@mmlogic/components 0.5.16 → 0.5.18

package/dist/collection/components/documents/mrd-document-container/mrd-document-container.js

@@ -32,6 +32,13 @@ export class MrdDocumentContainer {
          *  (with a tooltip explaining why) and the embedded table/list get it passed
          *  through so their own create/upload/drag-drop paths are disabled too. */
         this.readOnly = false;
+        /** Whether the current user may create a document here — set by mrd-layout-section from
+         *  its generic capability check (TASK-0299/FINDING-0155), the same answer the embedded
+         *  table gets in list mode. Named `mayCreate` (not `canCreate`) to avoid colliding with
+         *  the existing `canCreate` state below, which tracks something unrelated: whether the
+         *  folder tree currently has a valid drop target selected. Defaults to false (hidden)
+         *  until confirmed, same as mrd-table. */
+        this.mayCreate = false;
         /** Active body: folder tree or flat table. */
         this.mode = 'tree';
         /** Whether the folder tree currently has a valid target for "New folder". */
@@ -46,7 +53,7 @@ export class MrdDocumentContainer {
         };
         this.pickFile = () => {
             var _a;
-            if (this.readOnly)
+            if (this.readOnly || !this.mayCreate)
                 return;
             (_a = this.fileInputEl) === null || _a === void 0 ? void 0 : _a.click();
         };
@@ -84,7 +91,7 @@ export class MrdDocumentContainer {
     }
     // ── Toolbar ────────────────────────────────────────────────────────────────
     renderToolbar() {
-        return (h("div", { class: "mrd-document-container__toolbar" }, this.mode === 'tree' && (h("button", { type: "button", class: "mrd-document-container__action", disabled: this.readOnly || !this.canCreate, title: this.readOnly ? t('readonly_access', this.locale) : undefined, onClick: this.createFolder }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("path", { d: "M3 7a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z" }), h("path", { d: "M12 11v4M10 13h4" })), t('new_folder', this.locale))), this.mode === 'tree' && (h("button", { type: "button", class: "mrd-document-container__action", disabled: this.readOnly || !this.canCreate, title: this.readOnly ? t('readonly_access', this.locale) : (this.targetLabel ? `${t('doc_upload_to', this.locale)} ${this.targetLabel}` : undefined), onClick: this.pickFile }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("path", { d: "M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4" }), h("path", { d: "M12 3v13M7 8l5-5 5 5" })), t('doc_upload', this.locale))), h("input", { type: "file", class: "mrd-document-container__file-input", ref: el => (this.fileInputEl = el), onChange: this.onFilePicked }), h("div", { class: "mrd-document-container__seg", role: "group", "aria-label": t('doc_view_switch', this.locale) }, h("button", { class: "mrd-document-container__seg-btn", "aria-pressed": String(this.mode === 'tree'), title: t('doc_view_tree', this.locale), "aria-label": t('doc_view_tree', this.locale), onClick: () => this.setMode('tree') }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("path", { d: "M3 5h6M3 12h9M3 19h6" }), h("circle", { cx: "18", cy: "5", r: "1.6" }), h("circle", { cx: "18", cy: "19", r: "1.6" }), h("path", { d: "M16 12h4" }))), h("button", { class: "mrd-document-container__seg-btn", "aria-pressed": String(this.mode === 'list'), title: t('doc_view_list', this.locale), "aria-label": t('doc_view_list', this.locale), onClick: () => this.setMode('list') }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("path", { d: "M8 6h13M8 12h13M8 18h13M3 6h.01M3 12h.01M3 18h.01" }))))));
+        return (h("div", { class: "mrd-document-container__toolbar" }, this.mode === 'tree' && this.mayCreate && (h("button", { type: "button", class: "mrd-document-container__action", disabled: this.readOnly || !this.canCreate, title: this.readOnly ? t('readonly_access', this.locale) : undefined, onClick: this.createFolder }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("path", { d: "M3 7a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z" }), h("path", { d: "M12 11v4M10 13h4" })), t('new_folder', this.locale))), this.mode === 'tree' && this.mayCreate && (h("button", { type: "button", class: "mrd-document-container__action", disabled: this.readOnly || !this.canCreate, title: this.readOnly ? t('readonly_access', this.locale) : (this.targetLabel ? `${t('doc_upload_to', this.locale)} ${this.targetLabel}` : undefined), onClick: this.pickFile }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("path", { d: "M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4" }), h("path", { d: "M12 3v13M7 8l5-5 5 5" })), t('doc_upload', this.locale))), h("input", { type: "file", class: "mrd-document-container__file-input", ref: el => (this.fileInputEl = el), onChange: this.onFilePicked }), h("div", { class: "mrd-document-container__seg", role: "group", "aria-label": t('doc_view_switch', this.locale) }, h("button", { class: "mrd-document-container__seg-btn", "aria-pressed": String(this.mode === 'tree'), title: t('doc_view_tree', this.locale), "aria-label": t('doc_view_tree', this.locale), onClick: () => this.setMode('tree') }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("path", { d: "M3 5h6M3 12h9M3 19h6" }), h("circle", { cx: "18", cy: "5", r: "1.6" }), h("circle", { cx: "18", cy: "19", r: "1.6" }), h("path", { d: "M16 12h4" }))), h("button", { class: "mrd-document-container__seg-btn", "aria-pressed": String(this.mode === 'list'), title: t('doc_view_list', this.locale), "aria-label": t('doc_view_list', this.locale), onClick: () => this.setMode('list') }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("path", { d: "M8 6h13M8 12h13M8 18h13M3 6h.01M3 12h.01M3 18h.01" }))))));
     }
     // ── Bodies ───────────────────────────────────────────────────────────────
     renderTree() {
@@ -115,7 +122,7 @@ export class MrdDocumentContainer {
             } }));
     }
     renderList() {
-        return (h("mrd-table", { "data-view": this.viewKey, ref: el => (this.tableEl = el), item: this.item, parentId: this.parentId, locale: this.locale, readOnly: this.readOnly, onMrdLoadPage: (e) => {
+        return (h("mrd-table", { "data-view": this.viewKey, ref: el => (this.tableEl = el), item: this.item, parentId: this.parentId, locale: this.locale, readOnly: this.readOnly, canCreate: this.mayCreate, onMrdLoadPage: (e) => {
                 e.stopPropagation();
                 this.mrdLoadPage.emit(e.detail);
             }, onMrdLoadAggregations: (e) => {
@@ -139,7 +146,7 @@ export class MrdDocumentContainer {
     }
     render() {
         const treeMode = this.mode === 'tree';
-        return (h(Host, { key: '6792d49f08dd19f6c51e4b656df06bbd8bc14f3e' }, this.renderToolbar(), h("div", { key: '702f4c288f8c40bd2c5999beb392b9dfd022b0bc', class: {
+        return (h(Host, { key: '4b674a508ac7ddf6af80a40836b72dc65f41c741' }, this.renderToolbar(), h("div", { key: '19968916f685a2e3cd075dabf170f67fb104251c', class: {
                 'mrd-document-container__body': true,
                 'mrd-document-container__body--tree': treeMode,
             }, style: treeMode ? { height: `${this.height}px`, overflowY: 'auto' } : {} }, treeMode ? this.renderTree() : this.renderList())));
@@ -326,6 +333,26 @@ export class MrdDocumentContainer {
                 "reflect": false,
                 "attribute": "read-only",
                 "defaultValue": "false"
+            },
+            "mayCreate": {
+                "type": "boolean",
+                "mutable": false,
+                "complexType": {
+                    "original": "boolean",
+                    "resolved": "boolean",
+                    "references": {}
+                },
+                "required": false,
+                "optional": false,
+                "docs": {
+                    "tags": [],
+                    "text": "Whether the current user may create a document here \u2014 set by mrd-layout-section from\nits generic capability check (TASK-0299/FINDING-0155), the same answer the embedded\ntable gets in list mode. Named `mayCreate` (not `canCreate`) to avoid colliding with\nthe existing `canCreate` state below, which tracks something unrelated: whether the\nfolder tree currently has a valid drop target selected. Defaults to false (hidden)\nuntil confirmed, same as mrd-table."
+                },
+                "getter": false,
+                "setter": false,
+                "reflect": false,
+                "attribute": "may-create",
+                "defaultValue": "false"
             }
         };
     }

package/dist/collection/components/layout/mrd-layout-section/mrd-layout-section.js

@@ -21,6 +21,12 @@ export class MrdLayoutSection {
          *  create ("+") action and the documents view's New folder / Upload are disabled
          *  with a tooltip explaining why, so it's clear at a glance the user can't mutate data. */
         this.readOnly = false;
+        /** When false, skips the mrdViewCheckCapabilities round trip for every VIEW/RELATED_VIEW
+         *  binding and hands mrd-table/mrd-memo-container/mrd-document-container their create
+         *  affordance as allowed immediately — for a tenant with no access control configured,
+         *  the answer would always be mayCreate: true anyway (FINDING-0171 / TASK-0322). Default
+         *  `true` keeps today's ask-and-hide behaviour unchanged. */
+        this.accessControlEnabled = true;
         /** The active account's linked person record (userProfile.links.person), if any.
          *  Threaded to mrd-memo-container so a top-level memo VIEW (no parent record to
          *  attach a new memo to) can still offer "New memo" by falling back to the
@@ -31,7 +37,22 @@ export class MrdLayoutSection {
         this.imagePreviewUrl = null;
         this.imagePreviews = {};
         this.openHistoryField = null;
+        /** Answers to mrdViewCheckCapabilities, keyed by view key — see emitCapabilitiesChecks().
