveEnabledWrite(descriptor)\n    try {\n      const { execute: read } = request<AnzuUser, null>(descriptor, 'GET', get)\n      const current = await read({ urlParams: { id } })\n      if (current.enabled === enabled) {\n        // Already there. A no-op PUT would still run `updateRelations()` in cms -- risk for nothing.\n        return { outcome: BulkOutcome.Done, user: current }\n      }\n      // The right may have gone while the record was read: reported as the server would refuse it.\n      if (!descriptorMayWrite(descriptor, 'update')) return { outcome: BulkOutcome.Forbidden }\n      const body = cloneDeep(current)\n      body.enabled = enabled\n      const { execute: write } = request<AnzuUser, AnzuUser>(descriptor, 'PUT', url)\n      const saved = await write({ urlParams: { id }, body })\n      return { outcome: BulkOutcome.Done, user: saved }\n    } catch (error) {\n      return { outcome: classifyWriteStatus(probeStatusFromError(error)) }\n    }\n  }\n\n  /**\n   * Writing the shared metadata.\n   *\n   * Through `PATCH /adm/users/{id}` wherever that path exists, because the method behind it\n   * physically cannot write roles, permissions, groups or `enabled` -- it has no setters for them.\n   * That is a stronger guarantee than assembling a careful body, and it is why the plan sends\n   * metadata this way rather than through the full update.\n   *\n   * The body is still the whole record the read returned. `id` in particular has to be in it: the\n   * uniqueness validator only excludes the record itself when the DTO carries a non-empty id, and\n   * without it the server reports the user's own e-mail as already taken -- on every account.\n   */\n  const writeMetadata = async (\n    descriptor: AnyUserSystemDescriptor,\n    id: IntegerId,\n    target: BaseUser,\n    fields: readonly UserMetadataField[] = USER_METADATA_FIELDS,\n    /** What the search showed for this system, so a change made in between can be recognised. */\n    seen: BaseUser | null = null\n  ): Promise<WriteResult & { changed: boolean }> => {\n    const { method, get, url } = resolveMetadataWrite(descriptor)\n    try {\n      const { execute: read } = request<AnzuUser, null>(descriptor, 'GET', get)\n      // Read again immediately before writing, not reused from the search: those results can be\n      // hours old, and a system whose value already matches must not be written to at all.\n      const current = await read({ urlParams: { id } })\n\n      const differs = fields.some((field) => readMetadataField(current, field) !== readMetadataField(target, field))\n      if (!differs) return { outcome: BulkOutcome.Done, user: current, changed: false }\n\n      // Different from what the operator chose *and* from what they were shown when they chose it:\n      // somebody else wrote to this record in between. The value still goes in -- that is what was\n      // asked for -- and the log names the fields.\n      const concurrentFields = isNull(seen)\n        ? []\n        : fields.filter(\n            (field) =>\n              readMetadataField(current, field) !== readMetadataField(seen, field) &&\n              readMetadataField(current, field) !== readMetadataField(target, field)\n          )\n\n      // The right may have gone while the record was read: reported as the server would refuse it.\n      if (!descriptorMayWrite(descriptor, 'update')) return { outcome: BulkOutcome.Forbidden, changed: false }\n      const body = cloneDeep(current)\n      fields.forEach((field) => writeMetadataField(body, field, readMetadataField(target, field)))\n\n      const { execute: write } = request<AnzuUser, AnzuUser>(descriptor, method, url)\n      const saved = await write({ urlParams: { id }, body })\n      return { outcome: BulkOutcome.Done, user: saved, changed: true, concurrentFields }\n    } catch (error) {\n      return { outcome: classifyWriteStatus(probeStatusFromError(error)), changed: false }\n    }\n  }\n\n  /**\n   * Creating an account in another system.\n   *\n   * The body comes from the library factory -- `roles: []`, `enabled: false` -- with the metadata\n   * copied over. Assembling it by hand from base fields is what would have the backend fill in\n   * `ROLE_USER`, leaving an account with a role nobody granted.\n   */\n  const createInSystem = async (descriptor: AnyUserSystemDescriptor, body: AnzuUser): Promise<WriteResult> => {\n    try {\n      const { execute } = request<AnzuUser, AnzuUser>(descriptor, 'POST', resolveCreateEndpoint(descriptor))\n      const created = await execute({ body })\n      return { outcome: BulkOutcome.Done, user: created }\n    } catch (error) {\n      return { outcome: classifyWriteStatus(probeStatusFromError(error)) }\n    }\n  }\n\n  /** The source account, read fresh from the server rather than taken from a store or a form. */\n  const readSourceUser = async (descriptor: AnyUserSystemDescriptor, id: IntegerId): Promise<AnzuUser | null> => {\n    const { get } = resolveEnabledWrite(descriptor)\n    try {\n      const { execute } = request<AnzuUser, null>(descriptor, 'GET', get)\n      return await execute({ urlParams: { id } })\n    } catch {\n      return null\n    }\n  }\n\n  return {\n    setEnabled,\n    writeMetadata,\n    createInSystem,\n    readSourceUser,\n  }\n}\n"],"mappings":";;;;;;;;AA2CA,IAAaA,KAAuB,MAC9BC,MAAW,OAAaC,EAAY,cACpCD,MAAW,MAAYC,EAAY,YACnCD,MAAW,MAAYC,EAAY,kBACnCD,MAAW,MAAYC,EAAY,WACnCD,MAAA,OAA+CA,MAAA,MAA2CC,EAAY,UACnGA,EAAY,aAGfC,KACJ,GACA,GACA,MAEAC,EAAoB;CAClB,QAAQC,EAAW;CACnB;CACA,QAAQA,EAAW;CACnB,QAAQA,EAAW;CACnB,aAAaC;AACf,CAAC,GAEUC,WA0HJ;CACL,mBA3GA,GACA,GACA,MACyB;EACzB,IAAM,EAAE,QAAK,WAAQC,EAAoBH,CAAU;EACnD,IAAI;GACF,IAAM,EAAE,SAASI,MAASN,EAAwBE,GAAY,OAAOK,CAAG,GAClEC,IAAU,MAAMF,EAAK,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;GAChD,IAAIE,EAAQ,YAAYC,GAEtB,OAAO;IAAE,SAASV,EAAY;IAAM,MAAMS;GAAQ;GAGpD,IAAI,CAACE,EAAmBR,GAAY,QAAQ,GAAG,OAAO,EAAE,SAASH,EAAY,UAAU;GACvF,IAAMY,IAAOC,EAAUJ,CAAO;GAC9B,EAAK,UAAUC;GACf,IAAM,EAAE,SAASI,MAAUb,EAA4BE,GAAY,OAAOC,CAAG,GACvEW,IAAQ,MAAMD,EAAM;IAAE,WAAW,EAAE,MAAG;IAAG;GAAK,CAAC;GACrD,OAAO;IAAE,SAASd,EAAY;IAAM,MAAMe;GAAM;EAClD,SAASC,GAAO;GACd,OAAO,EAAE,SAASlB,EAAoBmB,EAAqBD,CAAK,CAAC,EAAE;EACrE;CACF;CAsFE,sBAvEA,GACA,GACA,GACA,IAAuCE,GAEvC,IAAwB,SACwB;EAChD,IAAM,EAAE,WAAQ,QAAK,WAAQC,EAAqBhB,CAAU;EAC5D,IAAI;GACF,IAAM,EAAE,SAASI,MAASN,EAAwBE,GAAY,OAAOK,CAAG,GAGlEC,IAAU,MAAMF,EAAK,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;GAGhD,IAAI,CADYa,EAAO,MAAM,MAAUC,EAAkBZ,GAASa,CAAK,MAAMD,EAAkBE,GAAQD,CAAK,CACvG,GAAS,OAAO;IAAE,SAAStB,EAAY;IAAM,MAAMS;IAAS,SAAS;GAAM;GAKhF,IAAMe,IAAmBC,EAAOC,CAAI,IAChC,CAAC,IACDN,EAAO,QACJ,MACCC,EAAkBZ,GAASa,CAAK,MAAMD,EAAkBK,GAAMJ,CAAK,KACnED,EAAkBZ,GAASa,CAAK,MAAMD,EAAkBE,GAAQD,CAAK,CACzE;GAGJ,IAAI,CAACX,EAAmBR,GAAY,QAAQ,GAAG,OAAO;IAAE,SAASH,EAAY;IAAW,SAAS;GAAM;GACvG,IAAMY,IAAOC,EAAUJ,CAAO;GAC9B,EAAO,SAAS,MAAUkB,EAAmBf,GAAMU,GAAOD,EAAkBE,GAAQD,CAAK,CAAC,CAAC;GAE3F,IAAM,EAAE,SAASR,MAAUb,EAA4BE,GAAYyB,GAAQxB,CAAG,GACxEW,IAAQ,MAAMD,EAAM;IAAE,WAAW,EAAE,MAAG;IAAG;GAAK,CAAC;GACrD,OAAO;IAAE,SAASd,EAAY;IAAM,MAAMe;IAAO,SAAS;IAAM;GAAiB;EACnF,SAASC,GAAO;GACd,OAAO;IAAE,SAASlB,EAAoBmB,EAAqBD,CAAK,CAAC;IAAG,SAAS;GAAM;EACrF;CACF;CAiCE,uBAxB4B,GAAqC,MAAyC;EAC1G,IAAI;GACF,IAAM,EAAE,eAAYf,EAA4BE,GAAY,QAAQ0B,EAAsB1B,CAAU,CAAC,GAC/F2B,IAAU,MAAMC,EAAQ,EAAE,QAAK,CAAC;GACtC,OAAO;IAAE,SAAS/B,EAAY;IAAM,MAAM8B;GAAQ;EACpD,SAASd,GAAO;GACd,OAAO,EAAE,SAASlB,EAAoBmB,EAAqBD,CAAK,CAAC,EAAE;EACrE;CACF;CAiBE,uBAd4B,GAAqC,MAA4C;EAC7G,IAAM,EAAE,WAAQV,EAAoBH,CAAU;EAC9C,IAAI;GACF,IAAM,EAAE,eAAYF,EAAwBE,GAAY,OAAOK,CAAG;GAClE,OAAO,MAAMuB,EAAQ,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;EAC5C,QAAQ;GACN,OAAO;EACT;CACF;AAOA"}
+{"version":3,"file":"userCrossSystemWrites.js","names":["classifyWriteStatus","status","BulkOutcome","request","useApiRequest","descriptor","url","useUserCrossSystemWrites","resolveEnabledWrite","read","get","current","enabled","descriptorMayWrite","body","cloneDeep","write","saved","error","probeStatusFromError","USER_METADATA_FIELDS","resolveMetadataWrite","fields","readMetadataField","field","target","concurrentFields","isNull","seen","writeMetadataField","method","resolveCreateEndpoint","created","execute"],"sources":["../../../../src/domains/anzuUser/composables/userCrossSystemWrites.ts"],"sourcesContent":["import { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport { HTTP_STATUS_BAD_REQUEST, HTTP_STATUS_UNPROCESSABLE_ENTITY } from '@/shared/statusCodes'\nimport {\n  type AnyUserSystemDescriptor,\n  descriptorMayWrite,\n  resolveCreateEndpoint,\n  resolveEnabledWrite,\n  resolveMetadataWrite,\n} from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport { BulkOutcome, type BulkOutcomeType } from '@/domains/anzuUser/store/userCrossSystemStore'\nimport { probeStatusFromError } from '@/domains/anzuUser/composables/userSystemProbe'\nimport {\n  readMetadataField,\n  USER_METADATA_FIELDS,\n  writeMetadataField,\n  type UserMetadataField,\n} from '@/domains/anzuUser/utils/userMetadataDiff'\nimport type { AnzuUser, BaseUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\nimport { cloneDeep, isNull } from '@/shared/utils/common'\n\nexport interface WriteResult {\n  outcome: BulkOutcomeType\n  /** The server's record after the write, when it returned one. */\n  user?: AnzuUser\n  /**\n   * Fields whose stored value differed from both the target and what the search saw.\n   * The write still goes through (decision 24: the operator's value wins). The log reports the concurrent edit.\n   */\n  concurrentFields?: UserMetadataField[]\n  detail?: string\n}\n\n/**\n * 422 and 400 get their own outcome. A PUT validates the whole body.\n * Legacy data that no longer validates fails even a plain disable. That is not a bug.\n */\nexport const classifyWriteStatus = (status: number | null): BulkOutcomeType => {\n  if (status === null) return BulkOutcome.Unavailable\n  if (status === 403) return BulkOutcome.Forbidden\n  if (status === 401) return BulkOutcome.Unauthenticated\n  if (status === 404) return BulkOutcome.NotFound\n  if (status === HTTP_STATUS_UNPROCESSABLE_ENTITY || status === HTTP_STATUS_BAD_REQUEST) return BulkOutcome.Invalid\n  return BulkOutcome.Unavailable\n}\n\nconst request = <R extends object, B>(\n  descriptor: AnyUserSystemDescriptor,\n  method: 'GET' | 'PUT' | 'PATCH' | 'POST',\n  url: string\n) =>\n  useApiRequest<R, B>({\n    client: descriptor.client,\n    method,\n    system: descriptor.system,\n    entity: descriptor.entity,\n    urlTemplate: url,\n  })\n\nexport const useUserCrossSystemWrites = () => {\n  /**\n   * No PATCH exists for `enabled`. Only the full update calls `setEnabled`,\n   * so this is a GET then PUT on the same path with the whole record.\n   * The DTO defaults roles to `[ROLE_USER]`, `enabled` to true and permissions to empty. A\n   * partial body resets roles, wipes grants, detaches groups and re-enables the account.\n   * In cms `/adm/users` PUT runs `updateRelations()`, so an omitted `desks` removes the user from every desk.\n   */\n  const setEnabled = async (\n    descriptor: AnyUserSystemDescriptor,\n    id: IntegerId,\n    enabled: boolean\n  ): Promise<WriteResult> => {\n    const { get, url } = resolveEnabledWrite(descriptor)\n    try {\n      const { execute: read } = request<AnzuUser, null>(descriptor, 'GET', get)\n      const current = await read({ urlParams: { id } })\n      if (current.enabled === enabled) {\n        // Already in the target state. A no-op PUT would still run `updateRelations()` in cms.\n        return { outcome: BulkOutcome.Done, user: current }\n      }\n      // The right may have been revoked during the read. Report it as the server would refuse it.\n      if (!descriptorMayWrite(descriptor, 'update')) return { outcome: BulkOutcome.Forbidden }\n      const body = cloneDeep(current)\n      body.enabled = enabled\n      const { execute: write } = request<AnzuUser, AnzuUser>(descriptor, 'PUT', url)\n      const saved = await write({ urlParams: { id }, body })\n      return { outcome: BulkOutcome.Done, user: saved }\n    } catch (error) {\n      return { outcome: classifyWriteStatus(probeStatusFromError(error)) }\n    }\n  }\n\n  /**\n   * Uses `PATCH /adm/users/{id}` where it exists. Its method\n   * has no setters for roles, permissions, groups or `enabled`.\n   * The body is still the whole record from the read. It must include `id`:\n   * without it the uniqueness validator reports the user's own e-mail as taken.\n   */\n  const writeMetadata = async (\n    descriptor: AnyUserSystemDescriptor,\n    id: IntegerId,\n    target: BaseUser,\n    fields: readonly UserMetadataField[] = USER_METADATA_FIELDS,\n    /** What the search showed for this system, to detect a change made in between. */\n    seen: BaseUser | null = null\n  ): Promise<WriteResult & { changed: boolean }> => {\n    const { method, get, url } = resolveMetadataWrite(descriptor)\n    try {\n      const { execute: read } = request<AnzuUser, null>(descriptor, 'GET', get)\n      // Read again right before writing. Search results can be hours\n      // old, and a system that already matches must not be written.\n      const current = await read({ urlParams: { id } })\n\n      const differs = fields.some((field) => readMetadataField(current, field) !== readMetadataField(target, field))\n      if (!differs) return { outcome: BulkOutcome.Done, user: current, changed: false }\n\n      // Differs from both the target and what the operator saw: someone else wrote in between.\n      // The value is still written, and the log names the fields.\n      const concurrentFields = isNull(seen)\n        ? []\n        : fields.filter(\n            (field) =>\n              readMetadataField(current, field) !== readMetadataField(seen, field) &&\n              readMetadataField(current, field) !== readMetadataField(target, field)\n          )\n\n      // The right may have been revoked during the read. Report it as the server would refuse it.\n      if (!descriptorMayWrite(descriptor, 'update')) return { outcome: BulkOutcome.Forbidden, changed: false }\n      const body = cloneDeep(current)\n      fields.forEach((field) => writeMetadataField(body, field, readMetadataField(target, field)))\n\n      const { execute: write } = request<AnzuUser, AnzuUser>(descriptor, method, url)\n      const saved = await write({ urlParams: { id }, body })\n      return { outcome: BulkOutcome.Done, user: saved, changed: true, concurrentFields }\n    } catch (error) {\n      return { outcome: classifyWriteStatus(probeStatusFromError(error)), changed: false }\n    }\n  }\n\n  /**\n   * The body comes from the library factory (`roles: []`, `enabled: false`) with metadata copied over.\n   * A hand-built body would let the backend default to `ROLE_USER`, a role nobody granted.\n   */\n  const createInSystem = async (descriptor: AnyUserSystemDescriptor, body: AnzuUser): Promise<WriteResult> => {\n    try {\n      const { execute } = request<AnzuUser, AnzuUser>(descriptor, 'POST', resolveCreateEndpoint(descriptor))\n      const created = await execute({ body })\n      return { outcome: BulkOutcome.Done, user: created }\n    } catch (error) {\n      return { outcome: classifyWriteStatus(probeStatusFromError(error)) }\n    }\n  }\n\n  /** Reads the source account fresh from the server, not from a store or form. */\n  const readSourceUser = async (descriptor: AnyUserSystemDescriptor, id: IntegerId): Promise<AnzuUser | null> => {\n    const { get } = resolveEnabledWrite(descriptor)\n    try {\n      const { execute } = request<AnzuUser, null>(descriptor, 'GET', get)\n      return await execute({ urlParams: { id } })\n    } catch {\n      return null\n    }\n  }\n\n  return {\n    setEnabled,\n    writeMetadata,\n    createInSystem,\n    readSourceUser,\n  }\n}\n"],"mappings":";;;;;;;;AAqCA,IAAaA,KAAuB,MAC9BC,MAAW,OAAaC,EAAY,cACpCD,MAAW,MAAYC,EAAY,YACnCD,MAAW,MAAYC,EAAY,kBACnCD,MAAW,MAAYC,EAAY,WACnCD,MAAA,OAA+CA,MAAA,MAA2CC,EAAY,UACnGA,EAAY,aAGfC,KACJ,GACA,GACA,MAEAC,EAAoB;CAClB,QAAQC,EAAW;CACnB;CACA,QAAQA,EAAW;CACnB,QAAQA,EAAW;CACnB,aAAaC;AACf,CAAC,GAEUC,WAyGJ;CACL,mBAjGA,GACA,GACA,MACyB;EACzB,IAAM,EAAE,QAAK,WAAQC,EAAoBH,CAAU;EACnD,IAAI;GACF,IAAM,EAAE,SAASI,MAASN,EAAwBE,GAAY,OAAOK,CAAG,GAClEC,IAAU,MAAMF,EAAK,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;GAChD,IAAIE,EAAQ,YAAYC,GAEtB,OAAO;IAAE,SAASV,EAAY;IAAM,MAAMS;GAAQ;GAGpD,IAAI,CAACE,EAAmBR,GAAY,QAAQ,GAAG,OAAO,EAAE,SAASH,EAAY,UAAU;GACvF,IAAMY,IAAOC,EAAUJ,CAAO;GAC9B,EAAK,UAAUC;GACf,IAAM,EAAE,SAASI,MAAUb,EAA4BE,GAAY,OAAOC,CAAG,GACvEW,IAAQ,MAAMD,EAAM;IAAE,WAAW,EAAE,MAAG;IAAG;GAAK,CAAC;GACrD,OAAO;IAAE,SAASd,EAAY;IAAM,MAAMe;GAAM;EAClD,SAASC,GAAO;GACd,OAAO,EAAE,SAASlB,EAAoBmB,EAAqBD,CAAK,CAAC,EAAE;EACrE;CACF;CA4EE,sBAnEA,GACA,GACA,GACA,IAAuCE,GAEvC,IAAwB,SACwB;EAChD,IAAM,EAAE,WAAQ,QAAK,WAAQC,EAAqBhB,CAAU;EAC5D,IAAI;GACF,IAAM,EAAE,SAASI,MAASN,EAAwBE,GAAY,OAAOK,CAAG,GAGlEC,IAAU,MAAMF,EAAK,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;GAGhD,IAAI,CADYa,EAAO,MAAM,MAAUC,EAAkBZ,GAASa,CAAK,MAAMD,EAAkBE,GAAQD,CAAK,CACvG,GAAS,OAAO;IAAE,SAAStB,EAAY;IAAM,MAAMS;IAAS,SAAS;GAAM;GAIhF,IAAMe,IAAmBC,EAAOC,CAAI,IAChC,CAAC,IACDN,EAAO,QACJ,MACCC,EAAkBZ,GAASa,CAAK,MAAMD,EAAkBK,GAAMJ,CAAK,KACnED,EAAkBZ,GAASa,CAAK,MAAMD,EAAkBE,GAAQD,CAAK,CACzE;GAGJ,IAAI,CAACX,EAAmBR,GAAY,QAAQ,GAAG,OAAO;IAAE,SAASH,EAAY;IAAW,SAAS;GAAM;GACvG,IAAMY,IAAOC,EAAUJ,CAAO;GAC9B,EAAO,SAAS,MAAUkB,EAAmBf,GAAMU,GAAOD,EAAkBE,GAAQD,CAAK,CAAC,CAAC;GAE3F,IAAM,EAAE,SAASR,MAAUb,EAA4BE,GAAYyB,GAAQxB,CAAG,GACxEW,IAAQ,MAAMD,EAAM;IAAE,WAAW,EAAE,MAAG;IAAG;GAAK,CAAC;GACrD,OAAO;IAAE,SAASd,EAAY;IAAM,MAAMe;IAAO,SAAS;IAAM;GAAiB;EACnF,SAASC,GAAO;GACd,OAAO;IAAE,SAASlB,EAAoBmB,EAAqBD,CAAK,CAAC;IAAG,SAAS;GAAM;EACrF;CACF;CA8BE,uBAxB4B,GAAqC,MAAyC;EAC1G,IAAI;GACF,IAAM,EAAE,eAAYf,EAA4BE,GAAY,QAAQ0B,EAAsB1B,CAAU,CAAC,GAC/F2B,IAAU,MAAMC,EAAQ,EAAE,QAAK,CAAC;GACtC,OAAO;IAAE,SAAS/B,EAAY;IAAM,MAAM8B;GAAQ;EACpD,SAASd,GAAO;GACd,OAAO,EAAE,SAASlB,EAAoBmB,EAAqBD,CAAK,CAAC,EAAE;EACrE;CACF;CAiBE,uBAd4B,GAAqC,MAA4C;EAC7G,IAAM,EAAE,WAAQV,EAAoBH,CAAU;EAC9C,IAAI;GACF,IAAM,EAAE,eAAYF,EAAwBE,GAAY,OAAOK,CAAG;GAClE,OAAO,MAAMuB,EAAQ,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;EAC5C,QAAQ;GACN,OAAO;EACT;CACF;AAOA"}

