@masterteam/delegations 0.0.54 → 0.0.56

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@masterteam/delegations",
-  "version": "0.0.54",
+  "version": "0.0.56",
   "publishConfig": {
     "directory": "../../../dist/masterteam/delegations",
     "linkDirectory": false,
@@ -20,9 +20,9 @@
     "tailwindcss": "^4.2.2",
     "tailwindcss-primeui": "^0.6.1",
     "@ngxs/store": "^20.1.0",
-    "@masterteam/forms": "^0.0.133",
+    "@masterteam/components": "^0.0.271",
     "@masterteam/icons": "^0.0.17",
-    "@masterteam/components": "^0.0.256"
+    "@masterteam/forms": "^0.0.136"
   },
   "sideEffects": false,
   "exports": {

package/types/masterteam-delegations.d.ts

@@ -4,13 +4,13 @@ import { OnInit, InjectionToken, EnvironmentProviders } from '@angular/core';
 import { Popover } from 'primeng/popover';
 import * as _masterteam_components_entities from '@masterteam/components/entities';
 import { EntityUserValue } from '@masterteam/components/entities';
+import { ModalService } from '@masterteam/components/modal';
 import { PageHeaderTab } from '@masterteam/components/page-header';
 import { TableAction, TableStatusMapValue, ColumnDef } from '@masterteam/components/table';
 import { FormControl } from '@angular/forms';
 import { HttpContext, HttpInterceptorFn, HttpContextToken } from '@angular/common/http';
 import { DynamicFormConfig } from '@masterteam/components';
 import { ModalRef } from '@masterteam/components/dialog';
-import { ModalService } from '@masterteam/components/modal';
 import * as rxjs from 'rxjs';
 import { Observable } from 'rxjs';
 import { StateContext } from '@ngxs/store';
@@ -421,20 +421,37 @@ declare class TopbarDelegationMenu implements OnInit {
      * e.g. embedded in the user-avatar dropdown via {@link DelegationMenuPanel}.
      */
     readonly headless: _angular_core.InputSignal<boolean>;
+    /**
+     * Optional richer profile for the "you" row of the switcher. Forwarded to
+     * {@link DelegationMenuPanel}; omit it and the current user is derived from
+     * the assigned delegation rows.
+     */
+    readonly currentUser: _angular_core.InputSignal<DelegationParty | null>;
     private readonly facade;
     private readonly modal;
     private readonly transloco;
+    private readonly destroyRef;
+    private readonly actions$;
+    private readonly toast;
     protected readonly popover: _angular_core.Signal<Popover | undefined>;
     protected readonly active: _angular_core.Signal<_masterteam_delegations.ActiveDelegationSession | null>;
     protected readonly candidates: _angular_core.Signal<DelegationRow[]>;
     protected readonly hasCandidates: _angular_core.Signal<boolean>;
-    protected readonly onBehalfOf: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
-    protected readonly executedBy: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
+    protected readonly onBehalfOf: _angular_core.Signal<DelegationParty | null>;
+    protected readonly executedBy: _angular_core.Signal<DelegationParty>;
     protected readonly popoverOpen: _angular_core.WritableSignal<boolean>;
     private promptPending;
     private promptRefreshQueued;
     private promptFlowOpen;
-    protected readonly mode: _angular_core.Signal<"candidates" | "active" | "hidden">;
+    private destroyed;
+    /**
+     * Dialogs opened through `ModalService` live on `document.body`, so they
+     * outlive this component. Held so the whole prompt flow can be torn down when
+     * the authenticated shell goes away (sign-out) instead of stranding an
+     * "act on behalf of" dialog over the login page.