+         *  Passed straight down as a `canCreate`/`mayCreate` prop to whichever body (mrd-table,
+         *  mrd-memo-container, mrd-document-container) is mounted for that key; a missing entry
+         *  means "not answered yet" and is treated as false (hidden), same default as mrd-table's
+         *  own standalone behaviour (TASK-0299). */
+        this.canCreateMap = {};
+        /** Companion to canCreateMap — concrete types the mrdViewCheckCapabilities answer allows,
+         *  when the API reports them; passed to mrd-table's `allowedTypes` prop to narrow its
+         *  create-type picker down to types a create POST would actually accept (FINDING-0176 /
+         *  TASK-0314). A missing entry means "not answered yet / not reported" — mrd-table then
+         *  leaves `item.createTypes` unfiltered, same as before this existed. */
+        this.allowedTypesMap = {};
         this.historyClickOutside = null;
+        /** Signature last asked per view key (see emitCapabilitiesChecks()) — avoids re-emitting
+         *  mrdViewCheckCapabilities on every data/items update when the binding hasn't changed. */
+        this.capabilitiesAsked = new Map();
         this.searchTimers = {};
         this.handleViewLoadPage = (e, name) => {
             e.stopPropagation();
@@ -51,6 +72,10 @@ export class MrdLayoutSection {
         };
     }
     componentDidLoad() {
+        // No DOM/child-hydration dependency, unlike initEmbeddedTables()/emitLoadImages() below —
+        // run it immediately rather than deferring, so the host's answer (setViewCanCreate) can
+        // land before the child bodies even mount.
+        this.emitCapabilitiesChecks();
         setTimeout(() => {
             this.initEmbeddedTables();
             this.emitLoadImages();
@@ -69,9 +94,15 @@ export class MrdLayoutSection {
     }
     dataChanged(newVal) {
         if (newVal && Object.keys(newVal).length > 0) {
+            this.emitCapabilitiesChecks();
             setTimeout(() => this.initEmbeddedTables(), 0);
         }
     }
+    /** A host can swap `items` (e.g. a different dashboard layout) without `data` changing —
+     *  dataChanged() alone would miss that binding change. */
+    itemsChanged() {
+        this.emitCapabilitiesChecks();
+    }
     async initEmbeddedTables() {
         const tables = this.el.querySelectorAll('mrd-table[data-view]');
         for (const table of Array.from(tables)) {
@@ -99,6 +130,70 @@ export class MrdLayoutSection {
             }
         }
     }
+    /** Parent record id extracted from `data._links.self.href` — the same value every
+     *  VIEW/RELATED_VIEW item on this record shares, used for RELATED_VIEW path construction
+     *  (renderRelatedView) and capability checks (emitCapabilitiesChecks). */
+    computeParentId() {
+        var _a, _b, _c, _d, _e;
+        const selfHref = (_d = (_c = (_b = (_a = this.data) === null || _a === void 0 ? void 0 : _a._links) === null || _b === void 0 ? void 0 : _b.self) === null || _c === void 0 ? void 0 : _c.href) !== null && _d !== void 0 ? _d : '';
+        return (_e = selfHref.split('/').filter(Boolean).pop()) !== null && _e !== void 0 ? _e : '';
+    }
+    /** Asks, once per VIEW/RELATED_VIEW binding, whether the current user may create a record
+     *  there — the single generic place for this check (TASK-0299/FINDING-0155), so mrd-table,
+     *  mrd-memo-container and mrd-document-container all get the answer the same way: as a plain
+     *  `canCreate`/`mayCreate` prop from this component, computed here and handed down in
+     *  renderTable()/renderMemoContainer()/renderDocumentContainer() — none of the three leaf
+     *  components need to ask on their own when rendered through mrd-layout-section (mrd-table's
+     *  own self-ask only kicks in for standalone use, i.e. its `canCreate` prop left undefined).
+     *
+     *  The route/path variables mirror what each renderer already uses for its own rows —
+     *  `type` = `dataClass`, `refType`/`refId` = `fromClass`/parentId for a RELATED_VIEW, and
+     *  `filterClass` when the view is scoped to one subtype (the same value sent as `?type=` on
+     *  the row fetch). A signature (not just the key) is tracked per binding so a genuine route
+     *  change re-asks and hides again, without re-asking on every unrelated data/items update. */
+    emitCapabilitiesChecks() {
+        var _a, _b, _c, _d;
+        if (!this.accessControlEnabled)
+            return;
+        const parentId = this.computeParentId();
+        for (const item of flattenItems(this.items)) {
+            if (item.type !== ClientLayoutItemType.VIEW && item.type !== ClientLayoutItemType.RELATED_VIEW)
+                continue;
+            const key = viewKeyFor(item);
+            if (!key || !item.view)
+                continue;
+            const isRelatedView = item.type === ClientLayoutItemType.RELATED_VIEW;
+            const type = (_b = (_a = item.dataClass) !== null && _a !== void 0 ? _a : item.relatedClass) !== null && _b !== void 0 ? _b : key;
+            const refType = isRelatedView ? ((_c = item.fromClass) !== null && _c !== void 0 ? _c : '') : undefined;
+            const refId = isRelatedView ? parentId : undefined;
+            const filterClass = (_d = item.filterClass) !== null && _d !== void 0 ? _d : undefined;
+            // A host binding `items` and `data` as separate properties (e.g. Angular's
+            // `[items]="…" [data]="…"` on <mrd-layout-section>) can apply them in either
+            // order — itemsChanged() can fire while `data` still holds its default `{}`,
+            // before the real record (and its self href) has landed. Asking here would
+            // emit refId: '' for a RELATED_VIEW, which a host's `refType && refId` check
+            // reads as "no parent" and answers via the plain, unscoped capabilities route
+            // instead of the parent-scoped one (FINDING-0175 / TASK-0316). Skip without
+            // marking capabilitiesAsked, so the real ask fires once dataChanged() lands.
