@mmlogic/components 0.5.16 → 0.5.18

package/dist/collection/components/table/mrd-table/mrd-table.js

@@ -76,6 +76,12 @@ export class MrdTable {
          *  explaining why) so a viewer-role user can see at a glance that this dashboard
          *  is read-only. Sorting, filtering and export stay available — those don't mutate data. */
         this.readOnly = false;
+        /** When false, skips the standalone mrdCheckCapabilities round trip entirely and renders
+         *  the create action immediately as allowed — for a tenant that has no access control
+         *  configured, the answer would always be true anyway (FINDING-0171 / TASK-0322). Ignored
+         *  while `canCreate` is set explicitly (the host already controls the answer directly in
+         *  that mode). Default `true` keeps today's ask-and-hide behaviour unchanged. */
+        this.accessControlEnabled = true;
         // ── Internal state ─────────────────────────────────────────────────────────
         /** Index into allViews[] for the currently displayed view. 0 = primary, 1+ = alternatives. */
         this.activeViewIdx = 0;
@@ -120,6 +126,13 @@ export class MrdTable {
         this.aggregationsPending = false;
         /** Lower bound on total derived from setPage() hasNext info; grows as pages load. */
         this.minKnownTotal = 0;
+        /** Self-asked answer for standalone use (the `canCreate` prop is undefined) — defaults to
+         *  hidden (TASK-0299) until the host answers mrdCheckCapabilities via setCanCreate(). Ignored
+         *  when the host controls `canCreate` directly; see effectiveCanCreate(). */
+        this.selfCanCreate = false;
+        /** Self-asked companion to selfCanCreate — the concrete types setCanCreate() reported allowed,
+         *  or `undefined` while unanswered / when the host's mrdCheckCapabilities answer omitted it. */
+        this.selfAllowedTypes = undefined;
         this.handleScroll = (e) => {
             const scroller = e.currentTarget;
             const { renderStart, renderEnd } = computeWindow(scroller.scrollTop, this.rowHeight, this.tableHeight, this.baseTotal);
@@ -154,6 +167,14 @@ export class MrdTable {
         this.searchOpen = false;
         this.searchQuery = '';
         this.stashedFilters = null;
+        this.emitCapabilitiesCheck();
+    }
+    /** A parent-record navigation can reuse the same `item` reference while only `parentId`
+     *  changes (e.g. clicking a different dossier for the same RELATED_VIEW layout) — itemChanged()
+     *  would not fire for that. Re-ask so a stale canCreate answer from the previous parent never
+     *  leaks into the new one. */
+    parentIdChanged() {
+        this.emitCapabilitiesCheck();
     }
     // ── Lifecycle ──────────────────────────────────────────────────────────────
     componentWillLoad() {
@@ -161,6 +182,7 @@ export class MrdTable {
         this.applyDefaultSort((_c = (_b = (_a = this.item) === null || _a === void 0 ? void 0 : _a.view) === null || _b === void 0 ? void 0 : _b.defaultSort) !== null && _c !== void 0 ? _c : '');
     }
     componentDidLoad() {
+        this.emitCapabilitiesCheck();
         this.staleCheckTimer = setInterval(() => this.checkStalePages(), STALE_CHECK_INTERVAL_MS);
         // A table inside a hidden tab pane renders and loads page 0 without ever having a box, so
         // the width freeze cannot measure anything. ResizeObserver fires the moment the pane is
@@ -279,6 +301,15 @@ export class MrdTable {
         // Fresh totals can be wider than the ones the columns were checked against.
