@masterteam/delegations 0.0.35 → 0.0.36

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@masterteam/delegations",
-  "version": "0.0.35",
+  "version": "0.0.36",
   "publishConfig": {
     "directory": "../../../dist/masterteam/delegations",
     "linkDirectory": false,
@@ -20,9 +20,9 @@
     "tailwindcss": "^4.2.2",
     "tailwindcss-primeui": "^0.6.1",
     "@ngxs/store": "^20.1.0",
-    "@masterteam/icons": "^0.0.15",
     "@masterteam/components": "^0.0.179",
-    "@masterteam/forms": "^0.0.81"
+    "@masterteam/forms": "^0.0.81",
+    "@masterteam/icons": "^0.0.15"
   },
   "sideEffects": false,
   "exports": {

package/types/masterteam-delegations.d.ts

@@ -1,9 +1,9 @@
-import * as _masterteam_components_entities from '@masterteam/components/entities';
-import { EntityUserValue } from '@masterteam/components/entities';
 import * as _masterteam_delegations from '@masterteam/delegations';
 import * as _angular_core from '@angular/core';
 import { OnInit } from '@angular/core';
 import { Popover } from 'primeng/popover';
+import * as _masterteam_components_entities from '@masterteam/components/entities';
+import { EntityUserValue } from '@masterteam/components/entities';
 import { PageHeaderTab } from '@masterteam/components/page-header';
 import { TableAction, TableStatusMapValue, ColumnDef } from '@masterteam/components/table';
 import { FormControl } from '@angular/forms';
@@ -11,7 +11,6 @@ import { HttpContext, HttpInterceptorFn } from '@angular/common/http';
 import { DynamicFormConfig } from '@masterteam/components';
 import { ModalRef } from '@masterteam/components/dialog';
 import { ModalService } from '@masterteam/components/modal';
-import { TreeNode, TreeActionEvent } from '@masterteam/components/tree';
 import * as rxjs from 'rxjs';
 import { StateContext } from '@ngxs/store';
 
@@ -74,6 +73,8 @@ interface DelegationScopeTarget {
     applicationKey: string;
     targetType: string;
     targetKey: string;
+    /** Backend-localized name (preferred display source in the new contract). */
+    name?: DelegationDisplayValue;
     parentTargetType?: string | null;
     parentTargetKey?: string | null;
     parentDisplayName?: DelegationDisplayValue;
@@ -95,6 +96,8 @@ interface DelegationScopeAction {
     applicationKey: string;
     operationKey: string;
     operationKind: string;
+    /** Backend-localized name (preferred display source in the new contract). */
+    name?: DelegationDisplayValue;
     displayName?: DelegationDisplayValue;
     displayLabel?: DelegationDisplayValue;
     operationDisplayName?: DelegationDisplayValue;
@@ -158,7 +161,60 @@ interface DelegationScopeHierarchyGroup {
     sortOrder?: number | null;
     targets: DelegationScopeHierarchyTarget[];
 }
+/**
+ * New `scope/options` contract (doc 03): `permissions` is a Template -> Level ->
+ * Module hierarchy where Level and Level Module are both selectable permission
+ * surfaces, each carrying its own backend-filtered `operations`. `appAccessibility`
+ * lists optional accessibility grants with backend-localized names.