+     */
+    private promptRefs;
+    protected readonly mode: _angular_core.Signal<"active" | "candidates" | "hidden">;
     constructor();
     ngOnInit(): void;
     /** Two-letter initials for a delegator avatar (matches the user-menu pattern). */
@@ -444,18 +461,35 @@ declare class TopbarDelegationMenu implements OnInit {
     private checkPromptCandidates;
     private openConfirm;
     private openCandidatesPrompt;
+    private trackPromptRef;
+    /** Tears down anything the prompt flow left on `document.body`. */
+    private closePromptFlow;
     private finishPromptFlow;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<TopbarDelegationMenu, never>;
-    static ɵcmp: _angular_core.ɵɵComponentDeclaration<TopbarDelegationMenu, "mt-topbar-delegation-menu", never, { "managePath": { "alias": "managePath"; "required": false; "isSignal": true; }; "compact": { "alias": "compact"; "required": false; "isSignal": true; }; "showManageLink": { "alias": "showManageLink"; "required": false; "isSignal": true; }; "promptOnCandidates": { "alias": "promptOnCandidates"; "required": false; "isSignal": true; }; "headless": { "alias": "headless"; "required": false; "isSignal": true; }; }, {}, never, never, true, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<TopbarDelegationMenu, "mt-topbar-delegation-menu", never, { "managePath": { "alias": "managePath"; "required": false; "isSignal": true; }; "compact": { "alias": "compact"; "required": false; "isSignal": true; }; "showManageLink": { "alias": "showManageLink"; "required": false; "isSignal": true; }; "promptOnCandidates": { "alias": "promptOnCandidates"; "required": false; "isSignal": true; }; "headless": { "alias": "headless"; "required": false; "isSignal": true; }; "currentUser": { "alias": "currentUser"; "required": false; "isSignal": true; }; }, {}, never, never, true, never>;
 }
 
+/** One selectable identity in the switcher. */
+interface DelegationIdentityOption {
+    /** `null` for the real signed-in user; the delegation row otherwise. */
+    row: DelegationRow | null;
+    party: DelegationParty | null;
+    isSelf: boolean;
+    isActive: boolean;
+    initials: string;
+}
 /**
- * Embeddable delegation menu content (doc 05, 09): renders the candidate /
- * active-session rows and the start / switch / end actions, with no trigger of
- * its own. Designed to be dropped inside a host menu (e.g. the user-avatar
- * dropdown) or the topbar popover. Reads the shared `DelegationSessionFacade`
- * signals; candidate loading + the post-login prompt stay in the always-mounted
- * `TopbarDelegationMenu` controller.
+ * Embeddable "acting as" account switcher (doc 05, 09).
+ *
+ * Renders one row per identity the user can operate as — themselves first, then
+ * every delegator who has an active delegation assigned to them — with the
+ * current one checked. Picking a row starts, switches, or ends the delegated
+ * session; the {@link StartSessionDialog} still takes explicit consent before
+ * any session begins, so this list never changes authority on its own.
+ *
+ * Designed to be dropped inside a host menu (e.g. the user-avatar dropdown) or
+ * the topbar popover. Candidate loading + the post-login prompt stay in the
+ * always-mounted `TopbarDelegationMenu` controller.
  *
  * Emits `closeRequested` after any action so the host overlay can dismiss.
  */
@@ -463,28 +497,37 @@ declare class DelegationMenuPanel {
     /** Path to the management page, e.g. `/control-panel/delegations` or `/delegations`. */
     readonly managePath: _angular_core.InputSignal<string>;
     readonly showManageLink: _angular_core.InputSignal<boolean>;
+    /**
+     * Optional richer profile for the "you" row. Falls back to the current user
+     * carried on the assigned delegation rows, so the host may omit it.