package/dist/domains/anzuUser/composables/userSystemDescriptor.d.ts

@@ -2,13 +2,11 @@ import { RouteLocationRaw } from 'vue-router';
 import { AxiosClientFn } from '../../api/utils/client';
 import { AnzuUser } from '../../../shared/types/AnzuUser';
 /**
- * A state a system has on top of `enabled`, shown next to it. Today only two systems have one:
- * blog's `status` (guest / waiting_approval / active / ban / gdpr_deleted) and forum's
- * `settings.banned`. Both arrive with the record -- they are `#[Serialize]` on the entity -- so
- * rendering one costs no extra call.
+ * A system state shown next to `enabled`. Today: blog's `status` and forum's `settings.banned`.
+ * Both are serialized on the entity, so rendering costs no extra call.
  */
 export interface UserSystemExtraState {
-    /** "blogger", "commenter" -- the app translates it; the library only prints it. */
+    /** "blogger", "commenter". The app translates it; the library only prints it. */
     label: string;
     /** "active", "banned". */
     value: string;
@@ -25,40 +23,28 @@ export interface BaseUserEndpointPair extends AnzuUserEndpointPair {
     patch: string;
 }
 /**
- * Paired GET + write paths, never loose urls.
- *
- * This is what makes the write invariant expressible: a write body is always the whole object the
- * preceding GET on the *same path* returned. The two paths return different DTOs -- `/adm/users`
- * in cms answers `CmsUserDto` and its PUT runs `updateRelations()` over seven scalars and twelve
- * collections -- so a GET from one path and a PUT to the other silently drops whatever the other
- * DTO carries.
+ * Paired GET and write paths. A write body is always the whole object the GET on the same path returned.
+ * The two paths return different DTOs. A GET from one and a PUT to the other
+ * silently drops fields, e.g. cms `CmsUserDto` with `updateRelations()`.
  */
 export interface UserSystemEndpoints {
     anzuUser: AnzuUserEndpointPair | null;
     base: BaseUserEndpointPair | null;
     permissionGroup: string;
-    /**
-     * Per system, not one constant. contentHub's is `/adm/users/current`, and the admins had this
-     * hard-coded as a single path shared by every backend.
-     */
+    /** Per system. contentHub uses `/adm/users/current`. */
     currentUser: string;
     list: string;
     /**
-     * Which pair the probe reads through. A field rather than something derived, because in dam the
-     * choice is visible to the operator: `GET /adm/v1/anzu-user/{id}` has no gating at all while
-     * `GET /adm/users/{id}` sits behind `DAM_USER_READ`, so only the second can ever render "you
-     * have no access". The rule is "the probe goes the way the write goes".
+     * Which pair the probe reads through. The probe follows the write path.
+     * In dam `GET /adm/v1/anzu-user/{id}` is ungated while `GET /adm/users/{id}`
+     * needs `DAM_USER_READ`, so only the second can show "no access".
      */
     probe: 'anzuUser' | 'base';
 }
 /**
- * Where "manage in X" leads. A callback over the user rather than a static value: a global
- * descriptor does not know which row is being drawn.
- *
- * The return type is a discriminated union so the two cannot be confused in code either -- an
- * internal target is pushed through the router, an external one is an `<a href>` opened in a new
- * tab, and `href: null` is a configured-but-missing url, which renders disabled with a reason
- * rather than as a dead button.
+ * Where "manage in X" leads. A callback because the descriptor does not know which row is drawn.
+ * Internal targets go through the router. External ones open in a new tab.
+ * `href: null` means a missing url and renders disabled with a reason.
  */
 export type UserSystemManageTarget = {
     kind: 'internal';
@@ -73,21 +59,19 @@ export interface UserSystemDescriptor<TSystem extends string = string, TUser ext
     /** Reaches every `useApiRequest` built for this system; see `permissionGroupApi`. */
     entity: string;
     /**
-     * Whether the system is switched on in this admin's configuration. Mandatory, not optional: the
-     * "disabled in configuration" state has to be *shown*, so leaving the system out of the array is
-     * not the same thing. The value is app-specific (`envConfig[system].enabled`) and the library has
-     * no way to read it.
+     * Whether the system is enabled in this admin's config (`envConfig[system].enabled`).
+     * Mandatory because the disabled state must be shown. Omitting the system from the array is not the same.
      */
     isEnabled: () => boolean;
     /**
-     * Which validation profile this system's form uses. `false` means only the e-mail is required;
-     * `true` adds first name, last name, full name, avatar text and avatar colour. It is a property
-     * of the system, and it is the same for creating and for editing.
+     * Validation profile. `false`: only e-mail is required. `true`: also
+     * first name, last name, full name, avatar text and avatar colour.
+     * Same for create and edit.
      */
     requiredMetadata: boolean;
     /**
-     * Whether the id is typed in. False only in cms, where the backend looks it up in SSO from the
-     * e-mail. On an edit the field is read-only regardless.
+     * Whether the id is typed in. False only in cms, where the backend looks it up in SSO by e-mail.
+     * Read-only on edit regardless.
      */
     idInput: boolean;
     extraState?: (user: TUser) => UserSystemExtraState | null;
@@ -98,42 +82,34 @@ export interface UserSystemDescriptor<TSystem extends string = string, TUser ext
     /** In the confirmation dialog when an account is created here. */
     createNote?: string;
     endpoints: UserSystemEndpoints;
-    /** Added in task 2: the system's name as the app translates it. */
+    /** The system's name as the app translates it. */
     label?: string;
-    /** Added in task 2. */
     manage?: (user: TUser) => UserSystemManageTarget;
     /**
-     * Whether the current user may write this system's accounts. `false` takes away create, enable or
-     * disable, manage and the system's part of a bulk action; `undefined`, or no function, leaves it to the
-     * probe and the backend's answer, as before. Only the admin can say: the library has no current user of
-     * another system, and only the admin knows which ones it has loaded.
+     * Whether the current user may write this system's accounts. `false`
+     * removes create, enable/disable, manage and the bulk action part.
+     * `undefined` or no function leaves it to the probe and the
+     * backend. Only the admin knows the other systems' current users.
      */
     canWrite?: (action: UserSystemWriteAction) => boolean | undefined;
 }
 export type UserSystemWriteAction = 'create' | 'update';
 /**
- * The erasure boundary for a heterogeneous array.
- *
- * Descriptors differ in `TUser` -- blog's `extraState` reaches for `status`, forum's for
- * `settings.banned` -- so an array of them cannot keep each one's type. Without a single place to
- * erase it, `strict: true` would demand a cast in every admin, at every call site. This does it
- * once, where the array is built.
+ * Type erasure point for the heterogeneous descriptor array.
+ * Descriptors differ in `TUser`. Erasing here avoids a cast at every call site under `strict: true`.
  */
 export type AnyUserSystemDescriptor = UserSystemDescriptor<string, AnzuUser>;
 export declare const defineUserSystemDescriptor: <TSystem extends string, TUser extends AnzuUser>(descriptor: UserSystemDescriptor<TSystem, TUser>) => AnyUserSystemDescriptor;
 /** False only when the descriptor says no. Not knowing is not a no. */
 export declare const descriptorMayWrite: (descriptor: AnyUserSystemDescriptor, action: UserSystemWriteAction) => boolean;
 /**
- * The pair the probe reads through, with the one invariant the type cannot state: both branches of
- * `endpoints` are nullable, so nothing stops a descriptor naming `probe: 'base'` on a system that
- * has no `/adm/users`. Every admin's descriptor test asserts this resolves for each of its
- * systems.
+ * Both `endpoints` branches are nullable, so `probe: 'base'` may name a system without `/adm/users`.
+ * Each admin's descriptor test asserts this resolves for every system.
  */
 export declare const resolveProbeEndpoint: (descriptor: AnyUserSystemDescriptor) => AnzuUserEndpointPair;
 /**
- * Metadata is written through `PATCH /adm/users/{id}` wherever that path exists: the method behind
- * it can only write e-mail, locale, avatar and person -- it has no setter for roles, permissions,
- * groups or `enabled`. That is a stronger guarantee than being careful about what goes in the body.
+ * Metadata goes through `PATCH /adm/users/{id}` where it exists.
+ * Its method has no setters for roles, permissions, groups or `enabled`.
  */
 export declare const resolveMetadataWrite: (descriptor: AnyUserSystemDescriptor) => {
     method: "PATCH";
@@ -145,8 +121,8 @@ export declare const resolveMetadataWrite: (descriptor: AnyUserSystemDescriptor)
     url: string;
 };
 /**
- * `enabled` has no `PATCH` anywhere: the only method that calls `setEnabled` is the full update.
- * So it goes GET + PUT, on the same path, with the whole DTO the GET returned.
+ * `enabled` has no PATCH. Only the full update calls `setEnabled`.
+ * So it is GET then PUT on the same path with the whole DTO from the GET.
  */
 export declare const resolveEnabledWrite: (descriptor: AnyUserSystemDescriptor) => {
     get: string;