         this.fixedContentMeasured = false;
     }
+    /** Host answer to mrdCheckCapabilities — whether the current user may create a record for
+     *  the table's currently bound route (standalone use only; ignored while the `canCreate`
+     *  prop is set, since the host controls it directly in that mode). Call it any time after
+     *  the event fires; a stale answer for an old binding is discarded automatically
+     *  (selfCanCreate is reset to false before every new mrdCheckCapabilities emission). */
+    async setCanCreate(value, allowedTypes) {
+        this.selfCanCreate = value;
+        this.selfAllowedTypes = allowedTypes;
+    }
     // ── Lifecycle ──────────────────────────────────────────────────────────────
     disconnectedCallback() {
         if (this.resizeObserver) {
@@ -638,6 +669,33 @@ export class MrdTable {
             dataClass: v.dataClass,
         });
     }
+    /** Asks the host whether creating is allowed for the table's current binding (item, parent
+     *  and active view) — only in standalone use (`canCreate` prop undefined). A host that
+     *  controls `canCreate` directly already knows the answer, so the table never asks on its
+     *  own in that mode. Resets selfCanCreate to false first so the add button stays hidden for
+     *  the new binding until the host answers — it never inherits the previous binding's answer. */
+    emitCapabilitiesCheck() {
+        var _a, _b;
+        if (this.canCreate !== undefined)
+            return;
+        if (!this.accessControlEnabled)
+            return;
+        this.selfCanCreate = false;
+        this.selfAllowedTypes = undefined;
+        const v = this.allViews[this.activeViewIdx];
+        if (!(v === null || v === void 0 ? void 0 : v.dataClass))
+            return;
+        const isRelatedView = ((_a = this.item) === null || _a === void 0 ? void 0 : _a.type) === 'RELATED_VIEW';
+        // A host binding `item` and `parentId` as separate properties (e.g. Angular) can apply
+        // them in either order — this can run while `parentId` still holds its default `''`,
+        // before the real parent record has landed. Asking here would emit refId: '' for a
+        // RELATED_VIEW, which a host's `refType && refId` check reads as "no parent" and answers
+        // via the plain, unscoped capabilities route instead of the parent-scoped one
+        // (FINDING-0175 / TASK-0316). Skip; parentIdChanged() re-asks once it lands.
+        if (isRelatedView && !this.parentId)
+            return;
+        this.mrdCheckCapabilities.emit(Object.assign(Object.assign({ type: v.dataClass }, (isRelatedView ? { refType: (_b = v.fromClass) !== null && _b !== void 0 ? _b : '', refId: this.parentId } : {})), (v.filterClass ? { filterClass: v.filterClass } : {})));
+    }
     /** Build query params for a page request from current sort, view filters, filterClass and active column filters.
      *
      *  `q` and column filters are mutually exclusive on the backend — combining them breaks
@@ -672,11 +730,41 @@ export class MrdTable {
         var _a, _b, _c;
         return ((_c = (_b = (_a = this.allViews[this.activeViewIdx]) === null || _a === void 0 ? void 0 : _a.view) === null || _b === void 0 ? void 0 : _b.values) !== null && _c !== void 0 ? _c : []);
     }
+    /** `canCreate` when the host controls it directly; else, when access control is disabled,
+     *  always allowed; else the table's own self-asked answer. */
+    get effectiveCanCreate() {
+        if (this.canCreate !== undefined)
+            return this.canCreate;
+        if (!this.accessControlEnabled)
+            return true;
+        return this.selfCanCreate;
+    }
+    /** `allowedTypes` when the host controls it directly, else the table's own self-asked
+     *  answer. `undefined` means "unknown — don't filter", not "nothing allowed". */
+    get effectiveAllowedTypes() {
+        if (this.allowedTypes !== undefined)
+            return this.allowedTypes;
+        return this.selfAllowedTypes;
+    }
+    /** `item.createTypes` intersected with effectiveAllowedTypes when that is known, so the
+     *  create-type picker only offers concrete types a create POST would actually accept
+     *  (FINDING-0176 / TASK-0314). Unfiltered when the answer isn't known (undefined) — an
+     *  older host/API that never reports allowedTypes keeps today's unfiltered behaviour. */
+    get effectiveCreateTypes() {
+        var _a;
+        const all = (_a = this.item) === null || _a === void 0 ? void 0 : _a.createTypes;
+        const allowed = this.effectiveAllowedTypes;
+        if (!all || allowed == null)
+            return all;
+        return all.filter(ct => allowed.includes(ct.type));
+    }
     get tableActions() {
         var _a, _b;
         const raw = (_b = (_a = this.item) === null || _a === void 0 ? void 0 : _a.actions) !== null && _b !== void 0 ? _b : [];
         return (raw !== null && raw !== void 0 ? raw : []).reduce((acc, a) => {
-            if (a === 'NEW')
+            // Hidden (not just disabled) until creating is confirmed allowed for this binding —
+            // see effectiveCanCreate() / emitCapabilitiesCheck() (TASK-0299).
