@jini-ai/user-management 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.3.0 — 2026-10-05
+
+### BREAKING
+
+- `PrincipalKind` adds `"member"` (a host's public-site sign-up). New `principalKindMayExercisePermission({ kind, permission })`: `authorize()` checks it right after the disabled-principal check, so a member is denied every operator permission (reason `principal_kind_denied`) even when a `*` grant reaches it, and the last-owner guard never counts a member as the remaining owner. Exhaustive switches over `PrincipalKind` need the new case.
+- Permission migrations are registered explicitly at composition: `registerPermissionMigration`/`listPermissionMigrations` (an import-time module singleton) are replaced by `createPermissionMigrationRegistry({}, { migrations })`, seeded with the built-in pairs, and `migrateDeprecatedPermissionGrants` takes the explicit `deps.migrations` list.
+
+### Changed
+
+- `seedIdentity` grants `role.manage` to the built-in admin policy, so an admin runs Roles & Permissions. `user.manage` stays owner-only and the grant-exceeds-issuer clamp is unchanged. Already-seeded workspaces are reconciled by the host.
+
+### Fixed
+
+- `describePeopleError` ignores inherited `Object.prototype` keys (an error code of `"constructor"` or `"toString"` resolved to that member instead of the message or fallback).
+- Internal `@jini-ai/core` and `@jini-ai/ui-kit` dependencies are caret ranges (`workspace:^`) instead of exact pins.
+
 ## 0.2.0 — 2026-10-02
 
 ### BREAKING
@@ -9,6 +25,29 @@
 
 ## Unreleased
 
+### The built-in admin role holds role.manage
+
+- `seedIdentity` grants `role.manage` to the built-in admin policy (owner decision, 2026-10-05), so a
+  fresh workspace's admin runs Roles & Permissions. `user.manage` stays owner-only. The issuer clamp
+  (`GRANT_EXCEEDS_ISSUER`) is unchanged. Already-seeded workspaces are not revisited by the seed; a
+  host reconciles them (e.g. a built-in-role grant applied at boot).
+
+### Site members are barred from operator permissions
+
+- Add `"member"` to `PrincipalKind` for a host's public-site sign-ups. `authorize()` now denies a
+  `member` principal every permission with reason `principal_kind_denied`, ahead of any grant
+  (including the owner wildcard). The rule is one exported function,
+  `principalKindMayExercisePermission({ kind, permission })`, so a later decision can relax it in one
+  place. Owner counting for the last-owner guard skips barred kinds. Existing kinds are unaffected.
+
+### BREAKING: permission migrations are an explicit registry
+
+- Remove the module-singleton `registerPermissionMigration`/`listPermissionMigrations`. Create a
+  registry with `createPermissionMigrationRegistry({}, { migrations })` at the composition root
+  (seeded with the built-in pairs; `register` keeps the overwrite-by-`from` semantics) and pass
+  `migrations: registry.list({})` to `migrateDeprecatedPermissionGrants`, which now requires it.
+  Which pairs exist no longer depends on module import order.
+
 ### Compilation fixes
 
 - Import the consolidated tab-strip barrel (requires the UI peer to export that

package/dist/admin/people.rules.js

@@ -39,7 +39,8 @@ export function describePeopleError({ error, fallback }, _optional = {}) {
         SELF_DELETE: 'You cannot delete your own account.', USER_IN_TRASH: 'This user is in the Trash; restore them first.',
         USERNAME_IN_TRASH: 'A user with this username is in the Trash; restore or delete them permanently first.',
     };
-    if (error && typeof error === 'object' && 'code' in error && typeof error.code === 'string' && copy[error.code])
+    // Own keys only: a server code such as "constructor" must not resolve to an Object.prototype member.
+    if (error && typeof error === 'object' && 'code' in error && typeof error.code === 'string' && Object.hasOwn(copy, error.code))
         return copy[error.code];
     return error instanceof Error && error.message ? error.message : fallback;
 }

package/dist/core/index.d.ts

@@ -3,4 +3,5 @@ export * from "./types.js";
 export * from "./ports.js";
 export * from "./runtime-ports.js";
 export * from "./permissions.js";
+export * from "./principal-kind-policy.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/core/index.js

@@ -6,4 +6,5 @@ export * from "./types.js";
 export * from "./ports.js";
 export * from "./runtime-ports.js";
 export * from "./permissions.js";
+export * from "./principal-kind-policy.js";
 //# sourceMappingURL=index.js.map

package/dist/core/principal-kind-policy.d.ts

@@ -0,0 +1,30 @@
+import type { PrincipalKind } from "./types.js";
+/**
+ * @file Which principal kinds may exercise operator permissions at all.
+ *
+ * Purpose:
+ * The one place that decides whether a principal's KIND lets it use the operator RBAC axis
+ * (`authorize()`'s permissions). Today the answer is: every kind except `member`. A `member` is a
+ * public-site sign-up — a host's front-end account, governed by that host's own entitlement axis
+ * (tiers, gated content), never by operator RBAC. OWNER DECISION 2026-10-04 (Tovu F3144): site
+ * members must not be able to use admin features, at least for now.
+ *
+ * Why a function and not a check at each call site:
+ * `authorize()` calls this before it reads any grant, so a member principal is denied every
+ * permission even if a grant row reaches it (a hand-edited database, a future grant path that forgets
+ * the `kind='user'` target check in `grant-service.ts`). Owner-counting guards call it too, so a
+ * member can never count as the workspace's remaining owner. Allowing members some admin capability
+ * later is a change to this one function — `permission` is passed so such a decision can open a
+ * specific capability rather than all of them.
+ */
+/**
+ * Whether a principal of `kind` may exercise `permission` through operator RBAC at all. Returning
+ * `true` only means the kind is not barred; the principal still needs a matching grant.
+ *
+ * @complexity O(1).
+ */
+export declare function principalKindMayExercisePermission(required: {
+    kind: PrincipalKind;
+    permission: string;
+}, _optional?: Record<string, never>): boolean;
+//# sourceMappingURL=principal-kind-policy.d.ts.map

package/dist/core/principal-kind-policy.js

@@ -0,0 +1,28 @@
+/**
+ * @file Which principal kinds may exercise operator permissions at all.
+ *
+ * Purpose:
+ * The one place that decides whether a principal's KIND lets it use the operator RBAC axis
+ * (`authorize()`'s permissions). Today the answer is: every kind except `member`. A `member` is a
+ * public-site sign-up — a host's front-end account, governed by that host's own entitlement axis
+ * (tiers, gated content), never by operator RBAC. OWNER DECISION 2026-10-04 (Tovu F3144): site
+ * members must not be able to use admin features, at least for now.
+ *
+ * Why a function and not a check at each call site:
+ * `authorize()` calls this before it reads any grant, so a member principal is denied every
+ * permission even if a grant row reaches it (a hand-edited database, a future grant path that forgets
+ * the `kind='user'` target check in `grant-service.ts`). Owner-counting guards call it too, so a
+ * member can never count as the workspace's remaining owner. Allowing members some admin capability
+ * later is a change to this one function — `permission` is passed so such a decision can open a
+ * specific capability rather than all of them.
+ */
+/**
+ * Whether a principal of `kind` may exercise `permission` through operator RBAC at all. Returning
+ * `true` only means the kind is not barred; the principal still needs a matching grant.
+ *
+ * @complexity O(1).
+ */
+export function principalKindMayExercisePermission(required, _optional = {}) {
+    return required.kind !== "member";
+}
+//# sourceMappingURL=principal-kind-policy.js.map

package/dist/core/types.d.ts

@@ -18,8 +18,13 @@ import type { ISODateTime, UUID } from "@jini-ai/core/primitives";
  * the full target schema so those transitions are additive later,
  * not a repaint.
  */
-/** Every actor is one of these. Only `user`/`system` are populated this pass. */
-export type PrincipalKind = "user" | "agent" | "api_key" | "system";
+/**
+ * Every actor is one of these. `member` is a host's public-site sign-up (a front-end account, not an
+ * operator): it may hold a principal row for identity and audit, but `principalKindMayExercisePermission`
+ * (`principal-kind-policy.ts`) bars it from every operator permission, so `authorize()` denies it
+ * whatever grants reach it.
+ */
+export type PrincipalKind = "user" | "agent" | "api_key" | "system" | "member";
 /** Disable-only lifecycle — there is no hard-delete state. See docs/decisions/DR-001-identity-and-session-boundary.md. */
 export type PrincipalStatus = "active" | "disabled";
 /**