package/dist/domains/anzuUser/composables/userSystemDescriptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"userSystemDescriptor.js","names":["defineUserSystemDescriptor","descriptor","descriptorMayWrite","action","resolveProbeEndpoint","pair","resolveMetadataWrite","base","anzuUser","resolveEnabledWrite","resolveCreateEndpoint"],"sources":["../../../../src/domains/anzuUser/composables/userSystemDescriptor.ts"],"sourcesContent":["import type { RouteLocationRaw } from 'vue-router'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\n\n/**\n * A state a system has on top of `enabled`, shown next to it. Today only two systems have one:\n * blog's `status` (guest / waiting_approval / active / ban / gdpr_deleted) and forum's\n * `settings.banned`. Both arrive with the record -- they are `#[Serialize]` on the entity -- so\n * rendering one costs no extra call.\n */\nexport interface UserSystemExtraState {\n  /** \"blogger\", \"commenter\" -- the app translates it; the library only prints it. */\n  label: string\n  /** \"active\", \"banned\". */\n  value: string\n  tone: 'ok' | 'warn' | 'error'\n}\n\n/** `/adm/v1/anzu-user`. Absent in contentHub, which has only `/adm/users`. */\nexport interface AnzuUserEndpointPair {\n  get: string\n  put: string\n  post: string\n}\n\n/** `/adm/users`. Only cms, dam and contentHub have it; it is the only path with a `PATCH`. */\nexport interface BaseUserEndpointPair extends AnzuUserEndpointPair {\n  patch: string\n}\n\n/**\n * Paired GET + write paths, never loose urls.\n *\n * This is what makes the write invariant expressible: a write body is always the whole object the\n * preceding GET on the *same path* returned. The two paths return different DTOs -- `/adm/users`\n * in cms answers `CmsUserDto` and its PUT runs `updateRelations()` over seven scalars and twelve\n * collections -- so a GET from one path and a PUT to the other silently drops whatever the other\n * DTO carries.\n */\nexport interface UserSystemEndpoints {\n  anzuUser: AnzuUserEndpointPair | null\n  base: BaseUserEndpointPair | null\n  permissionGroup: string\n  /**\n   * Per system, not one constant. contentHub's is `/adm/users/current`, and the admins had this\n   * hard-coded as a single path shared by every backend.\n   */\n  currentUser: string\n  list: string\n  /**\n   * Which pair the probe reads through. A field rather than something derived, because in dam the\n   * choice is visible to the operator: `GET /adm/v1/anzu-user/{id}` has no gating at all while\n   * `GET /adm/users/{id}` sits behind `DAM_USER_READ`, so only the second can ever render \"you\n   * have no access\". The rule is \"the probe goes the way the write goes\".\n   */\n  probe: 'anzuUser' | 'base'\n}\n\n/**\n * Where \"manage in X\" leads. A callback over the user rather than a static value: a global\n * descriptor does not know which row is being drawn.\n *\n * The return type is a discriminated union so the two cannot be confused in code either -- an\n * internal target is pushed through the router, an external one is an `<a href>` opened in a new\n * tab, and `href: null` is a configured-but-missing url, which renders disabled with a reason\n * rather than as a dead button.\n */\nexport type UserSystemManageTarget =\n  | { kind: 'internal'; to: RouteLocationRaw }\n  | { kind: 'external'; href: string | null }\n\nexport interface UserSystemDescriptor<TSystem extends string = string, TUser extends AnzuUser = AnzuUser> {\n  system: TSystem\n  client: AxiosClientFn\n  /** Reaches every `useApiRequest` built for this system; see `permissionGroupApi`. */\n  entity: string\n  /**\n   * Whether the system is switched on in this admin's configuration. Mandatory, not optional: the\n   * \"disabled in configuration\" state has to be *shown*, so leaving the system out of the array is\n   * not the same thing. The value is app-specific (`envConfig[system].enabled`) and the library has\n   * no way to read it.\n   */\n  isEnabled: () => boolean\n  /**\n   * Which validation profile this system's form uses. `false` means only the e-mail is required;\n   * `true` adds first name, last name, full name, avatar text and avatar colour. It is a property\n   * of the system, and it is the same for creating and for editing.\n   */\n  requiredMetadata: boolean\n  /**\n   * Whether the id is typed in. False only in cms, where the backend looks it up in SSO from the\n   * e-mail. On an edit the field is read-only regardless.\n   */\n  idInput: boolean\n  extraState?: (user: TUser) => UserSystemExtraState | null\n  /** Above the `enabled` switch and in the row of a bulk action. */\n  enabledNote?: string\n  /** In the metadata repair dialog and in the owning form. */\n  metadataNote?: string\n  /** In the confirmation dialog when an account is created here. */\n  createNote?: string\n  endpoints: UserSystemEndpoints\n  /** Added in task 2: the system's name as the app translates it. */\n  label?: string\n  /** Added in task 2. */\n  manage?: (user: TUser) => UserSystemManageTarget\n  /**\n   * Whether the current user may write this system's accounts. `false` takes away create, enable or\n   * disable, manage and the system's part of a bulk action; `undefined`, or no function, leaves it to the\n   * probe and the backend's answer, as before. Only the admin can say: the library has no current user of\n   * another system, and only the admin knows which ones it has loaded.\n   */\n  canWrite?: (action: UserSystemWriteAction) => boolean | undefined\n}\n\nexport type UserSystemWriteAction = 'create' | 'update'\n\n/**\n * The erasure boundary for a heterogeneous array.\n *\n * Descriptors differ in `TUser` -- blog's `extraState` reaches for `status`, forum's for\n * `settings.banned` -- so an array of them cannot keep each one's type. Without a single place to\n * erase it, `strict: true` would demand a cast in every admin, at every call site. This does it\n * once, where the array is built.\n */\nexport type AnyUserSystemDescriptor = UserSystemDescriptor<string, AnzuUser>\n\nexport const defineUserSystemDescriptor = <TSystem extends string, TUser extends AnzuUser>(\n  descriptor: UserSystemDescriptor<TSystem, TUser>\n): AnyUserSystemDescriptor => descriptor as unknown as AnyUserSystemDescriptor\n\n/** False only when the descriptor says no. Not knowing is not a no. */\nexport const descriptorMayWrite = (descriptor: AnyUserSystemDescriptor, action: UserSystemWriteAction): boolean =>\n  descriptor.canWrite?.(action) !== false\n\n/**\n * The pair the probe reads through, with the one invariant the type cannot state: both branches of\n * `endpoints` are nullable, so nothing stops a descriptor naming `probe: 'base'` on a system that\n * has no `/adm/users`. Every admin's descriptor test asserts this resolves for each of its\n * systems.\n */\nexport const resolveProbeEndpoint = (descriptor: AnyUserSystemDescriptor): AnzuUserEndpointPair => {\n  const pair = descriptor.endpoints[descriptor.endpoints.probe]\n  if (pair === null) {\n    throw new Error(\n      `[userSystemDescriptor] '${descriptor.system}' names probe '${descriptor.endpoints.probe}', which it does not have.`\n    )\n  }\n  return pair\n}\n\n/**\n * Metadata is written through `PATCH /adm/users/{id}` wherever that path exists: the method behind\n * it can only write e-mail, locale, avatar and person -- it has no setter for roles, permissions,\n * groups or `enabled`. That is a stronger guarantee than being careful about what goes in the body.\n */\nexport const resolveMetadataWrite = (\n  descriptor: AnyUserSystemDescriptor\n): { method: 'PATCH'; get: string; url: string } | { method: 'PUT'; get: string; url: string } => {\n  const base = descriptor.endpoints.base\n  if (base !== null) return { method: 'PATCH', get: base.get, url: base.patch }\n  const anzuUser = descriptor.endpoints.anzuUser\n  if (anzuUser === null) {\n    throw new Error(`[userSystemDescriptor] '${descriptor.system}' has neither write path.`)\n  }\n  return { method: 'PUT', get: anzuUser.get, url: anzuUser.put }\n}\n\n/**\n * `enabled` has no `PATCH` anywhere: the only method that calls `setEnabled` is the full update.\n * So it goes GET + PUT, on the same path, with the whole DTO the GET returned.\n */\nexport const resolveEnabledWrite = (descriptor: AnyUserSystemDescriptor): { get: string; url: string } => {\n  const base = descriptor.endpoints.base\n  if (base !== null) return { get: base.get, url: base.put }\n  const anzuUser = descriptor.endpoints.anzuUser\n  if (anzuUser === null) {\n    throw new Error(`[userSystemDescriptor] '${descriptor.system}' has neither write path.`)\n  }\n  return { get: anzuUser.get, url: anzuUser.put }\n}\n\n/** Creating an account goes the same way a write does. */\nexport const resolveCreateEndpoint = (descriptor: AnyUserSystemDescriptor): string => {\n  const base = descriptor.endpoints.base\n  if (base !== null) return base.post\n  const anzuUser = descriptor.endpoints.anzuUser\n  if (anzuUser === null) {\n    throw new Error(`[userSystemDescriptor] '${descriptor.system}' has no create path.`)\n  }\n  return anzuUser.post\n}\n"],"mappings":";AA+HA,IAAaA,KACX,MAC4BC,GAGjBC,KAAsB,GAAqC,MACtED,EAAW,WAAWE,CAAM,MAAM,IAQvBC,KAAwB,MAA8D;CACjG,IAAMC,IAAOJ,EAAW,UAAUA,EAAW,UAAU;CACvD,IAAII,MAAS,MACX,MAAU,MACR,2BAA2BJ,EAAW,OAAO,iBAAiBA,EAAW,UAAU,MAAM,2BAC3F;CAEF,OAAOI;AACT,GAOaC,KACX,MACgG;CAChG,IAAMC,IAAON,EAAW,UAAU;CAClC,IAAIM,MAAS,MAAM,OAAO;EAAE,QAAQ;EAAS,KAAKA,EAAK;EAAK,KAAKA,EAAK;CAAM;CAC5E,IAAMC,IAAWP,EAAW,UAAU;CACtC,IAAIO,MAAa,MACf,MAAU,MAAM,2BAA2BP,EAAW,OAAO,0BAA0B;CAEzF,OAAO;EAAE,QAAQ;EAAO,KAAKO,EAAS;EAAK,KAAKA,EAAS;CAAI;AAC/D,GAMaC,KAAuB,MAAsE;CACxG,IAAMF,IAAON,EAAW,UAAU;CAClC,IAAIM,MAAS,MAAM,OAAO;EAAE,KAAKA,EAAK;EAAK,KAAKA,EAAK;CAAI;CACzD,IAAMC,IAAWP,EAAW,UAAU;CACtC,IAAIO,MAAa,MACf,MAAU,MAAM,2BAA2BP,EAAW,OAAO,0BAA0B;CAEzF,OAAO;EAAE,KAAKO,EAAS;EAAK,KAAKA,EAAS;CAAI;AAChD,GAGaE,KAAyB,MAAgD;CACpF,IAAMH,IAAON,EAAW,UAAU;CAClC,IAAIM,MAAS,MAAM,OAAOA,EAAK;CAC/B,IAAMC,IAAWP,EAAW,UAAU;CACtC,IAAIO,MAAa,MACf,MAAU,MAAM,2BAA2BP,EAAW,OAAO,sBAAsB;CAErF,OAAOO,EAAS;AAClB"}
+{"version":3,"file":"userSystemDescriptor.js","names":["defineUserSystemDescriptor","descriptor","descriptorMayWrite","action","resolveProbeEndpoint","pair","resolveMetadataWrite","base","anzuUser","resolveEnabledWrite","resolveCreateEndpoint"],"sources":["../../../../src/domains/anzuUser/composables/userSystemDescriptor.ts"],"sourcesContent":["import type { RouteLocationRaw } from 'vue-router'\nimport type { AxiosClientFn } from '@/domains/api/utils/client'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\n\n/**\n * A system state shown next to `enabled`. Today: blog's `status` and forum's `settings.banned`.\n * Both are serialized on the entity, so rendering costs no extra call.\n */\nexport interface UserSystemExtraState {\n  /** \"blogger\", \"commenter\". The app translates it; the library only prints it. */\n  label: string\n  /** \"active\", \"banned\". */\n  value: string\n  tone: 'ok' | 'warn' | 'error'\n}\n\n/** `/adm/v1/anzu-user`. Absent in contentHub, which has only `/adm/users`. */\nexport interface AnzuUserEndpointPair {\n  get: string\n  put: string\n  post: string\n}\n\n/** `/adm/users`. Only cms, dam and contentHub have it; it is the only path with a `PATCH`. */\nexport interface BaseUserEndpointPair extends AnzuUserEndpointPair {\n  patch: string\n}\n\n/**\n * Paired GET and write paths. A write body is always the whole object the GET on the same path returned.\n * The two paths return different DTOs. A GET from one and a PUT to the other\n * silently drops fields, e.g. cms `CmsUserDto` with `updateRelations()`.\n */\nexport interface UserSystemEndpoints {\n  anzuUser: AnzuUserEndpointPair | null\n  base: BaseUserEndpointPair | null\n  permissionGroup: string\n  /** Per system. contentHub uses `/adm/users/current`. */\n  currentUser: string\n  list: string\n  /**\n   * Which pair the probe reads through. The probe follows the write path.\n   * In dam `GET /adm/v1/anzu-user/{id}` is ungated while `GET /adm/users/{id}`\n   * needs `DAM_USER_READ`, so only the second can show \"no access\".\n   */\n  probe: 'anzuUser' | 'base'\n}\n\n/**\n * Where \"manage in X\" leads. A callback because the descriptor does not know which row is drawn.\n * Internal targets go through the router. External ones open in a new tab.\n * `href: null` means a missing url and renders disabled with a reason.\n */\nexport type UserSystemManageTarget =\n  | { kind: 'internal'; to: RouteLocationRaw }\n  | { kind: 'external'; href: string | null }\n\nexport interface UserSystemDescriptor<TSystem extends string = string, TUser extends AnzuUser = AnzuUser> {\n  system: TSystem\n  client: AxiosClientFn\n  /** Reaches every `useApiRequest` built for this system; see `permissionGroupApi`. */\n  entity: string\n  /**\n   * Whether the system is enabled in this admin's config (`envConfig[system].enabled`).\n   * Mandatory because the disabled state must be shown. Omitting the system from the array is not the same.\n   */\n  isEnabled: () => boolean\n  /**\n   * Validation profile. `false`: only e-mail is required. `true`: also\n   * first name, last name, full name, avatar text and avatar colour.\n   * Same for create and edit.\n   */\n  requiredMetadata: boolean\n  /**\n   * Whether the id is typed in. False only in cms, where the backend looks it up in SSO by e-mail.\n   * Read-only on edit regardless.\n   */\n  idInput: boolean\n  extraState?: (user: TUser) => UserSystemExtraState | null\n  /** Above the `enabled` switch and in the row of a bulk action. */\n  enabledNote?: string\n  /** In the metadata repair dialog and in the owning form. */\n  metadataNote?: string\n  /** In the confirmation dialog when an account is created here. */\n  createNote?: string\n  endpoints: UserSystemEndpoints\n  /** The system's name as the app translates it. */\n  label?: string\n  manage?: (user: TUser) => UserSystemManageTarget\n  /**\n   * Whether the current user may write this system's accounts. `false`\n   * removes create, enable/disable, manage and the bulk action part.\n   * `undefined` or no function leaves it to the probe and the\n   * backend. Only the admin knows the other systems' current users.\n   */\n  canWrite?: (action: UserSystemWriteAction) => boolean | undefined\n}\n\nexport type UserSystemWriteAction = 'create' | 'update'\n\n/**\n * Type erasure point for the heterogeneous descriptor array.\n * Descriptors differ in `TUser`. Erasing here avoids a cast at every call site under `strict: true`.\n */\nexport type AnyUserSystemDescriptor = UserSystemDescriptor<string, AnzuUser>\n\nexport const defineUserSystemDescriptor = <TSystem extends string, TUser extends AnzuUser>(\n  descriptor: UserSystemDescriptor<TSystem, TUser>\n): AnyUserSystemDescriptor => descriptor as unknown as AnyUserSystemDescriptor\n\n/** False only when the descriptor says no. Not knowing is not a no. */\nexport const descriptorMayWrite = (descriptor: AnyUserSystemDescriptor, action: UserSystemWriteAction): boolean =>\n  descriptor.canWrite?.(action) !== false\n\n/**\n * Both `endpoints` branches are nullable, so `probe: 'base'` may name a system without `/adm/users`.\n * Each admin's descriptor test asserts this resolves for every system.\n */\nexport const resolveProbeEndpoint = (descriptor: AnyUserSystemDescriptor): AnzuUserEndpointPair => {\n  const pair = descriptor.endpoints[descriptor.endpoints.probe]\n  if (pair === null) {\n    throw new Error(\n      `[userSystemDescriptor] '${descriptor.system}' names probe '${descriptor.endpoints.probe}', which it does not have.`\n    )\n  }\n  return pair\n}\n\n/**\n * Metadata goes through `PATCH /adm/users/{id}` where it exists.\n * Its method has no setters for roles, permissions, groups or `enabled`.\n */\nexport const resolveMetadataWrite = (\n  descriptor: AnyUserSystemDescriptor\n): { method: 'PATCH'; get: string; url: string } | { method: 'PUT'; get: string; url: string } => {\n  const base = descriptor.endpoints.base\n  if (base !== null) return { method: 'PATCH', get: base.get, url: base.patch }\n  const anzuUser = descriptor.endpoints.anzuUser\n  if (anzuUser === null) {\n    throw new Error(`[userSystemDescriptor] '${descriptor.system}' has neither write path.`)\n  }\n  return { method: 'PUT', get: anzuUser.get, url: anzuUser.put }\n}\n\n/**\n * `enabled` has no PATCH. Only the full update calls `setEnabled`.\n * So it is GET then PUT on the same path with the whole DTO from the GET.\n */\nexport const resolveEnabledWrite = (descriptor: AnyUserSystemDescriptor): { get: string; url: string } => {\n  const base = descriptor.endpoints.base\n  if (base !== null) return { get: base.get, url: base.put }\n  const anzuUser = descriptor.endpoints.anzuUser\n  if (anzuUser === null) {\n    throw new Error(`[userSystemDescriptor] '${descriptor.system}' has neither write path.`)\n  }\n  return { get: anzuUser.get, url: anzuUser.put }\n}\n\n/** Creating an account goes the same way a write does. */\nexport const resolveCreateEndpoint = (descriptor: AnyUserSystemDescriptor): string => {\n  const base = descriptor.endpoints.base\n  if (base !== null) return base.post\n  const anzuUser = descriptor.endpoints.anzuUser\n  if (anzuUser === null) {\n    throw new Error(`[userSystemDescriptor] '${descriptor.system}' has no create path.`)\n  }\n  return anzuUser.post\n}\n"],"mappings":";AA0GA,IAAaA,KACX,MAC4BC,GAGjBC,KAAsB,GAAqC,MACtED,EAAW,WAAWE,CAAM,MAAM,IAMvBC,KAAwB,MAA8D;CACjG,IAAMC,IAAOJ,EAAW,UAAUA,EAAW,UAAU;CACvD,IAAII,MAAS,MACX,MAAU,MACR,2BAA2BJ,EAAW,OAAO,iBAAiBA,EAAW,UAAU,MAAM,2BAC3F;CAEF,OAAOI;AACT,GAMaC,KACX,MACgG;CAChG,IAAMC,IAAON,EAAW,UAAU;CAClC,IAAIM,MAAS,MAAM,OAAO;EAAE,QAAQ;EAAS,KAAKA,EAAK;EAAK,KAAKA,EAAK;CAAM;CAC5E,IAAMC,IAAWP,EAAW,UAAU;CACtC,IAAIO,MAAa,MACf,MAAU,MAAM,2BAA2BP,EAAW,OAAO,0BAA0B;CAEzF,OAAO;EAAE,QAAQ;EAAO,KAAKO,EAAS;EAAK,KAAKA,EAAS;CAAI;AAC/D,GAMaC,KAAuB,MAAsE;CACxG,IAAMF,IAAON,EAAW,UAAU;CAClC,IAAIM,MAAS,MAAM,OAAO;EAAE,KAAKA,EAAK;EAAK,KAAKA,EAAK;CAAI;CACzD,IAAMC,IAAWP,EAAW,UAAU;CACtC,IAAIO,MAAa,MACf,MAAU,MAAM,2BAA2BP,EAAW,OAAO,0BAA0B;CAEzF,OAAO;EAAE,KAAKO,EAAS;EAAK,KAAKA,EAAS;CAAI;AAChD,GAGaE,KAAyB,MAAgD;CACpF,IAAMH,IAAON,EAAW,UAAU;CAClC,IAAIM,MAAS,MAAM,OAAOA,EAAK;CAC/B,IAAMC,IAAWP,EAAW,UAAU;CACtC,IAAIO,MAAa,MACf,MAAU,MAAM,2BAA2BP,EAAW,OAAO,sBAAsB;CAErF,OAAOO,EAAS;AAClB"}

