@ketvietlab/ketsuite 0.1.25 → 0.1.30

package/dist/modules/user_backend/modal/role-modal-view.js

@@ -0,0 +1,488 @@
+// The role record modal, client side (KetSuite record-modal contract).
+//
+// The roles collection opens a role here, and its create action opens the same
+// modal with an empty record. The view is render-pure: it reads what
+// `user.roleModalContext` returned and writes design-system markup.
+//
+// A managed role and a custom role are one record read two ways. A managed role
+// is this deployment's own policy: it is shown with the templates its authority
+// comes from, and changed by copying it. A custom role is a local decision, so
+// its areas are a form.
+//
+// Bundled by tools/build-backend-client.mjs into user_backend/client/.
+import { Badge, Button, DataTable, DescriptionList, Notice, Section, Stack } from '@ketvietlab/design-system';
+import { CHECK_ALL, createRecordModal } from '../../../ui/client/record-modal.js';
+import { USER_RECORD_MODAL_LABELS } from '../../user/modal-labels.js';
+import { RecordModalForm } from '../../../ui/client/record-modal-form.js';
+import { SurfaceAccessView } from './access-surfaces.js';
+const uuid = () => typeof crypto !== 'undefined' && 'randomUUID' in crypto
+    ? crypto.randomUUID()
+    : `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
+const pageLang = () => typeof document !== 'undefined' && document.documentElement.lang === 'en' ? 'en' : 'vi';
+const t = (c, key) => c.t(`user_backend.${key}`);
+const text = (form, name) => String(form.get(name) ?? '').trim();
+const managed = (c) => c.data.record.mode === 'managed';
+/** Whether this reader may write the form in front of them. */
+const canWrite = (c) => c.creating ? c.data.permissions.create === true : c.data.permissions.save === true && !managed(c);
+const field = (c, props, writable = canWrite(c)) => ({
+    ...props,
+    id: `user-role-${props.name}`,
+    value: props.type === 'checkbox' ? props.value : c.draft(props.name, String(props.value ?? '')),
+    options: props.type === 'checkbox-group'
+        ? props.options?.map((option) => ({
+            ...option,
+            // An "all" box is worked out from the boxes it stands for. What it last
+            // showed is stale the moment another "all" box or a single tick moves them.
+            checked: option.name?.startsWith(CHECK_ALL)
+                ? option.checked === true
+                : c.draftChecked(option.name ?? `${props.name}[]`, option.value, option.checked === true),
+        }))
+        : props.options,
+    error: c.fieldError(props.name),
+    disabled: props.disabled === true || !writable,
+});
+/** What a role is called and what it is for. Both are the whole of a custom role. */
+const identityFields = (c) => [
+    field(c, {
+        name: 'name',
+        label: t(c, 'field.name'),
+        value: c.data.record.name,
+        required: true,
+        span: 'full',
+    }),
+    field(c, {
+        name: 'description',
+        label: t(c, 'field.description'),
+        type: 'textarea',
+        value: c.data.record.description,
+        span: 'full',
+    }),
+];
+const createView = (c) => Section({
+    title: t(c, 'roles.newTitle'),
+    body: RecordModalForm({
+        kind: c.kind,
+        fields: identityFields(c),
+        command: 'create',
+        actions: [Button({ label: t(c, 'action.createRole'), variant: 'primary', type: 'submit' })],
+    }),
+});
+/** The role, named once above every tab, with where it came from and how it is doing. */
+const header = (c) => c.creating || c.data.record.healthy
+    ? ''
+    : Notice({
+        tone: 'warning',
+        title: t(c, 'roles.stale'),
+        message: t(c, 'roles.unavailableHint'),
+    });
+/**
+ * A managed role is read; a custom role is edited.
+ *
+ * A managed role is this deployment's own policy, so changing it here would put a
+ * local edit where everyone expects the shipped decision. Copying it says what
+ * actually happened: a new role, owned locally, starting from that one.
