@ketvietlab/ketsuite 0.1.25 → 0.1.30

package/dist/modules/user/user-modal-context.js

@@ -1,3 +1,4 @@
+import { userModalMessages } from './modal-messages.js';
 // The record-modal context for a user (KetSuite record-modal contract).
 //
 // The users collection opens a person — and its create action — in a client-side
@@ -6,21 +7,10 @@
 // viewer may do, and the authorization revision a role assignment must carry. The
 // view never fetches anything else, so a reader sees one loading state and the
 // server stays the only place that decides what is allowed.
-import { defineFn } from '@ketvietlab/ketjs';
-import { AUTHORIZATION_EFFECTS, effectiveFunctionKeys } from './authorization.js';
+import { and, defineFn, desc, eq, from, isNotNull } from '@ketvietlab/ketjs';
+import { AUTHORIZATION_EFFECTS, authorizationRevisionOf, effectiveFunctionKeys, resolveEffectivePermissions, } from './authorization.js';
+import { functionLabel, surfaceRows, templateTier } from './access-surfaces.js';
 /** Message prefixes the user views read. */
-const MESSAGE_PREFIXES = ['user_backend.', 'user.'];
-const messagesFor = (ctx, lang) => {
-    const catalog = ctx.manifest.messages?.[lang] ?? {};
-    const out = {};
-    for (const [key, message] of Object.entries(catalog)) {
-        if (!MESSAGE_PREFIXES.some((prefix) => key.startsWith(prefix)))
-            continue;
-        out[key] =
-            typeof message === 'string' ? message : String(message.other ?? Object.values(message)[0] ?? key);
-    }
-    return out;
-};
 const readEffects = AUTHORIZATION_EFFECTS.filter((effect) => !effect.startsWith('write:'));
 /** What the actor may call. A superuser (null) may call everything; no actor, nothing. */
 const permissionCheck = async (ctx) => {
@@ -29,19 +19,70 @@ const permissionCheck = async (ctx) => {
 };
 const byName = (a, b) => String(a.name ?? '').localeCompare(String(b.name ?? '')) || String(a.id).localeCompare(String(b.id));
 /**
- * The roles a create form may offer.
+ * The roles this modal may offer, which is exactly the set the server will accept.
  *
- * Managed roles only: a custom role is a local edit of one deployment's policy and
- * is assigned from the access tab, where its provenance is on screen. A role row
- * written before the managed-role migration has no mode and is not offered either.
+ * `assertAssignableRoles` takes a managed role whose stored template still matches
+ * the one this deployment ships; anything else — a custom role, a row written
+ * before the managed-role migration, a role left behind by a template that has
+ * moved on — is refused. Offering a wider list would put choices on screen that
+ * only fail on submit.
  */
 const assignableRoles = async (ctx) => (await ctx.db.select('user.Role'))
-    .filter((role) => String(role.mode ?? '') === 'managed')
-    .map((role) => ({ id: String(role.id), name: String(role.name ?? role.id) }))
+    .filter((role) => {
+    if (String(role.mode ?? '') !== 'managed')
+        return false;
+    const template = ctx.manifest.permissions.roleTemplates[String(role.templateKey)];
+    return (!!template &&
+        template.version === Number(role.templateVersion) &&
+        template.digest === role.templateDigest);
+})
+    .map((role) => ({
+    id: String(role.id),
+    name: String(role.name ?? role.id),
+    tier: templateTier(ctx, String(role.templateKey)),
+}))
     .sort(byName);
-const workplaces = async (ctx) => {
+/**
+ * What this person can open and work on, one row per screen.
+ *
+ * Measured where the person lands — their default company and branch — because
+ * that is where they will first meet a refusal. Each row names the held roles
+ * that open it.
+ */
+const surfacesOf = async (ctx, lang, record) => {
+    const effective = await resolveEffectivePermissions(ctx, String(record.id), {
+        companyId: record.defaultCompanyId ? String(record.defaultCompanyId) : null,
+        branchId: record.defaultBranchId ? String(record.defaultBranchId) : null,
+    });
+    const roleNames = new Map((await ctx.db.select('user.Role')).map((role) => [String(role.id), String(role.name ?? role.id)]));
+    const held = new Map(effective.functions.map((fn) => [
+        fn.key,
+        [...new Set(fn.paths.map((path) => roleNames.get(path.roleId) ?? path.roleId))],
+    ]));
+    return surfaceRows(ctx, lang, (fn) => effective.superuser || held.has(fn), (fn) => (effective.superuser ? [] : (held.get(fn) ?? [])));
+};
+/**
+ * What a company is called.
+ *
+ * A company row holds no name: its party record does, and the business code is
+ * what stands in when there is no party. Reading `name` off the company row gives
+ * the reader a uuid.
+ */
+const companyNames = async (ctx) => {
+    const companies = await ctx.db.select('company.Company');
+    const partners = new Map((await ctx.db.select('partner.Partner')).map((row) => [String(row.id), String(row.name ?? '')]));
+    return new Map(companies.map((company) => [
+        String(company.id),
+        partners.get(String(company.partnerId)) || String(company.code ?? company.id),
+    ]));
+};
+export const workplaces = async (ctx) => {
+    const names = await companyNames(ctx);
     const companies = (await ctx.db.select('company.Company', { active: true }))
-        .map((company) => ({ id: String(company.id), name: String(company.name ?? company.id) }))
+        .map((company) => ({
+        id: String(company.id),
+        name: names.get(String(company.id)) ?? String(company.id),
+    }))
         .sort(byName);
     const known = new Set(companies.map((company) => String(company.id)));
     const branches = (await ctx.db.select('company.Branch', { active: true }))
@@ -63,23 +104,107 @@ const workplaces = async (ctx) => {
  */
 const assignmentsOf = async (ctx, userId) => {
     const roles = new Map((await ctx.db.select('user.Role')).map((role) => [String(role.id), String(role.name ?? role.id)]));
-    const companies = new Map((await ctx.db.select('company.Company')).map((row) => [String(row.id), String(row.name ?? row.id)]));
+    const companies = await companyNames(ctx);
     const branches = new Map((await ctx.db.select('company.Branch')).map((row) => [String(row.id), String(row.name ?? row.id)]));