+ */
+interface DelegationScopeModuleNode {
+    applicationKey: string;
+    targetType: string;
+    targetKey: string;
+    name?: DelegationDisplayValue;
+    legacyModuleId?: number | null;
+    levelId?: number | null;
+    levelModuleId?: number | null;
+    domainModuleId?: number | null;
+    targetId?: number | null;
+    moduleKey?: string | null;
+    permissionModuleType?: string | null;
+    permissionTargetId?: number | null;
+    sortOrder?: number | null;
+    operations?: DelegationScopeAction[] | null;
+}
+interface DelegationScopeLevelNode {
+    applicationKey: string;
+    targetType: string;
+    targetKey: string;
+    name?: DelegationDisplayValue;
+    legacyModuleId?: number | null;
+    levelId?: number | null;
+    targetId?: number | null;
+    permissionModuleType?: string | null;
+    permissionTargetId?: number | null;
+    sortOrder?: number | null;
+    operations?: DelegationScopeAction[] | null;
+    modules?: DelegationScopeModuleNode[] | null;
+}
+interface DelegationScopePermissionGroup {
+    groupType: string;
+    groupKey: string;
+    name?: DelegationDisplayValue;
+    templateId?: number | null;
+    sortOrder?: number | null;
+    levels?: DelegationScopeLevelNode[] | null;
+}
+interface DelegationAppAccessibility {
+    accessibilityGroupId?: number | null;
+    applicationKey: string;
+    accessibilityKey: string;
+    name?: DelegationDisplayValue;
+    labelKey?: string | null;
+}
 interface DelegationScopeOptions {
+    permissions?: DelegationScopePermissionGroup[] | null;
+    appAccessibility?: DelegationAppAccessibility[] | null;
     hierarchy?: DelegationScopeHierarchyGroup[] | null;
     grants?: DelegationGrant[] | null;
     metadata?: Record<string, unknown>;
@@ -314,12 +370,18 @@ interface DelegationsStateModel extends LoadingStateShape<DelegationsActionKey>
 }
 
 /**
- * Topbar surface for the delegation runtime (doc 05, 09).
+ * Topbar surface + controller for the delegation runtime (doc 05, 09).
+ *
+ * Always-mounted controller: loads the delegation candidates and shows the
+ * post-login prompt. Visible trigger states:
+ * - hidden — no candidates, no active session;
+ * - candidates — icon button (matches sibling topbar icons) + count badge;
+ * - active — delegator avatar + "Acting on behalf of {delegator}".
  *
- * State A — no candidates, no active session: renders nothing.
- * State B — candidates exist, no active session: lets the user start a session.
- * State C — active delegated session: shows "Acting on behalf of {delegator}" +
- *           "Executed by {actual user}", plus Back / Switch.
+ * The popover content is the shared {@link DelegationMenuPanel}, which can also
+ * be embedded directly in a host menu (e.g. the user-avatar dropdown). Set
+ * `headless` to keep this controller mounted (loading + prompt) while rendering
+ * the panel elsewhere.
  */
 declare class TopbarDelegationMenu implements OnInit {
     /** Path to the management page, e.g. `/control-panel/delegations` or `/delegations`. */
@@ -327,10 +389,16 @@ declare class TopbarDelegationMenu implements OnInit {
     readonly compact: _angular_core.InputSignal<boolean>;
     readonly showManageLink: _angular_core.InputSignal<boolean>;
     readonly promptOnCandidates: _angular_core.InputSignal<boolean>;
+    /**
+     * Render no visible trigger/popover but keep loading candidates + the prompt.
+     * Use when the delegation menu is embedded elsewhere (e.g. the user dropdown
+     * via {@link DelegationMenuPanel}).
+     */
+    readonly headless: _angular_core.InputSignal<boolean>;
     private readonly facade;
     private readonly modal;
     private readonly transloco;
-    protected readonly popover: _angular_core.Signal<Popover>;
+    protected readonly popover: _angular_core.Signal<Popover | undefined>;
     protected readonly active: _angular_core.Signal<_masterteam_delegations.ActiveDelegationSession | null>;
     protected readonly candidates: _angular_core.Signal<DelegationRow[]>;
     protected readonly hasCandidates: _angular_core.Signal<boolean>;
@@ -340,16 +408,49 @@ declare class TopbarDelegationMenu implements OnInit {
     protected readonly mode: _angular_core.Signal<"active" | "candidates" | "hidden">;
     constructor();
     ngOnInit(): void;
-    protected formatScopeSummary(summary: DelegationRow['scopeSummary']): string;
-    protected userEntity(party: DelegationRow['delegator'] | null | undefined, showEmail?: boolean): _masterteam_components_entities.EntityData;