+ */
+const infoTab = (c) => managed(c)
+    ? Stack({
+        gap: 'default',
+        items: [
+            Section({
+                title: t(c, 'roles.infoTitle'),
+                body: DescriptionList({
+                    columns: 2,
+                    items: [
+                        { id: 'name', label: t(c, 'field.name'), value: c.data.record.name },
+                        {
+                            id: 'description',
+                            label: t(c, 'field.description'),
+                            value: c.data.record.description || '—',
+                        },
+                        {
+                            id: 'mode',
+                            label: t(c, 'field.roleMode'),
+                            value: t(c, 'roles.managedWithVersion').replace('{version}', String(c.data.record.templateVersion ?? 0)),
+                        },
+                        {
+                            id: 'health',
+                            label: t(c, 'field.state'),
+                            value: Badge({
+                                label: c.data.record.healthy ? t(c, 'roles.healthy') : t(c, 'roles.stale'),
+                                tone: c.data.record.healthy ? 'positive' : 'warning',
+                            }),
+                        },
+                    ],
+                }),
+            }),
+            ...(c.data.permissions.clone
+                ? [
+                    Section({
+                        title: t(c, 'roles.cloneTitle'),
+                        description: t(c, 'roles.cloneHint'),
+                        body: RecordModalForm({
+                            kind: c.kind,
+                            fields: [
+                                field(c, {
+                                    name: 'cloneName',
+                                    label: t(c, 'field.name'),
+                                    value: `${c.data.record.name} · ${t(c, 'roles.custom')}`,
+                                    required: true,
+                                }, true),
+                            ],
+                            command: 'clone',
+                            actions: [
+                                Button({ label: t(c, 'action.cloneRole'), variant: 'primary', type: 'submit' }),
+                            ],
+                        }),
+                    }),
+                ]
+                : []),
+        ],
+    })
+    : Section({
+        title: t(c, 'roles.infoTitle'),
+        body: RecordModalForm({
+            kind: c.kind,
+            fields: identityFields(c),
+            command: 'save',
+            actions: canWrite(c)
+                ? [Button({ label: t(c, 'action.save'), variant: 'primary', type: 'submit' })]
+                : [],
+        }),
+    });
+const RISK_TONE = {
+    read: 'neutral',
+    operate: 'info',
+    approve: 'info',
+    configure: 'warning',
+    sensitive: 'warning',
+    security: 'danger',
+};
+/**
+ * What the template is made of, in business words.
+ *
+ * Each bundle says how much it lets a holder do, and a bundle the template did not
+ * name — a lookup pulled in so a screen can fill its dropdowns — says which bundle
+ * brought it.
+ */
+const bundlesTab = (c) => {
+    const rows = c.data.templateBundles ??
+        c.data.sources.map((row) => ({
+            key: String(row.fnKey),
+            label: String(row.work),
+            risk: 'read',
+            via: 'direct',
+            includedBy: null,
+        }));
+    return Stack({
+        gap: 'default',
+        items: [
+            ...(c.data.tier === 'security'
+                ? [
+                    Notice({
+                        tone: 'warning',
+                        title: t(c, 'roles.securityTierTitle'),
+                        message: t(c, 'roles.securityTierHint'),
+                    }),
+                ]
+                : []),
+            rows.length
+                ? DataTable({
+                    rows,
+                    id: (row) => row.key,
+                    columns: [
+                        {
+                            key: 'bundle',
+                            label: t(c, 'preview.bundle'),
+                            priority: 'primary',
+                            cell: (row) => row.label,
+                        },
+                        ...(c.data.templateBundles
+                            ? [
+                                {
+                                    key: 'risk',
+                                    label: t(c, 'roles.riskColumn'),
+                                    cell: (row) => Badge({ label: t(c, `risk.${row.risk}`), tone: RISK_TONE[row.risk] ?? 'neutral' }),
+                                },
+                            ]
+                            : []),
+                    ],
+                })
+                : Notice({ tone: 'info', title: t(c, 'roles.noSources'), message: '' }),
+        ],
+    });
+};
+/** The screens a holder of this role can open, and the ones it opens without their work. */
+const screensTab = (c) => SurfaceAccessView({
+    t: (key, params) => c.t(key, params),
+    surfaces: c.data.surfaces ?? [],
+    showVia: false,
+    empty: { title: t(c, 'surface.emptyTitle'), message: t(c, 'roles.screensEmptyHint') },
+});
+/** Where a managed role's authority came from, one row per grant. */
+const sourcesTab = (c) => c.data.sources.length
+    ? DataTable({
+        rows: c.data.sources,
+        id: (row) => String(row.fnKey),
+        columns: [
+            {
+                key: 'work',
+                label: t(c, 'preview.bundle'),
+                priority: 'primary',
+                cell: (row) => String(row.work),
+            },
+            {
+                key: 'source',
+                label: t(c, 'roles.sourceColumn'),
+                cell: (row) => row.sourceKind === 'legacy-direct'
+                    ? t(c, 'roles.sourceDirect')
+                    : `${t(c, 'roles.sourceTemplate')} · v${String(row.sourceVersion ?? 0)}`,
+            },
+        ],
+    })
+    : Notice({ tone: 'info', title: t(c, 'roles.noSources'), message: '' });
+const TONE_MARK = { admin: ' ⚙', sensitive: ' ⚠' };
+/**
+ * Everything a custom role may hold, on one form saved once. Business groups are
+ * open sections, each area is one row, and what the area hands out lies across
+ * that row under a short name — the row already says which area. Opening areas
+ * one at a time was one more step for every area a person wanted to touch.