-    return (await ctx.db.select('user.Assignment', { userId })).map((assignment) => {
+    const policies = new Map((await ctx.db.select('user.AccessPolicy')).map((row) => [String(row.id), String(row.name)]));
+    const assignments = [
+        ...(await ctx.db.select('user.Assignment', { userId })),
+        ...(await ctx.db.select('user.PolicyAssignment', { userId })),
+    ];
+    return assignments.map((assignment) => {
         const companyId = assignment.companyId ? String(assignment.companyId) : '';
         const branchId = assignment.branchId ? String(assignment.branchId) : '';
         return {
             id: String(assignment.id),
             roleId: String(assignment.roleId),
+            source: assignment.policyId
+                ? {
+                    kind: 'policy',
+                    policyId: String(assignment.policyId),
+                    policyName: policies.get(String(assignment.policyId)) ?? String(assignment.policyId),
+                }
+                : { kind: 'manual' },
             roleName: roles.get(String(assignment.roleId)) ?? String(assignment.roleId),
             scopeKind: String(assignment.scopeKind ?? 'tenant'),
+            companyId: companyId || null,
+            branchId: branchId || null,
+            // The scope as the remove path names it. A tenant assignment stores no scope
+            // key at all, and `unassignScopedRole` matches that null against 'tenant'.
+            scopeKey: String(assignment.scopeKey ?? 'tenant'),
             company: companyId ? (companies.get(companyId) ?? companyId) : null,
             branch: branchId ? (branches.get(branchId) ?? branchId) : null,
         };
     });
 };
-/** The revision a role assignment must present, so a stale modal is refused rather than applied. */
-const authorizationRevision = async (ctx) => Number((await ctx.db.select('user.AuthorizationRevision', { id: 'global' }))[0]?.revision ?? 0);
+/**
+ * What was done to this person's authority, newest first.
+ *
+ * The log tab reads these. It is a separate permission from opening the record:
+ * a viewer may be allowed to see who somebody is without being allowed to read
+ * the history of who gave them what.
+ */
+const authorizationAuditOf = async (ctx, userId) => {
+    const A = ctx.table('user.SecurityAudit');
+    const rows = await ctx.db.all(from(A)
+        // By `userId`, which is the person the authority belongs to. `targetId` is the
+        // assignment row, so filtering on it would drop every removal from the log —
+        // exactly the entries that take authority away.
+        .where(and(eq(A.userId, userId), isNotNull(A.authorizationRevision)))
+        .orderBy(desc(A.authorizationRevision), desc(A.id))
+        .limit(AUDIT_PAGE));
+    return rows.map((row) => {
+        const metadata = (row.metadata ?? {});
+        const roleIds = Array.isArray(metadata.roleIds)
+            ? metadata.roleIds.map(String)
+            : metadata.roleId
+                ? [String(metadata.roleId)]
+                : [];
+        return {
+            id: String(row.id),
+            event: String(row.event ?? ''),
+            occurredAt: row.occurredAt ? String(row.occurredAt) : null,
+            actor: row.actorKey ? String(row.actorKey) : null,
+            reason: row.reason ? String(row.reason) : null,
+            scopeKey: row.scopeKey ? String(row.scopeKey) : 'tenant',
+            outcome: String(row.outcome ?? 'success'),
+            roleIds,
+        };
+    });
+};
+/** How much of the log one read carries. A tab is a window, not an export. */
+const AUDIT_PAGE = 50;
+/**
+ * What a role actually covers, in the words a business reads.
+ *
+ * A grant is one function key; nobody staffs a branch by function key. The
+ * catalogue groups those keys into bundles, so a role is reported as the areas it
+ * touches and how much of each it holds — and a bundle the role does not touch at
+ * all is not listed, because a list of everything it cannot do says nothing.
+ */
+const roleCoverage = async (ctx, roleIds) => {
+    const out = {};
+    if (!roleIds.length)
+        return out;
+    const bundles = Object.entries(ctx.manifest.permissions.bundles ?? {});
+    const G = ctx.table('user.Grant');
+    for (const roleId of roleIds) {
+        const granted = new Set((await ctx.db.all(from(G).where(eq(G.roleId, roleId)))).map((row) => String(row.fnKey)));
+        out[roleId] = bundles
+            .map(([key, bundle]) => {
+            const functions = bundle.functions ?? [];
+            const covered = functions.filter((fn) => granted.has(fn)).length;
+            return {
+                key,
+                labels: bundle.labels ?? {},
+                covered,
+                total: functions.length,
+            };
+        })
+            .filter((row) => row.covered > 0)
+            .sort((a, b) => String(a.key).localeCompare(String(b.key)));
+    }
+    return out;
+};
 const newUserRecord = () => ({
     id: '',
     name: '',
@@ -97,16 +222,42 @@ export const userModalContextFunctions = {
             'read:user.User',
             'read:user.Role',
             'read:user.Assignment',
+            'read:user.PolicyAssignment',
+            'read:user.AccessPolicy',
             'read:company.Company',
             'read:company.Branch',
+            // A company is named by its party record.
+            'read:partner.Partner',
+            // The log tab reads what was done to this person's authority.
+            'read:user.SecurityAudit',
+            'read:user.AccessDenial',
+            // The profile form edits where this person works.
+            'read:user.Membership',
+            'read:user.BranchMembership',
+            // What each held role covers.
+            'read:user.Grant',
         ],
         handler: async (ctx, args) => {
             const can = await permissionCheck(ctx);
+            // Only a superuser may give emergency access, and the check is the server's own.
+            const actorSuperuser = !!ctx.actor && (await effectiveFunctionKeys(ctx, ctx.actor)) === null;
             const permissions = {
                 create: can('user.createUser'),
