@masterteam/delegations 0.0.55 → 0.0.57

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@masterteam/delegations",
-  "version": "0.0.55",
+  "version": "0.0.57",
   "publishConfig": {
     "directory": "../../../dist/masterteam/delegations",
     "linkDirectory": false,
@@ -20,9 +20,9 @@
     "tailwindcss": "^4.2.2",
     "tailwindcss-primeui": "^0.6.1",
     "@ngxs/store": "^20.1.0",
-    "@masterteam/forms": "^0.0.136",
+    "@masterteam/components": "^0.0.271",
     "@masterteam/icons": "^0.0.17",
-    "@masterteam/components": "^0.0.271"
+    "@masterteam/forms": "^0.0.136"
   },
   "sideEffects": false,
   "exports": {

package/types/masterteam-delegations.d.ts

@@ -421,16 +421,24 @@ declare class TopbarDelegationMenu implements OnInit {
      * e.g. embedded in the user-avatar dropdown via {@link DelegationMenuPanel}.
      */
     readonly headless: _angular_core.InputSignal<boolean>;
+    /**
+     * Optional richer profile for the "you" row of the switcher. Forwarded to
+     * {@link DelegationMenuPanel}; omit it and the current user is derived from
+     * the assigned delegation rows.
+     */
+    readonly currentUser: _angular_core.InputSignal<DelegationParty | null>;
     private readonly facade;
     private readonly modal;
     private readonly transloco;
     private readonly destroyRef;
+    private readonly actions$;
+    private readonly toast;
     protected readonly popover: _angular_core.Signal<Popover | undefined>;
     protected readonly active: _angular_core.Signal<_masterteam_delegations.ActiveDelegationSession | null>;
     protected readonly candidates: _angular_core.Signal<DelegationRow[]>;
     protected readonly hasCandidates: _angular_core.Signal<boolean>;
-    protected readonly onBehalfOf: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
-    protected readonly executedBy: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
+    protected readonly onBehalfOf: _angular_core.Signal<DelegationParty | null>;
+    protected readonly executedBy: _angular_core.Signal<DelegationParty>;
     protected readonly popoverOpen: _angular_core.WritableSignal<boolean>;
     private promptPending;
     private promptRefreshQueued;
@@ -443,7 +451,7 @@ declare class TopbarDelegationMenu implements OnInit {
      * "act on behalf of" dialog over the login page.
      */
     private promptRefs;
-    protected readonly mode: _angular_core.Signal<"candidates" | "active" | "hidden">;
+    protected readonly mode: _angular_core.Signal<"active" | "candidates" | "hidden">;
     constructor();
     ngOnInit(): void;
     /** Two-letter initials for a delegator avatar (matches the user-menu pattern). */
@@ -458,16 +466,30 @@ declare class TopbarDelegationMenu implements OnInit {
     private closePromptFlow;
     private finishPromptFlow;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<TopbarDelegationMenu, never>;
-    static ɵcmp: _angular_core.ɵɵComponentDeclaration<TopbarDelegationMenu, "mt-topbar-delegation-menu", never, { "managePath": { "alias": "managePath"; "required": false; "isSignal": true; }; "compact": { "alias": "compact"; "required": false; "isSignal": true; }; "showManageLink": { "alias": "showManageLink"; "required": false; "isSignal": true; }; "promptOnCandidates": { "alias": "promptOnCandidates"; "required": false; "isSignal": true; }; "headless": { "alias": "headless"; "required": false; "isSignal": true; }; }, {}, never, never, true, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<TopbarDelegationMenu, "mt-topbar-delegation-menu", never, { "managePath": { "alias": "managePath"; "required": false; "isSignal": true; }; "compact": { "alias": "compact"; "required": false; "isSignal": true; }; "showManageLink": { "alias": "showManageLink"; "required": false; "isSignal": true; }; "promptOnCandidates": { "alias": "promptOnCandidates"; "required": false; "isSignal": true; }; "headless": { "alias": "headless"; "required": false; "isSignal": true; }; "currentUser": { "alias": "currentUser"; "required": false; "isSignal": true; }; }, {}, never, never, true, never>;
 }
 
+/** One selectable identity in the switcher. */
+interface DelegationIdentityOption {
+    /** `null` for the real signed-in user; the delegation row otherwise. */
+    row: DelegationRow | null;
+    party: DelegationParty | null;
+    isSelf: boolean;
+    isActive: boolean;
+    initials: string;
+}
 /**
- * Embeddable delegation menu content (doc 05, 09): renders the candidate /
- * active-session rows and the start / switch / end actions, with no trigger of
- * its own. Designed to be dropped inside a host menu (e.g. the user-avatar
- * dropdown) or the topbar popover. Reads the shared `DelegationSessionFacade`
- * signals; candidate loading + the post-login prompt stay in the always-mounted
- * `TopbarDelegationMenu` controller.