package/dist/server/admin-crud-service.js

@@ -3,6 +3,7 @@ import { inIdentityTransaction } from "./identity-transaction.js";
 import { assertCallerHasAnyPermission, assertGrantClamp, assertOwnerTargetMayBeModified, principalHoldsOwnerWildcard } from "./grant-service.js";
 import { validatePasswordPolicy } from "./password-policy.js";
 import { isKnownPermission } from "../core/permissions.js";
+import { principalKindMayExercisePermission } from "../core/principal-kind-policy.js";
 import { IdentityConflictError, IdentityNotFoundError, IdentityValidationError, OwnerRequiredError, PermissionUnknownError, } from "../core/types.js";
 /**
  * @file An amendment that completes the users/roles/policies admin CRUD surface
@@ -554,7 +555,9 @@ export async function removePolicyPermission(required) {
 async function countActiveOwnerWildcardPrincipals(required) {
     const { deps, workspaceId } = required;
     const principals = await deps.repos.principals.list({ workspaceId });
-    const activePrincipals = principals.filter((principal) => principal.status === "active");
+    // A kind barred from operator permissions (a site `member`) can never act as an owner, so it is
+    // not counted even if a `*` row reaches it — and members never cost a grant read here.
+    const activePrincipals = principals.filter((principal) => principal.status === "active" && principalKindMayExercisePermission({ kind: principal.kind, permission: "*" }));
     const flags = await Promise.all(activePrincipals.map((principal) => principalHoldsOwnerWildcard({ deps, workspaceId, principalId: principal.id })));
     return flags.filter(Boolean).length;
 }

package/dist/server/authorize.d.ts

@@ -19,8 +19,8 @@ import type { PolicyPermissionRecord } from "../core/types.js";
  *
  * Architectural role:
  * Implements the matcher precedence in behavior.spec §1.1 exactly:
- * disabled-principal short-circuit > owner wildcard > exact matching row >
- * fail-closed default. Fail-closed extensibility: a non-null
+ * disabled-principal short-circuit > principal-kind bar > owner wildcard >
+ * exact matching row > fail-closed default. Fail-closed extensibility: a non-null
  * `constraintJson` is never treated as unconstrained, and a `resourceType`
  * mismatch/absence is never treated as a global grant.
  * See docs/decisions/DR-001-identity-and-session-boundary.md.
@@ -34,7 +34,7 @@ export interface AuthorizeContext {
 /** `authorize`'s result — always fail-closed on `allowed: false`. See docs/decisions/DR-001-identity-and-session-boundary.md. */
 export interface AuthorizeResult {
     allowed: boolean;
-    /** Machine-readable reason: `principal_disabled | no_grant | resource_scope_mismatch | unconstrained_deny | owner_wildcard | matched`. */
+    /** Machine-readable reason: `principal_disabled | principal_kind_denied | no_grant | resource_scope_mismatch | unconstrained_deny | owner_wildcard | matched`. */
     reason: string;
 }
 /** Repos `authorize()`/`resolveEffectivePermissions()` read. Not a port bag with alternate adapters — see file header. */
@@ -68,10 +68,13 @@ export declare function resolveEffectivePermissions(required: {
  *
  * Precedence (behavior.spec §1.1, highest to lowest):
  * 1. Disabled principal -> `false`, `principal_disabled` (overrides all grants).
- * 2. An unconstrained owner `"*"` row -> `true`, `owner_wildcard`.
- * 3. An exact matching row (permission + workspace + resource-scope + no
+ * 2. A principal whose kind may not exercise `permission` (today: `member`, see
+ * `principal-kind-policy.ts`) -> `false`, `principal_kind_denied` (overrides all grants,
+ * including the owner wildcard).
+ * 3. An unconstrained owner `"*"` row -> `true`, `owner_wildcard`.
+ * 4. An exact matching row (permission + workspace + resource-scope + no
  * constraint) -> `true`, `matched`.
- * 4. Fail-closed default -> `false`, with the most specific diagnostic reason
+ * 5. Fail-closed default -> `false`, with the most specific diagnostic reason
  * available among same-permission candidates (`unconstrained_deny` over
  * `resource_scope_mismatch` over `no_grant` — an inferred, undocumented-but-
  * reasonable tie-break; the spec only pins each reason in isolation, see

package/dist/server/authorize.js

@@ -1,3 +1,4 @@
+import { principalKindMayExercisePermission } from "../core/principal-kind-policy.js";
 /**
  * Resolve a principal's effective permission rows: the union of (a) its
  * roles' policies' permissions and (b) policies attached directly via
@@ -46,10 +47,13 @@ function matchesRow(row, permission, context) {
  *
  * Precedence (behavior.spec §1.1, highest to lowest):
  * 1. Disabled principal -> `false`, `principal_disabled` (overrides all grants).
- * 2. An unconstrained owner `"*"` row -> `true`, `owner_wildcard`.
- * 3. An exact matching row (permission + workspace + resource-scope + no
+ * 2. A principal whose kind may not exercise `permission` (today: `member`, see
+ * `principal-kind-policy.ts`) -> `false`, `principal_kind_denied` (overrides all grants,
+ * including the owner wildcard).
+ * 3. An unconstrained owner `"*"` row -> `true`, `owner_wildcard`.
+ * 4. An exact matching row (permission + workspace + resource-scope + no
  * constraint) -> `true`, `matched`.
- * 4. Fail-closed default -> `false`, with the most specific diagnostic reason
+ * 5. Fail-closed default -> `false`, with the most specific diagnostic reason
  * available among same-permission candidates (`unconstrained_deny` over
  * `resource_scope_mismatch` over `no_grant` — an inferred, undocumented-but-
  * reasonable tie-break; the spec only pins each reason in isolation, see
@@ -68,6 +72,10 @@ export async function authorize(required, optional = {}) {
     if (!principal || principal.status === "disabled") {
         return { allowed: false, reason: "principal_disabled" };
     }
+    // Ahead of every grant read: a barred kind is denied even when a `*` row reaches it.
+    if (!principalKindMayExercisePermission({ kind: principal.kind, permission })) {
+        return { allowed: false, reason: "principal_kind_denied" };
+    }
     const effectiveRows = await resolveEffectivePermissions({
         deps,
         principalId,

package/dist/server/permission-migrations.d.ts

@@ -16,11 +16,17 @@ import type { IdentityTransactionPort, PolicyPermissionRepoPort, PolicyRepoPort
  * hand-rolling a fourth divergent copy of the same fix.
  *
  * How it relates to the project:
- * - `registerPermissionMigration`/`listPermissionMigrations` are a small,
- * in-process registry — pure metadata, no I/O, mirrors
- * `permissions.ts`'s `PermissionCatalog.register` overwrite semantics.
+ * - `createPermissionMigrationRegistry` builds a small, in-process registry
+ * object — pure metadata, no I/O, mirrors `permissions.ts`'s
+ * `PermissionCatalog.register` overwrite semantics. A host creates ONE at its
+ * composition root and registers its own pairs on it explicitly; there is no
+ * module-scope registry, so which migrations exist never depends on which
+ * modules a process happened to import (a module-singleton filled by import
+ * side effects once ran a standalone script's boot reconciliation against an
+ * empty registry because that script never imported the registering module).
  * - `migrateDeprecatedPermissionGrants` is the actual grant fan-out: for
- * every registered pair, every policy holding `from` gets every string in
+ * every pair the caller passes in `deps.migrations` (normally its registry's
+ * `list({})`), every policy holding `from` gets every string in
  * `to` it doesn't already hold. It is deliberately, structurally
  * additive-only — there is no delete/update call against
  * `policy_permissions` anywhere in this file.
@@ -42,29 +48,43 @@ export type { PermissionMigration } from '../core/builtin-permissions.js';
 export interface MigrateDeprecatedPermissionGrantsDeps {
     /** Bound to the same storage as both repository ports; required before any migration work. */
     transactions: IdentityTransactionPort;
+    /** Every `{from, to}` pair to fan out — normally `createPermissionMigrationRegistry(...).list({})`. */
+    migrations: readonly PermissionMigration[];
     policyPermissions: PolicyPermissionRepoPort;
     policies: PolicyRepoPort;
     idGen: IdGenerator;
     workspaceId: UUID;
 }
 export interface MigrateDeprecatedPermissionGrantsResult {
-    /** Total new `policy_permissions` rows written across every policy and every registered pair. */
+    /** Total new `policy_permissions` rows written across every policy and every passed pair. */
     migratedGrantCount: number;
 }
+/** A host-owned set of `{from, to, reason}` pairs; see {@link createPermissionMigrationRegistry}. */
+export interface PermissionMigrationRegistry {
+    /**
+     * Register a `{from, to, reason}` rename/split pair for later fan-out.
+     * Idempotent: re-registering the same `from` overwrites the prior entry
+     * rather than duplicating it (matches `PermissionCatalog.register`'s
+     * existing overwrite semantics, `identity/permissions.ts`).
+     *
+     * @complexity O(1).
+     */
+    register(migration: PermissionMigration): void;
+    /** Enumerate every registered migration pair, built-ins first, in first-registration order. */
+    list(_required: Record<string, never>): PermissionMigration[];
+}
 /**
- * Register a `{from, to, reason}` rename/split pair for later fan-out.
- * Idempotent: re-registering the same `from` overwrites the prior entry
- * rather than duplicating it (matches `PermissionCatalog.register`'s
- * existing overwrite semantics, `identity/permissions.ts`).
+ * Create a migration registry seeded with the library's built-in pairs, then `optional.migrations`.
+ * Keyed by `from`, so a host pair with a built-in's `from` overwrites it rather than duplicating.
  *
- * @complexity O(1).
+ * @complexity O(b + m) where b = built-in pairs and m = `optional.migrations`.
  * @overallScore 100
  */
-export declare function registerPermissionMigration(migration: PermissionMigration): void;
-/** Enumerate every registered migration pair. */
-export declare function listPermissionMigrations(_required: Record<string, never>): PermissionMigration[];
+export declare function createPermissionMigrationRegistry(_required?: Record<string, never>, optional?: {
+    migrations?: readonly PermissionMigration[];
+}): PermissionMigrationRegistry;
 /**
- * For every registered `{from, to}` pair, for every policy in the workspace
+ * For every `{from, to}` pair in `deps.migrations`, for every policy in the workspace
  * holding `from`, ensure every string in `to` is also granted — adding only
  * the rows that are missing. Never removes or mutates `from` (or any other
  * existing row) — additive-only by construction. The entire fan-out runs in
@@ -75,7 +95,7 @@ export declare function listPermissionMigrations(_required: Record<string, never
  * returns `migratedGrantCount: 0` (mirrors `migrateLegacyPresentationSettings`'s
  * boot-safety precedent).
  *
- * @complexity O(p * m) where p = policies in the workspace, m = registered
+ * @complexity O(p * m) where p = policies in the workspace, m = passed
  * migration pairs; both are small, bounded collections in this app's shape.
  * @overallScore 100
  * See docs/decisions/DR-003-additive-permission-migration.md.