                 save: can('user.saveUser'),
-                assignRole: can('user.assignScopedRole'),
-                invite: can('user.issueAuthToken'),
+                // Each names the function the access tab would actually call, so a viewer is
+                // never offered a control whose command the server then refuses.
+                assign: can('user.assignRoles'),
+                remove: can('user.unassignScopedRole'),
+                preview: can('user.previewRoleAssignment'),
+                resetPassword: can('user.issueAuthToken'),
+                audit: can('user.listAuthorizationAudit'),
+                workplaces: can('user.setWorkplaces'),
+                identities: Boolean(ctx.manifest.functions['oauth.listIdentities']) && can('oauth.listIdentities'),
+                // Offered only where the function ships: a superuser may call everything,
+                // including a function this build does not have.
+                breakGlass: Boolean(ctx.manifest.functions['user.setBreakGlass']) && actorSuperuser,
+                sendLink: Boolean(ctx.manifest.functions['user.sendCredentialLink']) && can('user.sendCredentialLink'),
+                previewWorkplaces: Boolean(ctx.manifest.functions['user.previewWorkplaces']) && can('user.previewWorkplaces'),
             };
             const creating = !args.id;
             // The modal is a read of a person, so it answers only a viewer allowed that read:
@@ -120,7 +271,9 @@ export const userModalContextFunctions = {
             if (!record)
                 return null;
             const { companies, branches } = await workplaces(ctx);
+            const assignments = creating ? [] : await assignmentsOf(ctx, String(args.id));
             const lang = args.locale === 'en' ? 'en' : 'vi';
+            const denial = !creating && permissions.audit ? (await ctx.db.select('user.AccessDenial', { id: args.id }))[0] : null;
             return {
                 data: {
                     record: {
@@ -133,17 +286,60 @@ export const userModalContextFunctions = {
                         // Carried so saving a profile cannot quietly drop or grant it; the form
                         // never offers it, because who may mint a superuser is its own decision.
                         superuser: record.superuser === true,
+                        // Whether they have ever signed in is what the login tab reports, and
+                        // what tells a prepared account from a live one.
+                        lastLoginAt: record.lastLoginAt ? String(record.lastLoginAt) : null,
+                        passwordReady: !!record.passwordHash,
+                        // Where they land. The profile form offers these back as the default
+                        // among the workplaces it is being given.
+                        defaultCompanyId: record.defaultCompanyId ? String(record.defaultCompanyId) : null,
+                        defaultBranchId: record.defaultBranchId ? String(record.defaultBranchId) : null,
+                        // A superuser grant with an end is break-glass; the tab shows until when.
+                        superuserExpiresAt: record.superuserExpiresAt ? String(record.superuserExpiresAt) : null,
+                        superuserReason: record.superuserReason ? String(record.superuserReason) : null,
                     },
+                    // The guards are about the reader: nobody changes their own authority, and
+                    // only a superuser gives a security-tier role.
+                    actor: { self: !creating && ctx.actor === String(args.id), superuser: actorSuperuser },
+                    surfaces: creating ? undefined : await surfacesOf(ctx, lang, record),
+                    lastDenial: denial
+                        ? {
+                            fn: String(denial.fnKey),
+                            label: functionLabel(ctx, lang, String(denial.fnKey)),
+                            surface: null,
+                            at: String(denial.occurredAt),
+                            count: Number(denial.count),
+                            templates: [],
+                            companyId: denial.companyId,
+                            branchId: denial.branchId,
+                        }
+                        : null,
+                    // Where this person works today, which the profile form edits as a whole.
+                    memberships: creating
+                        ? { companies: [], branches: [] }
+                        : {
+                            companies: (await ctx.db.select('user.Membership', { userId: args.id })).map((row) => String(row.companyId)),
+                            branches: (await ctx.db.select('user.BranchMembership', {
+                                userId: args.id,
+                            })).map((row) => String(row.branchId)),
+                        },
                     companies,
                     branches,
-                    assignments: creating ? [] : await assignmentsOf(ctx, String(args.id)),
+                    assignments,
+                    // What each held role covers, so the role a reader opens says what it is
+                    // for instead of only where it applies.
+                    roleCoverage: await roleCoverage(ctx, [...new Set(assignments.map((row) => String(row.roleId)))]),
+                    audit: creating || !permissions.audit ? [] : await authorizationAuditOf(ctx, String(args.id)),
                     roles: await assignableRoles(ctx),
                     scopeKinds: ['company', 'branch', 'tenant'],
-                    revision: await authorizationRevision(ctx),
+                    // The revision a write must carry. It has to be read the way the writers
+                    // read it: a different row id here is a revision that never moves, which
+                    // every write then refuses as stale.
+                    revision: await authorizationRevisionOf(ctx),
                     permissions,
                     lang,
                 },
-                messages: messagesFor(ctx, lang),
+                messages: userModalMessages(ctx, lang),
             };
         },
     }),