+ * Embeddable "acting as" account switcher (doc 05, 09).
+ *
+ * Renders one row per identity the user can operate as — themselves first, then
+ * every delegator who has an active delegation assigned to them — with the
+ * current one checked. Picking a row starts, switches, or ends the delegated
+ * session; the {@link StartSessionDialog} still takes explicit consent before
+ * any session begins, so this list never changes authority on its own.
+ *
+ * Designed to be dropped inside a host menu (e.g. the user-avatar dropdown) or
+ * the topbar popover. Candidate loading + the post-login prompt stay in the
+ * always-mounted `TopbarDelegationMenu` controller.
  *
  * Emits `closeRequested` after any action so the host overlay can dismiss.
  */
@@ -475,28 +497,37 @@ declare class DelegationMenuPanel {
     /** Path to the management page, e.g. `/control-panel/delegations` or `/delegations`. */
     readonly managePath: _angular_core.InputSignal<string>;
     readonly showManageLink: _angular_core.InputSignal<boolean>;
+    /**
+     * Optional richer profile for the "you" row. Falls back to the current user
+     * carried on the assigned delegation rows, so the host may omit it.
+     */
+    readonly currentUser: _angular_core.InputSignal<DelegationParty | null>;
     readonly closeRequested: _angular_core.OutputEmitterRef<void>;
     private readonly facade;
     private readonly modal;
     private readonly transloco;
+    private readonly toast;
     protected readonly active: _angular_core.Signal<_masterteam_delegations.ActiveDelegationSession | null>;
     protected readonly candidates: _angular_core.Signal<DelegationRow[]>;
     protected readonly hasCandidates: _angular_core.Signal<boolean>;
     protected readonly hasMoreCandidates: _angular_core.Signal<boolean>;
     protected readonly isLoadingCandidates: _angular_core.Signal<boolean>;
-    protected readonly onBehalfOf: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
-    protected readonly executedBy: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
-    protected readonly mode: _angular_core.Signal<"candidates" | "active" | "hidden">;
-    /** Two-letter initials for a delegator avatar (matches the user-menu pattern). */
-    protected initials(party: DelegationRow['delegator'] | null | undefined): string;
-    protected start(row: DelegationRow, event: MouseEvent): void;
-    protected switchTo(row: DelegationRow, event: MouseEvent): void;
-    protected endSession(event: MouseEvent): void;
+    protected readonly isBusy: _angular_core.Signal<boolean>;
+    protected readonly onBehalfOf: _angular_core.Signal<DelegationParty | null>;
+    /** The real signed-in user — host-supplied when available, derived otherwise. */
+    protected readonly self: _angular_core.Signal<DelegationParty | null>;
+    /** Nothing to switch between and no session running — render nothing. */
+    protected readonly visible: _angular_core.Signal<boolean>;
+    /** "You", then every delegator. The active identity carries the checkmark. */
+    protected readonly identities: _angular_core.Signal<DelegationIdentityOption[]>;
+    /** Two-letter initials for an avatar (matches the user-menu pattern). */
+    protected initials(party: DelegationParty | null | undefined): string;
+    protected select(option: DelegationIdentityOption, event: Event): void;
     protected onManage(): void;
     protected loadMore(event: MouseEvent): void;
     private openConfirm;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<DelegationMenuPanel, never>;
-    static ɵcmp: _angular_core.ɵɵComponentDeclaration<DelegationMenuPanel, "mt-delegation-menu-panel", never, { "managePath": { "alias": "managePath"; "required": false; "isSignal": true; }; "showManageLink": { "alias": "showManageLink"; "required": false; "isSignal": true; }; }, { "closeRequested": "closeRequested"; }, never, never, true, never>;
+    static ɵcmp: _angular_core.ɵɵComponentDeclaration<DelegationMenuPanel, "mt-delegation-menu-panel", never, { "managePath": { "alias": "managePath"; "required": false; "isSignal": true; }; "showManageLink": { "alias": "showManageLink"; "required": false; "isSignal": true; }; "currentUser": { "alias": "currentUser"; "required": false; "isSignal": true; }; }, { "closeRequested": "closeRequested"; }, never, never, true, never>;
 }
 
 interface StatusVisual {
@@ -1016,7 +1047,9 @@ interface DelegationPromptNamespace {
  * should branch on this — `Logout`, `UserSwitch`, `TenantSwitch` and `AppSwitch`
  * are session teardowns where there is no new actor to load data for.