package/dist/domains/anzuUser/composables/userSystemProbe.d.ts

@@ -5,29 +5,16 @@ import { UserSystemAxes } from '../utils/userSystemState';
 import { AnzuUser } from '../../../shared/types/AnzuUser';
 import { IntegerId } from '../../../shared/types/common';
 /**
- * How an app refreshes a session for one system, and retries.
- *
- * The probe cannot do this itself: a first 401 is ambiguous -- expired session or no account --
- * and the only way to tell them apart is to refresh and ask again, with the session this admin
- * refreshes (its `createRefreshSession`, shared with its refresh interceptor). Without this hook a
- * panel would show an expired token as "no account here", which is exactly the confusion decision
- * 16 forbids.
- *
- * Returns true when the refresh succeeded and the call is worth repeating.
+ * Refreshes a system's session; returns true when the call is worth retrying.
+ * A first 401 may be an expired session or no account. Only a refresh and retry tells them apart (decision 16).
  */
 export type UserSystemRefreshHook = (system: string) => Promise<boolean>;
 export { USER_PROBE_ENTITY };
 export declare const UserSystemRefreshHookKey: InjectionKey<UserSystemRefreshHook>;
 /**
- * The status the backend answered with, or null when nothing ever answered.
- *
- * Read off the axios failure the mapped error kept as its cause, not off the class. Going by class
- * alone misses exactly the answers that exist *because* the backend replied with a body: a
- * validation failure is `AnzuApiValidationError`, a dependency conflict is
- * `AnzuApiDependencyExistsError`, and both are 422s that have to be reported as such. Reported as
- * "the system did not answer" they would send the operator looking for an outage instead of at the
- * account whose stored data no longer validates -- which, with legacy rows, is the failure that
- * happens most.
+ * The backend status, or null when nothing answered.
+ * Read from the axios cause, not the error class. `AnzuApiValidationError`
+ * and `AnzuApiDependencyExistsError` are 422s and must be reported as such.
  */
 export declare const probeStatusFromError: (error: unknown) => number | null;
 export interface UserSystemProbeResult {
@@ -43,14 +30,7 @@ export interface UserSystemProbeParams {
     refreshHook?: UserSystemRefreshHook | undefined;
 }
 /**
- * One system's answer about one user.
- *
- * Reads through `endpoints[probe].get`, never a hard-coded path: in dam the choice is visible to
- * the operator, because `/adm/v1/anzu-user/{id}` has no gating there while `/adm/users/{id}` sits
- * behind `DAM_USER_READ` -- only the second can ever render "you have no access".
- *
- * Note for the app: a probe answering 404 is an expected result here, not a failure. The default
- * api error logger skips it; a logger of the app's own still receives it and should filter on
- * `status === 404 && entity === USER_PROBE_ENTITY`, or every absent account writes a line into the log.
+ * Reads through `endpoints[probe].get`, never a hard-coded path (dam gates only `/adm/users/{id}`).
+ * A 404 here is expected. A custom app error logger should skip `status === 404 && entity === USER_PROBE_ENTITY`.
  */
 export declare const useUserSystemProbe: (params: UserSystemProbeParams) => UserSystemProbeResult;