package/dist/server/permission-migrations.js

@@ -1,25 +1,25 @@
 import { inIdentityTransaction } from "./identity-transaction.js";
 import { BUILTIN_PERMISSION_MIGRATIONS } from '../core/builtin-permissions.js';
-/** Module-singleton registry — keyed by `from` so re-registration overwrites (idempotent, matches `PermissionCatalog.register`). */
-const registry = new Map(BUILTIN_PERMISSION_MIGRATIONS.map((migration) => [migration.from, migration]));
 /**
- * Register a `{from, to, reason}` rename/split pair for later fan-out.
- * Idempotent: re-registering the same `from` overwrites the prior entry
- * rather than duplicating it (matches `PermissionCatalog.register`'s
- * existing overwrite semantics, `identity/permissions.ts`).
+ * Create a migration registry seeded with the library's built-in pairs, then `optional.migrations`.
+ * Keyed by `from`, so a host pair with a built-in's `from` overwrites it rather than duplicating.
  *
- * @complexity O(1).
+ * @complexity O(b + m) where b = built-in pairs and m = `optional.migrations`.
  * @overallScore 100
  */
-export function registerPermissionMigration(migration) {
-    registry.set(migration.from, migration);
-}
-/** Enumerate every registered migration pair. */
-export function listPermissionMigrations(_required) {
-    return [...registry.values()];
+export function createPermissionMigrationRegistry(_required = {}, optional = {}) {
+    const byFrom = new Map();
+    const register = (migration) => {
+        byFrom.set(migration.from, migration);
+    };
+    for (const migration of BUILTIN_PERMISSION_MIGRATIONS)
+        register(migration);
+    for (const migration of optional.migrations ?? [])
+        register(migration);
+    return { register, list: () => [...byFrom.values()] };
 }
 /**
- * For every registered `{from, to}` pair, for every policy in the workspace
+ * For every `{from, to}` pair in `deps.migrations`, for every policy in the workspace
  * holding `from`, ensure every string in `to` is also granted — adding only
  * the rows that are missing. Never removes or mutates `from` (or any other
  * existing row) — additive-only by construction. The entire fan-out runs in
@@ -30,13 +30,13 @@ export function listPermissionMigrations(_required) {
  * returns `migratedGrantCount: 0` (mirrors `migrateLegacyPresentationSettings`'s
  * boot-safety precedent).
  *
- * @complexity O(p * m) where p = policies in the workspace, m = registered
+ * @complexity O(p * m) where p = policies in the workspace, m = passed
  * migration pairs; both are small, bounded collections in this app's shape.
  * @overallScore 100
  * See docs/decisions/DR-003-additive-permission-migration.md.
  */
 export async function migrateDeprecatedPermissionGrants(deps) {
-    const migrations = listPermissionMigrations({});
+    const { migrations } = deps;
     if (migrations.length === 0)
         return { migratedGrantCount: 0 };
     return inIdentityTransaction({

package/dist/server/seed.js

@@ -126,7 +126,12 @@ const BUILTIN_ADMIN_PERMISSIONS = [
     // directly at seed — a distinct grant from settings.write, not owner-only (unlike user.manage/
     // role.manage below).
     "workspace.manage",
-    // Owner-only per : "user.manage", "role.manage" are deliberately absent. See docs/decisions/DR-001-identity-and-session-boundary.md.
+    // Roles & Permissions: admin holds role.manage (owner decision 2026-10-05, reversing DR-001's
+    // owner-only placement for this one string). The grant service's issuer clamp still refuses any
+    // grant beyond what the caller holds (GRANT_EXCEEDS_ISSUER), so an admin cannot hand out owner.
+    // Hosts reconcile already-seeded workspaces themselves; seedIdentity never revisits them.
+    "role.manage",
+    // Owner-only per DR-001: "user.manage" is deliberately absent. See docs/decisions/DR-001-identity-and-session-boundary.md.
 ];
 const BUILTIN_EDITOR_PERMISSIONS = [
     "content.read",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/user-management",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Runtime-separated user management contracts and Node authentication, authorization, and administration services.",
   "license": "Apache-2.0",
   "repository": {
@@ -127,14 +127,14 @@
     "@testing-library/user-event": "^14.5.0",
     "@testing-library/jest-dom": "^6.6.3",
     "jsdom": "^25.0.1",
-    "@jini-ai/agentic": "0.4.0",
-    "@jini-ai/admin": "0.4.0",
-    "@jini-ai/cms": "0.4.0",
-    "@jini-ai/ui": "0.4.0"
+    "@jini-ai/ui": "0.4.3",
+    "@jini-ai/admin": "0.4.2",
+    "@jini-ai/agentic": "0.4.1",
+    "@jini-ai/cms": "0.5.0"
   },
   "dependencies": {
-    "@jini-ai/core": "0.4.0",
-    "@jini-ai/ui-kit": "0.1.0"
+    "@jini-ai/ui-kit": "^0.1.1",
+    "@jini-ai/core": "^0.4.1"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",