package/dist/modules/user/user-modal-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-modal-context.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/user/user-modal-context.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,iFAAiF;AACjF,iFAAiF;AACjF,gFAAgF;AAChF,kFAAkF;AAClF,+EAA+E;AAC/E,4DAA4D;AAE5D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAE5C,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAKjF,4CAA4C;AAC5C,MAAM,gBAAgB,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;AAEnD,MAAM,WAAW,GAAG,CAAC,GAAQ,EAAE,IAAU,EAA0B,EAAE;IACnE,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;IACnD,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAAE,SAAQ;QACxE,GAAG,CAAC,GAAG,CAAC;YACN,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAA;IACrG,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;AAE1F,0FAA0F;AAC1F,MAAM,eAAe,GAAG,KAAK,EAAE,GAAQ,EAAgB,EAAE;IACvD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5E,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AACzD,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,CAAM,EAAE,CAAM,EAAE,EAAE,CAChC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAEtG;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,KAAK,EAAE,GAAQ,EAAkB,EAAE,CACzD,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;KAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,SAAS,CAAC;KACvD,GAAG,CAAC,CAAC,IAAI,EAAO,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;KACjF,IAAI,CAAC,MAAM,CAAC,CAAA;AAEjB,MAAM,UAAU,GAAG,KAAK,EAAE,GAAQ,EAAkD,EAAE;IACpF,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;SACzE,GAAG,CAAC,CAAC,OAAO,EAAO,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SAC7F,IAAI,CAAC,MAAM,CAAC,CAAA;IACf,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACrE,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;SACvE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;SACvD,GAAG,CACF,CAAC,MAAM,EAAO,EAAE,CAAC,CAAC;QAChB,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC;QACtC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;KACpC,CAAC,CACH;SACA,IAAI,CAAC,MAAM,CAAC,CAAA;IACf,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;AAChC,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,KAAK,EAAE,GAAQ,EAAE,MAAc,EAAkB,EAAE;IACvE,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAClG,CAAA;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CACpG,CAAA;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CACnG,CAAA;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAO,EAAE;QAClF,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1E,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACvE,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YACjC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3E,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,IAAI,QAAQ,CAAC;YACnD,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;YACnE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;SAC/D,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,oGAAoG;AACpG,MAAM,qBAAqB,GAAG,KAAK,EAAE,GAAQ,EAAmB,EAAE,CAChE,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,4BAA4B,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAA;AAEjG,MAAM,aAAa,GAAG,GAAQ,EAAE,CAAC,CAAC;IAChC,EAAE,EAAE,EAAE;IACN,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,EAAE;IACT,UAAU,EAAE,UAAU;IACtB,MAAM,EAAE,IAAI;IACZ,SAAS,EAAE,KAAK;CACjB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAA2B;IAC/D,gBAAgB,EAAE,QAAQ,CAAC;QACzB,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;QACrC,OAAO,EAAE;YACP,GAAG,WAAW;YACd,gBAAgB;YAChB,gBAAgB;YAChB,sBAAsB;YACtB,sBAAsB;YACtB,qBAAqB;SACtB;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAA;YACtC,MAAM,WAAW,GAAG;gBAClB,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC;gBAC9B,IAAI,EAAE,GAAG,CAAC,eAAe,CAAC;gBAC1B,UAAU,EAAE,GAAG,CAAC,uBAAuB,CAAC;gBACxC,MAAM,EAAE,GAAG,CAAC,qBAAqB,CAAC;aACnC,CAAA;YACD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,EAAE,CAAA;YACzB,kFAAkF;YAClF,6EAA6E;YAC7E,+DAA+D;YAC/D,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;gBAAE,OAAO,IAAI,CAAA;YACtE,MAAM,MAAM,GAAG,QAAQ;gBACrB,CAAC,CAAC,aAAa,EAAE;gBACjB,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAA;YACpE,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;YACrD,MAAM,IAAI,GAAS,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;YACrD,OAAO;gBACL,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;wBAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;wBAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;wBACjC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;wBACjC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,UAAU,CAAC;wBACnD,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,KAAK;wBAC/B,wEAAwE;wBACxE,yEAAyE;wBACzE,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI;qBACrC;oBACD,SAAS;oBACT,QAAQ;oBACR,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACtE,KAAK,EAAE,MAAM,eAAe,CAAC,GAAG,CAAC;oBACjC,UAAU,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC;oBAC3C,QAAQ,EAAE,MAAM,qBAAqB,CAAC,GAAG,CAAC;oBAC1C,WAAW;oBACX,IAAI;iBACL;gBACD,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC;aACjC,CAAA;QACH,CAAC;KACF,CAAC;CACH,CAAA"}