package/dist/domains/anzuUser/composables/userSystemProbe.js.map

@@ -1 +1 @@
-{"version":3,"file":"userSystemProbe.js","names":["axios","UserSystemRefreshHookKey","probeStatusFromError","error","AnzuApiResponseCodeError","AnzuApiForbiddenError","AnzuApiAxiosError","cause","useUserSystemProbe","params","axes","ref","emptyUserSystemAxes","user","generation","abortInFlight","descriptor","UserSystemLoad","UserSystemPresence","UserSystemAccess","token","endpoint","resolveProbeEndpoint","ask","useApiRequest","USER_PROBE_ENTITY","abort","execute","found","AnzuApiCancelledError","status","refreshHook","refreshed","retryError","classifyProbeStatus"],"sources":["../../../../src/domains/anzuUser/composables/userSystemProbe.ts"],"sourcesContent":["import { ref, type InjectionKey, type Ref } from 'vue'\nimport axios from 'axios'\nimport { AnzuApiAxiosError } from '@/shared/error/AnzuApiAxiosError'\nimport { AnzuApiCancelledError } from '@/shared/error/AnzuApiCancelledError'\nimport { AnzuApiForbiddenError } from '@/shared/error/AnzuApiForbiddenError'\nimport { AnzuApiResponseCodeError } from '@/shared/error/AnzuApiResponseCodeError'\nimport { HTTP_STATUS_FORBIDDEN, HTTP_STATUS_UNAUTHORIZED } from '@/shared/statusCodes'\nimport { USER_PROBE_ENTITY } from '@/domains/api/utils/apiErrors'\nimport { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport { type AnyUserSystemDescriptor, resolveProbeEndpoint } from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport {\n  classifyProbeStatus,\n  emptyUserSystemAxes,\n  UserSystemAccess,\n  UserSystemLoad,\n  UserSystemPresence,\n  type UserSystemAxes,\n} from '@/domains/anzuUser/utils/userSystemState'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\n\n/**\n * How an app refreshes a session for one system, and retries.\n *\n * The probe cannot do this itself: a first 401 is ambiguous -- expired session or no account --\n * and the only way to tell them apart is to refresh and ask again, with the session this admin\n * refreshes (its `createRefreshSession`, shared with its refresh interceptor). Without this hook a\n * panel would show an expired token as \"no account here\", which is exactly the confusion decision\n * 16 forbids.\n *\n * Returns true when the refresh succeeded and the call is worth repeating.\n */\nexport type UserSystemRefreshHook = (system: string) => Promise<boolean>\n\nexport { USER_PROBE_ENTITY }\n\nexport const UserSystemRefreshHookKey: InjectionKey<UserSystemRefreshHook> = Symbol('UserSystemRefreshHook')\n\n/**\n * The status the backend answered with, or null when nothing ever answered.\n *\n * Read off the axios failure the mapped error kept as its cause, not off the class. Going by class\n * alone misses exactly the answers that exist *because* the backend replied with a body: a\n * validation failure is `AnzuApiValidationError`, a dependency conflict is\n * `AnzuApiDependencyExistsError`, and both are 422s that have to be reported as such. Reported as\n * \"the system did not answer\" they would send the operator looking for an outage instead of at the\n * account whose stored data no longer validates -- which, with legacy rows, is the failure that\n * happens most.\n */\nexport const probeStatusFromError = (error: unknown): number | null => {\n  if (error instanceof AnzuApiResponseCodeError) return error.code\n  if (error instanceof AnzuApiForbiddenError) return HTTP_STATUS_FORBIDDEN\n  if (error instanceof AnzuApiAxiosError) return error.cause.response?.status ?? null\n  const cause = (error as { cause?: unknown } | null)?.cause\n  if (axios.isAxiosError(cause)) return cause.response?.status ?? null\n  if (axios.isAxiosError(error)) return error.response?.status ?? null\n\n  return null\n}\n\nexport interface UserSystemProbeResult {\n  axes: Ref<UserSystemAxes>\n  user: Ref<AnzuUser | null>\n  probe: (id: IntegerId) => Promise<void>\n  reset: () => void\n  cancel: () => void\n}\n\nexport interface UserSystemProbeParams {\n  descriptor: AnyUserSystemDescriptor\n  /** Usually injected once per page; passing it explicitly is for tests and one-off panels. */\n  refreshHook?: UserSystemRefreshHook | undefined\n}\n\n/**\n * One system's answer about one user.\n *\n * Reads through `endpoints[probe].get`, never a hard-coded path: in dam the choice is visible to\n * the operator, because `/adm/v1/anzu-user/{id}` has no gating there while `/adm/users/{id}` sits\n * behind `DAM_USER_READ` -- only the second can ever render \"you have no access\".\n *\n * Note for the app: a probe answering 404 is an expected result here, not a failure. The default\n * api error logger skips it; a logger of the app's own still receives it and should filter on\n * `status === 404 && entity === USER_PROBE_ENTITY`, or every absent account writes a line into the log.\n */\nexport const useUserSystemProbe = (params: UserSystemProbeParams): UserSystemProbeResult => {\n  const { descriptor, refreshHook } = params\n\n  const axes = ref<UserSystemAxes>(emptyUserSystemAxes())\n  const user = ref<AnzuUser | null>(null)\n\n  let generation = 0\n  /**\n   * The helper's abort handle for the request that is in flight.\n   *\n   * The generation token alone already stops a stale answer from being written; this is what stops\n   * the request itself. Leaving a page mid-search would otherwise leave up to eighteen calls\n   * running against backends nobody is waiting for any more.\n   */\n  let abortInFlight: (() => void) | null = null\n\n  const reset = () => {\n    axes.value = emptyUserSystemAxes()\n    user.value = null\n  }\n\n  const cancel = () => {\n    generation++\n    abortInFlight?.()\n    abortInFlight = null\n  }\n\n  const probe = async (id: IntegerId) => {\n    // A system switched off in configuration is a state to show, not a call to make.\n    if (!descriptor.isEnabled()) {\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        presence: UserSystemPresence.Unknown,\n        access: UserSystemAccess.ConfigDisabled,\n        enabled: 'unknown',\n      }\n      user.value = null\n      return\n    }\n\n    const token = ++generation\n    axes.value = { ...axes.value, load: UserSystemLoad.Loading }\n\n    const endpoint = resolveProbeEndpoint(descriptor)\n\n    const ask = async () => {\n      const { execute, abort } = useApiRequest<AnzuUser, null>({\n        client: descriptor.client,\n        method: 'GET',\n        system: descriptor.system,\n        entity: USER_PROBE_ENTITY,\n        validationSystem: 'common',\n        validationEntity: descriptor.entity,\n        urlTemplate: endpoint.get,\n      })\n      abortInFlight = abort\n      try {\n        return await execute({ urlParams: { id } })\n      } finally {\n        abortInFlight = null\n      }\n    }\n\n    try {\n      const found = await ask()\n      if (token !== generation) return\n      user.value = found\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        presence: UserSystemPresence.Present,\n        access: UserSystemAccess.Ok,\n        enabled: found.enabled,\n      }\n    } catch (error) {\n      if (token !== generation) return\n      if (error instanceof AnzuApiCancelledError) return\n\n      let status = probeStatusFromError(error)\n\n      // The one retry the classification depends on. Only after it has happened is a 401 a verdict\n      // rather than a question.\n      if (status === HTTP_STATUS_UNAUTHORIZED && refreshHook) {\n        const refreshed = await refreshHook(descriptor.system).catch(() => false)\n        if (token !== generation) return\n        if (refreshed) {\n          try {\n            const found = await ask()\n            if (token !== generation) return\n            user.value = found\n            axes.value = {\n              load: UserSystemLoad.Loaded,\n              presence: UserSystemPresence.Present,\n              access: UserSystemAccess.Ok,\n              enabled: found.enabled,\n            }\n            return\n          } catch (retryError) {\n            if (token !== generation) return\n            status = probeStatusFromError(retryError)\n          }\n        }\n      }\n\n      user.value = null\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        ...classifyProbeStatus(status),\n        enabled: 'unknown',\n      }\n    }\n  }\n\n  return { axes, user, probe, reset, cancel }\n}\n"],"mappings":";;;;;;;;;;;;AAoCA,IAAaC,IAAgE,OAAO,uBAAuB,GAa9FC,KAAwB,MAAkC;CACrE,IAAIC,aAAiBC,GAA0B,OAAOD,EAAM;CAC5D,IAAIA,aAAiBE,GAAuB,OAAA;CAC5C,IAAIF,aAAiBG,GAAmB,OAAOH,EAAM,MAAM,UAAU,UAAU;CAC/E,IAAMI,IAASJ,GAAsC;CAIrD,OAHIH,EAAM,aAAaO,CAAK,IAAUA,EAAM,UAAU,UAAU,OAC5DP,EAAM,aAAaG,CAAK,IAAUA,EAAM,UAAU,UAAU,OAEzD;AACT,GA2BaK,KAAsB,MAAyD;CAC1F,IAAM,EAAE,eAAY,mBAAgBC,GAE9BC,IAAOC,EAAoBC,EAAoB,CAAC,GAChDC,IAAOF,EAAqB,IAAI,GAElCG,IAAa,GAQbC,IAAqC;CAkGzC,OAAO;EAAE;EAAM;EAAM,cArFA,MAAkB;GAErC,IAAI,CAACC,EAAW,UAAU,GAAG;IAO3B,AANA,EAAK,QAAQ;KACX,MAAMC,EAAe;KACrB,UAAUC,EAAmB;KAC7B,QAAQC,EAAiB;KACzB,SAAS;IACX,GACA,EAAK,QAAQ;IACb;GACF;GAEA,IAAMC,IAAQ,EAAEN;GAChB,EAAK,QAAQ;IAAE,GAAGJ,EAAK;IAAO,MAAMO,EAAe;GAAQ;GAE3D,IAAMI,IAAWC,EAAqBN,CAAU,GAE1CO,IAAM,YAAY;IACtB,IAAM,EAAE,YAAS,aAAUC,EAA8B;KACvD,QAAQR,EAAW;KACnB,QAAQ;KACR,QAAQA,EAAW;KACnB,QAAQS;KACR,kBAAkB;KAClB,kBAAkBT,EAAW;KAC7B,aAAaK,EAAS;IACxB,CAAC;IACD,IAAgBK;IAChB,IAAI;KACF,OAAO,MAAMC,EAAQ,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;IAC5C,UAAU;KACR,IAAgB;IAClB;GACF;GAEA,IAAI;IACF,IAAMC,IAAQ,MAAML,EAAI;IACxB,IAAIH,MAAUN,GAAY;IAE1B,AADA,EAAK,QAAQc,GACb,EAAK,QAAQ;KACX,MAAMX,EAAe;KACrB,UAAUC,EAAmB;KAC7B,QAAQC,EAAiB;KACzB,SAASS,EAAM;IACjB;GACF,SAASzB,GAAO;IAEd,IADIiB,MAAUN,KACVX,aAAiB0B,GAAuB;IAE5C,IAAIC,IAAS5B,EAAqBC,CAAK;IAIvC,IAAI2B,MAAA,OAAuCC,GAAa;KACtD,IAAMC,IAAY,MAAMD,EAAYf,EAAW,MAAM,CAAC,CAAC,YAAY,EAAK;KACxE,IAAII,MAAUN,GAAY;KAC1B,IAAIkB,GACF,IAAI;MACF,IAAMJ,IAAQ,MAAML,EAAI;MACxB,IAAIH,MAAUN,GAAY;MAE1B,AADA,EAAK,QAAQc,GACb,EAAK,QAAQ;OACX,MAAMX,EAAe;OACrB,UAAUC,EAAmB;OAC7B,QAAQC,EAAiB;OACzB,SAASS,EAAM;MACjB;MACA;KACF,SAASK,GAAY;MACnB,IAAIb,MAAUN,GAAY;MAC1B,IAASZ,EAAqB+B,CAAU;KAC1C;IAEJ;IAGA,AADA,EAAK,QAAQ,MACb,EAAK,QAAQ;KACX,MAAMhB,EAAe;KACrB,GAAGiB,EAAoBJ,CAAM;KAC7B,SAAS;IACX;GACF;EACF;EAE4B,aAhGR;GAElB,AADA,EAAK,QAAQlB,EAAoB,GACjC,EAAK,QAAQ;EACf;EA6FmC,cA3Fd;GAGnB,AAFA,KACAG,IAAgB,GAChB,IAAgB;EAClB;CAuF0C;AAC5C"}
+{"version":3,"file":"userSystemProbe.js","names":["axios","UserSystemRefreshHookKey","probeStatusFromError","error","AnzuApiResponseCodeError","AnzuApiForbiddenError","AnzuApiAxiosError","cause","useUserSystemProbe","params","axes","ref","emptyUserSystemAxes","user","generation","abortInFlight","descriptor","UserSystemLoad","UserSystemPresence","UserSystemAccess","token","endpoint","resolveProbeEndpoint","ask","useApiRequest","USER_PROBE_ENTITY","abort","execute","found","AnzuApiCancelledError","status","refreshHook","refreshed","retryError","classifyProbeStatus"],"sources":["../../../../src/domains/anzuUser/composables/userSystemProbe.ts"],"sourcesContent":["import { ref, type InjectionKey, type Ref } from 'vue'\nimport axios from 'axios'\nimport { AnzuApiAxiosError } from '@/shared/error/AnzuApiAxiosError'\nimport { AnzuApiCancelledError } from '@/shared/error/AnzuApiCancelledError'\nimport { AnzuApiForbiddenError } from '@/shared/error/AnzuApiForbiddenError'\nimport { AnzuApiResponseCodeError } from '@/shared/error/AnzuApiResponseCodeError'\nimport { HTTP_STATUS_FORBIDDEN, HTTP_STATUS_UNAUTHORIZED } from '@/shared/statusCodes'\nimport { USER_PROBE_ENTITY } from '@/domains/api/utils/apiErrors'\nimport { useApiRequest } from '@/domains/api/composables/useApiRequest'\nimport { type AnyUserSystemDescriptor, resolveProbeEndpoint } from '@/domains/anzuUser/composables/userSystemDescriptor'\nimport {\n  classifyProbeStatus,\n  emptyUserSystemAxes,\n  UserSystemAccess,\n  UserSystemLoad,\n  UserSystemPresence,\n  type UserSystemAxes,\n} from '@/domains/anzuUser/utils/userSystemState'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId } from '@/shared/types/common'\n\n/**\n * Refreshes a system's session; returns true when the call is worth retrying.\n * A first 401 may be an expired session or no account. Only a refresh and retry tells them apart (decision 16).\n */\nexport type UserSystemRefreshHook = (system: string) => Promise<boolean>\n\nexport { USER_PROBE_ENTITY }\n\nexport const UserSystemRefreshHookKey: InjectionKey<UserSystemRefreshHook> = Symbol('UserSystemRefreshHook')\n\n/**\n * The backend status, or null when nothing answered.\n * Read from the axios cause, not the error class. `AnzuApiValidationError`\n * and `AnzuApiDependencyExistsError` are 422s and must be reported as such.\n */\nexport const probeStatusFromError = (error: unknown): number | null => {\n  if (error instanceof AnzuApiResponseCodeError) return error.code\n  if (error instanceof AnzuApiForbiddenError) return HTTP_STATUS_FORBIDDEN\n  if (error instanceof AnzuApiAxiosError) return error.cause.response?.status ?? null\n  const cause = (error as { cause?: unknown } | null)?.cause\n  if (axios.isAxiosError(cause)) return cause.response?.status ?? null\n  if (axios.isAxiosError(error)) return error.response?.status ?? null\n\n  return null\n}\n\nexport interface UserSystemProbeResult {\n  axes: Ref<UserSystemAxes>\n  user: Ref<AnzuUser | null>\n  probe: (id: IntegerId) => Promise<void>\n  reset: () => void\n  cancel: () => void\n}\n\nexport interface UserSystemProbeParams {\n  descriptor: AnyUserSystemDescriptor\n  /** Usually injected once per page; passing it explicitly is for tests and one-off panels. */\n  refreshHook?: UserSystemRefreshHook | undefined\n}\n\n/**\n * Reads through `endpoints[probe].get`, never a hard-coded path (dam gates only `/adm/users/{id}`).\n * A 404 here is expected. A custom app error logger should skip `status === 404 && entity === USER_PROBE_ENTITY`.\n */\nexport const useUserSystemProbe = (params: UserSystemProbeParams): UserSystemProbeResult => {\n  const { descriptor, refreshHook } = params\n\n  const axes = ref<UserSystemAxes>(emptyUserSystemAxes())\n  const user = ref<AnzuUser | null>(null)\n\n  let generation = 0\n  /**\n   * Aborts the in-flight request. The generation token only drops stale answers.\n   * Without this, leaving mid-search leaves up to eighteen calls running.\n   */\n  let abortInFlight: (() => void) | null = null\n\n  const reset = () => {\n    axes.value = emptyUserSystemAxes()\n    user.value = null\n  }\n\n  const cancel = () => {\n    generation++\n    abortInFlight?.()\n    abortInFlight = null\n  }\n\n  const probe = async (id: IntegerId) => {\n    // A system disabled in config is shown as a state, not called.\n    if (!descriptor.isEnabled()) {\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        presence: UserSystemPresence.Unknown,\n        access: UserSystemAccess.ConfigDisabled,\n        enabled: 'unknown',\n      }\n      user.value = null\n      return\n    }\n\n    const token = ++generation\n    axes.value = { ...axes.value, load: UserSystemLoad.Loading }\n\n    const endpoint = resolveProbeEndpoint(descriptor)\n\n    const ask = async () => {\n      const { execute, abort } = useApiRequest<AnzuUser, null>({\n        client: descriptor.client,\n        method: 'GET',\n        system: descriptor.system,\n        entity: USER_PROBE_ENTITY,\n        validationSystem: 'common',\n        validationEntity: descriptor.entity,\n        urlTemplate: endpoint.get,\n      })\n      abortInFlight = abort\n      try {\n        return await execute({ urlParams: { id } })\n      } finally {\n        abortInFlight = null\n      }\n    }\n\n    try {\n      const found = await ask()\n      if (token !== generation) return\n      user.value = found\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        presence: UserSystemPresence.Present,\n        access: UserSystemAccess.Ok,\n        enabled: found.enabled,\n      }\n    } catch (error) {\n      if (token !== generation) return\n      if (error instanceof AnzuApiCancelledError) return\n\n      let status = probeStatusFromError(error)\n\n      // A 401 is only a verdict after this refresh and retry.\n      if (status === HTTP_STATUS_UNAUTHORIZED && refreshHook) {\n        const refreshed = await refreshHook(descriptor.system).catch(() => false)\n        if (token !== generation) return\n        if (refreshed) {\n          try {\n            const found = await ask()\n            if (token !== generation) return\n            user.value = found\n            axes.value = {\n              load: UserSystemLoad.Loaded,\n              presence: UserSystemPresence.Present,\n              access: UserSystemAccess.Ok,\n              enabled: found.enabled,\n            }\n            return\n          } catch (retryError) {\n            if (token !== generation) return\n            status = probeStatusFromError(retryError)\n          }\n        }\n      }\n\n      user.value = null\n      axes.value = {\n        load: UserSystemLoad.Loaded,\n        ...classifyProbeStatus(status),\n        enabled: 'unknown',\n      }\n    }\n  }\n\n  return { axes, user, probe, reset, cancel }\n}\n"],"mappings":";;;;;;;;;;;;AA6BA,IAAaC,IAAgE,OAAO,uBAAuB,GAO9FC,KAAwB,MAAkC;CACrE,IAAIC,aAAiBC,GAA0B,OAAOD,EAAM;CAC5D,IAAIA,aAAiBE,GAAuB,OAAA;CAC5C,IAAIF,aAAiBG,GAAmB,OAAOH,EAAM,MAAM,UAAU,UAAU;CAC/E,IAAMI,IAASJ,GAAsC;CAIrD,OAHIH,EAAM,aAAaO,CAAK,IAAUA,EAAM,UAAU,UAAU,OAC5DP,EAAM,aAAaG,CAAK,IAAUA,EAAM,UAAU,UAAU,OAEzD;AACT,GAoBaK,KAAsB,MAAyD;CAC1F,IAAM,EAAE,eAAY,mBAAgBC,GAE9BC,IAAOC,EAAoBC,EAAoB,CAAC,GAChDC,IAAOF,EAAqB,IAAI,GAElCG,IAAa,GAKbC,IAAqC;CAiGzC,OAAO;EAAE;EAAM;EAAM,cApFA,MAAkB;GAErC,IAAI,CAACC,EAAW,UAAU,GAAG;IAO3B,AANA,EAAK,QAAQ;KACX,MAAMC,EAAe;KACrB,UAAUC,EAAmB;KAC7B,QAAQC,EAAiB;KACzB,SAAS;IACX,GACA,EAAK,QAAQ;IACb;GACF;GAEA,IAAMC,IAAQ,EAAEN;GAChB,EAAK,QAAQ;IAAE,GAAGJ,EAAK;IAAO,MAAMO,EAAe;GAAQ;GAE3D,IAAMI,IAAWC,EAAqBN,CAAU,GAE1CO,IAAM,YAAY;IACtB,IAAM,EAAE,YAAS,aAAUC,EAA8B;KACvD,QAAQR,EAAW;KACnB,QAAQ;KACR,QAAQA,EAAW;KACnB,QAAQS;KACR,kBAAkB;KAClB,kBAAkBT,EAAW;KAC7B,aAAaK,EAAS;IACxB,CAAC;IACD,IAAgBK;IAChB,IAAI;KACF,OAAO,MAAMC,EAAQ,EAAE,WAAW,EAAE,MAAG,EAAE,CAAC;IAC5C,UAAU;KACR,IAAgB;IAClB;GACF;GAEA,IAAI;IACF,IAAMC,IAAQ,MAAML,EAAI;IACxB,IAAIH,MAAUN,GAAY;IAE1B,AADA,EAAK,QAAQc,GACb,EAAK,QAAQ;KACX,MAAMX,EAAe;KACrB,UAAUC,EAAmB;KAC7B,QAAQC,EAAiB;KACzB,SAASS,EAAM;IACjB;GACF,SAASzB,GAAO;IAEd,IADIiB,MAAUN,KACVX,aAAiB0B,GAAuB;IAE5C,IAAIC,IAAS5B,EAAqBC,CAAK;IAGvC,IAAI2B,MAAA,OAAuCC,GAAa;KACtD,IAAMC,IAAY,MAAMD,EAAYf,EAAW,MAAM,CAAC,CAAC,YAAY,EAAK;KACxE,IAAII,MAAUN,GAAY;KAC1B,IAAIkB,GACF,IAAI;MACF,IAAMJ,IAAQ,MAAML,EAAI;MACxB,IAAIH,MAAUN,GAAY;MAE1B,AADA,EAAK,QAAQc,GACb,EAAK,QAAQ;OACX,MAAMX,EAAe;OACrB,UAAUC,EAAmB;OAC7B,QAAQC,EAAiB;OACzB,SAASS,EAAM;MACjB;MACA;KACF,SAASK,GAAY;MACnB,IAAIb,MAAUN,GAAY;MAC1B,IAASZ,EAAqB+B,CAAU;KAC1C;IAEJ;IAGA,AADA,EAAK,QAAQ,MACb,EAAK,QAAQ;KACX,MAAMhB,EAAe;KACrB,GAAGiB,EAAoBJ,CAAM;KAC7B,SAAS;IACX;GACF;EACF;EAE4B,aA/FR;GAElB,AADA,EAAK,QAAQlB,EAAoB,GACjC,EAAK,QAAQ;EACf;EA4FmC,cA1Fd;GAGnB,AAFA,KACAG,IAAgB,GAChB,IAAgB;EAClB;CAsF0C;AAC5C"}