+     */
+    readonly currentUser: _angular_core.InputSignal<DelegationParty | null>;
     readonly closeRequested: _angular_core.OutputEmitterRef<void>;
     private readonly facade;
     private readonly modal;
     private readonly transloco;
+    private readonly toast;
     protected readonly active: _angular_core.Signal<_masterteam_delegations.ActiveDelegationSession | null>;
     protected readonly candidates: _angular_core.Signal<DelegationRow[]>;
     protected readonly hasCandidates: _angular_core.Signal<boolean>;
     protected readonly hasMoreCandidates: _angular_core.Signal<boolean>;
     protected readonly isLoadingCandidates: _angular_core.Signal<boolean>;
-    protected readonly onBehalfOf: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
-    protected readonly executedBy: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
-    protected readonly mode: _angular_core.Signal<"candidates" | "active" | "hidden">;
-    /** Two-letter initials for a delegator avatar (matches the user-menu pattern). */
-    protected initials(party: DelegationRow['delegator'] | null | undefined): string;
-    protected start(row: DelegationRow, event: MouseEvent): void;
-    protected switchTo(row: DelegationRow, event: MouseEvent): void;
-    protected endSession(event: MouseEvent): void;
+    protected readonly isBusy: _angular_core.Signal<boolean>;
+    protected readonly onBehalfOf: _angular_core.Signal<DelegationParty | null>;
+    /** The real signed-in user — host-supplied when available, derived otherwise. */
+    protected readonly self: _angular_core.Signal<DelegationParty | null>;
+    /** Nothing to switch between and no session running — render nothing. */
+    protected readonly visible: _angular_core.Signal<boolean>;
+    /** "You", then every delegator. The active identity carries the checkmark. */
+    protected readonly identities: _angular_core.Signal<DelegationIdentityOption[]>;
+    /** Two-letter initials for an avatar (matches the user-menu pattern). */
+    protected initials(party: DelegationParty | null | undefined): string;
+    protected select(option: DelegationIdentityOption, event: Event): void;
     protected onManage(): void;
     protected loadMore(event: MouseEvent): void;
     private openConfirm;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<DelegationMenuPanel, never>;
-    static ɵcmp: _angular_core.ɵɵComponentDeclaration<DelegationMenuPanel, "mt-delegation-menu-panel", never, { "managePath": { "alias": "managePath"; "required": false; "isSignal": true; }; "showManageLink": { "alias": "showManageLink"; "required": false; "isSignal": true; }; }, { "closeRequested": "closeRequested"; }, never, never, true, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<DelegationMenuPanel, "mt-delegation-menu-panel", never, { "managePath": { "alias": "managePath"; "required": false; "isSignal": true; }; "showManageLink": { "alias": "showManageLink"; "required": false; "isSignal": true; }; "currentUser": { "alias": "currentUser"; "required": false; "isSignal": true; }; }, { "closeRequested": "closeRequested"; }, never, never, true, never>;
 }
 
 interface StatusVisual {
@@ -507,6 +550,8 @@ declare class DelegationStatusChip {
 declare class StartSessionDialog {
     readonly delegation: _angular_core.InputSignal<DelegationRow>;
     readonly intent: _angular_core.InputSignal<"start" | "switch">;
+    /** Supplies the shared `mt-modal-content` / `mt-modal-footer` shell classes. */
+    protected readonly modal: ModalService;
     private readonly ref;
     private readonly facade;
     private readonly toast;
@@ -530,6 +575,8 @@ declare class StartSessionDialog {
  */
 declare class RejectDelegationDialog {
     readonly delegation: _angular_core.InputSignal<DelegationRow>;
+    /** Supplies the shared `mt-modal-content` / `mt-modal-footer` shell classes. */
+    protected readonly modal: ModalService;
     private readonly ref;
     private readonly facade;
     protected readonly reason: _angular_core.WritableSignal<string>;
@@ -994,10 +1041,19 @@ interface DelegationPromptNamespace {
     applicationKey: string;
     tenantKey?: string | null;
 }
+/**
+ * Why the effective actor changed. `StartSession` / `SwitchSession` mean a new
+ * delegated actor is now in force; every other value ends delegated mode. Hosts
+ * should branch on this — `Logout`, `UserSwitch`, `TenantSwitch` and `AppSwitch`
+ * are session teardowns where there is no new actor to load data for.