+ */
+const permissionsTab = (c) => {
+    if (!c.data.permissions.grant)
+        return Notice({ tone: 'info', title: t(c, 'users.readOnlyTitle'), message: t(c, 'roles.grantReadOnly') });
+    const bundles = c.data.bundles;
+    const ticked = (bundle) => c.draftChecked(bundleFieldName(bundle), '1', bundle.held === true);
+    const held = bundles.filter(ticked);
+    /** One box that stands for every bundle under a name prefix, ticked when all of them are. */
+    const allOf = (prefix, members, label) => ({
+        name: `${CHECK_ALL}${prefix}`,
+        value: '1',
+        label,
+        checked: members.length > 0 && members.every(ticked),
+    });
+    const sensitive = held.filter((bundle) => bundle.tone === 'sensitive').length;
+    const groups = c.data.groups
+        .map((group) => ({
+        ...group,
+        modules: [
+            ...new Set(bundles.filter((bundle) => bundle.group === group.id).map((bundle) => String(bundle.module))),
+        ],
+    }))
+        .filter((group) => group.modules.length);
+    return Stack({
+        gap: 'default',
+        items: [
+            Section({
+                title: t(c, 'roles.permissionsSummary'),
+                body: DescriptionList({
+                    columns: 3,
+                    items: [
+                        {
+                            id: 'areas',
+                            label: t(c, 'roles.areasHeld'),
+                            value: String(new Set(held.map((bundle) => String(bundle.module))).size),
+                        },
+                        { id: 'bundles', label: t(c, 'roles.bundlesHeld'), value: String(held.length) },
+                        {
+                            id: 'sensitive',
+                            label: t(c, 'roles.sensitiveHeld'),
+                            value: Badge({
+                                label: sensitive ? String(sensitive) : t(c, 'roles.sensitiveNone'),
+                                tone: sensitive ? 'danger' : 'positive',
+                            }),
+                        },
+                    ],
+                }),
+            }),
+            Section({
+                title: t(c, 'roles.permissionsTitle'),
+                description: t(c, 'roles.permissionsHint'),
+                body: RecordModalForm({
+                    kind: c.kind,
+                    fields: [
+                        ...groups.map((group) => ({
+                            id: `user-role-group-${String(group.id)}`,
+                            name: `group_${String(group.id)}`,
+                            label: String(group.label),
+                            // Open from the start: folding a group is the reader's choice, never a step.
+                            open: true,
+                            fields: [
+                                // The whole section at once, before its rows.
+                                field(c, {
+                                    name: `group_all_${String(group.id)}`,
+                                    label: t(c, 'roles.selectGroup'),
+                                    type: 'checkbox-group',
+                                    span: 'full',
+                                    options: [
+                                        allOf(`bundle:${String(group.id)}:`, bundles.filter((bundle) => bundle.group === group.id), t(c, 'roles.selectAll')),
+                                    ],
+                                }),
+                                ...group.modules.map((module) => {
+                                    const own = bundles.filter((bundle) => String(bundle.module) === module);
+                                    return field(c, {
+                                        name: `module_${module}`,
+                                        label: String(own[0]?.area ?? module),
+                                        type: 'checkbox-group',
+                                        span: 'full',
+                                        options: [
+                                            // The whole row at once, leading the row it stands for.
+                                            allOf(`bundle:${String(group.id)}:${module}:`, own, t(c, 'roles.selectAll')),
+                                            ...own.map((bundle) => ({
+                                                name: bundleFieldName(bundle),
+                                                value: '1',
+                                                label: `${String(bundle.short)}${TONE_MARK[String(bundle.tone)] ?? ''}`,
+                                                checked: bundle.held === true,
+                                            })),
+                                        ],
+                                    });
+                                }),
+                            ],
+                        })),
+                    ],
+                    command: 'setBundles',
+                    actions: [Button({ label: t(c, 'action.savePermissions'), variant: 'primary', type: 'submit' })],
+                }),
+            }),
+        ],
+    });
+};
+// Group and module lead the name so an "all" box selects a section or a row by
+// prefix; the colon ends each part, so `stock:` never reaches `stock_staff_channel:`.