package/dist/domains/anzuUser/filter/anzuUserFilter.d.ts

@@ -23,28 +23,18 @@ declare const anzuUserListFields: ({
 type ListFields = typeof anzuUserListFields;
 export declare const anzuUserFilterStorageKey: (system: string) => string;
 /**
- * The three fields every system has, plus whatever that system adds.
- *
- * The extras are a parameter rather than fields in the list above because the same filter is not
- * the same query everywhere: cms asks for permission groups with `memberOf` and dam with `custom`,
- * and cms has `allowedSites`, which exists nowhere else. Hard-coding either variant would send the
- * wrong query to the other backend, and leaving them out costs those two lists filters they have
- * today.
- *
- * `AFilterWrapper` draws any field that is not `render.skip` by itself, so a plain extra field
- * needs nothing else; one that wants its own widget -- a remote autocomplete -- is passed through
- * the matching slot.
+ * Common fields plus per-system extras.
+ * Extras are a parameter because backends differ: cms filters groups
+ * with `memberOf`, dam with `custom`, and only cms has `allowedSites`.
+ * Extra fields render automatically; a custom widget goes through the matching slot.
  */
 export declare function useAnzuUserListFilter<E extends readonly MakeFilterOption[] = []>(system: string, extraFields?: E): {
     filterConfig: FilterConfig<readonly [...ListFields, ...E]>;
     filterData: FilterData<readonly [...ListFields, ...E]>;
 };
 /**
- * Exact match on e-mail, for the cross-system search.
- *
- * `startsWith` -- what the list filter uses and what admin-inhouse's search used -- cannot answer
- * the question that search asks. "Is this person here under this address" has to be `eq`, or
- * `jozko@sme.sk` matches `jozko.mrkvicka@sme.sk` and the fan-out reports the wrong identity.
+ * Exact e-mail match for cross-system search.
+ * `startsWith` would match `jozko@sme.sk` to `jozko.mrkvicka@sme.sk` and report the wrong identity.
  */
 export declare function useAnzuUserEmailLookupFilter(): {
     filterConfig: FilterConfig<{

package/dist/domains/anzuUser/filter/anzuUserFilter.js.map

@@ -1 +1 @@
-{"version":3,"file":"anzuUserFilter.js","names":["anzuUserListFields","listStores","anzuUserFilterStorageKey","system","useAnzuUserListFilter","extras","extraFields","fields","key","field","store","createFilterStore","createFilter","ANZU_USER_ENTITY","useAnzuUserEmailLookupFilter"],"sources":["../../../../src/domains/anzuUser/filter/anzuUserFilter.ts"],"sourcesContent":["import {\n  createFilter,\n  createFilterStore,\n  type FilterConfig,\n  type FilterData,\n  type MakeFilterOption,\n} from '@/domains/filters/composables/filterFactory'\nimport { ANZU_USER_ENTITY } from '@/domains/anzuUser/api/anzuUserApi'\n\nconst anzuUserListFields = [\n  { name: 'id' as const, default: null, type: 'integer' },\n  { name: 'email' as const, variant: 'startsWith', default: null, type: 'string', render: { skip: true } },\n  { name: 'enabled' as const, default: null, type: 'boolean' },\n] satisfies readonly MakeFilterOption[]\n\ntype ListFields = typeof anzuUserListFields\n\n/** One store per system; see the note in `permissionGroupFilter`. */\nconst listStores = new Map<string, FilterData<readonly MakeFilterOption[]>>()\n\nexport const anzuUserFilterStorageKey = (system: string) => `commonAnzuUser_${system}`\n\n/**\n * The three fields every system has, plus whatever that system adds.\n *\n * The extras are a parameter rather than fields in the list above because the same filter is not\n * the same query everywhere: cms asks for permission groups with `memberOf` and dam with `custom`,\n * and cms has `allowedSites`, which exists nowhere else. Hard-coding either variant would send the\n * wrong query to the other backend, and leaving them out costs those two lists filters they have\n * today.\n *\n * `AFilterWrapper` draws any field that is not `render.skip` by itself, so a plain extra field\n * needs nothing else; one that wants its own widget -- a remote autocomplete -- is passed through\n * the matching slot.\n */\nexport function useAnzuUserListFilter<E extends readonly MakeFilterOption[] = []>(\n  system: string,\n  extraFields?: E\n): {\n  filterConfig: FilterConfig<readonly [...ListFields, ...E]>\n  filterData: FilterData<readonly [...ListFields, ...E]>\n} {\n  const extras = (extraFields ?? []) as readonly MakeFilterOption[]\n  const fields = [...anzuUserListFields, ...extras] as unknown as readonly [...ListFields, ...E]\n  // The extras are part of the identity: one list asking for `allowedSites` and another that does\n  // not are two different stores, and sharing one would carry a value the second cannot clear.\n  const key = [system, ...extras.map((field) => field.name)].join('|')\n\n  let store = listStores.get(key)\n  if (!store) {\n    store = createFilterStore(fields) as FilterData<readonly MakeFilterOption[]>\n    listStores.set(key, store)\n  }\n\n  const { filterConfig, filterData } = createFilter(fields, store as FilterData<readonly [...ListFields, ...E]>, {\n    system: 'common',\n    subject: ANZU_USER_ENTITY,\n  })\n\n  return { filterConfig, filterData }\n}\n\n/**\n * Exact match on e-mail, for the cross-system search.\n *\n * `startsWith` -- what the list filter uses and what admin-inhouse's search used -- cannot answer\n * the question that search asks. \"Is this person here under this address\" has to be `eq`, or\n * `jozko@sme.sk` matches `jozko.mrkvicka@sme.sk` and the fan-out reports the wrong identity.\n */\nexport function useAnzuUserEmailLookupFilter() {\n  const fields = [\n    { name: 'email' as const, variant: 'eq', default: null, type: 'string' },\n  ] satisfies readonly MakeFilterOption[]\n\n  const { filterConfig, filterData } = createFilter(fields, createFilterStore(fields), {\n    system: 'common',\n    subject: ANZU_USER_ENTITY,\n  })\n\n  return { filterConfig, filterData }\n}\n\n/** Test seam; the list stores are module state. */\nexport const resetAnzuUserListFilters = () => {\n  listStores.clear()\n}\n"],"mappings":";;;AASA,IAAMA,IAAqB;CACzB;EAAE,MAAM;EAAe,SAAS;EAAM,MAAM;CAAU;CACtD;EAAE,MAAM;EAAkB,SAAS;EAAc,SAAS;EAAM,MAAM;EAAU,QAAQ,EAAE,MAAM,GAAK;CAAE;CACvG;EAAE,MAAM;EAAoB,SAAS;EAAM,MAAM;CAAU;AAC7D,GAKMC,oBAAa,IAAI,IAAqD,GAE/DC,KAA4B,MAAmB,kBAAkBC;AAe9E,SAAgBC,EACd,GACA,GAIA;CACA,IAAMC,IAAUC,KAAe,CAAC,GAC1BC,IAAS,CAAC,GAAGP,GAAoB,GAAGK,CAAM,GAG1CG,IAAM,CAACL,GAAQ,GAAGE,EAAO,KAAK,MAAUI,EAAM,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,GAE/DC,IAAQT,EAAW,IAAIO,CAAG;CAC9B,AAAKE,MACH,IAAQC,EAAkBJ,CAAM,GAChCN,EAAW,IAAIO,GAAKE,CAAK;CAG3B,IAAM,EAAE,iBAAc,kBAAeE,EAAaL,GAAQG,GAAqD;EAC7G,QAAQ;EACR,SAASG;CACX,CAAC;CAED,OAAO;EAAE;EAAc;CAAW;AACpC;AASA,SAAgBC,IAA+B;CAC7C,IAAMP,IAAS,CACb;EAAE,MAAM;EAAkB,SAAS;EAAM,SAAS;EAAM,MAAM;CAAS,CACzE,GAEM,EAAE,iBAAc,kBAAeK,EAAaL,GAAQI,EAAkBJ,CAAM,GAAG;EACnF,QAAQ;EACR,SAASM;CACX,CAAC;CAED,OAAO;EAAE;EAAc;CAAW;AACpC"}
+{"version":3,"file":"anzuUserFilter.js","names":["anzuUserListFields","listStores","anzuUserFilterStorageKey","system","useAnzuUserListFilter","extras","extraFields","fields","key","field","store","createFilterStore","createFilter","ANZU_USER_ENTITY","useAnzuUserEmailLookupFilter"],"sources":["../../../../src/domains/anzuUser/filter/anzuUserFilter.ts"],"sourcesContent":["import {\n  createFilter,\n  createFilterStore,\n  type FilterConfig,\n  type FilterData,\n  type MakeFilterOption,\n} from '@/domains/filters/composables/filterFactory'\nimport { ANZU_USER_ENTITY } from '@/domains/anzuUser/api/anzuUserApi'\n\nconst anzuUserListFields = [\n  { name: 'id' as const, default: null, type: 'integer' },\n  { name: 'email' as const, variant: 'startsWith', default: null, type: 'string', render: { skip: true } },\n  { name: 'enabled' as const, default: null, type: 'boolean' },\n] satisfies readonly MakeFilterOption[]\n\ntype ListFields = typeof anzuUserListFields\n\n/** One store per system; see the note in `permissionGroupFilter`. */\nconst listStores = new Map<string, FilterData<readonly MakeFilterOption[]>>()\n\nexport const anzuUserFilterStorageKey = (system: string) => `commonAnzuUser_${system}`\n\n/**\n * Common fields plus per-system extras.\n * Extras are a parameter because backends differ: cms filters groups\n * with `memberOf`, dam with `custom`, and only cms has `allowedSites`.\n * Extra fields render automatically; a custom widget goes through the matching slot.\n */\nexport function useAnzuUserListFilter<E extends readonly MakeFilterOption[] = []>(\n  system: string,\n  extraFields?: E\n): {\n  filterConfig: FilterConfig<readonly [...ListFields, ...E]>\n  filterData: FilterData<readonly [...ListFields, ...E]>\n} {\n  const extras = (extraFields ?? []) as readonly MakeFilterOption[]\n  const fields = [...anzuUserListFields, ...extras] as unknown as readonly [...ListFields, ...E]\n  // Extras are part of the store key. A shared store would carry a value the other list cannot clear.\n  const key = [system, ...extras.map((field) => field.name)].join('|')\n\n  let store = listStores.get(key)\n  if (!store) {\n    store = createFilterStore(fields) as FilterData<readonly MakeFilterOption[]>\n    listStores.set(key, store)\n  }\n\n  const { filterConfig, filterData } = createFilter(fields, store as FilterData<readonly [...ListFields, ...E]>, {\n    system: 'common',\n    subject: ANZU_USER_ENTITY,\n  })\n\n  return { filterConfig, filterData }\n}\n\n/**\n * Exact e-mail match for cross-system search.\n * `startsWith` would match `jozko@sme.sk` to `jozko.mrkvicka@sme.sk` and report the wrong identity.\n */\nexport function useAnzuUserEmailLookupFilter() {\n  const fields = [\n    { name: 'email' as const, variant: 'eq', default: null, type: 'string' },\n  ] satisfies readonly MakeFilterOption[]\n\n  const { filterConfig, filterData } = createFilter(fields, createFilterStore(fields), {\n    system: 'common',\n    subject: ANZU_USER_ENTITY,\n  })\n\n  return { filterConfig, filterData }\n}\n\n/** Test seam; the list stores are module state. */\nexport const resetAnzuUserListFilters = () => {\n  listStores.clear()\n}\n"],"mappings":";;;AASA,IAAMA,IAAqB;CACzB;EAAE,MAAM;EAAe,SAAS;EAAM,MAAM;CAAU;CACtD;EAAE,MAAM;EAAkB,SAAS;EAAc,SAAS;EAAM,MAAM;EAAU,QAAQ,EAAE,MAAM,GAAK;CAAE;CACvG;EAAE,MAAM;EAAoB,SAAS;EAAM,MAAM;CAAU;AAC7D,GAKMC,oBAAa,IAAI,IAAqD,GAE/DC,KAA4B,MAAmB,kBAAkBC;AAQ9E,SAAgBC,EACd,GACA,GAIA;CACA,IAAMC,IAAUC,KAAe,CAAC,GAC1BC,IAAS,CAAC,GAAGP,GAAoB,GAAGK,CAAM,GAE1CG,IAAM,CAACL,GAAQ,GAAGE,EAAO,KAAK,MAAUI,EAAM,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,GAE/DC,IAAQT,EAAW,IAAIO,CAAG;CAC9B,AAAKE,MACH,IAAQC,EAAkBJ,CAAM,GAChCN,EAAW,IAAIO,GAAKE,CAAK;CAG3B,IAAM,EAAE,iBAAc,kBAAeE,EAAaL,GAAQG,GAAqD;EAC7G,QAAQ;EACR,SAASG;CACX,CAAC;CAED,OAAO;EAAE;EAAc;CAAW;AACpC;AAMA,SAAgBC,IAA+B;CAC7C,IAAMP,IAAS,CACb;EAAE,MAAM;EAAkB,SAAS;EAAM,SAAS;EAAM,MAAM;CAAS,CACzE,GAEM,EAAE,iBAAc,kBAAeK,EAAaL,GAAQI,EAAkBJ,CAAM,GAAG;EACnF,QAAQ;EACR,SAASM;CACX,CAAC;CAED,OAAO;EAAE;EAAc;CAAW;AACpC"}

package/dist/domains/anzuUser/store/anzuUserStore.d.ts

@@ -1,9 +1,5 @@
 import { AnzuUser } from '../../../shared/types/AnzuUser';
-/**
- * The one user the owning form is editing. Cross-system pages do not use this -- they hold a
- * result per system and never a single "current" user -- so it stays a single record, the way the
- * admins have it.
- */
+/** The single user the owning form edits. Cross-system pages keep per-system results instead. */
 export declare const useAnzuUserOneStore: import('pinia').SetupStoreDefinition<"commonAdminAnzuUserOneStore", {
     anzuUser: import('vue').Ref<{
         enabled: boolean;