+ */
+type DelegationContextChangeReason = DelegationSessionInvalidationReason | 'StartSession' | 'SwitchSession'
+/** Re-minted after a page reload — same actor, so the host should stay put. */
+ | 'ResumeSession';
 interface DelegationContextChange {
     previous: ActiveDelegationSession | null;
     current: ActiveDelegationSession | null;
-    reason: string;
+    reason: DelegationContextChangeReason;
 }
 interface DelegationRuntimeConfig {
     resolveApplicationApiBaseUrl: () => string;
@@ -1011,6 +1067,42 @@ declare function provideDelegationRuntime(config: DelegationRuntimeConfig | Dele
 declare const DELEGATED_RUNTIME_REQUEST: HttpContextToken<boolean>;
 declare function withDelegatedRuntime(context?: HttpContext): HttpContext;
 
+/**
+ * Lets a delegated session survive a page reload **without persisting the
+ * token**.
+ *
+ * Doc 05 is unambiguous: the delegation access token is memory-only, and it
+ * stays that way — this store keeps a single opaque `delegationId` plus the
+ * owning user/app/tenant namespace. On the next boot the runtime calls
+ * `POST identity/delegations/{id}/session` again and mints a *fresh* token,
+ * which is what doc 09 already prescribes for restarting a session ("use the
+ * newly returned token because the scope hash or delegation version may have
+ * changed"). The backend re-authorizes from scratch every time, so a delegation
+ * that expired, was cancelled, or had its scope revoked while the tab was shut
+ * simply fails to resume and the user stays themselves.
+ *
+ * Never holds a token, a candidate record, a name, or an email.
+ */
+declare class DelegationSessionResumeStore {
+    private readonly document;
+    private readonly config;
+    remember(delegationId: number): void;
+    /**
+     * The delegation to resume for the *current* user/app/tenant, or `null`. A
+     * marker left by a different actor is dropped rather than honoured, so
+     * signing in as someone else on a shared browser never resumes their
+     * delegation.
+     */
+    pending(): number | null;
+    clear(): void;
+    private namespace;
+    private read;
+    private write;
+    private storage;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<DelegationSessionResumeStore, never>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<DelegationSessionResumeStore>;
+}
+
 declare class GetMyDelegations {
     query: DelegationListQuery;
     static readonly type = "[Delegations] Get My Delegations";
@@ -1235,6 +1327,15 @@ declare class StartDelegationSession {
     static readonly type = "[DelegationSession] Start";
     constructor(delegation: DelegationRow);
 }
+/**
+ * Re-mint the session the user was in before they reloaded the page. Dispatched
+ * by the state itself from the persisted delegation id — never a token.
+ */
+declare class ResumeDelegationSession {
+    delegation: DelegationRow;
+    static readonly type = "[DelegationSession] Resume";
+    constructor(delegation: DelegationRow);
+}
 /** End the current delegated session. Client-local only (doc 05). */
 declare class EndDelegationSession {
     reason: DelegationSessionInvalidationReason;
@@ -1255,6 +1356,17 @@ declare class DelegationSessionState {
     private vault;
     private runtime;
     private expiryTimer;
+    /**
+     * Bumped whenever candidates are cleared (logout / user / tenant / app
+     * switch). A `LoadDelegationCandidates` response that was already in flight
+     * when the actor went away resolves against a stale generation and is
+     * dropped, so the previous user's delegators can never repopulate the menu —
+     * or open the availability prompt — after sign-out.