  */
-type DelegationContextChangeReason = DelegationSessionInvalidationReason | 'StartSession' | 'SwitchSession';
+type DelegationContextChangeReason = DelegationSessionInvalidationReason | 'StartSession' | 'SwitchSession'
+/** Re-minted after a page reload — same actor, so the host should stay put. */
+ | 'ResumeSession';
 interface DelegationContextChange {
     previous: ActiveDelegationSession | null;
     current: ActiveDelegationSession | null;
@@ -1034,6 +1067,42 @@ declare function provideDelegationRuntime(config: DelegationRuntimeConfig | Dele
 declare const DELEGATED_RUNTIME_REQUEST: HttpContextToken<boolean>;
 declare function withDelegatedRuntime(context?: HttpContext): HttpContext;
 
+/**
+ * Lets a delegated session survive a page reload **without persisting the
+ * token**.
+ *
+ * Doc 05 is unambiguous: the delegation access token is memory-only, and it
+ * stays that way — this store keeps a single opaque `delegationId` plus the
+ * owning user/app/tenant namespace. On the next boot the runtime calls
+ * `POST identity/delegations/{id}/session` again and mints a *fresh* token,
+ * which is what doc 09 already prescribes for restarting a session ("use the
+ * newly returned token because the scope hash or delegation version may have
+ * changed"). The backend re-authorizes from scratch every time, so a delegation
+ * that expired, was cancelled, or had its scope revoked while the tab was shut
+ * simply fails to resume and the user stays themselves.
+ *
+ * Never holds a token, a candidate record, a name, or an email.
+ */
+declare class DelegationSessionResumeStore {
+    private readonly document;
+    private readonly config;
+    remember(delegationId: number): void;
+    /**
+     * The delegation to resume for the *current* user/app/tenant, or `null`. A
+     * marker left by a different actor is dropped rather than honoured, so
+     * signing in as someone else on a shared browser never resumes their
+     * delegation.
+     */
+    pending(): number | null;
+    clear(): void;
+    private namespace;
+    private read;
+    private write;
+    private storage;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<DelegationSessionResumeStore, never>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<DelegationSessionResumeStore>;
+}
+
 declare class GetMyDelegations {
     query: DelegationListQuery;
     static readonly type = "[Delegations] Get My Delegations";
@@ -1258,6 +1327,23 @@ declare class StartDelegationSession {
     static readonly type = "[DelegationSession] Start";
     constructor(delegation: DelegationRow);
 }
+/**
+ * Re-mint the session the user was in before they reloaded the page, from the
+ * persisted delegation id — never a token.
+ *
+ * Pass `delegation` when the row is already in hand; otherwise the state loads
+ * the candidates itself, so a host can await this action **before** the
+ * authenticated shell mounts and boot straight into delegated mode instead of
+ * loading everything twice.
+ *
+ * Completes quietly when there is nothing to resume or the delegation is no
+ * longer startable — the user simply stays themselves.
+ */
+declare class ResumeDelegationSession {
+    delegation: DelegationRow | null;
+    static readonly type = "[DelegationSession] Resume";
+    constructor(delegation?: DelegationRow | null);
+}
 /** End the current delegated session. Client-local only (doc 05). */
 declare class EndDelegationSession {
     reason: DelegationSessionInvalidationReason;
@@ -1286,6 +1372,9 @@ declare class DelegationSessionState {
      * or open the availability prompt — after sign-out.