+    /** Two-letter initials for a delegator avatar (matches the user-menu pattern). */
+    protected initials(party: DelegationRow['delegator'] | null | undefined): string;
     togglePopover(event: Event): void;
-    start(row: DelegationRow, event: MouseEvent): void;
-    switchTo(row: DelegationRow, event: MouseEvent): void;
-    endSession(event: MouseEvent): void;
+    closePopover(): void;
     private openConfirm;
     private openCandidatesPrompt;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<TopbarDelegationMenu, never>;
-    static ɵcmp: _angular_core.ɵɵComponentDeclaration<TopbarDelegationMenu, "mt-topbar-delegation-menu", never, { "managePath": { "alias": "managePath"; "required": false; "isSignal": true; }; "compact": { "alias": "compact"; "required": false; "isSignal": true; }; "showManageLink": { "alias": "showManageLink"; "required": false; "isSignal": true; }; "promptOnCandidates": { "alias": "promptOnCandidates"; "required": false; "isSignal": true; }; }, {}, never, never, true, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<TopbarDelegationMenu, "mt-topbar-delegation-menu", never, { "managePath": { "alias": "managePath"; "required": false; "isSignal": true; }; "compact": { "alias": "compact"; "required": false; "isSignal": true; }; "showManageLink": { "alias": "showManageLink"; "required": false; "isSignal": true; }; "promptOnCandidates": { "alias": "promptOnCandidates"; "required": false; "isSignal": true; }; "headless": { "alias": "headless"; "required": false; "isSignal": true; }; }, {}, never, never, true, never>;
+}
+
+/**
+ * Embeddable delegation menu content (doc 05, 09): renders the candidate /
+ * active-session rows and the start / switch / end actions, with no trigger of
+ * its own. Designed to be dropped inside a host menu (e.g. the user-avatar
+ * dropdown) or the topbar popover. Reads the shared `DelegationSessionFacade`
+ * signals; candidate loading + the post-login prompt stay in the always-mounted
+ * `TopbarDelegationMenu` controller.
+ *
+ * Emits `closeRequested` after any action so the host overlay can dismiss.
+ */
+declare class DelegationMenuPanel {
+    /** Path to the management page, e.g. `/control-panel/delegations` or `/delegations`. */
+    readonly managePath: _angular_core.InputSignal<string>;
+    readonly showManageLink: _angular_core.InputSignal<boolean>;
+    readonly closeRequested: _angular_core.OutputEmitterRef<void>;
+    private readonly facade;
+    private readonly modal;
+    private readonly transloco;
+    protected readonly active: _angular_core.Signal<_masterteam_delegations.ActiveDelegationSession | null>;
+    protected readonly candidates: _angular_core.Signal<DelegationRow[]>;
+    protected readonly hasCandidates: _angular_core.Signal<boolean>;
+    protected readonly onBehalfOf: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
+    protected readonly executedBy: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
+    protected readonly mode: _angular_core.Signal<"active" | "candidates" | "hidden">;
+    /** Two-letter initials for a delegator avatar (matches the user-menu pattern). */
+    protected initials(party: DelegationRow['delegator'] | null | undefined): string;
+    protected start(row: DelegationRow, event: MouseEvent): void;
+    protected switchTo(row: DelegationRow, event: MouseEvent): void;
+    protected endSession(event: MouseEvent): void;
+    protected onManage(): void;
+    private openConfirm;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<DelegationMenuPanel, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<DelegationMenuPanel, "mt-delegation-menu-panel", never, { "managePath": { "alias": "managePath"; "required": false; "isSignal": true; }; "showManageLink": { "alias": "showManageLink"; "required": false; "isSignal": true; }; }, { "closeRequested": "closeRequested"; }, never, never, true, never>;
 }
 
 interface StatusVisual {
@@ -493,6 +594,11 @@ declare class DelegationsList implements OnInit {
     protected readonly emptyStateKey: _angular_core.Signal<string>;
     protected readonly tableActions: _angular_core.Signal<TableAction[]>;
     protected readonly rowActions: _angular_core.WritableSignal<TableAction[]>;
+    /**
+     * Table status accent colors. Kept in visual sync with the canonical palette
+     * in `delegation-status-chip` (its light-mode text colors) so the list table
+     * and the status chip render the same hue for each status.