+     */
+    private candidatesGeneration;
+    private resumeStore;
+    /** One resume attempt per page load — a dead delegation must not retry. */
+    private resumeAttempted;
     constructor();
     static getActive(state: DelegationSessionStateModel): ActiveDelegationSession | null;
     static getCandidates(state: DelegationSessionStateModel): DelegationRow[];
@@ -1263,6 +1375,16 @@ declare class DelegationSessionState {
     static getLoadingActive(state: DelegationSessionStateModel): string[];
     static getErrors(state: DelegationSessionStateModel): Record<string, string | null | undefined>;
     loadCandidates(ctx: StateContext<DelegationSessionStateModel>, { page, pageSize, append }: LoadDelegationCandidates): rxjs.Observable<Response<DelegationPage<DelegationRow>>>;
+    /**
+     * Re-mints the delegated session the user was in before they reloaded.
+     *
+     * The token itself was never persisted (doc 05); only the delegation id was,
+     * so this is a full `POST .../session` and the backend re-authorizes from
+     * scratch. Attempted at most once per page load — a delegation that has since
+     * expired or been revoked must not retry on every candidate refresh.
+     */
+    private tryResume;
+    resume(ctx: StateContext<DelegationSessionStateModel>, { delegation }: ResumeDelegationSession): rxjs.Observable<void>;
     start(ctx: StateContext<DelegationSessionStateModel>, { delegation }: StartDelegationSession): rxjs.Observable<void>;
     private startSession;
     end(ctx: StateContext<DelegationSessionStateModel>, { reason }: EndDelegationSession): rxjs.Observable<void>;
@@ -1284,8 +1406,13 @@ declare class DelegationSessionFacade {
     private readonly loadingActive;
     /** On-behalf-of (delegator). */
     readonly onBehalfOf: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
-    /** Executed-by (actual logged-in / delegated user). */
-    readonly executedBy: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
+    /**
+     * Executed-by (the real signed-in user), known whether or not a session is
+     * active: every assigned row carries the current user as its `delegatedUser`,
+     * so the account switcher can list "you" alongside the delegators without the
+     * package depending on the host's auth state.
+     */
+    readonly executedBy: _angular_core.Signal<_masterteam_delegations.DelegationParty>;
     readonly hasCandidates: _angular_core.Signal<boolean>;
     readonly hasMoreCandidates: _angular_core.Signal<boolean>;
     readonly isStarting: _angular_core.Signal<boolean>;
@@ -1300,5 +1427,5 @@ declare class DelegationSessionFacade {
     static ɵprov: _angular_core.ɵɵInjectableDeclaration<DelegationSessionFacade>;
 }
 
-export { ApproveDelegation, CancelDelegation, ClearDelegationDetail, ClearScopePreview, CreateDelegationLegacy, CreateDelegationV2, DELEGATED_RUNTIME_REQUEST, DELEGATION_RUNTIME_CONFIG, DelegationDetailDrawer, DelegationForm, DelegationMenuPanel, DelegationSessionActionKey, DelegationSessionFacade, DelegationSessionState, DelegationStatusChip, Delegations, DelegationsActionKey, DelegationsFacade, DelegationsList, DelegationsState, EndDelegationSession, GetActiveAssignedDelegations, GetAdminDelegations, GetApprovalDelegations, GetAssignedDelegations, GetDelegationDetail, GetMyDelegations, GetScopeOptions, LoadDelegationCandidates, PreviewScope, RejectDelegation, RejectDelegationDialog, ScopePicker, StartDelegationSession, StartSessionDialog, SwitchDelegationSession, TopbarDelegationMenu, UpdateDelegationLegacy, UpdateDelegationV2, appDelegationInterceptor, provideDelegationRuntime, withDelegatedRuntime };