      */
     private candidatesGeneration;
+    private resumeStore;
+    /** One resume attempt per page load — a dead delegation must not retry. */
+    private resumeAttempted;
     constructor();
     static getActive(state: DelegationSessionStateModel): ActiveDelegationSession | null;
     static getCandidates(state: DelegationSessionStateModel): DelegationRow[];
@@ -1294,6 +1383,17 @@ declare class DelegationSessionState {
     static getLoadingActive(state: DelegationSessionStateModel): string[];
     static getErrors(state: DelegationSessionStateModel): Record<string, string | null | undefined>;
     loadCandidates(ctx: StateContext<DelegationSessionStateModel>, { page, pageSize, append }: LoadDelegationCandidates): rxjs.Observable<Response<DelegationPage<DelegationRow>>>;
+    /**
+     * Fallback resume for hosts that do not await {@link ResumeDelegationSession}
+     * before mounting their authenticated shell: pick the session back up as soon
+     * as the candidates arrive.
+     *
+     * Prefer the awaited path — resuming after the shell has already loaded means
+     * every actor-scoped read runs twice, once as the real user and again under
+     * delegated authority.
+     */
+    private tryResume;
+    resume(ctx: StateContext<DelegationSessionStateModel>, { delegation }: ResumeDelegationSession): rxjs.Observable<void>;
     start(ctx: StateContext<DelegationSessionStateModel>, { delegation }: StartDelegationSession): rxjs.Observable<void>;
     private startSession;
     end(ctx: StateContext<DelegationSessionStateModel>, { reason }: EndDelegationSession): rxjs.Observable<void>;
@@ -1307,6 +1407,7 @@ declare class DelegationSessionState {
 declare class DelegationSessionFacade {
     private readonly store;
     private readonly promptReceipts;
+    private readonly resumeStore;
     private endInFlight;
     readonly active: _angular_core.Signal<_masterteam_delegations.ActiveDelegationSession | null>;
     readonly candidates: _angular_core.Signal<DelegationRow[]>;
@@ -1315,8 +1416,13 @@ declare class DelegationSessionFacade {
     private readonly loadingActive;
     /** On-behalf-of (delegator). */
     readonly onBehalfOf: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
-    /** Executed-by (actual logged-in / delegated user). */
-    readonly executedBy: _angular_core.Signal<_masterteam_delegations.DelegationParty | null>;
+    /**
+     * Executed-by (the real signed-in user), known whether or not a session is
+     * active: every assigned row carries the current user as its `delegatedUser`,
+     * so the account switcher can list "you" alongside the delegators without the
+     * package depending on the host's auth state.
+     */
+    readonly executedBy: _angular_core.Signal<_masterteam_delegations.DelegationParty>;
     readonly hasCandidates: _angular_core.Signal<boolean>;
     readonly hasMoreCandidates: _angular_core.Signal<boolean>;
     readonly isStarting: _angular_core.Signal<boolean>;
@@ -1324,6 +1430,19 @@ declare class DelegationSessionFacade {
     loadCandidates(page?: number, pageSize?: number, append?: boolean): Observable<void>;
     loadMoreCandidates(): Observable<void>;
     claimPromptCandidates(candidates: DelegationRow[]): Promise<DelegationRow[]>;
+    /**
+     * True when a previous session is waiting to be re-minted after a reload.
+     * Synchronous (a `localStorage` read), so a route guard can check it without
+     * paying for a round-trip on the overwhelmingly common no-delegation boot.
+     */
+    hasPendingResume(): boolean;
+    /**
+     * Re-mints the delegated session the user reloaded out of, and completes when
+     * delegated mode is in force (or when there is nothing to resume). Await this
+     * **before** mounting the authenticated shell so its reads run once, already
+     * delegated.