package/dist/react/roles/Roles.d.ts

@@ -1,100 +0,0 @@
-import type { Translate } from "@jini-ai/ui/panel-kit";
-import { type FormEvent } from "react";
-import type { AdminPolicy, AdminPolicyPermission, AdminRole } from "../models.js";
-import { useRoles, type RolesDependencies, type PendingPermissionRemove } from "./hooks/use-roles.hooks.js";
-import { type RolesTabId } from "./Roles.hooks.js";
-export interface RolesProps extends RolesDependencies {
-    onTabChange: (required: {
-        tabId: RolesTabId;
-    }) => void;
-    usersHref: string;
-    tabId?: string | null | undefined;
-    useRolesHook?: typeof useRoles | undefined;
-}
-export interface RoleCreateFormController {
-    name: string;
-    setName: (name: string) => void;
-    saving: boolean;
-    error: string | null;
-    submit: (e: FormEvent) => Promise<void>;
-}
-export interface RoleRowController {
-    editingId: string | null;
-    setEditingId: (roleId: string | null) => void;
-    draftName: string;
-    setDraftName: (name: string) => void;
-    startRename: (role: AdminRole) => void;
-    saveRename: (required: {
-        roleId: string;
-    }) => Promise<void>;
-    savingId: string | null;
-    requestDelete: (role: AdminRole | null) => void;
-}
-export interface RolesSectionProps {
-    roles: AdminRole[];
-    create: RoleCreateFormController;
-    row: RoleRowController;
-    t: (key: string) => string;
-    translate: Translate;
-}
-export declare function RolesSection({ roles, create, row, t, translate }: RolesSectionProps): import("react").JSX.Element;
-export interface PolicyRowController {
-    editingId: string | null;
-    setEditingId: (policyId: string | null) => void;
-    draftName: string;
-    setDraftName: (name: string) => void;
-    draftDescription: string;
-    setDraftDescription: (description: string) => void;
-    startRename: (policy: AdminPolicy) => void;
-    saveRename: (required: {
-        policyId: string;
-    }) => Promise<void>;
-    savingId: string | null;
-    requestDelete: (policy: AdminPolicy | null) => void;
-}
-export interface PolicyPermissionController {
-    openForPolicyId: string | null;
-    permission: string;
-    setPermission: (permission: string) => void;
-    resourceType: string;
-    setResourceType: (resourceType: string) => void;
-    toggleForm: (required: {
-        policyId: string;
-    }) => void;
-    write: (required: {
-        policyId: string;
-    }) => Promise<void>;
-    rows: AdminPolicyPermission[];
-    loading: boolean;
-    removingId: string | null;
-    requestRemove: (target: PendingPermissionRemove) => void;
-}
-export interface PolicyRowProps {
-    policy: AdminPolicy;
-    row: PolicyRowController;
-    permission: PolicyPermissionController;
-    agentBase: string;
-    t: (key: string) => string;
-    translate: Translate;
-}
-export declare function PolicyRow({ policy, row, permission, agentBase, t, translate }: PolicyRowProps): import("react").JSX.Element;
-export interface PolicyCreateFormController {
-    name: string;
-    setName: (name: string) => void;
-    description: string;
-    setDescription: (description: string) => void;
-    saving: boolean;
-    error: string | null;
-    submit: (e: FormEvent) => Promise<void>;
-}
-export interface PoliciesSectionProps {
-    policies: AdminPolicy[];
-    create: PolicyCreateFormController;
-    row: PolicyRowController;
-    permission: PolicyPermissionController;
-    t: (key: string) => string;
-    translate: Translate;
-}
-export declare function PoliciesSection({ policies, create, row, permission, t, translate }: PoliciesSectionProps): import("react").JSX.Element;
-export declare function Roles({ tabId, useRolesHook, port, translate: injectedTranslate, queryScope, onTabChange, usersHref }: RolesProps): import("react").JSX.Element;
-//# sourceMappingURL=Roles.d.ts.map

package/dist/react/roles/Roles.hooks.d.ts

@@ -1,17 +0,0 @@
-import type { TabBarTab } from "@jini-ai/ui/tab-strip";
-import type { Translate } from "@jini-ai/ui/panel-kit";
-export declare function RolesIcon({ size }: {
-    size?: number;
-}): import("react").JSX.Element;
-export declare function PoliciesIcon({ size }: {
-    size?: number;
-}): import("react").JSX.Element;
-export declare const ROLES_TAB_IDS: readonly ["roles", "policies"];
-export type RolesTabId = (typeof ROLES_TAB_IDS)[number];
-export declare function resolveRolesTabId({ tabId }: {
-    tabId: string | null | undefined;
-}): RolesTabId;
-export declare function resolveRolesTabs({ translate: t }: {
-    translate: Translate;
-}): TabBarTab[];
-//# sourceMappingURL=Roles.hooks.d.ts.map

package/dist/react/roles/Roles.hooks.js

@@ -1,40 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { resolveActiveTabId } from "@jini-ai/ui/panel-kit";
-const LINE_ICON = {
-    viewBox: "0 0 24 24",
-    fill: "none",
-    stroke: "currentColor",
-    strokeWidth: 1.5,
-    strokeLinecap: "round",
-    strokeLinejoin: "round",
-    "aria-hidden": true,
-};
-export function RolesIcon({ size = 16 }) {
-    return (_jsxs("svg", { ...LINE_ICON, width: size, height: size, children: [_jsx("circle", { cx: "12", cy: "8", r: "3.5" }), _jsx("path", { d: "M5 20c0-3.3 3.1-6 7-6s7 2.7 7 6" })] }));
-}
-export function PoliciesIcon({ size = 16 }) {
-    return (_jsxs("svg", { ...LINE_ICON, width: size, height: size, children: [_jsx("path", { d: "M12 3l7 2.5v6c0 4-3 7.4-7 8.5-4-1.1-7-4.5-7-8.5v-6z" }), _jsx("path", { d: "M9.5 11.5h5M9.5 14.5h3" })] }));
-}
-export const ROLES_TAB_IDS = ["roles", "policies"];
-export function resolveRolesTabId({ tabId }) {
-    return resolveActiveTabId({ tabId, validIds: ROLES_TAB_IDS, defaultId: "roles" });
-}
-export function resolveRolesTabs({ translate: t }) {
-    return [
-        {
-            id: "roles",
-            label: t("Roles"),
-            icon: _jsx(RolesIcon, {}),
-            handle: "roles-tab-roles",
-            handleLabel: t("Switch to the Roles tab — list, create, rename and delete the roles a person can be assigned"),
-        },
-        {
-            id: "policies",
-            label: t("Policies"),
-            icon: _jsx(PoliciesIcon, {}),
-            handle: "roles-tab-policies",
-            handleLabel: t("Switch to the Policies tab — list and create policies, and add or remove the individual permissions on each one"),
-        },
-    ];
-}
-//# sourceMappingURL=Roles.hooks.js.map