+{"version":3,"file":"user-modal-context.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/user/user-modal-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,wEAAwE;AACxE,EAAE;AACF,iFAAiF;AACjF,iFAAiF;AACjF,gFAAgF;AAChF,kFAAkF;AAClF,+EAA+E;AAC/E,4DAA4D;AAE5D,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAE5E,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAK/E,4CAA4C;AAE5C,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;AAE1F,0FAA0F;AAC1F,MAAM,eAAe,GAAG,KAAK,EAAE,GAAQ,EAAgB,EAAE;IACvD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5E,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AACzD,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,CAAM,EAAE,CAAM,EAAE,EAAE,CAChC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAEtG;;;;;;;;GAQG;AACH,MAAM,eAAe,GAAG,KAAK,EAAE,GAAQ,EAAkB,EAAE,CACzD,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;KAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;IACf,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAA;IACjF,OAAO,CACL,CAAC,CAAC,QAAQ;QACV,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;QACjD,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,cAAc,CACxC,CAAA;AACH,CAAC,CAAC;KACD,GAAG,CACF,CAAC,IAAI,EAAO,EAAE,CAAC,CAAC;IACd,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;IAClC,IAAI,EAAE,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;CAClD,CAAC,CACH;KACA,IAAI,CAAC,MAAM,CAAC,CAAA;AAEjB;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,KAAK,EAAE,GAAQ,EAAE,IAAU,EAAE,MAAW,EAAkB,EAAE;IAC7E,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;QAC1E,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;QAC3E,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI;KACzE,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAClG,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9B,EAAE,CAAC,GAAG;QACN,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;KAChF,CAAC,CACH,CAAA;IACD,OAAO,WAAW,CAChB,GAAG,EACH,IAAI,EACJ,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAC3C,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAC1D,CAAA;AACH,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,KAAK,EAAE,GAAQ,EAAgC,EAAE;IACpE,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAChG,CAAA;IACD,OAAO,IAAI,GAAG,CACZ,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAClB,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC;KAC9E,CAAC,CACH,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,GAAQ,EAAkD,EAAE;IAC3F,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;IACrC,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;SACzE,GAAG,CACF,CAAC,OAAO,EAAO,EAAE,CAAC,CAAC;QACjB,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACtB,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;KAC1D,CAAC,CACH;SACA,IAAI,CAAC,MAAM,CAAC,CAAA;IACf,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACrE,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;SACvE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;SACvD,GAAG,CACF,CAAC,MAAM,EAAO,EAAE,CAAC,CAAC;QAChB,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC;QACtC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;KACpC,CAAC,CACH;SACA,IAAI,CAAC,MAAM,CAAC,CAAA;IACf,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;AAChC,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,KAAK,EAAE,GAAQ,EAAE,MAAc,EAAkB,EAAE;IACvE,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAClG,CAAA;IACD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CACnG,CAAA;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAC5F,CAAA;IACD,MAAM,WAAW,GAAG;QAClB,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;KAC9D,CAAA;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAO,EAAE;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1E,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACvE,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,UAAU,CAAC,QAAQ;gBACzB,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;oBACrC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;iBACrF;gBACH,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;YACtB,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3E,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,IAAI,QAAQ,CAAC;YACnD,SAAS,EAAE,SAAS,IAAI,IAAI;YAC5B,QAAQ,EAAE,QAAQ,IAAI,IAAI;YAC1B,6EAA6E;YAC7E,2EAA2E;YAC3E,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC;YACjD,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;YACnE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;SAC/D,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAQ,EAAE,MAAc,EAAkB,EAAE;IAC9E,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACzC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAC3B,IAAI,CAAC,CAAC,CAAC;QACL,+EAA+E;QAC/E,6EAA6E;QAC7E,gDAAgD;SAC/C,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;SACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAClD,KAAK,CAAC,UAAU,CAAC,CACrB,CAAA;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAO,EAAE;QAC3B,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAGnC,CAAA;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC7C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAC9B,CAAC,CAAC,QAAQ,CAAC,MAAM;gBACf,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3B,CAAC,CAAC,EAAE,CAAA;QACR,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9B,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;YAC1D,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YACjD,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;YAC9C,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ;YACxD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;YACzC,OAAO;SACR,