+const bundleFieldName = (bundle) => `bundle:${String(bundle.group)}:${String(bundle.module)}:${String(bundle.key)}`;
+/** Who holds this role, wherever they hold it. */
+const holdersTab = (c) => c.data.holders.length
+    ? DataTable({
+        rows: c.data.holders,
+        id: (row) => String(row.id),
+        columns: [
+            {
+                key: 'name',
+                label: t(c, 'users.title'),
+                priority: 'primary',
+                cell: (row) => `${String(row.name)} · ${String(row.login)}`,
+            },
+            {
+                key: 'state',
+                label: t(c, 'field.state'),
+                cell: (row) => Badge({
+                    label: row.active ? t(c, 'state.active') : t(c, 'state.archived'),
+                    tone: row.active ? 'positive' : 'neutral',
+                }),
+            },
+        ],
+    })
+    : Notice({ tone: 'info', title: t(c, 'roles.noHolders'), message: '' });
+export const roleModalDefinition = {
+    kind: 'user.role',
+    labels: () => USER_RECORD_MODAL_LABELS[pageLang()],
+    size: 'large',
+    context: {
+        fn: 'user.managedRoleModalContext',
+        input: (id, creating) => (creating ? { locale: pageLang() } : { id, locale: pageLang() }),
+    },
+    title: (c) => (c.creating ? t(c, 'action.createRole') : c.data.record.name),
+    description: (c) => (c.creating ? t(c, 'roles.createSubtitle') : c.data.record.description || null),
+    status: (c) => c.creating
+        ? undefined
+        : Badge({
+            label: t(c, c.data.record.healthy ? 'roles.healthy' : 'roles.stale'),
+            tone: c.data.record.healthy ? 'positive' : 'warning',
+        }),
+    header,
+    body: (c) => (c.creating ? createView(c) : ''),
+    tabs: [
+        {
+            id: 'info',
+            label: (c) => t(c, 'tab.roleInfo'),
+            visible: (c) => !c.creating && !managed(c),
+            view: infoTab,
+        },
+        {
+            id: 'bundles',
+            label: (c) => t(c, 'tab.roleBundles'),
+            visible: (c) => !c.creating && managed(c),
+            view: bundlesTab,
+        },
+        {
+            id: 'screens',
+            label: (c) => t(c, 'tab.screens'),
+            visible: () => false,
+            view: screensTab,
+        },
+        {
+            id: 'sources',
+            label: (c) => t(c, 'tab.roleSources'),
+            // The bundle view replaces the per-grant one where the context carries it.
+            visible: () => false,
+            view: sourcesTab,
+        },
+        {
+            id: 'permissions',
+            label: (c) => t(c, 'tab.rolePermissions'),
+            visible: (c) => !c.creating && !managed(c),
+            view: permissionsTab,
+        },
+        {
+            id: 'users',
+            label: (c) => `${t(c, 'tab.roleUsers')} ${String(c.data.holders.length)}`,
+            visible: (c) => !c.creating,
+            view: holdersTab,
+        },
+    ],
+    commands: {
+        create: {
+            fn: 'user.saveRole',
+            input: (form) => ({
+                id: uuid(),
+                name: text(form, 'name'),
+                description: text(form, 'description') || null,
+            }),
+            after: 'open',
+            openTab: 'info',
+            created: (value) => {
+                const row = (value ?? {});
+                return typeof row.id === 'string' ? row.id : null;
+            },
+        },
+        save: {
+            fn: 'user.saveRole',
+            input: (form, c) => ({
+                id: c.id,
+                name: text(form, 'name'),
+                description: text(form, 'description') || null,
+            }),
+            after: 'reload',
+        },
+        clone: {
+            fn: 'user.cloneManagedRole',
+            input: (form, c) => ({
+                id: uuid(),
+                sourceRoleId: c.id,
+                name: text(form, 'cloneName'),
+                expectedAuthorizationRevision: c.data.revision,
+                idempotencyKey: uuid(),
+            }),
+            // A copy is a new role; the modal moves to it, as a create does.
+            after: 'open',
+            openTab: 'info',
+            created: (value) => {
+                const row = (value ?? {});
+                return typeof row.id === 'string' ? row.id : null;
+            },
+        },
+        setBundles: {
+            fn: 'user.setRoleBundles',
+            input: (form, c) => ({
+                roleId: c.id,
+                bundleKeys: c.data.bundles
+                    .filter((bundle) => ['1', 'on', 'true'].includes(String(form.get(bundleFieldName(bundle)) ?? '')))
+                    .map((bundle) => String(bundle.key)),
+                expectedAuthorizationRevision: c.data.revision,
+                idempotencyKey: uuid(),
+            }),
+            after: 'reload',
+        },
+    },
+};
+export const roleModal = createRecordModal(roleModalDefinition);
+//# sourceMappingURL=role-modal-view.js.map