package/dist/react/roles/Roles.js

@@ -1,150 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { rolesDescriptionParts, roleDeleteBodyParts, policyDeleteBodyParts, permissionRemoveBodyParts } from "./text.js";
-import { Fragment } from "react";
-import { DataTable, RowMenu, ConfirmDialog } from "@jini-ai/admin/react";
-import { agentHandle } from "@jini-ai/agentic";
-import { buildAgentListHandles } from "@jini-ai/ui/panel-kit";
-import { TabBar } from "@jini-ai/ui/tab-strip";
-import { roleMenuItems, policyMenuItems } from "./rules.js";
-import { useRoles } from "./hooks/use-roles.hooks.js";
-import { resolveRolesTabId, resolveRolesTabs } from "./Roles.hooks.js";
-export function RolesSection({ roles, create, row, t, translate }) {
-    const roleMenuHandles = buildAgentListHandles({ prefix: "roles-row", ids: roles.map((role) => role.id) });
-    return (_jsxs(_Fragment, { children: [_jsx("h2", { className: "visually-hidden", children: t("Roles") }), _jsxs("form", { onSubmit: create.submit, className: "notice integrations-form form-measure", children: [create.error ? _jsx("span", { className: "save-error", children: create.error }) : null, _jsxs("label", { children: [t("Role name"), _jsx("input", { value: create.name, onChange: (e) => create.setName(e.target.value), required: true, ...agentHandle({ handle: "roles-create-name" }, { role: "field", label: t("New role's name") }) })] }), _jsx("button", { type: "submit", disabled: create.saving || !create.name, ...agentHandle({ handle: "roles-create-submit" }, { role: "button", label: t("Create this new role") }), children: create.saving ? t("Creating…") : t("Create role") })] }), _jsx(DataTable, { rows: roles, rowKey: (role) => role.id, empty: _jsx("div", { className: "card", children: _jsx("div", { className: "empty-state", children: _jsx("p", { children: t("No roles yet.") }) }) }), columns: [
-                    {
-                        key: "name",
-                        header: t("Name"),
-                        cell: (role, index) => row.editingId === role.id ? (_jsx("input", { value: row.draftName, onChange: (e) => row.setDraftName(e.target.value), ...agentHandle({ handle: `${roleMenuHandles[index]}-rename-name` }, { role: "field", label: t("This role's new name") }) })) : (role.name),
-                    },
-                    { key: "type", header: t("Type"), cell: (role) => (role.isBuiltin ? t("Built-in") : t("Custom")) },
-                    {
-                        key: "actions",
-                        header: t("More"),
-                        cell: (role, index) => role.isBuiltin ? (_jsx("span", { className: "muted-cell", children: "\u2014" })) : row.editingId === role.id ? (_jsxs("span", { className: "editor-actions", children: [_jsx("button", { type: "button", disabled: row.savingId === role.id, onClick: () => row.saveRename({ roleId: role.id }), ...agentHandle({ handle: `${roleMenuHandles[index]}-save` }, { role: "button", label: t(`Save this role's new name`) }), children: row.savingId === role.id ? t("Saving…") : t("Save") }), _jsx("button", { type: "button", onClick: () => row.setEditingId(null), ...agentHandle({ handle: `${roleMenuHandles[index]}-cancel` }, { role: "button", label: t("Cancel renaming this role") }), children: t("Cancel") })] })) : (_jsx(RowMenu, { triggerLabel: `${t("Actions for role")} "${role.name}"`, agentHandle: `${roleMenuHandles[index]}-menu`, items: roleMenuItems({ role, handlers: { onRename: row.startRename, onDelete: row.requestDelete }, translate }) })),
-                    },
-                ] })] }));
-}
-function PolicyRowActions({ policy, row, permission, agentBase, t, translate }) {
-    if (policy.isBuiltin || policy.isFrozen)
-        return _jsx("span", { className: "muted-cell", children: "\u2014" });
-    if (row.editingId === policy.id) {
-        return (_jsxs("span", { className: "editor-actions", children: [_jsx("button", { type: "button", disabled: row.savingId === policy.id, onClick: () => row.saveRename({ policyId: policy.id }), ...agentHandle({ handle: `${agentBase}-save` }, { role: "button", label: t("Save this policy's new name and description") }), children: row.savingId === policy.id ? t("Saving…") : t("Save") }), _jsx("button", { type: "button", onClick: () => row.setEditingId(null), ...agentHandle({ handle: `${agentBase}-cancel` }, { role: "button", label: t("Cancel renaming this policy") }), children: t("Cancel") })] }));
-    }
-    return (_jsx(RowMenu, { triggerLabel: `${t("Actions for policy")} "${policy.name}"`, agentHandle: `${agentBase}-menu`, items: policyMenuItems({
-            policy,
-            permissionPolicyId: permission.openForPolicyId,
-            handlers: {
-                onRename: row.startRename,
-                onTogglePermissionForm: permission.toggleForm,
-                onDelete: row.requestDelete,
-            },
-            translate,
-        }) }));
-}
-function PolicyPermissionList({ policyId, permission, t }) {
-    if (permission.loading)
-        return _jsx("p", { className: "muted-cell", children: t("Loading permissions…") });
-    if (permission.rows.length === 0)
-        return _jsx("p", { className: "muted-cell", children: t("No permissions yet.") });
-    const removeHandles = buildAgentListHandles({
-        prefix: `policy-permission-remove-${policyId}`,
-        ids: permission.rows.map((row) => row.id),
-    });
-    return (_jsx("ul", { className: "permission-list", children: permission.rows.map((row, index) => (_jsxs("li", { children: [_jsx("code", { children: row.permission }), row.resourceType ? _jsxs("span", { className: "muted-cell", children: [" (", row.resourceType, ")"] }) : null, _jsx("button", { type: "button", disabled: permission.removingId === row.id, "aria-label": `${t("Remove permission")} ${row.permission}`, onClick: () => permission.requestRemove({ policyId, row }), ...agentHandle({ handle: removeHandles[index] }, { role: "button", label: t(`Remove the "${row.permission}" permission from this policy`) }), children: permission.removingId === row.id ? t("Removing…") : t("Remove") })] }, row.id))) }));
-}
-function PolicyPermissionForm({ policyId, savingId, permission, t }) {
-    const formHandleBase = buildAgentListHandles({ prefix: "policy-permission-form", ids: [policyId] })[0];
-    return (_jsx("tr", { children: _jsx("td", { colSpan: 4, children: _jsxs("div", { className: "notice integrations-form", children: [_jsx("p", { children: t("Current permissions") }), _jsx(PolicyPermissionList, { policyId: policyId, permission: permission, t: t }), _jsxs("label", { children: [t("Permission"), _jsxs("span", { className: "editor-actions permission-form-fields", children: [_jsx("input", { value: permission.permission, onChange: (e) => permission.setPermission(e.target.value), placeholder: t("e.g. content.write"), ...agentHandle({ handle: `${formHandleBase}-permission` }, { role: "field", label: t("Permission string to grant, e.g. content.write") }) }), _jsx("input", { value: permission.resourceType, onChange: (e) => permission.setResourceType(e.target.value), placeholder: t("resource type (optional)"), ...agentHandle({ handle: `${formHandleBase}-resource-type` }, { role: "field", label: t("Optional resource type this permission is scoped to") }) }), _jsx("button", { type: "button", disabled: !permission.permission || savingId === policyId, onClick: () => permission.write({ policyId }), ...agentHandle({ handle: `${formHandleBase}-add` }, { role: "button", label: t("Add this permission to the policy") }), children: savingId === policyId ? t("Saving…") : t("Add") })] })] })] }) }) }));
-}
-export function PolicyRow({ policy, row, permission, agentBase, t, translate }) {
-    const renaming = row.editingId === policy.id;
-    return (_jsxs(_Fragment, { children: [_jsxs("tr", { children: [_jsx("td", { children: renaming ? (_jsx("input", { value: row.draftName, onChange: (e) => row.setDraftName(e.target.value), ...agentHandle({ handle: `${agentBase}-rename-name` }, { role: "field", label: t("This policy's new name") }) })) : (policy.name) }), _jsx("td", { children: renaming ? (_jsx("input", { value: row.draftDescription, onChange: (e) => row.setDraftDescription(e.target.value), ...agentHandle({ handle: `${agentBase}-rename-description` }, { role: "field", label: t("This policy's new description") }) })) : (policy.description ?? _jsx("span", { className: "muted-cell", children: "\u2014" })) }), _jsxs("td", { children: [policy.isBuiltin ? t("Built-in") : t("Custom"), policy.isFrozen ? ` ${t("(frozen)")}` : ""] }), _jsx("td", { children: _jsx(PolicyRowActions, { policy: policy, row: row, permission: permission, agentBase: agentBase, t: t, translate: translate }) })] }), permission.openForPolicyId === policy.id ? (_jsx(PolicyPermissionForm, { policyId: policy.id, savingId: row.savingId, permission: permission, t: t })) : null] }));
-}
-export function PoliciesSection({ policies, create, row, permission, t, translate }) {
-    const policyMenuBases = buildAgentListHandles({ prefix: "policies-row", ids: policies.map((policy) => policy.id) });
-    return (_jsxs(_Fragment, { children: [_jsx("h2", { className: "visually-hidden", children: t("Policies") }), _jsxs("form", { onSubmit: create.submit, className: "notice integrations-form form-measure", children: [create.error ? _jsx("span", { className: "save-error", children: create.error }) : null, _jsxs("label", { children: [t("Policy name"), _jsx("input", { value: create.name, onChange: (e) => create.setName(e.target.value), required: true, ...agentHandle({ handle: "policies-create-name" }, { role: "field", label: t("New policy's name") }) })] }), _jsxs("label", { children: [t("Description (optional)"), _jsx("input", { value: create.description, onChange: (e) => create.setDescription(e.target.value), ...agentHandle({ handle: "policies-create-description" }, { role: "field", label: t("New policy's optional description") }) })] }), _jsx("button", { type: "submit", disabled: create.saving || !create.name, ...agentHandle({ handle: "policies-create-submit" }, { role: "button", label: t("Create this new policy") }), children: create.saving ? t("Creating…") : t("Create policy") })] }), policies.length === 0 ? (_jsx("div", { className: "card", children: _jsx("div", { className: "empty-state", children: _jsx("p", { children: t("No policies yet.") }) }) })) : (_jsx("div", { className: "table-scroll", children: _jsxs("table", { className: "list-table", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { children: t("Name") }), _jsx("th", { children: t("Description") }), _jsx("th", { children: t("Type") }), _jsx("th", { children: t("More") })] }) }), _jsx("tbody", { children: policies.map((policy, index) => (_jsx(Fragment, { children: _jsx(PolicyRow, { policy: policy, row: row, permission: permission, agentBase: policyMenuBases[index], t: t, translate: translate }) }, policy.id))) })] }) }))] }));
-}
-function RoleDeleteDialog({ pendingRoleDelete, setPendingRoleDelete, rowSavingId, onDeleteRole, t, translate }) {
-    const { prefix, suffix } = roleDeleteBodyParts({ translate });
-    return (_jsx(ConfirmDialog, { cancelLabel: t("Cancel"), open: pendingRoleDelete !== null, agentHandle: "roles-delete-role", title: t("Delete role?"), body: pendingRoleDelete ? (_jsxs("p", { children: [prefix, pendingRoleDelete.name, suffix] })) : null, confirmLabel: t("Delete"), destructive: true, pending: pendingRoleDelete !== null && rowSavingId === pendingRoleDelete.id, onConfirm: onDeleteRole, onCancel: () => setPendingRoleDelete(null) }));
-}
-function PolicyDeleteDialog({ pendingPolicyDelete, setPendingPolicyDelete, rowSavingId, onDeletePolicy, t, translate }) {
-    const { prefix, suffix } = policyDeleteBodyParts({ translate });
-    return (_jsx(ConfirmDialog, { cancelLabel: t("Cancel"), open: pendingPolicyDelete !== null, agentHandle: "roles-delete-policy", title: t("Delete policy?"), body: pendingPolicyDelete ? (_jsxs("p", { children: [prefix, pendingPolicyDelete.name, suffix] })) : null, confirmLabel: t("Delete"), destructive: true, pending: pendingPolicyDelete !== null && rowSavingId === pendingPolicyDelete.id, onConfirm: onDeletePolicy, onCancel: () => setPendingPolicyDelete(null) }));
-}
-function PermissionRemoveDialog({ pendingPermissionRemove, setPendingPermissionRemove, removingPermissionId, onConfirmRemovePermission, t, translate, }) {
-    const { prefix, suffix } = permissionRemoveBodyParts({ translate });
-    const pending = pendingPermissionRemove;
-    return (_jsx(ConfirmDialog, { cancelLabel: t("Cancel"), open: pending !== null, agentHandle: "roles-remove-permission", title: t("Remove permission?"), body: pending ? (_jsxs("p", { children: [prefix, _jsx("code", { children: pending.row.permission }), pending.row.resourceType ? ` (${pending.row.resourceType})` : "", suffix] })) : null, confirmLabel: t("Remove"), tone: "warning", pending: pending !== null && removingPermissionId === pending.row.id, onConfirm: onConfirmRemovePermission, onCancel: () => setPendingPermissionRemove(null) }));
-}
-function RolesTab({ controller }) {
-    const c = controller;
-    return (_jsx(RolesSection, { roles: c.roles ?? [], create: {
-            name: c.roleName,
-            setName: c.setRoleName,
-            saving: c.roleSaving,
-            error: c.roleError,
-            submit: c.onCreateRole,
-        }, row: {
-            editingId: c.editingRoleId,
-            setEditingId: c.setEditingRoleId,
-            draftName: c.editingRoleName,
-            setDraftName: c.setEditingRoleName,
-            startRename: c.startEditRole,
-            saveRename: c.onSaveRole,
-            savingId: c.rowSavingId,
-            requestDelete: c.setPendingRoleDelete,
-        }, t: c.t, translate: c.translate }));
-}
-function PoliciesTab({ controller }) {
-    const c = controller;
-    return (_jsx(PoliciesSection, { policies: c.policies ?? [], create: {
-            name: c.policyName,
-            setName: c.setPolicyName,
-            description: c.policyDescription,
-            setDescription: c.setPolicyDescription,
-            saving: c.policySaving,
-            error: c.policyError,
-            submit: c.onCreatePolicy,
-        }, row: {
-            editingId: c.editingPolicyId,
-            setEditingId: c.setEditingPolicyId,
-            draftName: c.editingPolicyName,
-            setDraftName: c.setEditingPolicyName,
-            draftDescription: c.editingPolicyDescription,
-            setDraftDescription: c.setEditingPolicyDescription,
-            startRename: c.startEditPolicy,
-            saveRename: c.onSavePolicy,
-            savingId: c.rowSavingId,
-            requestDelete: c.setPendingPolicyDelete,
-        }, permission: {
-            openForPolicyId: c.permissionPolicyId,
-            permission: c.permissionInput,
-            setPermission: c.setPermissionInput,
-            resourceType: c.resourceTypeInput,
-            setResourceType: c.setResourceTypeInput,
-            toggleForm: c.togglePermissionForm,
-            write: c.onWritePermission,
-            rows: c.permissionRows,
-            loading: c.permissionsLoading,
-            removingId: c.removingPermissionId,
-            requestRemove: c.setPendingPermissionRemove,
-        }, t: c.t, translate: c.translate }));
-}
-function rolesTabPanel(activeTabId, controller) {
-    if (activeTabId === "policies")
-        return _jsx(PoliciesTab, { controller: controller });
-    return _jsx(RolesTab, { controller: controller });
-}
-export function Roles({ tabId, useRolesHook = useRoles, port, translate: injectedTranslate, queryScope, onTabChange, usersHref }) {
-    const controller = useRolesHook({ port, translate: injectedTranslate, queryScope });
-    const { roles, policies, error, rowError, rowSavingId, pendingRoleDelete, setPendingRoleDelete, onDeleteRole, pendingPolicyDelete, setPendingPolicyDelete, onDeletePolicy, pendingPermissionRemove, setPendingPermissionRemove, removingPermissionId, onConfirmRemovePermission, t, translate, } = controller;
-    const { prefix: descriptionPrefix, linkLabel: descriptionLinkLabel, suffix: descriptionSuffix } = rolesDescriptionParts({ translate });
-    if (error)
-        return _jsx("div", { className: "notice error", children: error });
-    if (!roles || !policies)
-        return _jsx("div", { className: "notice", children: t("Loading roles & permissions…") });
-    const activeTabId = resolveRolesTabId({ tabId });
-    return (_jsxs("div", { className: "page", children: [_jsx("div", { className: "page-header", children: _jsxs("div", { className: "page-header-text", children: [_jsx("p", { className: "page-kicker", children: t("People") }), _jsx("h1", { className: "page-title", children: t("Roles & Permissions") }), _jsxs("p", { className: "page-description", children: [descriptionPrefix, _jsx("a", { href: usersHref, children: descriptionLinkLabel }), descriptionSuffix] })] }) }), rowError ? _jsx("div", { className: "notice error", children: rowError }) : null, _jsx(TabBar, { ariaLabel: t("Roles & Permissions"), tabs: resolveRolesTabs({ translate: t }), activeId: activeTabId, onChange: (next) => onTabChange({ tabId: resolveRolesTabId({ tabId: next }) }), containerHandle: "roles-tab-bar" }), rolesTabPanel(activeTabId, controller), _jsx(RoleDeleteDialog, { pendingRoleDelete: pendingRoleDelete, setPendingRoleDelete: setPendingRoleDelete, rowSavingId: rowSavingId, t: t, translate: translate, onDeleteRole: onDeleteRole }), _jsx(PolicyDeleteDialog, { pendingPolicyDelete: pendingPolicyDelete, setPendingPolicyDelete: setPendingPolicyDelete, rowSavingId: rowSavingId, t: t, translate: translate, onDeletePolicy: onDeletePolicy }), _jsx(PermissionRemoveDialog, { pendingPermissionRemove: pendingPermissionRemove, setPendingPermissionRemove: setPendingPermissionRemove, removingPermissionId: removingPermissionId, onConfirmRemovePermission: onConfirmRemovePermission, t: t, translate: translate })] }));
-}
-//# sourceMappingURL=Roles.js.map