+            if (isRelatedView && !refId)
+                continue;
+            const signature = JSON.stringify([type, refType, refId, filterClass]);
+            if (this.capabilitiesAsked.get(key) === signature)
+                continue;
+            this.capabilitiesAsked.set(key, signature);
+            if (key in this.canCreateMap) {
+                const next = Object.assign({}, this.canCreateMap);
+                delete next[key];
+                this.canCreateMap = next;
+            }
+            if (key in this.allowedTypesMap) {
+                const next = Object.assign({}, this.allowedTypesMap);
+                delete next[key];
+                this.allowedTypesMap = next;
+            }
+            this.mrdViewCheckCapabilities.emit(Object.assign(Object.assign({ name: key, type }, (refType !== undefined ? { refType, refId } : {})), (filterClass ? { filterClass } : {})));
+        }
+    }
     /** Inject search results. Pass dataClass to target a specific SEARCH item; omit when there is only one. */
     async setSearchResults(results, dataClass) {
         const key = dataClass !== null && dataClass !== void 0 ? dataClass : this.resolveSearchKey();
@@ -140,6 +235,28 @@ export class MrdLayoutSection {
             return;
         await table.setAggregations(data);
     }
+    /** Host answer to mrdViewCheckCapabilities — whether the current user may create a record
+     *  for the given view's bound route. `name` is the view key from the event detail. Stored in
+     *  canCreateMap and passed down as a plain prop to whichever body is mounted for that key
+     *  (mrd-table, mrd-memo-container or mrd-document-container) — no DOM lookup needed, unlike
+     *  setViewPage/setViewAggregations, since the prop flows through the next render. */
+    async setViewCanCreate(name, value, allowedTypes) {
+        this.canCreateMap = Object.assign(Object.assign({}, this.canCreateMap), { [name]: value });
+        this.allowedTypesMap = Object.assign(Object.assign({}, this.allowedTypesMap), { [name]: allowedTypes });
+    }
+    /** `canCreateMap[key]` when access control is configured (default); always allowed
+     *  when `accessControlEnabled` is false, since emitCapabilitiesChecks() never asked
+     *  and canCreateMap[key] would otherwise stay permanently unanswered. */
+    effectiveCanCreate(key) {
+        var _a;
+        return this.accessControlEnabled ? ((_a = this.canCreateMap[key]) !== null && _a !== void 0 ? _a : false) : true;
+    }
+    /** `allowedTypesMap[key]` when access control is configured; `undefined` (don't filter)
+     *  when disabled, since emitCapabilitiesChecks() never asked and the map entry would
+     *  otherwise stay permanently unanswered — see effectiveCanCreate(). */
+    effectiveAllowedTypes(key) {
+        return this.accessControlEnabled ? this.allowedTypesMap[key] : undefined;
+    }
     /** Inject distinct values into an embedded mrd-document-list for a document view. */
     async setViewDistinct(name, nodeId, values) {
         const list = this.el.querySelector(`mrd-document-list[data-doclist="${name}"]`);
@@ -227,20 +344,19 @@ export class MrdLayoutSection {
         return (h("div", { class: "mrd-layout-section__search", key: `search-${dataClass}` }, h("div", { class: "mrd-layout-section__search-wrap" }, h("svg", { class: "mrd-layout-section__search-icon", xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 20 20", fill: "currentColor", "aria-hidden": "true" }, h("path", { "fill-rule": "evenodd", d: "M9 3.5a5.5 5.5 0 100 11 5.5 5.5 0 000-11zM2 9a7 7 0 1112.452 4.391l3.328 3.329a.75.75 0 11-1.06 1.06l-3.329-3.328A7 7 0 012 9z", "clip-rule": "evenodd" })), h("input", { class: "mrd-layout-section__search-input", type: "text", value: query, placeholder: (_c = item.label) !== null && _c !== void 0 ? _c : '', onInput: e => this.handleSearchInput(dataClass, e.target.value) })), results.length > 0 && (h("ul", { class: "mrd-layout-section__search-results" }, results.map(r => (h("li", { key: r.id, class: "mrd-layout-section__search-result" }, h("button", { class: "mrd-layout-section__search-result-btn", onClick: () => this.mrdNavigate.emit({ href: r.id, label: r.label }) }, h("span", { class: "mrd-layout-section__search-result-label" }, r.label), r.description && h("span", { class: "mrd-layout-section__search-result-desc" }, r.description)))))))));
     }
     renderRelatedView(item) {
-        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l;
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
         const key = viewKeyFor(item);
         if (!key)
             return null;
         if (!item.view)
             return null;
         const showTitle = (_a = item.showTitle) !== null && _a !== void 0 ? _a : false;
-        // Extract parentId from data._links.self.href for RELATED_VIEW path construction
         const selfHref = (_e = (_d = (_c = (_b = this.data) === null || _b === void 0 ? void 0 : _b._links) === null || _c === void 0 ? void 0 : _c.self) === null || _d === void 0 ? void 0 : _d.href) !== null && _e !== void 0 ? _e : '';
-        const parentId = (_f = selfHref.split('/').filter(Boolean).pop()) !== null && _f !== void 0 ? _f : '';
+        const parentId = this.computeParentId();
         // The API publishes `archetypes` on the VIEW/RELATED_VIEW item itself
         // (sibling of `view`), not inside `view`.