package/dist/modules/user_backend/modal/role-modal-view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-modal-view.js","sourceRoot":"","sources":["../../../../../../../../packages/ketsuite/src/modules/user_backend/modal/role-modal-view.tsx"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,+EAA+E;AAC/E,qEAAqE;AACrE,oEAAoE;AACpE,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,+EAA+E;AAC/E,wBAAwB;AACxB,EAAE;AACF,uEAAuE;AAEvE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AAG7G,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,oCAAqC,CAAA;AAElF,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,yCAA0C,CAAA;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAuB,CAAA;AAiDzD,MAAM,IAAI,GAAG,GAAW,EAAE,CACxB,OAAO,MAAM,KAAK,WAAW,IAAI,YAAY,IAAI,MAAM;IACrD,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE;IACrB,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;AAEzE,MAAM,QAAQ,GAAG,GAAgB,EAAE,CACjC,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,eAAe,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;AAEzF,MAAM,CAAC,GAAG,CAAC,CAAU,EAAE,GAAW,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAA;AAEzE,MAAM,IAAI,GAAG,CAAC,IAAc,EAAE,IAAY,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;AAE1F,MAAM,OAAO,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAA;AAEzE,+DAA+D;AAC/D,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAW,EAAE,CACvC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AAEnG,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,KAA6B,EAAE,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAc,EAAE,CAAC,CAAC;IAChG,GAAG,KAAK;IACR,EAAE,EAAE,aAAa,KAAK,CAAC,IAAI,EAAE;IAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/F,OAAO,EACL,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAC7B,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC9B,GAAG,MAAM;YACT,wEAAwE;YACxE,4EAA4E;YAC5E,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC;gBACzC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI;gBACzB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;SAC5F,CAAC,CAAC;QACL,CAAC,CAAC,KAAK,CAAC,OAAO;IACnB,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;IAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ;CAC/C,CAAC,CAAA;AAEF,qFAAqF;AACrF,MAAM,cAAc,GAAG,CAAC,CAAU,EAAgB,EAAE,CAAC;IACnD,KAAK,CAAC,CAAC,EAAE;QACP,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;QACzB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;QACzB,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,MAAM;KACb,CAAC;IACF,KAAK,CAAC,CAAC,EAAE;QACP,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC;QAChC,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;QAChC,IAAI,EAAE,MAAM;KACb,CAAC;CACH,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,CAAU,EAAY,EAAE,CAC1C,OAAO,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC;IAC7B,IAAI,EAAE,eAAe,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QACzB,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;KAC5F,CAAC;CACH,CAAC,CAAA;AAEJ,yFAAyF;AACzF,MAAM,MAAM,GAAG,CAAC,CAAU,EAAY,EAAE,CACtC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;IACjC,CAAC,CAAC,EAAE;IACJ,CAAC,CAAC,MAAM,CAAC;QACL,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;QAC1B,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,uBAAuB,CAAC;KACvC,CAAC,CAAA;AAER;;;;;;GAMG;AACH,MAAM,OAAO,GAAG,CAAC,CAAU,EAAY,EAAE,CACvC,OAAO,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,KAAK,CAAC;QACJ,GAAG,EAAE,SAAS;QACd,KAAK,EAAE;YACL,OAAO,CAAC;gBACN,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC;gBAC9B,IAAI,EAAE,eAAe,CAAC;oBACpB,OAAO,EAAE,CAAC;oBACV,KAAK,EAAE;wBACL,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;wBACpE;4BACE,EAAE,EAAE,aAAa;4BACjB,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC;4BAChC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,GAAG;yBACxC;wBACD;4BACE,EAAE,EAAE,MAAM;4BACV,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC;4BAC7B,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,OAAO,CAC7C,WAAW,EACX,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC,CAC3C;yBACF;wBACD;4BACE,EAAE,EAAE,QAAQ;4BACZ,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;4BAC1B,KAAK,EAAE,KAAK,CAAC;gCACX,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;gCAC1E,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;6BACrD,CAAC;yBACH;qBACF;iBACF,CAAC;aACH,CAAC;YACF,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK;gBAC1B,CAAC,CAAC;oBACE,OAAO,CAAC;wBACN,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC;wBAC/B,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC;wBACpC,IAAI,EAAE,eAAe,CAAC;4BACpB,IAAI,EAAE,CAAC,CAAC,IAAI;4BACZ,MAAM,EAAE;gCACN,KAAK,CACH,CAAC,EACD;oCACE,IAAI,EAAE,WAAW;oCACjB,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;oCACzB,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE;oCACxD,QAAQ,EAAE,IAAI;iCACf,EACD,IAAI,CACL;6BACF;4BACD,OAAO,EAAE,OAAO;4BAChB,OAAO,EAAE;gCACP,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;6BAChF;yBACF,CAAC;qBACH,CAAC;iBACH;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;IACJ,CAAC,CAAC,OAAO,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC;QAC9B,IAAI,EAAE,eAAe,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;YACzB,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAClB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC9E,CAAC,CAAC,EAAE;SACP,CAAC;KACH,CAAC,CAAA;AAER,MAAM,SAAS,GAA8D;IAC3E,