package/dist/react/roles/hooks/use-roles.hooks.d.ts

@@ -1,80 +0,0 @@
-import type { Translate } from "@jini-ai/ui/panel-kit";
-import { type AdminPolicy, type AdminPolicyPermission, type AdminRole } from "../../models.js";
-import type { RolesPort } from "../../ports.js";
-export interface PendingPermissionRemove {
-    policyId: string;
-    row: AdminPolicyPermission;
-}
-export interface RolesController {
-    roles: AdminRole[] | null;
-    policies: AdminPolicy[] | null;
-    error: string | null;
-    rowError: string | null;
-    roleName: string;
-    setRoleName: (name: string) => void;
-    roleSaving: boolean;
-    roleError: string | null;
-    onCreateRole: (e: React.FormEvent) => Promise<void>;
-    policyName: string;
-    setPolicyName: (name: string) => void;
-    policyDescription: string;
-    setPolicyDescription: (description: string) => void;
-    policySaving: boolean;
-    policyError: string | null;
-    onCreatePolicy: (e: React.FormEvent) => Promise<void>;
-    editingRoleId: string | null;
-    setEditingRoleId: (roleId: string | null) => void;
-    editingRoleName: string;
-    setEditingRoleName: (name: string) => void;
-    startEditRole: (role: AdminRole) => void;
-    onSaveRole: (required: {
-        roleId: string;
-    }) => Promise<void>;
-    editingPolicyId: string | null;
-    setEditingPolicyId: (policyId: string | null) => void;
-    editingPolicyName: string;
-    setEditingPolicyName: (name: string) => void;
-    editingPolicyDescription: string;
-    setEditingPolicyDescription: (description: string) => void;
-    startEditPolicy: (policy: AdminPolicy) => void;
-    onSavePolicy: (required: {
-        policyId: string;
-    }) => Promise<void>;
-    rowSavingId: string | null;
-    permissionPolicyId: string | null;
-    permissionInput: string;
-    setPermissionInput: (permission: string) => void;
-    resourceTypeInput: string;
-    setResourceTypeInput: (resourceType: string) => void;
-    togglePermissionForm: (required: {
-        policyId: string;
-    }) => void;
-    onWritePermission: (required: {
-        policyId: string;
-    }) => Promise<void>;
-    permissionRows: AdminPolicyPermission[];
-    permissionsLoading: boolean;
-    removingPermissionId: string | null;
-    onRemovePermission: (required: {
-        policyId: string;
-        policyPermissionId: string;
-    }) => Promise<void>;
-    pendingPermissionRemove: PendingPermissionRemove | null;
-    setPendingPermissionRemove: (target: PendingPermissionRemove | null) => void;
-    onConfirmRemovePermission: () => Promise<void>;
-    pendingRoleDelete: AdminRole | null;
-    setPendingRoleDelete: (role: AdminRole | null) => void;
-    onDeleteRole: () => Promise<void>;
-    pendingPolicyDelete: AdminPolicy | null;
-    setPendingPolicyDelete: (policy: AdminPolicy | null) => void;
-    onDeletePolicy: () => Promise<void>;
-    t: (key: string) => string;
-    translate: Translate;
-}
-export interface RolesDependencies {
-    port: RolesPort;
-    translate: Translate;
-    queryScope: string;
-}
-export declare function useRoles(deps: RolesDependencies): RolesController;
-//# sourceMappingURL=use-roles.hooks.d.ts.map