+     */
     private readonly statusColors;
     protected readonly statusMap: _angular_core.WritableSignal<Record<DelegationEffectiveStatus, TableStatusMapValue>>;
     protected readonly tableColumns: _angular_core.WritableSignal<ColumnDef[]>;
@@ -587,16 +693,17 @@ declare class DelegationDetailDrawer implements OnInit {
     private readonly facade;
     private readonly transloco;
     protected readonly ref: ModalRef;
-    protected readonly tabs: {
-        key: DetailTab;
-        i18n: string;
-    }[];
     protected readonly activeTab: _angular_core.WritableSignal<DetailTab>;
+    protected readonly tabOptions: _angular_core.Signal<{
+        value: DetailTab;
+        label: string;
+    }[]>;
+    private readonly weekdayKeys;
     protected readonly isLoading: _angular_core.Signal<boolean>;
     protected readonly detail: _angular_core.Signal<_masterteam_delegations.DelegationDetail | null>;
     protected readonly row: _angular_core.Signal<_masterteam_delegations.DelegationRow | null>;
     ngOnInit(): void;
-    protected setTab(tab: DetailTab): void;
+    protected formatSpecificDays(days: readonly number[] | null | undefined): string;
     protected approvalLabel(): string;
     protected getScopeTargetLabel(target: DelegationScopeTarget): string;
     protected getScopeActionLabel(action: DelegationScopeAction): string;
@@ -606,29 +713,29 @@ declare class DelegationDetailDrawer implements OnInit {
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<DelegationDetailDrawer, "mt-delegation-detail-drawer", never, { "delegationId": { "alias": "delegationId"; "required": true; "isSignal": true; }; "adminMode": { "alias": "adminMode"; "required": false; "isSignal": true; }; }, {}, never, never, true, never>;
 }
 
-interface DelegationGrantableTargetGroup {
-    key: string;
-    target: DelegationScopeTarget;
-    grants: DelegationGrant[];
-    sortOrder: number;
-}
-interface DelegationGrantableHierarchyGroup {
+type DelegationScopeNodeKind = 'template' | 'level' | 'module' | 'operation';
+interface DelegationScopeTreeNode {
     key: string;
-    groupType: string;
+    kind: DelegationScopeNodeKind;
     displayName?: DelegationDisplayValue;
-    sortOrder: number;
-    targets: DelegationGrantableTargetGroup[];
+    fallbackKey?: string | null;
+    isHighRisk?: boolean;
+    /** Present only on operation leaves — the explicit grant to persist/preview. */
+    grant?: DelegationGrant;
+    children?: DelegationScopeTreeNode[];
 }
 
+type NodeCheckState = 'checked' | 'indeterminate' | 'unchecked';
 /**
  * Hierarchy-based scope picker (doc 03). Driven entirely by `scope/options`:
- * - renders backend-owned Level -> Level Module -> operations hierarchy,
- * - lets the user toggle each explicit grant,
+ * - renders the backend-owned Template -> Level -> Module -> operation tree as a
+ *   clean, accessible checkbox tree (parents propagate to descendant operations),
+ * - offers optional app-accessibility grants,
  * - calls `scope/preview` (debounced) and surfaces summary / warnings / denied.
  *
- * `[(scope)]` two-way binds a `DelegationScopeSelection`. The component never
- * invents permission metadata — it only echoes targets/actions returned by
- * options.
+ * `[(scope)]` two-way binds a `DelegationScopeSelection`. Scope grants are the
+ * single source of truth for selection; the component never invents permission
+ * metadata — it only echoes targets/actions/accessibilities returned by options.