-        const docArchetype = resolveArchetype((_g = item.archetypes) !== null && _g !== void 0 ? _g : (_h = item.view) === null || _h === void 0 ? void 0 : _h.archetypes, ARCHETYPE_DOCUMENT);
-        const memoArchetype = !docArchetype ? resolveArchetype((_j = item.archetypes) !== null && _j !== void 0 ? _j : (_k = item.view) === null || _k === void 0 ? void 0 : _k.archetypes, ARCHETYPE_MEMO) : undefined;
+        const docArchetype = resolveArchetype((_f = item.archetypes) !== null && _f !== void 0 ? _f : (_g = item.view) === null || _g === void 0 ? void 0 : _g.archetypes, ARCHETYPE_DOCUMENT);
+        const memoArchetype = !docArchetype ? resolveArchetype((_h = item.archetypes) !== null && _h !== void 0 ? _h : (_j = item.view) === null || _j === void 0 ? void 0 : _j.archetypes, ARCHETYPE_MEMO) : undefined;
         // Canonical parent href for single-container seeding: use the RELATED_VIEW's
         // fromClass (base class) rather than the route class, so polymorphic subtypes
         // resolve to the same container the documents actually reference.
@@ -251,7 +367,7 @@ export class MrdLayoutSection {
         // back to this parent; only when it matches the container slot does the
         // parent's own href double as the memo's container.
         const memoContainerRelated = item.type !== ClientLayoutItemType.RELATED_VIEW
-            || item.inverseRelation === ((_l = memoArchetype === null || memoArchetype === void 0 ? void 0 : memoArchetype.slots) === null || _l === void 0 ? void 0 : _l.container);
+            || item.inverseRelation === ((_k = memoArchetype === null || memoArchetype === void 0 ? void 0 : memoArchetype.slots) === null || _k === void 0 ? void 0 : _k.container);
         const memoContainerHref = memoContainerRelated ? containerHref : '';
         // Distinct from memoContainerRelated: only a genuine container-scoped
         // RELATED_VIEW (a company's own memo tab) makes every card's container
@@ -264,7 +380,7 @@ export class MrdLayoutSection {
      *  swaps between the folder tree and the flat table. Events are re-emitted to
      *  the host with the view key, exactly as the raw list/table events were. */
     renderDocumentContainer(item, key, parentId, archetype, containerHref) {
-        return (h("mrd-document-container", { item: item, archetype: archetype, parentId: parentId, containerHref: containerHref, viewKey: key, locale: this.locale, readOnly: this.readOnly, onMrdLoadDistinct: (e) => {
+        return (h("mrd-document-container", { item: item, archetype: archetype, parentId: parentId, containerHref: containerHref, viewKey: key, locale: this.locale, readOnly: this.readOnly, mayCreate: this.effectiveCanCreate(key), onMrdLoadDistinct: (e) => {
                 e.stopPropagation();
                 this.mrdLoadViewDistinct.emit(Object.assign({ name: key }, e.detail));
             }, onMrdLoadPage: (e) => {
@@ -301,7 +417,7 @@ export class MrdLayoutSection {
     renderMemoContainer(item, key, parentId, archetype, containerHref, containerRelated, showContainerLink) {
         var _a, _b, _c, _d;
         const labelsListItems = (_d = (_c = (_b = (_a = item.view) === null || _a === void 0 ? void 0 : _a.values) === null || _b === void 0 ? void 0 : _b.find(v => { var _a; return v.name === ((_a = archetype.slots) === null || _a === void 0 ? void 0 : _a.labels); })) === null || _c === void 0 ? void 0 : _c.listItems) !== null && _d !== void 0 ? _d : null;
-        return (h("mrd-memo-container", { "data-view": key, item: item, archetype: archetype, parentId: parentId, containerHref: containerHref, containerRelated: containerRelated, showContainerLink: showContainerLink, viewKey: key, locale: this.locale, readOnly: this.readOnly, me: this.me, labelsListItems: labelsListItems, onMrdNavigate: (e) => {
+        return (h("mrd-memo-container", { "data-view": key, item: item, archetype: archetype, parentId: parentId, containerHref: containerHref, containerRelated: containerRelated, showContainerLink: showContainerLink, viewKey: key, locale: this.locale, readOnly: this.readOnly, canCreate: this.effectiveCanCreate(key), me: this.me, labelsListItems: labelsListItems, onMrdNavigate: (e) => {
                 var _a;
                 e.stopPropagation();
                 this.mrdNavigate.emit(Object.assign(Object.assign({}, e.detail), { navigateBehaviour: (_a = item.navigateBehaviour) !== null && _a !== void 0 ? _a : ClientLayoutNavigateBehaviour.PAGE }));
@@ -328,7 +444,7 @@ export class MrdLayoutSection {
             } }));
     }
     renderTable(item, key, parentId) {
-        return (h("mrd-table", { "data-view": key, item: item, parentId: parentId, locale: this.locale, readOnly: this.readOnly, onMrdLoadPage: (e) => this.handleViewLoadPage(e, key), onMrdLoadAggregations: (e) => {