package/dist/react/roles/hooks/use-roles.hooks.js

@@ -1,303 +0,0 @@
-import { useRef, useState } from "react";
-import {} from "../../models.js";
-import { useFetchMutation, useFetchQuery } from "@jini-ai/ui/panel-kit";
-import { describeApiError as describeFeatureError, KEYS } from "../rules.js";
-async function runRowDelete(id, mutate, setRowSavingId, setRowError, clearPending, describeError) {
-    setRowSavingId(id);
-    setRowError(null);
-    try {
-        await mutate(id);
-    }
-    catch (e) {
-        setRowError(describeError(e));
-    }
-    finally {
-        setRowSavingId((current) => (current === id ? null : current));
-        clearPending();
-    }
-}
-export function useRoles(deps) {
-    const { port, translate, queryScope } = deps;
-    const describeApiError = (error, fallback) => describeFeatureError({ error, fallback, translate });
-    const t = translate;
-    const boundT = translate;
-    const list = useFetchQuery({
-        key: [queryScope, ...KEYS.list],
-        fetch: async () => {
-            const [r, p] = await Promise.all([port.listRoles({}), port.listPolicies({})]);
-            return { roles: r.roles, policies: p.policies };
-        },
-    });
-    const roles = list.data?.roles ?? null;
-    const policies = list.data?.policies ?? null;
-    const error = list.error ? describeApiError(list.error, t("failed to load roles/policies")) : null;
-    const [rowError, setRowError] = useState(null);
-    const [roleName, setRoleName] = useState("");
-    const [policyName, setPolicyName] = useState("");
-    const [policyDescription, setPolicyDescription] = useState("");
-    const [editingRoleId, setEditingRoleId] = useState(null);
-    const [editingRoleName, setEditingRoleName] = useState("");
-    const [editingPolicyId, setEditingPolicyId] = useState(null);
-    const [editingPolicyName, setEditingPolicyName] = useState("");
-    const [editingPolicyDescription, setEditingPolicyDescription] = useState("");
-    const [rowSavingId, setRowSavingId] = useState(null);
-    const [permissionPolicyId, setPermissionPolicyId] = useState(null);
-    const [permissionInput, setPermissionInput] = useState("");
-    const [resourceTypeInput, setResourceTypeInput] = useState("");
-    const [permissionRows, setPermissionRows] = useState([]);
-    const [permissionsLoading, setPermissionsLoading] = useState(false);
-    const [removingPermissionId, setRemovingPermissionId] = useState(null);
-    const permissionsGenerationRef = useRef(0);
-    const permissionPolicyIdRef = useRef(null);
-    const [pendingRoleDelete, setPendingRoleDelete] = useState(null);
-    const [pendingPolicyDelete, setPendingPolicyDelete] = useState(null);
-    const [pendingPermissionRemove, setPendingPermissionRemove] = useState(null);
-    const createRoleMutation = useFetchMutation({
-        run: ({ input: name }) => port.createRole({ name: name })
-    }, {
-        invalidates: [[queryScope, ...KEYS.list]],
-    });
-    const createPolicyMutation = useFetchMutation({
-        run: ({ input }) => port.createPolicy({ name: input.name }, { description: input.description })
-    }, {
-        invalidates: [[queryScope, ...KEYS.list]],
-    });
-    const saveRoleMutation = useFetchMutation({
-        run: ({ input }) => port.updateRole(input)
-    }, {
-        invalidates: [[queryScope, ...KEYS.list]],
-    });
-    const deleteRoleMutation = useFetchMutation({
-        run: ({ input: id }) => port.deleteRole({ roleId: id })
-    }, {
-        invalidates: [[queryScope, ...KEYS.list]],
-    });
-    const savePolicyMutation = useFetchMutation({
-        run: ({ input }) => port.updatePolicy({ policyId: input.policyId }, { name: input.name, description: input.description })
-    }, {
-        invalidates: [[queryScope, ...KEYS.list]],
-    });
-    const deletePolicyMutation = useFetchMutation({
-        run: ({ input: id }) => port.deletePolicy({ policyId: id })
-    }, {
-        invalidates: [[queryScope, ...KEYS.list]],
-    });
-    const writePermissionMutation = useFetchMutation({
-        run: ({ input }) => port.writePolicyPermission({ policyId: input.policyId, permission: input.permission }, { resourceType: input.resourceType }),
-    });
-    const removePermissionMutation = useFetchMutation({
-        run: ({ input }) => port.removePolicyPermission(input),
-    });
-    async function onCreateRole(e) {
-        e.preventDefault();
-        try {
-            await createRoleMutation.mutate({ input: roleName });
-            setRoleName("");
-        }
-        catch {
-        }
-    }
-    async function onCreatePolicy(e) {
-        e.preventDefault();
-        try {
-            await createPolicyMutation.mutate({ input: { name: policyName, description: policyDescription || undefined } });
-            setPolicyName("");
-            setPolicyDescription("");
-        }
-        catch {
-        }
-    }
-    function startEditRole(role) {
-        setRowError(null);
-        setEditingRoleId(role.id);
-        setEditingRoleName(role.name);
-    }
-    async function onSaveRole({ roleId }) {
-        setRowSavingId(roleId);
-        setRowError(null);
-        try {
-            await saveRoleMutation.mutate({ input: { roleId, name: editingRoleName } });
-            setEditingRoleId((current) => (current === roleId ? null : current));
-        }
-        catch (e) {
-            setRowError(describeApiError(e, t("failed to rename role")));
-        }
-        finally {
-            setRowSavingId((current) => (current === roleId ? null : current));
-        }
-    }
-    async function onDeleteRole() {
-        if (!pendingRoleDelete)
-            return;
-        const role = pendingRoleDelete;
-        await runRowDelete(role.id, (id) => deleteRoleMutation.mutate({ input: id }), setRowSavingId, setRowError, () => setPendingRoleDelete((current) => (current?.id === role.id ? null : current)), (e) => describeApiError(e, t("failed to delete role")));
-    }
-    function startEditPolicy(policy) {
-        setRowError(null);
-        setEditingPolicyId(policy.id);
-        setEditingPolicyName(policy.name);
-        setEditingPolicyDescription(policy.description ?? "");
-    }
-    async function onSavePolicy({ policyId }) {
-        setRowSavingId(policyId);
-        setRowError(null);
-        try {
-            await savePolicyMutation.mutate({ input: { policyId, name: editingPolicyName, description: editingPolicyDescription } });
-            setEditingPolicyId((current) => (current === policyId ? null : current));
-        }
-        catch (e) {
-            setRowError(describeApiError(e, t("failed to update policy")));
-        }
-        finally {
-            setRowSavingId((current) => (current === policyId ? null : current));
-        }
-    }
-    async function onDeletePolicy() {
-        if (!pendingPolicyDelete)
-            return;
-        const policy = pendingPolicyDelete;
-        await runRowDelete(policy.id, (id) => deletePolicyMutation.mutate({ input: id }), setRowSavingId, setRowError, () => setPendingPolicyDelete((current) => (current?.id === policy.id ? null : current)), (e) => describeApiError(e, t("failed to delete policy")));
-    }
-    async function loadPermissions(policyId) {
-        const generation = ++permissionsGenerationRef.current;
-        setPermissionsLoading(true);
-        try {
-            const { policyPermissions } = await port.listPolicyPermissions({ policyId: policyId });
-            if (permissionsGenerationRef.current !== generation)
-                return;
-            setPermissionRows(policyPermissions);
-        }
-        catch (e) {
-            if (permissionsGenerationRef.current !== generation)
-                return;
-            setPermissionRows([]);
-            setRowError(describeApiError(e, t("failed to load permissions")));
-        }
-        finally {
-            if (permissionsGenerationRef.current !== generation)
-                return;
-            setPermissionsLoading(false);
-        }
-    }
-    function togglePermissionForm({ policyId }) {
-        setRowError(null);
-        setPermissionInput("");
-        setResourceTypeInput("");
-        const closing = permissionPolicyIdRef.current === policyId;
-        permissionPolicyIdRef.current = closing ? null : policyId;
-        setPermissionPolicyId(permissionPolicyIdRef.current);
-        setPermissionRows([]);
-        if (!closing)
-            void loadPermissions(policyId);
-    }
-    async function onRemovePermission({ policyId, policyPermissionId }) {
-        setRemovingPermissionId(policyPermissionId);
-        setRowError(null);
-        try {
-            await removePermissionMutation.mutate({ input: { policyId, policyPermissionId } });
-            if (permissionPolicyIdRef.current === policyId)
-                await loadPermissions(policyId);
-        }
-        catch (e) {
-            setRowError(describeApiError(e, t("failed to remove permission")));
-        }
-        finally {
-            setRemovingPermissionId((current) => (current === policyPermissionId ? null : current));
-        }
-    }
-    async function onConfirmRemovePermission() {
-        if (!pendingPermissionRemove)
-            return;
-        const target = pendingPermissionRemove;
-        try {
-            await onRemovePermission({ policyId: target.policyId, policyPermissionId: target.row.id });
-        }
-        finally {
-            setPendingPermissionRemove((current) => (current?.row.id === target.row.id ? null : current));
-        }
-    }
-    async function onWritePermission({ policyId }) {
-        if (!permissionInput)
-            return;
-        const generationAtStart = permissionsGenerationRef.current;
-        setRowSavingId(policyId);
-        setRowError(null);
-        try {
-            await writePermissionMutation.mutate({ input: { policyId, permission: permissionInput, resourceType: resourceTypeInput || undefined } });
-            if (permissionsGenerationRef.current === generationAtStart) {
-                setPermissionInput("");
-                setResourceTypeInput("");
-            }
-            if (permissionPolicyIdRef.current === policyId)
-                await loadPermissions(policyId);
-        }
-        catch (e) {
-            setRowError(describeApiError(e, t("failed to add permission")));
-        }
-        finally {
-            setRowSavingId((current) => (current === policyId ? null : current));
-        }
-    }
-    const roleSaving = createRoleMutation.status === "pending";
-    const roleError = createRoleMutation.error ? describeApiError(createRoleMutation.error, t("failed to create role")) : null;
-    const policySaving = createPolicyMutation.status === "pending";
-    const policyError = createPolicyMutation.error
-        ? describeApiError(createPolicyMutation.error, t("failed to create policy"))
-        : null;
-    return {
-        roles,
-        policies,
-        error,
-        rowError,
-        roleName,
-        setRoleName,
-        roleSaving,
-        roleError,
-        onCreateRole,
-        policyName,
-        setPolicyName,
-        policyDescription,
-        setPolicyDescription,
-        policySaving,
-        policyError,
-        onCreatePolicy,
-        editingRoleId,
-        setEditingRoleId,
-        editingRoleName,
-        setEditingRoleName,
-        startEditRole,
-        onSaveRole,
-        editingPolicyId,
-        setEditingPolicyId,
-        editingPolicyName,
-        setEditingPolicyName,
-        editingPolicyDescription,
-        setEditingPolicyDescription,
-        startEditPolicy,
-        onSavePolicy,
-        rowSavingId,
-        permissionPolicyId,
-        permissionInput,
-        setPermissionInput,
-        resourceTypeInput,
-        setResourceTypeInput,
-        togglePermissionForm,
-        onWritePermission,
-        permissionRows,
-        permissionsLoading,
-        removingPermissionId,
-        onRemovePermission,
-        pendingPermissionRemove,
-        setPendingPermissionRemove,
-        onConfirmRemovePermission,
-        pendingRoleDelete,
-        setPendingRoleDelete,
-        onDeleteRole,
-        pendingPolicyDelete,
-        setPendingPolicyDelete,
-        onDeletePolicy,
-        t: boundT,
-        translate,
-    };
-}
-//# sourceMappingURL=use-roles.hooks.js.map