  */
 declare class ScopePicker {
     readonly scope: _angular_core.ModelSignal<DelegationScopeSelection>;
@@ -647,25 +754,42 @@ declare class ScopePicker {
     protected readonly isLoadingOptions: _angular_core.Signal<boolean>;
     protected readonly isPreviewing: _angular_core.Signal<boolean>;
     protected readonly errorOptions: _angular_core.Signal<string | null>;
-    protected readonly groups: _angular_core.Signal<DelegationGrantableHierarchyGroup[]>;
     protected readonly activeLang: _angular_core.Signal<string>;
-    /** Selected grant keys for O(1) checkbox state. */
-    protected readonly selectedKeys: _angular_core.Signal<Set<string>>;
-    protected readonly treeSelection: _angular_core.WritableSignal<TreeNode<any>[] | null>;
-    protected readonly treeNodes: _angular_core.Signal<TreeNode<any>[]>;
+    protected readonly treeModel: _angular_core.Signal<DelegationScopeTreeNode[]>;
+    protected readonly hasOptions: _angular_core.Signal<boolean>;
     protected readonly grantIndex: _angular_core.Signal<Map<string, DelegationGrant>>;
+    /** nodeKey -> all descendant operation-leaf keys (self for operation nodes). */
+    protected readonly opKeyMap: _angular_core.Signal<Map<string, string[]>>;
+    /** Stable operation-node keys for the current scope grants. */
+    protected readonly selectedKeys: _angular_core.Signal<Set<string>>;
+    protected readonly selectedCount: _angular_core.Signal<number>;
+    protected readonly searchTerm: _angular_core.WritableSignal<string>;
+    protected readonly expandedKeys: _angular_core.WritableSignal<Set<string>>;
+    protected readonly filteredTree: _angular_core.Signal<DelegationScopeTreeNode[]>;
+    protected readonly appAccessibilities: _angular_core.Signal<DelegationAppAccessibility[]>;
+    protected readonly selectedAccessibilityKeys: _angular_core.WritableSignal<Set<string>>;
+    protected readonly selectedAccessibilityCount: _angular_core.Signal<number>;
+    protected readonly hasAccessibility: _angular_core.Signal<boolean>;
+    /** Inner view switch: permission tree vs app-accessibility grants. */
+    protected readonly activeScopeTab: _angular_core.WritableSignal<"permissions" | "accessibility">;
     constructor();
-    protected onTreeAction(event: TreeActionEvent): void;
+    protected isExpanded(node: DelegationScopeTreeNode): boolean;
+    protected toggleExpand(node: DelegationScopeTreeNode): void;
+    protected hasChildren(node: DelegationScopeTreeNode): boolean;
+    protected nodeState(node: DelegationScopeTreeNode): NodeCheckState;
+    protected onRowClick(node: DelegationScopeTreeNode): void;
+    protected toggle(node: DelegationScopeTreeNode): void;
+    private applySelection;
+    protected clearSelection(): void;
+    protected toggleAccessibility(key: string): void;
+    protected isAccessibilitySelected(key: string): boolean;
+    private accessibilityFacts;
+    protected nodeLabel(node: DelegationScopeTreeNode): string;
+    protected accessibilityLabel(item: DelegationAppAccessibility): string;
     protected getPreviewSummary(summary: DelegationDisplayValue | undefined): string;
     protected formatDeniedOperation(value?: string | null): string;
     protected formatDeniedTarget(value?: string | null): string;
-    protected groupTargetCount(group: DelegationGrantableHierarchyGroup): number;
-    protected targetGrantCount(targetGroup: DelegationGrantableTargetGroup): number;
-    private buildTreeNodes;
-    private buildTargetNode;
-    private getGroupLabel;
-    private getTargetLabel;
-    private getActionLabel;
+    protected trackNode(_index: number, node: DelegationScopeTreeNode): string;
     private currentLanguage;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<ScopePicker, never>;
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<ScopePicker, "mt-scope-picker", never, { "scope": { "alias": "scope"; "required": false; "isSignal": true; }; "readonly": { "alias": "readonly"; "required": false; "isSignal": true; }; "adminMode": { "alias": "adminMode"; "required": false; "isSignal": true; }; "delegatorUserId": { "alias": "delegatorUserId"; "required": false; "isSignal": true; }; }, { "scope": "scopeChange"; }, never, never, true, never>;