-export type { ActiveDelegationSession, AdminCreateDelegationV2Request, AdminUpdateDelegationV2Request, ApproveDelegationRequest, CreateDelegationLegacyRequest, CreateDelegationV2Request, DelegationAllowedAction, DelegationAppAccessibility, DelegationApprovalInfo, DelegationApprovalStatus, DelegationCancellationInfo, DelegationContextChange, DelegationDayRuleMode, DelegationDetail, DelegationDisplayValue, DelegationDto, DelegationEffectiveStatus, DelegationGrant, DelegationListQuery, DelegationPage, DelegationParty, DelegationPromptNamespace, DelegationRow, DelegationRuntimeConfig, DelegationScopeAction, DelegationScopeCombinationRule, DelegationScopeDeniedItem, DelegationScopeFact, DelegationScopeHierarchyGroup, DelegationScopeHierarchyTarget, DelegationScopeLevelNode, DelegationScopeModuleNode, DelegationScopeOptions, DelegationScopePermissionGroup, DelegationScopePreview, DelegationScopePreviewRequest, DelegationScopeSelection, DelegationScopeTarget, DelegationScopeView, DelegationScopeViewLevel, DelegationScopeViewModule, DelegationScopeViewOperation, DelegationScopeViewTemplate, DelegationScopeWarning, DelegationSessionInvalidationReason, DelegationSessionStartResponse, DelegationSessionStateModel, DelegationSortDirection, DelegationStatusInfo, DelegationsStateModel, RejectDelegationRequest, UpdateDelegationLegacyRequest, UpdateDelegationV2Request };
+export { ApproveDelegation, CancelDelegation, ClearDelegationDetail, ClearScopePreview, CreateDelegationLegacy, CreateDelegationV2, DELEGATED_RUNTIME_REQUEST, DELEGATION_RUNTIME_CONFIG, DelegationDetailDrawer, DelegationForm, DelegationMenuPanel, DelegationSessionActionKey, DelegationSessionFacade, DelegationSessionResumeStore, DelegationSessionState, DelegationStatusChip, Delegations, DelegationsActionKey, DelegationsFacade, DelegationsList, DelegationsState, EndDelegationSession, GetActiveAssignedDelegations, GetAdminDelegations, GetApprovalDelegations, GetAssignedDelegations, GetDelegationDetail, GetMyDelegations, GetScopeOptions, LoadDelegationCandidates, PreviewScope, RejectDelegation, RejectDelegationDialog, ResumeDelegationSession, ScopePicker, StartDelegationSession, StartSessionDialog, SwitchDelegationSession, TopbarDelegationMenu, UpdateDelegationLegacy, UpdateDelegationV2, appDelegationInterceptor, provideDelegationRuntime, withDelegatedRuntime };
+export type { ActiveDelegationSession, AdminCreateDelegationV2Request, AdminUpdateDelegationV2Request, ApproveDelegationRequest, CreateDelegationLegacyRequest, CreateDelegationV2Request, DelegationAllowedAction, DelegationAppAccessibility, DelegationApprovalInfo, DelegationApprovalStatus, DelegationCancellationInfo, DelegationContextChange, DelegationContextChangeReason, DelegationDayRuleMode, DelegationDetail, DelegationDisplayValue, DelegationDto, DelegationEffectiveStatus, DelegationGrant, DelegationListQuery, DelegationPage, DelegationParty, DelegationPromptNamespace, DelegationRow, DelegationRuntimeConfig, DelegationScopeAction, DelegationScopeCombinationRule, DelegationScopeDeniedItem, DelegationScopeFact, DelegationScopeHierarchyGroup, DelegationScopeHierarchyTarget, DelegationScopeLevelNode, DelegationScopeModuleNode, DelegationScopeOptions, DelegationScopePermissionGroup, DelegationScopePreview, DelegationScopePreviewRequest, DelegationScopeSelection, DelegationScopeTarget, DelegationScopeView, DelegationScopeViewLevel, DelegationScopeViewModule, DelegationScopeViewOperation, DelegationScopeViewTemplate, DelegationScopeWarning, DelegationSessionInvalidationReason, DelegationSessionStartResponse, DelegationSessionStateModel, DelegationSortDirection, DelegationStatusInfo, DelegationsStateModel, RejectDelegationRequest, UpdateDelegationLegacyRequest, UpdateDelegationV2Request };