package/dist/domains/anzuUser/store/anzuUserStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"anzuUserStore.js","names":["useAnzuUserOneStore","defineStore","useAnzuUserFactory","anzuUser","ref","createAnzuUser","loadingAnzuUser","setAnzuUser","newAnzuUser","setLoadingAnzuUser","loading","reset","system","resourceName"],"sources":["../../../../src/domains/anzuUser/store/anzuUserStore.ts"],"sourcesContent":["import { acceptHMRUpdate, defineStore } from 'pinia'\nimport { ref } from 'vue'\nimport { useAnzuUserFactory } from '@/domains/anzuUser/factory/AnzuUserFactory'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\n\n/**\n * The one user the owning form is editing. Cross-system pages do not use this -- they hold a\n * result per system and never a single \"current\" user -- so it stays a single record, the way the\n * admins have it.\n */\nexport const useAnzuUserOneStore = defineStore('commonAdminAnzuUserOneStore', () => {\n  const { createAnzuUser } = useAnzuUserFactory()\n\n  const anzuUser = ref<AnzuUser>(createAnzuUser())\n  const loadingAnzuUser = ref(false)\n\n  function setAnzuUser(newAnzuUser: AnzuUser) {\n    anzuUser.value = newAnzuUser\n  }\n\n  function setLoadingAnzuUser(loading: boolean) {\n    loadingAnzuUser.value = loading\n  }\n\n  function reset(system = '', resourceName = 'user') {\n    anzuUser.value = createAnzuUser(system, resourceName)\n    loadingAnzuUser.value = false\n  }\n\n  return {\n    anzuUser,\n    loadingAnzuUser,\n    setAnzuUser,\n    setLoadingAnzuUser,\n    reset,\n  }\n})\n\nif (import.meta.hot) {\n  import.meta.hot.accept(acceptHMRUpdate(useAnzuUserOneStore, import.meta.hot))\n}\n"],"mappings":";;;;AAUA,IAAaA,IAAsBC,EAAY,qCAAqC;CAClF,IAAM,EAAE,sBAAmBC,EAAmB,GAExCC,IAAWC,EAAcC,EAAe,CAAC,GACzCC,IAAkBF,EAAI,EAAK;CAEjC,SAASG,EAAY,GAAuB;EAC1C,EAAS,QAAQC;CACnB;CAEA,SAASC,EAAmB,GAAkB;EAC5C,EAAgB,QAAQC;CAC1B;CAEA,SAASC,EAAM,IAAS,IAAI,IAAe,QAAQ;EAEjD,AADA,EAAS,QAAQN,EAAeO,GAAQC,CAAY,GACpD,EAAgB,QAAQ;CAC1B;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;CACF;AACF,CAAC"}
+{"version":3,"file":"anzuUserStore.js","names":["useAnzuUserOneStore","defineStore","useAnzuUserFactory","anzuUser","ref","createAnzuUser","loadingAnzuUser","setAnzuUser","newAnzuUser","setLoadingAnzuUser","loading","reset","system","resourceName"],"sources":["../../../../src/domains/anzuUser/store/anzuUserStore.ts"],"sourcesContent":["import { acceptHMRUpdate, defineStore } from 'pinia'\nimport { ref } from 'vue'\nimport { useAnzuUserFactory } from '@/domains/anzuUser/factory/AnzuUserFactory'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\n\n/** The single user the owning form edits. Cross-system pages keep per-system results instead. */\nexport const useAnzuUserOneStore = defineStore('commonAdminAnzuUserOneStore', () => {\n  const { createAnzuUser } = useAnzuUserFactory()\n\n  const anzuUser = ref<AnzuUser>(createAnzuUser())\n  const loadingAnzuUser = ref(false)\n\n  function setAnzuUser(newAnzuUser: AnzuUser) {\n    anzuUser.value = newAnzuUser\n  }\n\n  function setLoadingAnzuUser(loading: boolean) {\n    loadingAnzuUser.value = loading\n  }\n\n  function reset(system = '', resourceName = 'user') {\n    anzuUser.value = createAnzuUser(system, resourceName)\n    loadingAnzuUser.value = false\n  }\n\n  return {\n    anzuUser,\n    loadingAnzuUser,\n    setAnzuUser,\n    setLoadingAnzuUser,\n    reset,\n  }\n})\n\nif (import.meta.hot) {\n  import.meta.hot.accept(acceptHMRUpdate(useAnzuUserOneStore, import.meta.hot))\n}\n"],"mappings":";;;;AAMA,IAAaA,IAAsBC,EAAY,qCAAqC;CAClF,IAAM,EAAE,sBAAmBC,EAAmB,GAExCC,IAAWC,EAAcC,EAAe,CAAC,GACzCC,IAAkBF,EAAI,EAAK;CAEjC,SAASG,EAAY,GAAuB;EAC1C,EAAS,QAAQC;CACnB;CAEA,SAASC,EAAmB,GAAkB;EAC5C,EAAgB,QAAQC;CAC1B;CAEA,SAASC,EAAM,IAAS,IAAI,IAAe,QAAQ;EAEjD,AADA,EAAS,QAAQN,EAAeO,GAAQC,CAAY,GACpD,EAAgB,QAAQ;CAC1B;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;CACF;AACF,CAAC"}

package/dist/domains/anzuUser/store/userCrossSystemStore.d.ts

@@ -35,25 +35,14 @@ export interface BulkLogEntry {
     system: string;
     outcome: BulkOutcomeType;
     /**
-     * Which run the line belongs to.
-     *
-     * The log survives a run so that a retry does not erase the systems that succeeded a minute ago,
-     * and the retry button acts on whatever the log calls failed. Without these two fields a failed
-     * metadata write would be retried as a disable, and a previous person's failures would be retried
-     * against the id currently on screen -- neither `setEnabled` nor `writeMetadata` can tell it is
-     * being asked about a different action or a different account.
+     * The run this line belongs to. The log survives so a retry keeps earlier successes.
+     * Without these fields a retry could repeat the wrong action or target the person now on screen.
      */
     action: BulkActionType;
     subjectId: IntegerIdNullable;
     detail?: string;
 }
-/**
- * Search results and the bulk run live here, not inside the dialog's component.
- *
- * The dialog can be closed while the calls are still going -- one dead backend running into its
- * timeout must not lock the screen -- and state owned by the component would be thrown away with
- * it. The results stay on the page either way.
- */
+/** Kept in a store, not the dialog. The dialog can close while calls run, and the results must survive. */
 export declare const useUserCrossSystemStore: import('pinia').SetupStoreDefinition<"commonAdminUserCrossSystemStore", {
     searchTerm: import('vue').Ref<string, string>;
     resolvedId: import('vue').Ref<IntegerIdNullable, IntegerIdNullable>;