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,MAAM;IACf,SAAS,EAAE,SAAS;IACpB,SAAS,EAAE,SAAS;IACpB,QAAQ,EAAE,QAAQ;CACnB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,CAAU,EAAY,EAAE;IAC1C,MAAM,IAAI,GACR,CAAC,CAAC,IAAI,CAAC,eAAe;QACtB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC3B,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YACtB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,MAAe;YACrB,GAAG,EAAE,QAAiB;YACtB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC,CAAA;IACL,OAAO,KAAK,CAAC;QACX,GAAG,EAAE,SAAS;QACd,KAAK,EAAE;YACL,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU;gBAC5B,CAAC,CAAC;oBACE,MAAM,CAAC;wBACL,IAAI,EAAE,SAAS;wBACf,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB,CAAC;wBACtC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC;qBACxC,CAAC;iBACH;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,CAAC,MAAM;gBACT,CAAC,CAAC,SAAS,CAAiB;oBACxB,IAAI;oBACJ,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG;oBACpB,OAAO,EAAE;wBACP;4BACE,GAAG,EAAE,QAAQ;4BACb,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC;4BAC7B,QAAQ,EAAE,SAAS;4BACnB,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK;yBACzB;wBACD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe;4BACxB,CAAC,CAAC;gCACE;oCACE,GAAG,EAAE,MAAM;oCACX,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC;oCAC/B,IAAI,EAAE,CAAC,GAAmB,EAAE,EAAE,CAC5B,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;iCACrF;6BACF;4BACH,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF,CAAC;gBACJ,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;SAC1E;KACF,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,4FAA4F;AAC5F,MAAM,UAAU,GAAG,CAAC,CAAU,EAAY,EAAE,CAC1C,iBAAiB,CAAC;IAChB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE;IAC/B,OAAO,EAAE,KAAK;IACd,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC,EAAE;CACtF,CAAC,CAAA;AAEJ,qEAAqE;AACrE,MAAM,UAAU,GAAG,CAAC,CAAU,EAAY,EAAE,CAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;IACnB,CAAC,CAAC,SAAS,CAAS;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO;QACpB,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9B,OAAO,EAAE;YACP;gBACE,GAAG,EAAE,MAAM;gBACX,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC;gBAC7B,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;aAChC;YACD;gBACE,GAAG,EAAE,QAAQ;gBACb,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC;gBACjC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,UAAU,KAAK,eAAe;oBAChC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC;oBAC5B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,EAAE;aAC7E;SACF;KACF,CAAC;IACJ,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;AAE3E,MAAM,SAAS,GAA2B,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;AAE1E;;;;;GAKG;AACH,MAAM,cAAc,GAAG,CAAC,CAAU,EAAY,EAAE;IAC9C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK;QAC3B,OAAO,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,CAAC,CAAA;IAC3G,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAA;IAC9B,MAAM,MAAM,GAAG,CAAC,MAAc,EAAW,EAAE,CACzC,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACnC,6FAA6F;IAC7F,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,OAAiB,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE;QAC7B,KAAK,EAAE,GAAG;QACV,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;KACrD,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,MAAM,CAAA;IAC7E,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM;SACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,GAAG,KAAK;QACR,OAAO,EAAE;YACP,GAAG,IAAI,GAAG,CACR,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAC7F;SACF;KACF,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1C,OAAO,KAAK,CAAC;QACX,GAAG,EAAE,SAAS;QACd,KAAK,EAAE;YACL,OAAO,CAAC;gBACN,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,0BAA0B,CAAC;gBACvC,IAAI,EAAE,eAAe,CAAC;oBACpB,OAAO,EAAE,CAAC;oBACV,KAAK,EAAE;wBACL;4BACE,EAAE,EAAE,OAAO;4BACX,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC;4BAC9B,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;yBACzE;wBACD,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;wBAC/E;4BACE,EAAE,EAAE,WAAW;4BACf,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAAC;4BAClC,KAAK,EAAE,KAAK,CAAC;gCACX,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAAC;gCAClE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;6BACxC,CAAC;yBACH;qBACF;iBACF,CAAC;aACH,CAAC;YACF,OAAO,CAAC;gBACN,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC;gBACrC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,uBAAuB,CAAC;gBAC1C,IAAI,EAAE,eAAe,CAAC;oBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE;wBACN,GAAG,MAAM,CAAC,GAAG,CACX,CAAC,KAAK,EAAc,EAAE,CAAC,CAAC;4BACtB,EAAE,EAAE,mBAAmB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;4BACzC,IAAI,EAAE,SAAS,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;4BACjC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;4BAC1B,6EAA6E;4BAC7E,IAAI,EAAE,IAAI;4BACV,MAAM,EAAE;gCACN,8CAA8C;gCAC9C,KAAK,CAAC,CAAC,EAAE;oCACP,IAAI,EAAE,aAAa,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;oCACrC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC;oCAChC,IAAI,EAAE,gBAAgB;oCACtB,IAAI,EAAE,MAAM;oCACZ,OAAO,EAAE;wCACP,KAAK,CACH,UAAU,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAC7B,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC,EACrD,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CACxB;qCACF;iCACF,CAAC;gCACF,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;oCAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,CAAA;oCACxE,OAAO,KAAK,CAAC,CAAC,EAAE;wCACd,IAAI,EAAE,UAAU,MAAM,EAAE;wCACxB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,MAAM,CAAC;wCACrC,IAAI,EAAE,gBAAgB;wCACtB,IAAI,EAAE,MAAM;wCACZ,OAAO,EAAE;4CACP,wDAAwD;4CACxD,KAAK,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;4CAC5E,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gDACtB,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC;gDAC7B,KAAK,EAAE,GAAG;gDACV,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;gDACvE,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI;6CAC9B,CAAC,CAAC;yCACJ;qCACF,CAAC,CAAA;gCACJ,CAAC,CAAC;6BACH;yBACF,CAAC,CACH;qBACF;oBACD,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;iBACjG,CAAC;aACH,CAAC;SACH;KACF,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,+EAA+E;AAC/E,sFAAsF;AACtF,MAAM,eAAe,GAAG,CAAC,MAAc,EAAU,EAAE,CACjD,UAAU,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;AAEjF,kDAAkD;AAClD,MAAM,UAAU,GAAG,CAAC,CAAU,EAAY,EAAE,CAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;IACnB,CAAC,CAAC,SAAS,CAAS;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO;QACpB,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE;YACP;gBACE,GAAG,EAAE,MAAM;gBACX,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;gBAC1B,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;aAC5D;YACD;gBACE,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;gBAC1B,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CACZ,KAAK,CAAC;oBACJ,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC;oBACjE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;iBAC1C,CAAC;aACL;SACF;KACF,CAAC;IACJ,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;AAE3E,MAAM,CAAC,MAAM,mBAAmB,GAAyC;IACvE,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,QAAQ,EAAE,CAAC;IAClD,IAAI,EAAE,OAAO;IACb,OAAO,EAAE;QACP,EAAE,EAAE,8BAA8B;QAClC,KAAK,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;KAC1F;IACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC3E,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC;IACnG,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CACZ,CAAC,CAAC,QAAQ;QACR,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,KAAK,CAAC;YACJ,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC;YACpE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SACrD,CAAC;IACR,MAAM;IACN,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,IAAI,EAAE;QACJ;YACE,EAAE,EAAE,MAAM;YACV,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC;YAClC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1C,IAAI,EAAE,OAAO;SACd;QACD;YACE,EAAE,EAAE,SAAS;YACb,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC;YACrC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC;YACzC,IAAI,EAAE,UAAU;SACjB;QACD;YACE,EAAE,EAAE,SAAS;YACb,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;YACjC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK;YACpB,IAAI,EAAE,UAAU;SACjB;QACD;YACE,EAAE,EAAE,SAAS;YACb,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC;YACrC,2EAA2E;YAC3E,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK;YACpB,IAAI,EAAE,UAAU;SACjB;QACD;YACE,EAAE,EAAE,aAAa;YACjB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAAC;YACzC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1C,IAAI,EAAE,cAAc;SACrB;QACD;YACE,EAAE,EAAE,OAAO;YACX,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACzE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;YAC3B,IAAI,EAAE,UAAU;SACjB;KACF;IACD,QAAQ,EAAE;QACR,MAAM,EAAE;YACN,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAChB,EAAE,EAAE,IAAI,EAAE;gBACV,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;gBACxB,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,IAAI;aAC/C,CAAC;YACF,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAqB,CAAA;gBAC7C,OAAO,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YACnD,CAAC;SACF;QACD,IAAI,EAAE;YACJ,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;gBACxB,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,IAAI;aAC/C,CAAC;YACF,KAAK,EAAE,QAAQ;SAChB;QACD,KAAK,EAAE;YACL,EAAE,EAAE,uBAAuB;YAC3B,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnB,EAAE,EAAE,IAAI,EAAE;gBACV,YAAY,EAAE,CAAC,CAAC,EAAE;gBAClB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;gBAE7B,6BAA6B,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;gBAC9C,cAAc,EAAE,IAAI,EAAE;aACvB,CAAC;YACF,iEAAiE;YACjE,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAqB,CAAA;gBAC7C,OAAO,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YACnD,CAAC;SACF;QACD,UAAU,EAAE;YACV,EAAE,EAAE,qBAAqB;YACzB,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnB,MAAM,EAAE,CAAC,CAAC,EAAE;gBACZ,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO;qBACvB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;qBACjG,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAEtC,6BAA6B,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;gBAC9C,cAAc,EAAE,IAAI,EAAE;aACvB,CAAC;YACF,KAAK,EAAE,QAAQ;SAChB;KACF;CACF,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,iBAAiB,CAAC,mBAAmB,CAAC,CAAA"}