+        return (h("mrd-table", { "data-view": key, item: item, parentId: parentId, locale: this.locale, readOnly: this.readOnly, canCreate: this.effectiveCanCreate(key), allowedTypes: this.effectiveAllowedTypes(key), accessControlEnabled: this.accessControlEnabled, onMrdLoadPage: (e) => this.handleViewLoadPage(e, key), onMrdLoadAggregations: (e) => {
                 var _a;
                 e.stopPropagation();
                 this.mrdLoadViewAggregations.emit(Object.assign({ name: key, dataClass: (_a = item.dataClass) !== null && _a !== void 0 ? _a : key }, e.detail));
@@ -466,7 +582,7 @@ export class MrdLayoutSection {
         const emailArchetype = !docArchetype && !invoiceArchetype ? resolveArchetype(this.archetypes, ARCHETYPE_EMAIL) : undefined;
         const memoArchetype = !docArchetype && !invoiceArchetype && !emailArchetype ? resolveArchetype(this.archetypes, ARCHETYPE_MEMO) : undefined;
         const anyArchetype = docArchetype || invoiceArchetype || emailArchetype || memoArchetype;
-        return (h(Host, { key: '057d145da172e68f84b6ff34f71ae649d6d6bf92' }, h("div", { key: 'e03a1761dc6bcd9ff54b264fee56130270bddc2f', class: "mrd-layout-section" }, docArchetype && this.renderDocumentObject(docArchetype), invoiceArchetype && this.renderInvoiceObject(invoiceArchetype), emailArchetype && this.renderEmailObject(emailArchetype), memoArchetype && this.renderMemoObject(memoArchetype), !anyArchetype && this.items.map((item, i) => this.renderItem(item, this.items, i))), this.renderImageModal()));
+        return (h(Host, { key: '97351c57865614662e888b3c0278a61d866a74e1' }, h("div", { key: '43e8f0fda8fcd3300b879d05ac692ce331c896d5', class: "mrd-layout-section" }, docArchetype && this.renderDocumentObject(docArchetype), invoiceArchetype && this.renderInvoiceObject(invoiceArchetype), emailArchetype && this.renderEmailObject(emailArchetype), memoArchetype && this.renderMemoObject(memoArchetype), !anyArchetype && this.items.map((item, i) => this.renderItem(item, this.items, i))), this.renderImageModal()));
     }
     static get is() { return "mrd-layout-section"; }
     static get encapsulation() { return "scoped"; }
@@ -647,6 +763,26 @@ export class MrdLayoutSection {
                 "attribute": "read-only",
                 "defaultValue": "false"
             },
+            "accessControlEnabled": {
+                "type": "boolean",
+                "mutable": false,
+                "complexType": {
+                    "original": "boolean",
+                    "resolved": "boolean",
+                    "references": {}
+                },
+                "required": false,
+                "optional": false,
+                "docs": {
+                    "tags": [],
+                    "text": "When false, skips the mrdViewCheckCapabilities round trip for every VIEW/RELATED_VIEW\nbinding and hands mrd-table/mrd-memo-container/mrd-document-container their create\naffordance as allowed immediately \u2014 for a tenant with no access control configured,\nthe answer would always be mayCreate: true anyway (FINDING-0171 / TASK-0322). Default\n`true` keeps today's ask-and-hide behaviour unchanged."
+                },
+                "getter": false,
+                "setter": false,
+                "reflect": false,
+                "attribute": "access-control-enabled",
+                "defaultValue": "true"
+            },
             "me": {
                 "type": "unknown",
                 "mutable": false,
@@ -680,7 +816,9 @@ export class MrdLayoutSection {
             "searchResultsMap": {},
             "imagePreviewUrl": {},
             "imagePreviews": {},
-            "openHistoryField": {}
+            "openHistoryField": {},
+            "canCreateMap": {},
+            "allowedTypesMap": {}
         };
     }
     static get events() {
@@ -851,6 +989,21 @@ export class MrdLayoutSection {
                     "resolved": "{ name: string; nodeId: string; distinct: string; path: string; qs: string; }",
                     "references": {}
                 }
+            }, {
+                "method": "mrdViewCheckCapabilities",
+                "name": "mrdViewCheckCapabilities",
+                "bubbles": true,
+                "cancelable": true,
+                "composed": true,
+                "docs": {
+                    "tags": [],
+                    "text": "Emitted once per VIEW/RELATED_VIEW binding \u2014 computed here directly, not relayed from a\nchild (see emitCapabilitiesChecks()), so it covers mrd-table, mrd-memo-container and\nmrd-document-container uniformly. `name` is the view key (viewKeyFor(item)) \u2014 pass it\nback to setViewCanCreate() to answer it. setViewCanCreate()'s optional third argument\nnarrows a table's `item.createTypes` picker to the concrete types the answer allows,\nwhen the API's capabilities response reports them (FINDING-0176 / TASK-0314)."