package/dist/domains/anzuUser/store/userCrossSystemStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"userCrossSystemStore.js","names":["CrossSystemPhase","BulkAction","BulkOutcome","useUserCrossSystemStore","defineStore","searchTerm","ref","resolvedId","phase","results","identityConflict","bulkRunning","bulkAction","bulkSubjectId","bulkLog","termRejected","resetResults","setResult","system","result","ensureResult","emptyUserSystemAxes","patchAxes","current","setUser","startBulk","action","subjectId","queued","systems","kept","entry","setBulkEntry","index","i","old","finishBulk","reset"],"sources":["../../../../src/domains/anzuUser/store/userCrossSystemStore.ts"],"sourcesContent":["import { acceptHMRUpdate, defineStore } from 'pinia'\nimport { ref } from 'vue'\nimport { emptyUserSystemAxes, type UserSystemAxes } from '@/domains/anzuUser/utils/userSystemState'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId, IntegerIdNullable } from '@/shared/types/common'\n\nexport interface UserSystemResult {\n  axes: UserSystemAxes\n  user: AnzuUser | null\n}\n\nexport const CrossSystemPhase = {\n  Idle: 'idle',\n  /** First round of an e-mail search: find the person and their id. */\n  MatchingEmail: 'matchingEmail',\n  /** Second round: ask every system by that id, to catch the ones holding a different e-mail. */\n  VerifyingById: 'verifyingById',\n  Done: 'done',\n} as const\nexport type CrossSystemPhaseType = (typeof CrossSystemPhase)[keyof typeof CrossSystemPhase]\n\nexport const BulkAction = {\n  Enable: 'enable',\n  Disable: 'disable',\n  Metadata: 'metadata',\n} as const\nexport type BulkActionType = (typeof BulkAction)[keyof typeof BulkAction]\n\nexport const BulkOutcome = {\n  Pending: 'pending',\n  Running: 'running',\n  Done: 'done',\n  Forbidden: 'forbidden',\n  Unauthenticated: 'unauthenticated',\n  NotFound: 'notFound',\n  Invalid: 'invalid',\n  Unavailable: 'unavailable',\n} as const\nexport type BulkOutcomeType = (typeof BulkOutcome)[keyof typeof BulkOutcome]\n\nexport interface BulkLogEntry {\n  system: string\n  outcome: BulkOutcomeType\n  /**\n   * Which run the line belongs to.\n   *\n   * The log survives a run so that a retry does not erase the systems that succeeded a minute ago,\n   * and the retry button acts on whatever the log calls failed. Without these two fields a failed\n   * metadata write would be retried as a disable, and a previous person's failures would be retried\n   * against the id currently on screen -- neither `setEnabled` nor `writeMetadata` can tell it is\n   * being asked about a different action or a different account.\n   */\n  action: BulkActionType\n  subjectId: IntegerIdNullable\n  detail?: string\n}\n\n/**\n * Search results and the bulk run live here, not inside the dialog's component.\n *\n * The dialog can be closed while the calls are still going -- one dead backend running into its\n * timeout must not lock the screen -- and state owned by the component would be thrown away with\n * it. The results stay on the page either way.\n */\nexport const useUserCrossSystemStore = defineStore('commonAdminUserCrossSystemStore', () => {\n  const searchTerm = ref('')\n  const resolvedId = ref<IntegerIdNullable>(null)\n  const phase = ref<CrossSystemPhaseType>(CrossSystemPhase.Idle)\n  const results = ref(new Map<string, UserSystemResult>())\n\n  /**\n   * The same e-mail answered with two different ids.\n   *\n   * Bulk actions stop when this is set. Picking the first one quietly would have every later\n   * fan-out follow the wrong identity, and since no admin can delete an AnzuUser, anything written\n   * under it stays.\n   */\n  const identityConflict = ref<Map<string, IntegerId> | null>(null)\n\n  const bulkRunning = ref(false)\n  const bulkAction = ref<BulkActionType | null>(null)\n  const bulkSubjectId = ref<IntegerIdNullable>(null)\n  const bulkLog = ref<BulkLogEntry[]>([])\n\n  /** The term was neither an address nor an id, so nothing was asked and there is nothing to show. */\n  const termRejected = ref(false)\n\n  function resetResults() {\n    results.value = new Map()\n    resolvedId.value = null\n    identityConflict.value = null\n    phase.value = CrossSystemPhase.Idle\n    termRejected.value = false\n    // A new search is a new person. Leaving the log behind would put the previous one's failures on\n    // screen under a live retry button, and that retry writes to `resolvedId` -- somebody else by\n    // then.\n    bulkLog.value = []\n    bulkAction.value = null\n    bulkSubjectId.value = null\n  }\n\n  function setResult(system: string, result: UserSystemResult) {\n    results.value.set(system, result)\n  }\n\n  function ensureResult(system: string) {\n    if (!results.value.has(system)) {\n      results.value.set(system, { axes: emptyUserSystemAxes(), user: null })\n    }\n  }\n\n  function patchAxes(system: string, axes: UserSystemAxes) {\n    ensureResult(system)\n    const current = results.value.get(system)!\n    results.value.set(system, { ...current, axes })\n  }\n\n  function setUser(system: string, user: AnzuUser | null) {\n    ensureResult(system)\n    const current = results.value.get(system)!\n    results.value.set(system, { ...current, user })\n  }\n\n  /**\n   * Opens a run over `systems`, keeping what the same run already said about the others.\n   *\n   * The retry is why anything is kept at all: \"try the failed ones again\" runs a subset, and\n   * resetting the whole log would erase the systems that succeeded a minute ago, so a partial\n   * success would read as if it had never happened. What is kept is scoped to this action and this\n   * account, because everything else in the log belongs to a run the operator is no longer looking\n   * at.\n   */\n  function startBulk(action: BulkActionType, systems: string[], subjectId: IntegerIdNullable) {\n    bulkRunning.value = true\n    bulkAction.value = action\n    bulkSubjectId.value = subjectId\n    const queued = new Set(systems)\n    const kept = bulkLog.value.filter(\n      (entry) => entry.action === action && entry.subjectId === subjectId && !queued.has(entry.system)\n    )\n    bulkLog.value = [...kept, ...systems.map((system) => ({ system, outcome: BulkOutcome.Pending, action, subjectId }))]\n  }\n\n  function setBulkEntry(system: string, outcome: BulkOutcomeType, detail?: string) {\n    const index = bulkLog.value.findIndex(\n      (entry) => entry.system === system && entry.action === bulkAction.value && entry.subjectId === bulkSubjectId.value\n    )\n    if (index === -1) return\n    const entry: BulkLogEntry = { ...bulkLog.value[index]!, outcome, detail }\n    bulkLog.value = bulkLog.value.map((old, i) => (i === index ? entry : old))\n  }\n\n  function finishBulk() {\n    bulkRunning.value = false\n  }\n\n  /**\n   * What leaving the page does: nobody on screen for the next visit.\n   *\n   * `resetResults` already drops the log and which run it was for. The lock it deliberately leaves:\n   * a run still writing goes on after the page is gone -- `cancel()` stops the probes, not the\n   * writes -- and releasing it would let a second bulk action start against the same account while\n   * the first is unfinished (B13). The run releases it itself when it ends.\n   */\n  function reset() {\n    searchTerm.value = ''\n    resetResults()\n  }\n\n  return {\n    searchTerm,\n    resolvedId,\n    phase,\n    results,\n    identityConflict,\n    bulkRunning,\n    bulkAction,\n    bulkSubjectId,\n    bulkLog,\n    termRejected,\n    resetResults,\n    setResult,\n    patchAxes,\n    setUser,\n    startBulk,\n    setBulkEntry,\n    finishBulk,\n    reset,\n  }\n})\n\nif (import.meta.hot) {\n  import.meta.hot.accept(acceptHMRUpdate(useUserCrossSystemStore, import.meta.hot))\n}\n"],"mappings":";;;;AAWA,IAAaA,IAAmB;CAC9B,MAAM;CAEN,eAAe;CAEf,eAAe;CACf,MAAM;AACR,GAGaC,IAAa;CACxB,QAAQ;CACR,SAAS;CACT,UAAU;AACZ,GAGaC,IAAc;CACzB,SAAS;CACT,SAAS;CACT,MAAM;CACN,WAAW;CACX,iBAAiB;CACjB,UAAU;CACV,SAAS;CACT,aAAa;AACf,GA2BaC,IAA0BC,EAAY,yCAAyC;CAC1F,IAAMC,IAAaC,EAAI,EAAE,GACnBC,IAAaD,EAAuB,IAAI,GACxCE,IAAQF,EAA0BN,EAAiB,IAAI,GACvDS,IAAUH,kBAAI,IAAI,IAA8B,CAAC,GASjDI,IAAmBJ,EAAmC,IAAI,GAE1DK,IAAcL,EAAI,EAAK,GACvBM,IAAaN,EAA2B,IAAI,GAC5CO,IAAgBP,EAAuB,IAAI,GAC3CQ,IAAUR,EAAoB,CAAC,CAAC,GAGhCS,IAAeT,EAAI,EAAK;CAE9B,SAASU,IAAe;EAWtB,AAVA,EAAQ,wBAAQ,IAAI,IAAI,GACxB,EAAW,QAAQ,MACnB,EAAiB,QAAQ,MACzB,EAAM,QAAQhB,EAAiB,MAC/B,EAAa,QAAQ,IAIrB,EAAQ,QAAQ,CAAC,GACjB,EAAW,QAAQ,MACnB,EAAc,QAAQ;CACxB;CAEA,SAASiB,EAAU,GAAgB,GAA0B;EAC3D,EAAQ,MAAM,IAAIC,GAAQC,CAAM;CAClC;CAEA,SAASC,EAAa,GAAgB;EACpC,AAAKX,EAAQ,MAAM,IAAIS,CAAM,KAC3BT,EAAQ,MAAM,IAAIS,GAAQ;GAAE,MAAMG,EAAoB;GAAG,MAAM;EAAK,CAAC;CAEzE;CAEA,SAASC,EAAU,GAAgB,GAAsB;EACvD,EAAaJ,CAAM;EACnB,IAAMK,IAAUd,EAAQ,MAAM,IAAIS,CAAM;EACxC,EAAQ,MAAM,IAAIA,GAAQ;GAAE,GAAGK;GAAS;EAAK,CAAC;CAChD;CAEA,SAASC,EAAQ,GAAgB,GAAuB;EACtD,EAAaN,CAAM;EACnB,IAAMK,IAAUd,EAAQ,MAAM,IAAIS,CAAM;EACxC,EAAQ,MAAM,IAAIA,GAAQ;GAAE,GAAGK;GAAS;EAAK,CAAC;CAChD;CAWA,SAASE,EAAU,GAAwB,GAAmB,GAA8B;EAG1F,AAFA,EAAY,QAAQ,IACpB,EAAW,QAAQC,GACnB,EAAc,QAAQC;EACtB,IAAMC,IAAS,IAAI,IAAIC,CAAO,GACxBC,IAAOhB,EAAQ,MAAM,QACxB,MAAUiB,EAAM,WAAWL,KAAUK,EAAM,cAAcJ,KAAa,CAACC,EAAO,IAAIG,EAAM,MAAM,CACjG;EACA,EAAQ,QAAQ,CAAC,GAAGD,GAAM,GAAGD,EAAQ,KAAK,OAAY;GAAE;GAAQ,SAAS3B,EAAY;GAAS;GAAQ;EAAU,EAAE,CAAC;CACrH;CAEA,SAAS8B,EAAa,GAAgB,GAA0B,GAAiB;EAC/E,IAAMC,IAAQnB,EAAQ,MAAM,WACzB,MAAUiB,EAAM,WAAWb,KAAUa,EAAM,WAAWnB,EAAW,SAASmB,EAAM,cAAclB,EAAc,KAC/G;EACA,IAAIoB,MAAU,IAAI;EAClB,IAAMF,IAAsB;GAAE,GAAGjB,EAAQ,MAAMmB;GAAS;GAAS;EAAO;EACxE,EAAQ,QAAQnB,EAAQ,MAAM,KAAK,GAAK,MAAOoB,MAAMD,IAAQF,IAAQI,CAAI;CAC3E;CAEA,SAASC,IAAa;EACpB,EAAY,QAAQ;CACtB;CAUA,SAASC,IAAQ;EAEf,AADA,EAAW,QAAQ,IACnBrB,EAAa;CACf;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF,CAAC"}
+{"version":3,"file":"userCrossSystemStore.js","names":["CrossSystemPhase","BulkAction","BulkOutcome","useUserCrossSystemStore","defineStore","searchTerm","ref","resolvedId","phase","results","identityConflict","bulkRunning","bulkAction","bulkSubjectId","bulkLog","termRejected","resetResults","setResult","system","result","ensureResult","emptyUserSystemAxes","patchAxes","current","setUser","startBulk","action","subjectId","queued","systems","kept","entry","setBulkEntry","index","i","old","finishBulk","reset"],"sources":["../../../../src/domains/anzuUser/store/userCrossSystemStore.ts"],"sourcesContent":["import { acceptHMRUpdate, defineStore } from 'pinia'\nimport { ref } from 'vue'\nimport { emptyUserSystemAxes, type UserSystemAxes } from '@/domains/anzuUser/utils/userSystemState'\nimport type { AnzuUser } from '@/shared/types/AnzuUser'\nimport type { IntegerId, IntegerIdNullable } from '@/shared/types/common'\n\nexport interface UserSystemResult {\n  axes: UserSystemAxes\n  user: AnzuUser | null\n}\n\nexport const CrossSystemPhase = {\n  Idle: 'idle',\n  /** First round of an e-mail search: find the person and their id. */\n  MatchingEmail: 'matchingEmail',\n  /** Second round: ask every system by that id, to catch the ones holding a different e-mail. */\n  VerifyingById: 'verifyingById',\n  Done: 'done',\n} as const\nexport type CrossSystemPhaseType = (typeof CrossSystemPhase)[keyof typeof CrossSystemPhase]\n\nexport const BulkAction = {\n  Enable: 'enable',\n  Disable: 'disable',\n  Metadata: 'metadata',\n} as const\nexport type BulkActionType = (typeof BulkAction)[keyof typeof BulkAction]\n\nexport const BulkOutcome = {\n  Pending: 'pending',\n  Running: 'running',\n  Done: 'done',\n  Forbidden: 'forbidden',\n  Unauthenticated: 'unauthenticated',\n  NotFound: 'notFound',\n  Invalid: 'invalid',\n  Unavailable: 'unavailable',\n} as const\nexport type BulkOutcomeType = (typeof BulkOutcome)[keyof typeof BulkOutcome]\n\nexport interface BulkLogEntry {\n  system: string\n  outcome: BulkOutcomeType\n  /**\n   * The run this line belongs to. The log survives so a retry keeps earlier successes.\n   * Without these fields a retry could repeat the wrong action or target the person now on screen.\n   */\n  action: BulkActionType\n  subjectId: IntegerIdNullable\n  detail?: string\n}\n\n/** Kept in a store, not the dialog. The dialog can close while calls run, and the results must survive. */\nexport const useUserCrossSystemStore = defineStore('commonAdminUserCrossSystemStore', () => {\n  const searchTerm = ref('')\n  const resolvedId = ref<IntegerIdNullable>(null)\n  const phase = ref<CrossSystemPhaseType>(CrossSystemPhase.Idle)\n  const results = ref(new Map<string, UserSystemResult>())\n\n  /**\n   * The same e-mail answered with two ids. Bulk actions stop when set.\n   * AnzuUser cannot be deleted, so writes under the wrong identity would persist.\n   */\n  const identityConflict = ref<Map<string, IntegerId> | null>(null)\n\n  const bulkRunning = ref(false)\n  const bulkAction = ref<BulkActionType | null>(null)\n  const bulkSubjectId = ref<IntegerIdNullable>(null)\n  const bulkLog = ref<BulkLogEntry[]>([])\n\n  /** The term was neither an address nor an id, so nothing was asked and there is nothing to show. */\n  const termRejected = ref(false)\n\n  function resetResults() {\n    results.value = new Map()\n    resolvedId.value = null\n    identityConflict.value = null\n    phase.value = CrossSystemPhase.Idle\n    termRejected.value = false\n    // A new search is a new person. An old log's retry would write to the new `resolvedId`.\n    bulkLog.value = []\n    bulkAction.value = null\n    bulkSubjectId.value = null\n  }\n\n  function setResult(system: string, result: UserSystemResult) {\n    results.value.set(system, result)\n  }\n\n  function ensureResult(system: string) {\n    if (!results.value.has(system)) {\n      results.value.set(system, { axes: emptyUserSystemAxes(), user: null })\n    }\n  }\n\n  function patchAxes(system: string, axes: UserSystemAxes) {\n    ensureResult(system)\n    const current = results.value.get(system)!\n    results.value.set(system, { ...current, axes })\n  }\n\n  function setUser(system: string, user: AnzuUser | null) {\n    ensureResult(system)\n    const current = results.value.get(system)!\n    results.value.set(system, { ...current, user })\n  }\n\n  /**\n   * Starts a run over `systems`, keeping earlier log entries for the same action and account.\n   * A retry runs a subset; clearing the log would erase earlier successes.\n   */\n  function startBulk(action: BulkActionType, systems: string[], subjectId: IntegerIdNullable) {\n    bulkRunning.value = true\n    bulkAction.value = action\n    bulkSubjectId.value = subjectId\n    const queued = new Set(systems)\n    const kept = bulkLog.value.filter(\n      (entry) => entry.action === action && entry.subjectId === subjectId && !queued.has(entry.system)\n    )\n    bulkLog.value = [...kept, ...systems.map((system) => ({ system, outcome: BulkOutcome.Pending, action, subjectId }))]\n  }\n\n  function setBulkEntry(system: string, outcome: BulkOutcomeType, detail?: string) {\n    const index = bulkLog.value.findIndex(\n      (entry) => entry.system === system && entry.action === bulkAction.value && entry.subjectId === bulkSubjectId.value\n    )\n    if (index === -1) return\n    const entry: BulkLogEntry = { ...bulkLog.value[index]!, outcome, detail }\n    bulkLog.value = bulkLog.value.map((old, i) => (i === index ? entry : old))\n  }\n\n  function finishBulk() {\n    bulkRunning.value = false\n  }\n\n  /**\n   * Clears the page for the next visit but keeps the bulk lock.\n   * `cancel()` stops probes, not writes. Releasing the lock would allow a second\n   * bulk action on the same account (B13). The run releases it when done.\n   */\n  function reset() {\n    searchTerm.value = ''\n    resetResults()\n  }\n\n  return {\n    searchTerm,\n    resolvedId,\n    phase,\n    results,\n    identityConflict,\n    bulkRunning,\n    bulkAction,\n    bulkSubjectId,\n    bulkLog,\n    termRejected,\n    resetResults,\n    setResult,\n    patchAxes,\n    setUser,\n    startBulk,\n    setBulkEntry,\n    finishBulk,\n    reset,\n  }\n})\n\nif (import.meta.hot) {\n  import.meta.hot.accept(acceptHMRUpdate(useUserCrossSystemStore, import.meta.hot))\n}\n"],"mappings":";;;;AAWA,IAAaA,IAAmB;CAC9B,MAAM;CAEN,eAAe;CAEf,eAAe;CACf,MAAM;AACR,GAGaC,IAAa;CACxB,QAAQ;CACR,SAAS;CACT,UAAU;AACZ,GAGaC,IAAc;CACzB,SAAS;CACT,SAAS;CACT,MAAM;CACN,WAAW;CACX,iBAAiB;CACjB,UAAU;CACV,SAAS;CACT,aAAa;AACf,GAgBaC,IAA0BC,EAAY,yCAAyC;CAC1F,IAAMC,IAAaC,EAAI,EAAE,GACnBC,IAAaD,EAAuB,IAAI,GACxCE,IAAQF,EAA0BN,EAAiB,IAAI,GACvDS,IAAUH,kBAAI,IAAI,IAA8B,CAAC,GAMjDI,IAAmBJ,EAAmC,IAAI,GAE1DK,IAAcL,EAAI,EAAK,GACvBM,IAAaN,EAA2B,IAAI,GAC5CO,IAAgBP,EAAuB,IAAI,GAC3CQ,IAAUR,EAAoB,CAAC,CAAC,GAGhCS,IAAeT,EAAI,EAAK;CAE9B,SAASU,IAAe;EAStB,AARA,EAAQ,wBAAQ,IAAI,IAAI,GACxB,EAAW,QAAQ,MACnB,EAAiB,QAAQ,MACzB,EAAM,QAAQhB,EAAiB,MAC/B,EAAa,QAAQ,IAErB,EAAQ,QAAQ,CAAC,GACjB,EAAW,QAAQ,MACnB,EAAc,QAAQ;CACxB;CAEA,SAASiB,EAAU,GAAgB,GAA0B;EAC3D,EAAQ,MAAM,IAAIC,GAAQC,CAAM;CAClC;CAEA,SAASC,EAAa,GAAgB;EACpC,AAAKX,EAAQ,MAAM,IAAIS,CAAM,KAC3BT,EAAQ,MAAM,IAAIS,GAAQ;GAAE,MAAMG,EAAoB;GAAG,MAAM;EAAK,CAAC;CAEzE;CAEA,SAASC,EAAU,GAAgB,GAAsB;EACvD,EAAaJ,CAAM;EACnB,IAAMK,IAAUd,EAAQ,MAAM,IAAIS,CAAM;EACxC,EAAQ,MAAM,IAAIA,GAAQ;GAAE,GAAGK;GAAS;EAAK,CAAC;CAChD;CAEA,SAASC,EAAQ,GAAgB,GAAuB;EACtD,EAAaN,CAAM;EACnB,IAAMK,IAAUd,EAAQ,MAAM,IAAIS,CAAM;EACxC,EAAQ,MAAM,IAAIA,GAAQ;GAAE,GAAGK;GAAS;EAAK,CAAC;CAChD;CAMA,SAASE,EAAU,GAAwB,GAAmB,GAA8B;EAG1F,AAFA,EAAY,QAAQ,IACpB,EAAW,QAAQC,GACnB,EAAc,QAAQC;EACtB,IAAMC,IAAS,IAAI,IAAIC,CAAO,GACxBC,IAAOhB,EAAQ,MAAM,QACxB,MAAUiB,EAAM,WAAWL,KAAUK,EAAM,cAAcJ,KAAa,CAACC,EAAO,IAAIG,EAAM,MAAM,CACjG;EACA,EAAQ,QAAQ,CAAC,GAAGD,GAAM,GAAGD,EAAQ,KAAK,OAAY;GAAE;GAAQ,SAAS3B,EAAY;GAAS;GAAQ;EAAU,EAAE,CAAC;CACrH;CAEA,SAAS8B,EAAa,GAAgB,GAA0B,GAAiB;EAC/E,IAAMC,IAAQnB,EAAQ,MAAM,WACzB,MAAUiB,EAAM,WAAWb,KAAUa,EAAM,WAAWnB,EAAW,SAASmB,EAAM,cAAclB,EAAc,KAC/G;EACA,IAAIoB,MAAU,IAAI;EAClB,IAAMF,IAAsB;GAAE,GAAGjB,EAAQ,MAAMmB;GAAS;GAAS;EAAO;EACxE,EAAQ,QAAQnB,EAAQ,MAAM,KAAK,GAAK,MAAOoB,MAAMD,IAAQF,IAAQI,CAAI;CAC3E;CAEA,SAASC,IAAa;EACpB,EAAY,QAAQ;CACtB;CAOA,SAASC,IAAQ;EAEf,AADA,EAAW,QAAQ,IACnBrB,EAAa;CACf;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF,CAAC"}

package/dist/domains/anzuUser/utils/userMetadataDiff.d.ts

@@ -1,11 +1,8 @@
 import { BaseUser } from '../../../shared/types/AnzuUser';
 /**
- * The six fields the cross-system view compares.
- *
- * `email` is in the list and is also the reason the e-mail search runs twice: if a person is
- * `jozko@sme.sk` in weather and `j.mrkvicka@sme.sk` in blog, a search by e-mail finds weather and
- * blog answers nothing -- which looks exactly like "no account here". The second round, by the id
- * the first round found, is what turns that silence into the inconsistency it actually is.
+ * The six compared fields.
+ * `email` is why e-mail search runs twice: a system with a different
+ * address answers nothing. The id round reveals that as an inconsistency.
  */
 export declare const USER_METADATA_FIELDS: readonly ["email", "person.firstName", "person.lastName", "person.fullName", "avatar.color", "avatar.text"];
 export type UserMetadataField = (typeof USER_METADATA_FIELDS)[number];
@@ -17,22 +14,13 @@ export interface MetadataDifference {
     values: Map<string, string>;
 }
 /**
- * Which of the six fields the systems disagree about.
- *
- * Blog is compared on `person.*` like everything else, and its own root `firstName`/`lastName`
- * columns are deliberately left out of this: those are the byline under an article, the blog's slug
- * and the public API, not back-office metadata. That blog's `person` is empty for most bloggers and
- * will therefore read as different is correct -- the back-office identity really is unset there,
- * and the first repair fills it in.
+ * Blog is compared on `person.*`. Its root `firstName`/`lastName` are the public byline and are excluded.
+ * Blog's empty `person` reads as different on purpose; the first repair fills it.
  */
 export declare const findMetadataDifferences: (records: Map<string, BaseUser>) => MetadataDifference[];
 /**
- * Which record the repair form is pre-filled from: the first system in the configured order that
- * has one.
- *
- * Never "whichever answered first" -- the fan-out is parallel, so that would be a different answer
- * on every run. The order is a default rather than a hidden rule: the dialog names the source and
- * lets it be changed.
+ * Prefill source: the first system in configured order with a record.
+ * Not the first to answer, since the fan-out is parallel. The dialog names the source and lets it be changed.
  */
 export declare const pickPrefillSource: (order: string[], records: Map<string, BaseUser>) => string | null;
 /** Systems whose stored value differs from the one about to be written. Nothing else is touched. */