package/dist/react/roles/rules.d.ts

@@ -1,35 +0,0 @@
-import type { AdminRole, AdminPolicy } from "../models.js";
-import type { Translate } from "@jini-ai/ui/panel-kit";
-import type { RowMenuItem } from "@jini-ai/admin/react";
-import type { QueryKey } from "@jini-ai/ui/panel-kit";
-export declare const KEYS: {
-    list: QueryKey;
-};
-export declare function describeApiError({ error, fallback, translate }: {
-    error: unknown;
-    fallback: string;
-    translate: Translate;
-}): string;
-export interface RoleRowMenuHandlers {
-    onRename: (role: AdminRole) => void;
-    onDelete: (role: AdminRole) => void;
-}
-export declare function roleMenuItems({ role, handlers, translate }: {
-    role: AdminRole;
-    handlers: RoleRowMenuHandlers;
-    translate: Translate;
-}): RowMenuItem[];
-export interface PolicyRowMenuHandlers {
-    onRename: (policy: AdminPolicy) => void;
-    onTogglePermissionForm: (required: {
-        policyId: string;
-    }) => void;
-    onDelete: (policy: AdminPolicy) => void;
-}
-export declare function policyMenuItems({ policy, permissionPolicyId, handlers, translate }: {
-    policy: AdminPolicy;
-    permissionPolicyId: string | null;
-    handlers: PolicyRowMenuHandlers;
-    translate: Translate;
-}): RowMenuItem[];
-//# sourceMappingURL=rules.d.ts.map

package/dist/react/roles/rules.js

@@ -1,31 +0,0 @@
-import { describeIdentityError } from "../errors.js";
-export const KEYS = {
-    list: ["roles-and-policies"],
-};
-const STATIC_ERROR_MESSAGES = {
-    FORBIDDEN: "You do not have permission to do that.",
-    RESOURCE_CONFLICT: "It is still in use — remove that assignment/attachment first.",
-    PERMISSION_UNKNOWN: "That permission is not recognized.",
-    GRANT_EXCEEDS_ISSUER: "You cannot grant a permission you do not hold.",
-};
-export function describeApiError({ error, fallback, translate }) {
-    return describeIdentityError({ error, fallback, translate }, { messages: STATIC_ERROR_MESSAGES });
-}
-export function roleMenuItems({ role, handlers, translate }) {
-    return [
-        { key: "rename", label: translate("Rename"), onSelect: () => handlers.onRename(role) },
-        { key: "delete", label: translate("Delete"), destructive: true, onSelect: () => handlers.onDelete(role) },
-    ];
-}
-export function policyMenuItems({ policy, permissionPolicyId, handlers, translate }) {
-    return [
-        { key: "rename", label: translate("Rename"), onSelect: () => handlers.onRename(policy) },
-        {
-            key: "permission",
-            label: permissionPolicyId === policy.id ? translate("Close") : translate("Add permission"),
-            onSelect: () => handlers.onTogglePermissionForm({ policyId: policy.id }),
-        },
-        { key: "delete", label: translate("Delete"), destructive: true, onSelect: () => handlers.onDelete(policy) },
-    ];
-}
-//# sourceMappingURL=rules.js.map

package/dist/react/roles/text.d.ts

@@ -1,27 +0,0 @@
-import { type Translate } from "@jini-ai/ui/panel-kit";
-export declare function rolesDescriptionParts({ translate }: {
-    translate: Translate;
-}): {
-    prefix: string;
-    suffix: string;
-    linkLabel: string;
-};
-export declare function roleDeleteBodyParts({ translate }: {
-    translate: Translate;
-}): {
-    prefix: string;
-    suffix: string;
-};
-export declare function policyDeleteBodyParts({ translate }: {
-    translate: Translate;
-}): {
-    prefix: string;
-    suffix: string;
-};
-export declare function permissionRemoveBodyParts({ translate }: {
-    translate: Translate;
-}): {
-    prefix: string;
-    suffix: string;
-};
-//# sourceMappingURL=text.d.ts.map

package/dist/react/roles/text.js

@@ -1,13 +0,0 @@
-import { splitOnPlaceholders } from "@jini-ai/ui/panel-kit";
-export function rolesDescriptionParts({ translate }) {
-    const [prefix = "", suffix = ""] = splitOnPlaceholders({ template: translate("Roles and policies grant access to operator users. Assign a role or policy to a specific user from the {users} screen."), tokens: ["{users}"] });
-    return { prefix, suffix, linkLabel: translate("Users") };
-}
-function nameParts(translate, template) {
-    const [prefix = "", suffix = ""] = splitOnPlaceholders({ template: translate(template), tokens: ["{name}"] });
-    return { prefix, suffix };
-}
-export function roleDeleteBodyParts({ translate }) { return nameParts(translate, 'Delete role "{name}"?'); }
-export function policyDeleteBodyParts({ translate }) { return nameParts(translate, 'Delete policy "{name}"?'); }
-export function permissionRemoveBodyParts({ translate }) { return nameParts(translate, 'Remove "{name}" from this policy? Anyone with this policy loses it.'); }
-//# sourceMappingURL=text.js.map