+            if (a === 'NEW' && this.effectiveCanCreate)
                 acc.push({ action: 'create', label: t('table_new_record', this.locale), icon: 'assets/sprites.svg#icon-plus', variant: 'primary', disabled: this.readOnly });
             if (a === 'EXPORT')
                 acc.push({ action: 'export', label: t('table_export_excel', this.locale), icon: 'assets/sprites.svg#icon-file-excel' });
@@ -1084,6 +1172,7 @@ export class MrdTable {
         this.searchOpen = false;
         this.searchQuery = '';
         this.stashedFilters = null;
+        this.emitCapabilitiesCheck();
         this.init();
     }
     toggleViewPopover(e) {
@@ -1105,8 +1194,7 @@ export class MrdTable {
     }
     // ── Render: toolbar ────────────────────────────────────────────────────────
     renderToolbar() {
-        var _a;
-        return (h(Toolbar, { locale: this.locale, filterCount: this.activeFilters.size, actions: this.tableActions, views: this.allViews, activeViewIdx: this.activeViewIdx, viewPopoverOpen: this.viewPopoverOpen, createPickerOpen: this.createPickerOpen, createTypes: (_a = this.item) === null || _a === void 0 ? void 0 : _a.createTypes, readOnly: this.readOnly, searchEnabled: this.searchEnabled, searchOpen: this.searchOpen, searchQuery: this.searchQuery, cb: {
+        return (h(Toolbar, { locale: this.locale, filterCount: this.activeFilters.size, actions: this.tableActions, views: this.allViews, activeViewIdx: this.activeViewIdx, viewPopoverOpen: this.viewPopoverOpen, createPickerOpen: this.createPickerOpen, createTypes: this.effectiveCreateTypes, readOnly: this.readOnly, searchEnabled: this.searchEnabled, searchOpen: this.searchOpen, searchQuery: this.searchQuery, cb: {
                 onClearAllFilters: () => this.clearAllFilters(),
                 onViewSwitch: idx => this.handleViewSwitch(idx),
                 onToggleViewPopover: e => this.toggleViewPopover(e),
@@ -1475,6 +1563,62 @@ export class MrdTable {
                 "reflect": false,
                 "attribute": "read-only",
                 "defaultValue": "false"
+            },
+            "canCreate": {
+                "type": "boolean",
+                "mutable": false,
+                "complexType": {
+                    "original": "boolean",
+                    "resolved": "boolean | undefined",
+                    "references": {}
+                },
+                "required": false,
+                "optional": true,
+                "docs": {
+                    "tags": [],
+                    "text": "Whether the current user may create a record for the table's bound route. Leave\n`undefined` for standalone use \u2014 the table then asks on its own via mrdCheckCapabilities\nand hides the create button until setCanCreate() answers. Set it explicitly when a host\nalready knows the answer (e.g. mrd-layout-section, which asks once per binding and hands\nthe answer to whichever body it mounts) \u2014 the table then trusts it directly and never\nasks on its own (TASK-0299)."
+                },
+                "getter": false,
+                "setter": false,
+                "reflect": false,
+                "attribute": "can-create"
+            },
+            "allowedTypes": {
+                "type": "unknown",
+                "mutable": false,
+                "complexType": {
+                    "original": "string[] | null",
+                    "resolved": "null | string[] | undefined",
+                    "references": {}
+                },
+                "required": false,
+                "optional": true,
+                "docs": {
+                    "tags": [],
+                    "text": "Concrete types (`item.createTypes[].type`) the current user may actually create, when\n`item.createTypes` offers a picker for a family type \u2014 narrows it down to only the types\na create POST would accept (FINDING-0176 / TASK-0314). Leave `undefined` for standalone\nuse \u2014 the table takes it from the second argument of setCanCreate() alongside `canCreate`.\nSet it explicitly (e.g. from mrd-layout-section, alongside `canCreate`) when the host\nalready has the answer. `undefined` (not yet answered, or an older host/API that doesn't\nreport it) means \"don't filter\" \u2014 `item.createTypes` is shown unfiltered, same as before\nthis existed."
+                },
+                "getter": false,
+                "setter": false
+            },
+            "accessControlEnabled": {
+                "type": "boolean",
+                "mutable": false,
+                "complexType": {
+                    "original": "boolean",
+                    "resolved": "boolean",
+                    "references": {}
+                },
+                "required": false,
+                "optional": false,
+                "docs": {
+                    "tags": [],
+                    "text": "When false, skips the standalone mrdCheckCapabilities round trip entirely and renders\nthe create action immediately as allowed \u2014 for a tenant that has no access control\nconfigured, the answer would always be true anyway (FINDING-0171 / TASK-0322). Ignored\nwhile `canCreate` is set explicitly (the host already controls the answer directly in\nthat mode). Default `true` keeps today's ask-and-hide behaviour unchanged."