package/dist/modules/user_backend/modal/user-modal-view.d.ts

@@ -1,4 +1,5 @@
 import type { RecordModalDefinition } from '../../../ui/client/record-modal.tsx';
+import type { SurfaceAccess } from './access-surfaces.tsx';
 type AnyRow = Record<string, any>;
 export type UserRecord = {
     id: string;
@@ -8,17 +9,61 @@ export type UserRecord = {
     accessKind: string;
     active: boolean;
     superuser: boolean;
+    lastLoginAt: string | null;
+    invitationSentAt?: string | null;
+    passwordReady: boolean;
+    defaultCompanyId: string | null;
+    defaultBranchId: string | null;
+    /** When a break-glass grant ends; null for a standing superuser or none at all. */
+    superuserExpiresAt?: string | null;
+    superuserReason?: string | null;
 };
+/** The last call this person was refused, and the roles that would have allowed it. */
+export type LastDenial = {
+    fn: string;
+    /** The area the refused function belongs to, in the reader's language. */
+    label: string;
+    /** The screen it was refused on, when the call came from one. */
+    surface: string | null;
+    at: string;
+    count: number;
+    templates: string[];
+};
+/** How this tenant hands someone a new credential: a link to their own inbox, or a code shown once here. */
+export type CredentialDelivery = 'email' | 'oneTime' | 'both';
 export type UserModalData = {
     record: UserRecord;
     companies: AnyRow[];
     branches: AnyRow[];
     assignments: AnyRow[];
+    audit: AnyRow[];
+    memberships: {
+        companies: string[];
+        branches: string[];
+    };
+    roleCoverage: Record<string, AnyRow[]>;
     roles: AnyRow[];
     scopeKinds: string[];
     revision: number;
     permissions: Record<string, boolean>;
     lang: 'vi' | 'en';
+    /** Who is reading: the guards are about the reader as much as the person read. */
+    actor?: {
+        self: boolean;
+        superuser: boolean;
+    };
+    /** What this person can open and work on, screen by screen. */
+    surfaces?: SurfaceAccess[];
+    lastDenial?: LastDenial | null;
+    credentialDelivery?: CredentialDelivery;
+    /** Verified external identity state supplied by the deployment adapter. */
+    externalCredential?: {
+        state: 'pending' | 'ready' | 'failed' | 'cancelled';
+        activated: boolean;
+        operationId: string | null;
+        claimable: boolean;
+        emailState: 'pending' | 'sending' | 'accepted' | 'uncertain' | 'failed' | null;
+    };
 };
 export declare const userModalDefinition: RecordModalDefinition<UserModalData>;
 export declare const userModal: () => import("@ketvietlab/ketjs-view").IslandController;

package/dist/modules/user_backend/modal/user-modal-view.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-modal-view.d.ts","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/user_backend/modal/user-modal-view.tsx"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAsB,qBAAqB,EAAE,MAAM,qCAAqC,CAAA;AAQpG,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAEjC,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,OAAO,CAAA;IACf,SAAS,EAAE,OAAO,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,UAAU,CAAA;IAClB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;CAClB,CAAA;AAwQD,eAAO,MAAM,mBAAmB,EAAE,qBAAqB,CAAC,aAAa,CA6EpE,CAAA;AAED,eAAO,MAAM,SAAS,yDAAyC,CAAA"}
+{"version":3,"file":"user-modal-view.d.ts","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/user_backend/modal/user-modal-view.tsx"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAsB,qBAAqB,EAAE,MAAM,qCAAqC,CAAA;AAQpG,OAAO,KAAK,EAAE,aAAa,EAAiB,MAAM,uBAAuB,CAAA;AAGzE,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAEjC,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,OAAO,CAAA;IACf,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,aAAa,EAAE,OAAO,CAAA;IACtB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,mFAAmF;IACnF,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAChC,CAAA;AAED,uFAAuF;AACvF,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAA;IACb,iEAAiE;IACjE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,4GAA4G;AAC5G,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAA;AAE7D,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,UAAU,CAAA;IAClB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,WAAW,EAAE;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;IACxD,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACtC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;IACjB,kFAAkF;IAClF,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAA;IAC7C,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;IAC1B,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IAC9B,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IACvC,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE;QACnB,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAA;QACnD,SAAS,EAAE,OAAO,CAAA;QAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;QAC1B,SAAS,EAAE,OAAO,CAAA;QAClB,UAAU,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,IAAI,CAAA;KAC/E,CAAA;CACF,CAAA;AA85CD,eAAO,MAAM,mBAAmB,EAAE,qBAAqB,CAAC,aAAa,CAuQpE,CAAA;AAED,eAAO,MAAM,SAAS,yDAAyC,CAAA"}