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,8EAA8E;AAC9E,MAAM,UAAU,GAAG,EAAE,CAAA;AAErB;;;;;;;GAOG;AACH,MAAM,YAAY,GAAG,KAAK,EAAE,GAAQ,EAAE,OAAiB,EAAkC,EAAE;IACzF,MAAM,GAAG,GAA0B,EAAE,CAAA;IACrC,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,GAAG,CAAA;IAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;IACtE,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CACxF,CAAA;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO;aAClB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE;YACrB,MAAM,SAAS,GAAI,MAAmC,CAAC,SAAS,IAAI,EAAE,CAAA;YACtE,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;YAChE,OAAO;gBACL,GAAG;gBACH,MAAM,EAAG,MAA8C,CAAC,MAAM,IAAI,EAAE;gBACpE,OAAO;gBACP,KAAK,EAAE,SAAS,CAAC,MAAM;aACxB,CAAA;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;aAChC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,GAAQ,EAAE,CAAC,CAAC;IAChC,EAAE,EAAE,EAAE;IACN,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,EAAE;IACT,UAAU,EAAE,UAAU;IACtB,MAAM,EAAE,IAAI;IACZ,SAAS,EAAE,KAAK;CACjB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAA2B;IAC/D,gBAAgB,EAAE,QAAQ,CAAC;QACzB,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;QACrC,OAAO,EAAE;YACP,GAAG,WAAW;YACd,gBAAgB;YAChB,gBAAgB;YAChB,sBAAsB;YACtB,4BAA4B;YAC5B,wBAAwB;YACxB,sBAAsB;YACtB,qBAAqB;YACrB,0CAA0C;YAC1C,sBAAsB;YACtB,8DAA8D;YAC9D,yBAAyB;YACzB,wBAAwB;YACxB,kDAAkD;YAClD,sBAAsB;YACtB,4BAA4B;YAC5B,8BAA8B;YAC9B,iBAAiB;SAClB;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAA;YACtC,iFAAiF;YACjF,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAA;YAC5F,MAAM,WAAW,GAAG;gBAClB,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC;gBAC9B,IAAI,EAAE,GAAG,CAAC,eAAe,CAAC;gBAC1B,6EAA6E;gBAC7E,iEAAiE;gBACjE,MAAM,EAAE,GAAG,CAAC,kBAAkB,CAAC;gBAC/B,MAAM,EAAE,GAAG,CAAC,yBAAyB,CAAC;gBACtC,OAAO,EAAE,GAAG,CAAC,4BAA4B,CAAC;gBAC1C,aAAa,EAAE,GAAG,CAAC,qBAAqB,CAAC;gBACzC,KAAK,EAAE,GAAG,CAAC,6BAA6B,CAAC;gBACzC,UAAU,EAAE,GAAG,CAAC,oBAAoB,CAAC;gBACrC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC,IAAI,GAAG,CAAC,sBAAsB,CAAC;gBAClG,0EAA0E;gBAC1E,iDAAiD;gBACjD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC,IAAI,cAAc;gBACnF,QAAQ,EACN,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC,IAAI,GAAG,CAAC,yBAAyB,CAAC;gBAC9F,iBAAiB,EACf,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,IAAI,GAAG,CAAC,wBAAwB,CAAC;aAC7F,CAAA;YACD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,EAAE,CAAA;YACzB,kFAAkF;YAClF,6EAA6E;YAC7E,+DAA+D;YAC/D,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;gBAAE,OAAO,IAAI,CAAA;YACtE,MAAM,MAAM,GAAG,QAAQ;gBACrB,CAAC,CAAC,aAAa,EAAE;gBACjB,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAA;YACpE,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;YACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;YAC7E,MAAM,IAAI,GAAS,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;YACrD,MAAM,MAAM,GACV,CAAC,QAAQ,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACxG,OAAO;gBACL,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;wBAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;wBAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;wBACjC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;wBACjC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,UAAU,CAAC;wBACnD,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,KAAK;wBAC/B,wEAAwE;wBACxE,yEAAyE;wBACzE,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI;wBACpC,sEAAsE;wBACtE,iDAAiD;wBACjD,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;wBACnE,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY;wBACpC,qEAAqE;wBACrE,0CAA0C;wBAC1C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;wBAClF,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI;wBAC/E,0EAA0E;wBAC1E,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI;wBACxF,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI;qBAChF;oBACD,2EAA2E;oBAC3E,+CAA+C;oBAC/C,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE;oBACtF,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC;oBACpE,UAAU,EAAE,MAAM;wBAChB,CAAC,CAAC;4BACE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;4BACxB,KAAK,EAAE,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;4BACrD,OAAO,EAAE,IAAI;4BACb,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;4BAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;4BAC3B,SAAS,EAAE,EAAE;4BACb,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;yBAC1B;wBACH,CAAC,CAAC,IAAI;oBACR,0EAA0E;oBAC1E,WAAW,EAAE,QAAQ;wBACnB,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;wBACjC,CAAC,CAAC;4BACE,SAAS,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACnF,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CACtB;4BACD,QAAQ,EAAE,CACR,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,uBAAuB,EAAE;gCAC3C,MAAM,EAAE,IAAI,CAAC,EAAE;6BAChB,CAAC,CACH,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;yBACrC;oBACL,SAAS;oBACT,QAAQ;oBACR,WAAW;oBACX,yEAAyE;oBACzE,wCAAwC;oBACxC,YAAY,EAAE,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBACjG,KAAK,EAAE,QAAQ,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC7F,KAAK,EAAE,MAAM,eAAe,CAAC,GAAG,CAAC;oBACjC,UAAU,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC;oBAC3C,yEAAyE;oBACzE,yEAAyE;oBACzE,qCAAqC;oBACrC,QAAQ,EAAE,MAAM,uBAAuB,CAAC,GAAG,CAAC;oBAC5C,WAAW;oBACX,IAAI;iBACL;gBACD,QAAQ,EAAE,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC;aACvC,CAAA;QACH,CAAC;KACF,CAAC;CACH,CAAA"}