+     */
+    resumeSession(): Observable<void>;
     startSession(delegation: DelegationRow): Observable<void>;
     switchSession(delegation: DelegationRow): Observable<void>;
     endSession(reason?: DelegationSessionInvalidationReason): Observable<unknown>;
@@ -1331,5 +1450,5 @@ declare class DelegationSessionFacade {
     static ɵprov: _angular_core.ɵɵInjectableDeclaration<DelegationSessionFacade>;
 }
 
-export { ApproveDelegation, CancelDelegation, ClearDelegationDetail, ClearScopePreview, CreateDelegationLegacy, CreateDelegationV2, DELEGATED_RUNTIME_REQUEST, DELEGATION_RUNTIME_CONFIG, DelegationDetailDrawer, DelegationForm, DelegationMenuPanel, DelegationSessionActionKey, DelegationSessionFacade, DelegationSessionState, DelegationStatusChip, Delegations, DelegationsActionKey, DelegationsFacade, DelegationsList, DelegationsState, EndDelegationSession, GetActiveAssignedDelegations, GetAdminDelegations, GetApprovalDelegations, GetAssignedDelegations, GetDelegationDetail, GetMyDelegations, GetScopeOptions, LoadDelegationCandidates, PreviewScope, RejectDelegation, RejectDelegationDialog, ScopePicker, StartDelegationSession, StartSessionDialog, SwitchDelegationSession, TopbarDelegationMenu, UpdateDelegationLegacy, UpdateDelegationV2, appDelegationInterceptor, provideDelegationRuntime, withDelegatedRuntime };
+export { ApproveDelegation, CancelDelegation, ClearDelegationDetail, ClearScopePreview, CreateDelegationLegacy, CreateDelegationV2, DELEGATED_RUNTIME_REQUEST, DELEGATION_RUNTIME_CONFIG, DelegationDetailDrawer, DelegationForm, DelegationMenuPanel, DelegationSessionActionKey, DelegationSessionFacade, DelegationSessionResumeStore, DelegationSessionState, DelegationStatusChip, Delegations, DelegationsActionKey, DelegationsFacade, DelegationsList, DelegationsState, EndDelegationSession, GetActiveAssignedDelegations, GetAdminDelegations, GetApprovalDelegations, GetAssignedDelegations, GetDelegationDetail, GetMyDelegations, GetScopeOptions, LoadDelegationCandidates, PreviewScope, RejectDelegation, RejectDelegationDialog, ResumeDelegationSession, ScopePicker, StartDelegationSession, StartSessionDialog, SwitchDelegationSession, TopbarDelegationMenu, UpdateDelegationLegacy, UpdateDelegationV2, appDelegationInterceptor, provideDelegationRuntime, withDelegatedRuntime };
 export type { ActiveDelegationSession, AdminCreateDelegationV2Request, AdminUpdateDelegationV2Request, ApproveDelegationRequest, CreateDelegationLegacyRequest, CreateDelegationV2Request, DelegationAllowedAction, DelegationAppAccessibility, DelegationApprovalInfo, DelegationApprovalStatus, DelegationCancellationInfo, DelegationContextChange, DelegationContextChangeReason, DelegationDayRuleMode, DelegationDetail, DelegationDisplayValue, DelegationDto, DelegationEffectiveStatus, DelegationGrant, DelegationListQuery, DelegationPage, DelegationParty, DelegationPromptNamespace, DelegationRow, DelegationRuntimeConfig, DelegationScopeAction, DelegationScopeCombinationRule, DelegationScopeDeniedItem, DelegationScopeFact, DelegationScopeHierarchyGroup, DelegationScopeHierarchyTarget, DelegationScopeLevelNode, DelegationScopeModuleNode, DelegationScopeOptions, DelegationScopePermissionGroup, DelegationScopePreview, DelegationScopePreviewRequest, DelegationScopeSelection, DelegationScopeTarget, DelegationScopeView, DelegationScopeViewLevel, DelegationScopeViewModule, DelegationScopeViewOperation, DelegationScopeViewTemplate, DelegationScopeWarning, DelegationSessionInvalidationReason, DelegationSessionStartResponse, DelegationSessionStateModel, DelegationSortDirection, DelegationStatusInfo, DelegationsStateModel, RejectDelegationRequest, UpdateDelegationLegacyRequest, UpdateDelegationV2Request };