@@ -969,5 +1093,5 @@ declare class DelegationSessionFacade {
     static ɵprov: _angular_core.ɵɵInjectableDeclaration<DelegationSessionFacade>;
 }
 
-export { ApproveDelegation, CancelDelegation, ClearDelegationDetail, ClearScopePreview, CreateDelegationLegacy, CreateDelegationV2, DelegationDetailDrawer, DelegationForm, DelegationSessionActionKey, DelegationSessionFacade, DelegationSessionState, DelegationStatusChip, Delegations, DelegationsActionKey, DelegationsFacade, DelegationsList, DelegationsState, EndDelegationSession, GetActiveAssignedDelegations, GetAdminDelegations, GetApprovalDelegations, GetAssignedDelegations, GetDelegationDetail, GetMyDelegations, GetScopeOptions, LoadDelegationCandidates, PreviewScope, RejectDelegation, RejectDelegationDialog, ScopePicker, StartDelegationSession, StartSessionDialog, SwitchDelegationSession, TopbarDelegationMenu, UpdateDelegationLegacy, UpdateDelegationV2, appDelegationInterceptor };
-export type { ActiveDelegationSession, AdminCreateDelegationV2Request, AdminUpdateDelegationV2Request, ApproveDelegationRequest, CreateDelegationLegacyRequest, CreateDelegationV2Request, DelegationAllowedAction, DelegationApprovalInfo, DelegationApprovalStatus, DelegationCancellationInfo, DelegationDayRuleMode, DelegationDetail, DelegationDisplayValue, DelegationDto, DelegationEffectiveStatus, DelegationGrant, DelegationListQuery, DelegationPage, DelegationParty, DelegationRow, DelegationScopeAction, DelegationScopeCombinationRule, DelegationScopeDeniedItem, DelegationScopeFact, DelegationScopeHierarchyGroup, DelegationScopeHierarchyTarget, DelegationScopeOptions, DelegationScopePreview, DelegationScopePreviewRequest, DelegationScopeSelection, DelegationScopeTarget, DelegationScopeWarning, DelegationSessionInvalidationReason, DelegationSessionStateModel, DelegationSortDirection, DelegationStatusInfo, DelegationsStateModel, RejectDelegationRequest, UpdateDelegationLegacyRequest, UpdateDelegationV2Request };
+export { ApproveDelegation, CancelDelegation, ClearDelegationDetail, ClearScopePreview, CreateDelegationLegacy, CreateDelegationV2, DelegationDetailDrawer, DelegationForm, DelegationMenuPanel, DelegationSessionActionKey, DelegationSessionFacade, DelegationSessionState, DelegationStatusChip, Delegations, DelegationsActionKey, DelegationsFacade, DelegationsList, DelegationsState, EndDelegationSession, GetActiveAssignedDelegations, GetAdminDelegations, GetApprovalDelegations, GetAssignedDelegations, GetDelegationDetail, GetMyDelegations, GetScopeOptions, LoadDelegationCandidates, PreviewScope, RejectDelegation, RejectDelegationDialog, ScopePicker, StartDelegationSession, StartSessionDialog, SwitchDelegationSession, TopbarDelegationMenu, UpdateDelegationLegacy, UpdateDelegationV2, appDelegationInterceptor };
+export type { ActiveDelegationSession, AdminCreateDelegationV2Request, AdminUpdateDelegationV2Request, ApproveDelegationRequest, CreateDelegationLegacyRequest, CreateDelegationV2Request, DelegationAllowedAction, DelegationAppAccessibility, DelegationApprovalInfo, DelegationApprovalStatus, DelegationCancellationInfo, DelegationDayRuleMode, DelegationDetail, DelegationDisplayValue, DelegationDto, DelegationEffectiveStatus, DelegationGrant, DelegationListQuery, DelegationPage, DelegationParty, DelegationRow, DelegationScopeAction, DelegationScopeCombinationRule, DelegationScopeDeniedItem, DelegationScopeFact, DelegationScopeHierarchyGroup, DelegationScopeHierarchyTarget, DelegationScopeLevelNode, DelegationScopeModuleNode, DelegationScopeOptions, DelegationScopePermissionGroup, DelegationScopePreview, DelegationScopePreviewRequest, DelegationScopeSelection, DelegationScopeTarget, DelegationScopeWarning, DelegationSessionInvalidationReason, DelegationSessionStateModel, DelegationSortDirection, DelegationStatusInfo, DelegationsStateModel, RejectDelegationRequest, UpdateDelegationLegacyRequest, UpdateDelegationV2Request };