package/dist/modules/user_backend/access-options.d.ts

@@ -0,0 +1,25 @@
+import type { Route, ServeContext } from '@ketvietlab/ketjs';
+type Req = Parameters<Route>[1];
+type Row = Record<string, any>;
+export declare const accessError: (result: {
+    errors?: Array<{
+        field?: string;
+        code: string;
+    }>;
+}) => string;
+export declare function accessOptions(ctx: ServeContext, url: URL, req: Req): Promise<{
+    translate: import("@ketvietlab/ketjs").Translator;
+    companies: {
+        id: string;
+        name: string;
+    }[];
+    branches: {
+        id: string;
+        name: string;
+        companyId: string;
+        isRoot: boolean;
+    }[];
+    roles: Row[];
+}>;
+export {};
+//# sourceMappingURL=access-options.d.ts.map

package/dist/modules/user_backend/access-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-options.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketsuite/src/modules/user_backend/access-options.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAC5D,KAAK,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AAC/B,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAc9B,eAAO,MAAM,WAAW,WAAY;IAAE,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,WAS7C,CAAA;AAC3C,wBAAsB,aAAa,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;;;;;;;;;;;;;GAuBxE"}

package/dist/modules/user_backend/access-options.js

@@ -0,0 +1,38 @@
+const messages = {
+    E_ROLE_NOT_ASSIGNABLE: 'Có vai trò không còn khả dụng. Vui lòng chọn lại.',
+    E_ROLE_ALREADY_ASSIGNED: 'Vai trò đã được gán tại phạm vi này.',
+    E_ROLE_SELECTION_INVALID: 'Chọn một hoặc nhiều vai trò khác nhau.',
+    E_ASSIGNMENT_MEMBERSHIP_REQUIRED: 'Chưa có nơi làm việc. Chọn thêm nơi làm việc còn thiếu.',
+    E_ASSIGNMENT_SCOPE_INVALID: 'Chọn công ty và chi nhánh phù hợp.',
+    E_MEMBERSHIP_FORBIDDEN: 'Bạn không có quyền bổ sung nơi làm việc.',
+    E_AUTHORIZATION_REVISION_CONFLICT: 'Quyền vừa thay đổi. Kiểm tra lại nội dung trước khi xác nhận.',
+    E_EMAIL_UNAVAILABLE: 'Email đã được sử dụng.',
+    email_check_unavailable: 'Chưa kiểm tra được email. Vui lòng thử lại.',
+    'user.error.loginUnique': 'Tên đăng nhập đã được sử dụng.',
+    unique: 'Tên đăng nhập đã được sử dụng.',
+};
+export const accessError = (result) => result.errors
+    ?.map((e) => messages[e.code] ??
+    (e.code === 'user.error.required'
+        ? 'Vui lòng điền đầy đủ thông tin.'
+        : 'Không thể lưu thay đổi. Kiểm tra lại thông tin.'))
+    .join(' ') ?? 'Không thể lưu thay đổi.';
+export async function accessOptions(ctx, url, req) {
+    const [companies, roles] = (await Promise.all([
+        ctx.call('company.listCompanies', { includeArchived: false }, url, req),
+        ctx.call('user.listRoles', {}, url, req),
+    ]));
+    const branches = (await Promise.all(companies.map((c) => ctx.call('company.listBranches', { companyId: c.id, includeArchived: false }, url, req)))).flat();
+    return {
+        translate: ctx.translate(ctx.localeOf(url, req)),
+        companies: companies.map((c) => ({ id: String(c.id), name: String(c.name) })),
+        branches: branches.map((b) => ({
+            id: String(b.id),
+            name: String(b.name),
+            companyId: String(b.companyId),
+            isRoot: b.isRoot === true,
+        })),
+        roles,
+    };
+}
+//# sourceMappingURL=access-options.js.map

package/dist/modules/user_backend/access-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-options.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/user_backend/access-options.ts"],"names":[],"mappings":"AAKA,MAAM,QAAQ,GAA2B;IACvC,qBAAqB,EAAE,mDAAmD;IAC1E,uBAAuB,EAAE,sCAAsC;IAC/D,wBAAwB,EAAE,wCAAwC;IAClE,gCAAgC,EAAE,yDAAyD;IAC3F,0BAA0B,EAAE,oCAAoC;IAChE,sBAAsB,EAAE,0CAA0C;IAClE,iCAAiC,EAAE,+DAA+D;IAClG,mBAAmB,EAAE,wBAAwB;IAC7C,uBAAuB,EAAE,6CAA6C;IACtE,wBAAwB,EAAE,gCAAgC;IAC1D,MAAM,EAAE,gCAAgC;CACzC,CAAA;AACD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAA4D,EAAE,EAAE,CAC1F,MAAM,CAAC,MAAM;IACX,EAAE,GAAG,CACH,CAAC,CAAC,EAAE,EAAE,CACJ,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB;QAC/B,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,iDAAiD,CAAC,CACzD;KACA,IAAI,CAAC,GAAG,CAAC,IAAI,yBAAyB,CAAA;AAC3C,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAiB,EAAE,GAAQ,EAAE,GAAQ;IACvE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC;KACzC,CAAC,CAAmB,CAAA;IACrB,MAAM,QAAQ,GAAG,CACf,MAAM,OAAO,CAAC,GAAG,CACf,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAClB,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CACxF,CACF,CACF,CAAC,IAAI,EAAW,CAAA;IACjB,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChD,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7E,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7B,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACpB,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI;SAC1B,CAAC,CAAC;QACH,KAAK;KACN,CAAA;AACH,CAAC"}

package/dist/modules/user_backend/access-policy-routes.d.ts

@@ -0,0 +1,3 @@
+import type { RouteEntry } from '@ketvietlab/ketjs';
+export declare const accessPolicyRoutes: Record<string, RouteEntry>;
+//# sourceMappingURL=access-policy-routes.d.ts.map

package/dist/modules/user_backend/access-policy-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-policy-routes.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketsuite/src/modules/user_backend/access-policy-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAO,UAAU,EAAuB,MAAM,mBAAmB,CAAA;AAQ7E,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAqEzD,CAAA"}