+                },
+                "complexType": {
+                    "original": "{ name: string; type: string; refType?: string; refId?: string; filterClass?: string }",
+                    "resolved": "{ name: string; type: string; refType?: string | undefined; refId?: string | undefined; filterClass?: string | undefined; }",
+                    "references": {}
+                }
             }, {
                 "method": "mrdUpdateObject",
                 "name": "mrdUpdateObject",
@@ -1043,6 +1196,35 @@ export class MrdLayoutSection {
                     "tags": []
                 }
             },
+            "setViewCanCreate": {
+                "complexType": {
+                    "signature": "(name: string, value: boolean, allowedTypes?: string[]) => Promise<void>",
+                    "parameters": [{
+                            "name": "name",
+                            "type": "string",
+                            "docs": ""
+                        }, {
+                            "name": "value",
+                            "type": "boolean",
+                            "docs": ""
+                        }, {
+                            "name": "allowedTypes",
+                            "type": "string[] | undefined",
+                            "docs": ""
+                        }],
+                    "references": {
+                        "Promise": {
+                            "location": "global",
+                            "id": "global::Promise"
+                        }
+                    },
+                    "return": "Promise<void>"
+                },
+                "docs": {
+                    "text": "Host answer to mrdViewCheckCapabilities \u2014 whether the current user may create a record\nfor the given view's bound route. `name` is the view key from the event detail. Stored in\ncanCreateMap and passed down as a plain prop to whichever body is mounted for that key\n(mrd-table, mrd-memo-container or mrd-document-container) \u2014 no DOM lookup needed, unlike\nsetViewPage/setViewAggregations, since the prop flows through the next render.",
+                    "tags": []
+                }
+            },
             "setViewDistinct": {
                 "complexType": {
                     "signature": "(name: string, nodeId: string, values: DistinctValue[]) => Promise<void>",
@@ -1197,6 +1379,9 @@ export class MrdLayoutSection {
         return [{
                 "propName": "data",
                 "methodName": "dataChanged"
+            }, {
+                "propName": "items",
+                "methodName": "itemsChanged"
             }];
     }
 }

package/dist/collection/components/memo/mrd-memo-container/mrd-memo-container.js

@@ -53,6 +53,10 @@ export class MrdMemoContainer {
          *  tooltip, cards/rows are not clickable, and the embedded table's own
          *  create action is disabled too. */
         this.readOnly = false;
+        /** Whether the current user may create a memo here — set by mrd-layout-section from its
+         *  generic capability check (TASK-0299/FINDING-0155), the same answer the embedded table
+         *  gets in table mode. Defaults to false (hidden) until confirmed, same as mrd-table. */
+        this.canCreate = false;
         /** The active account's linked person record (userProfile.links.person), if any.
          *  Used both to gate "New memo" (see effectiveContainerHref) and, on submit, to
          *  fill the author slot. */
@@ -285,7 +289,7 @@ export class MrdMemoContainer {
      *  the dialog), so without it there is nothing valid to create — regardless
      *  of whether a parent record already supplies a container. */
     get canAdd() {
-        return !this.readOnly && !!this.meHref() && !!this.effectiveContainerHref;
+        return this.canCreate && !this.readOnly && !!this.meHref() && !!this.effectiveContainerHref;
     }
     /** Path for creating a new memo: `/{dataClass}` for a top-level VIEW, or
      *  `/{fromClass}/{parentId}/{dataClass}` when nested under a parent record. */
@@ -299,7 +303,7 @@ export class MrdMemoContainer {
         });
     }
     renderToolbar() {
-        return (h("div", { class: "mrd-memo-container__toolbar" }, this.mode === 'cards' && (h("button", { type: "button", class: "mrd-memo-container__action", disabled: !this.canAdd, title: this.readOnly ? t('readonly_access', this.locale) : undefined, onClick: this.openCreate }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("path", { d: "M12 5v14M5 12h14" })), t('memo_new', this.locale))), h("div", { class: "mrd-memo-container__seg", role: "group", "aria-label": t('doc_view_switch', this.locale) }, h("button", { class: "mrd-memo-container__seg-btn", "aria-pressed": String(this.mode === 'cards'), title: t('memo_view_cards', this.locale), "aria-label": t('memo_view_cards', this.locale), onClick: () => this.setMode('cards') }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("rect", { x: "3", y: "4", width: "7", height: "7", rx: "1" }), h("rect", { x: "14", y: "4", width: "7", height: "7", rx: "1" }), h("rect", { x: "3", y: "15", width: "7", height: "5", rx: "1" }), h("rect", { x: "14", y: "15", width: "7", height: "5", rx: "1" }))), h("button", { class: "mrd-memo-container__seg-btn", "aria-pressed": String(this.mode === 'table'), title: t('memo_view_table', this.locale), "aria-label": t('memo_view_table', this.locale), onClick: () => this.setMode('table') }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("path", { d: "M8 6h13M8 12h13M8 18h13M3 6h.01M3 12h.01M3 18h.01" }))))));
+        return (h("div", { class: "mrd-memo-container__toolbar" }, this.mode === 'cards' && this.canCreate && (h("button", { type: "button", class: "mrd-memo-container__action", disabled: !this.canAdd, title: this.readOnly ? t('readonly_access', this.locale) : undefined, onClick: this.openCreate }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("path", { d: "M12 5v14M5 12h14" })), t('memo_new', this.locale))), h("div", { class: "mrd-memo-container__seg", role: "group", "aria-label": t('doc_view_switch', this.locale) }, h("button", { class: "mrd-memo-container__seg-btn", "aria-pressed": String(this.mode === 'cards'), title: t('memo_view_cards', this.locale), "aria-label": t('memo_view_cards', this.locale), onClick: () => this.setMode('cards') }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("rect", { x: "3", y: "4", width: "7", height: "7", rx: "1" }), h("rect", { x: "14", y: "4", width: "7", height: "7", rx: "1" }), h("rect", { x: "3", y: "15", width: "7", height: "5", rx: "1" }), h("rect", { x: "14", y: "15", width: "7", height: "5", rx: "1" }))), h("button", { class: "mrd-memo-container__seg-btn", "aria-pressed": String(this.mode === 'table'), title: t('memo_view_table', this.locale), "aria-label": t('memo_view_table', this.locale), onClick: () => this.setMode('table') }, h("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", "stroke-width": "2", "stroke-linecap": "round", "stroke-linejoin": "round", "aria-hidden": "true" }, h("path", { d: "M8 6h13M8 12h13M8 18h13M3 6h.01M3 12h.01M3 18h.01" }))))));
     }
     renderDeleteConfirm() {
         return (h("div", null, h("h2", { class: "mrd-memo-container__modal-title" }, t('memo_delete_confirm_title', this.locale)), h("p", { class: "mrd-memo-container__modal-warning" }, t('memo_delete_confirm_body', this.locale)), h("div", { class: "mrd-memo-container__modal-actions" }, h("button", { type: "button", class: "mrd-memo-container__modal-cancel", onClick: this.cancelDeleteConfirm }, t('cancel', this.locale)), h("button", { type: "button", class: "mrd-memo-container__modal-delete-confirm", onClick: this.confirmDelete }, t('delete', this.locale)))));
@@ -336,7 +340,7 @@ export class MrdMemoContainer {
             } }));
     }
     renderTable() {
-        return (h("mrd-table", { "data-view": this.viewKey, ref: el => (this.tableEl = el), item: this.item, parentId: this.parentId, locale: this.locale, readOnly: this.readOnly, onMrdLoadPage: (e) => {
+        return (h("mrd-table", { "data-view": this.viewKey, ref: el => (this.tableEl = el), item: this.item, parentId: this.parentId, locale: this.locale, readOnly: this.readOnly, canCreate: this.canCreate, onMrdLoadPage: (e) => {
                 e.stopPropagation();
                 this.mrdLoadPage.emit(e.detail);
             }, onMrdLoadAggregations: (e) => {
@@ -351,7 +355,7 @@ export class MrdMemoContainer {
             } }));
     }
     render() {
-        return (h(Host, { key: 'a000221db6b1ba12351f38619f319b277b791f68' }, this.renderToolbar(), h("div", { key: '712951c8e391ed693bf6e4263c4f1076172b0451', class: "mrd-memo-container__body" }, this.mode === 'cards' ? this.renderCards() : this.renderTable()), this.renderDialog()));
+        return (h(Host, { key: 'b0479aad6dc49935442183fcbdf30c07c2c490ff' }, this.renderToolbar(), h("div", { key: '40d0fb882186001ad4984c1ba64c5a5c529f4d76', class: "mrd-memo-container__body" }, this.mode === 'cards' ? this.renderCards() : this.renderTable()), this.renderDialog()));
     }
     static get is() { return "mrd-memo-container"; }
     static get encapsulation() { return "scoped"; }
@@ -581,6 +585,26 @@ export class MrdMemoContainer {
                 "attribute": "read-only",
                 "defaultValue": "false"
             },
+            "canCreate": {
+                "type": "boolean",
+                "mutable": false,
+                "complexType": {
+                    "original": "boolean",
+                    "resolved": "boolean",
+                    "references": {}
+                },
+                "required": false,
+                "optional": false,
+                "docs": {
+                    "tags": [],
+                    "text": "Whether the current user may create a memo here \u2014 set by mrd-layout-section from its\ngeneric capability check (TASK-0299/FINDING-0155), the same answer the embedded table\ngets in table mode. Defaults to false (hidden) until confirmed, same as mrd-table."
+                },
+                "getter": false,
+                "setter": false,
+                "reflect": false,
+                "attribute": "can-create",
+                "defaultValue": "false"
+            },
             "me": {
                 "type": "unknown",
                 "mutable": false,