package/dist/modules/user_backend/access-policy-routes.js

@@ -0,0 +1,76 @@
+import { text } from '@ketvietlab/ketjs';
+import { rowListSearch } from '../backend/row-list.js';
+import { accessPolicyListSearch } from './search.js';
+import { adminPage } from '../backend/screen.js';
+import { recordModalCreateHref, recordModalHref } from '../../ui/record-modal.js';
+import { accessPoliciesScreen } from './screens/access-policies-list.js';
+export const accessPolicyRoutes = {
+    '/admin/access-policies': (ctx) => async (url, req) => {
+        if (req.method !== 'GET')
+            return text('GET', { status: 405 });
+        if (!(await ctx.allows('user.listAccessPolicies', url, req)))
+            return text('Forbidden', { status: 403 });
+        const [policies, roles, companies] = await Promise.all([
+            ctx.call('user.listAccessPolicies', {}, url, req),
+            ctx.call('user.listRoles', {}, url, req),
+            ctx.call('company.listCompanies', {}, url, req),
+        ]);
+        const roleNames = new Map(roles.map((row) => [String(row.id), String(row.name)]));
+        const companyNames = new Map(companies.map((row) => [String(row.id), String(row.name)]));
+        const canCreate = await ctx.allows('user.saveAccessPolicy', url, req);
+        return adminPage(ctx, url, req, {
+            title: 'user_backend.policy.title',
+            active: '/admin/access-policies',
+            body: async (_, frame) => {
+                const rows = policies.map((row) => ({
+                    id: String(row.id),
+                    name: String(row.name),
+                    active: row.active === true,
+                    match: {
+                        kind: row.matchKind,
+                        value: String(row.matchLabel ?? row.matchValue),
+                    },
+                    grants: row.roleIds.map((id) => ({
+                        roleName: roleNames.get(id) ?? id,
+                        scope: row.scopeKind === 'tenant'
+                            ? _('user_backend.scope.tenant')
+                            : [
+                                row.companyLabel ?? companyNames.get(String(row.companyId)),
+                                row.scopeKind === 'branch' ? row.branchLabel : null,
+                            ]
+                                .filter(Boolean)
+                                .join(' · '),
+                    })),
+                    memberCount: Number(row.memberCount ?? 0),
+                    detailHref: recordModalHref(url, {
+                        kind: 'user.accessPolicy',
+                        id: String(row.id),
+                        tab: 'rule',
+                    }),
+                }));
+                const search = await rowListSearch(ctx, url, req, {
+                    spec: accessPolicyListSearch,
+                    rows,
+                    frame,
+                    name: 'user-policy-filter',
+                    bodyId: 'user-policy-list',
+                    functions: {
+                        apply: 'user_backend.applySearchFilter',
+                        saveFavorite: 'user_backend.saveSearchFavorite',
+                        deleteFavorite: 'user_backend.deleteSearchFavorite',
+                        setDefaultFavorite: 'user_backend.setDefaultSearchFavorite',
+                    },
+                    labels: { searchPlaceholder: _('user_backend.search.policies') },
+                    groupLabel: (_key, value) => _(`user_backend.policy.match.${String(value)}`),
+                });
+                return accessPoliciesScreen(_, search.frame, {
+                    rows: search.rows,
+                    total: search.rows.length,
+                    table: { groups: search.groups },
+                    createHref: canCreate ? recordModalCreateHref(url, { kind: 'user.accessPolicy' }) : null,
+                });
+            },
+        });
+    },
+};
+//# sourceMappingURL=access-policy-routes.js.map

package/dist/modules/user_backend/access-policy-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-policy-routes.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/user_backend/access-policy-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAExC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAChD,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,0BAA2B,CAAA;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAoC,CAAA;AAGzE,MAAM,CAAC,MAAM,kBAAkB,GAA+B;IAC5D,wBAAwB,EACtB,CAAC,GAAiB,EAAS,EAAE,CAC7B,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC7D,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,yBAAyB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QACvG,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAmB;YACnE,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAmB;YAC1D,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAmB;SAClE,CAAC,CAAA;QACF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACjF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACxF,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,uBAAuB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;QACrE,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YAC9B,KAAK,EAAE,2BAA2B;YAClC,MAAM,EAAE,wBAAwB;YAChC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE;gBACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAClC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;oBACtB,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI;oBAC3B,KAAK,EAAE;wBACL,IAAI,EAAE,GAAG,CAAC,SAAkC;wBAC5C,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC;qBAChD;oBACD,MAAM,EAAG,GAAG,CAAC,OAAoB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;wBAC7C,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE;wBACjC,KAAK,EACH,GAAG,CAAC,SAAS,KAAK,QAAQ;4BACxB,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC;4BAChC,CAAC,CAAC;gCACE,GAAG,CAAC,YAAY,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gCAC3D,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;6BACpD;iCACE,MAAM,CAAC,OAAO,CAAC;iCACf,IAAI,CAAC,KAAK,CAAC;qBACrB,CAAC,CAAC;oBACH,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;oBACzC,UAAU,EAAE,eAAe,CAAC,GAAG,EAAE;wBAC/B,IAAI,EAAE,mBAAmB;wBACzB,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;wBAClB,GAAG,EAAE,MAAM;qBACZ,CAAC;iBACH,CAAC,CAAC,CAAA;gBACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;oBAChD,IAAI,EAAE,sBAAsB;oBAC5B,IAAI;oBACJ,KAAK;oBACL,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,kBAAkB;oBAC1B,SAAS,EAAE;wBACT,KAAK,EAAE,gCAAgC;wBACvC,YAAY,EAAE,iCAAiC;wBAC/C,cAAc,EAAE,mCAAmC;wBACnD,kBAAkB,EAAE,uCAAuC;qBAC5D;oBACD,MAAM,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,8BAA8B,CAAC,EAAE;oBAChE,UAAU,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,6BAA6B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;iBAC7E,CAAC,CAAA;gBACF,OAAO,oBAAoB,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE;oBAC3C,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;oBACzB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;oBAChC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;iBACzF,CAAC,CAAA;YACJ,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;CACJ,CAAA"}