+                },
+                "getter": false,
+                "setter": false,
+                "reflect": false,
+                "attribute": "access-control-enabled",
+                "defaultValue": "true"
             }
         };
     }
@@ -1503,7 +1647,9 @@ export class MrdTable {
             "jsonModal": {},
             "aggregations": {},
             "aggregationsTotal": {},
-            "minKnownTotal": {}
+            "minKnownTotal": {},
+            "selfCanCreate": {},
+            "selfAllowedTypes": {}
         };
     }
     static get events() {
@@ -1608,6 +1754,21 @@ export class MrdTable {
                     "resolved": "{ path: string; qs: string; aggQs: string; }",
                     "references": {}
                 }
+            }, {
+                "method": "mrdCheckCapabilities",
+                "name": "mrdCheckCapabilities",
+                "bubbles": true,
+                "cancelable": true,
+                "composed": true,
+                "docs": {
+                    "tags": [],
+                    "text": "Standalone use only (never fires while the `canCreate` prop is set \u2014 see there). Fired\nonce per table binding (initial load, and whenever the bound item, parent record or active\nview changes) to ask the host whether the current user may create a record here. Carries\nthe same route the table already uses for its own rows, unconstructed \u2014 VIEW:\nGET /data/{tenant}/{type}/capabilities; RELATED_VIEW: GET /data/{tenant}/{refType}/{refId}/{type}/capabilities.\n`filterClass`, when the view declares one, is the same subtype the row fetch sends as\n`?type=` \u2014 e.g. a \"contents\" RELATED_VIEW filtered to `document` asks specifically whether\na document may be created here, not any content type.\nThe add button stays hidden until the host calls setCanCreate() (FINDING-0155 / TASK-0299).\nsetCanCreate()'s optional second argument narrows `item.createTypes`'s picker down to the\nconcrete types the answer allows, when the API's capabilities response reports them\n(FINDING-0176 / TASK-0314)."
+                },
+                "complexType": {
+                    "original": "{ type: string; refType?: string; refId?: string; filterClass?: string }",
+                    "resolved": "{ type: string; refType?: string | undefined; refId?: string | undefined; filterClass?: string | undefined; }",
+                    "references": {}
+                }
             }];
     }
     static get methods() {
@@ -1692,6 +1853,31 @@ export class MrdTable {
                     "text": "Inject aggregation totals returned by the /aggregations endpoint.",
                     "tags": []
                 }
+            },
+            "setCanCreate": {
+                "complexType": {
+                    "signature": "(value: boolean, allowedTypes?: string[]) => Promise<void>",
+                    "parameters": [{
+                            "name": "value",
+                            "type": "boolean",
+                            "docs": ""
+                        }, {
+                            "name": "allowedTypes",
+                            "type": "string[] | undefined",
+                            "docs": ""
+                        }],
+                    "references": {
+                        "Promise": {
+                            "location": "global",
+                            "id": "global::Promise"
+                        }
+                    },
+                    "return": "Promise<void>"
+                },
+                "docs": {
+                    "text": "Host answer to mrdCheckCapabilities \u2014 whether the current user may create a record for\nthe table's currently bound route (standalone use only; ignored while the `canCreate`\nprop is set, since the host controls it directly in that mode). Call it any time after\nthe event fires; a stale answer for an old binding is discarded automatically\n(selfCanCreate is reset to false before every new mrdCheckCapabilities emission).",
+                    "tags": []
+                }
             }
         };
     }
@@ -1703,6 +1889,9 @@ export class MrdTable {
             }, {
                 "propName": "item",
                 "methodName": "itemChanged"
+            }, {
+                "propName": "parentId",
+                "methodName": "parentIdChanged"
             }];
     }
 }

package/dist/collection/dev/api.js

@@ -108,6 +108,25 @@ async function apiFetchPage(token, baseHref, pageNumber, sort = '') {
   return body; // { _embedded, _links, page }
 }
 
+/** Answers mrdCheckCapabilities/mrdViewCheckCapabilities (TASK-0299): same route/path
+ *  variables the table already fetches its rows from, `/capabilities` appended.
+ *  VIEW: GET /data/{tenant}/{type}/capabilities
+ *  RELATED_VIEW: GET /data/{tenant}/{refType}/{refId}/{type}/capabilities
+ *  `filterClass`, when the view declares one, is appended the same way the row fetch
+ *  sends it — `?type={filterClass}` — so a "contents" view filtered to `document` asks
+ *  specifically whether a document may be created here. */
+async function apiFetchCapabilities(token, baseHref, refType, refId, type, filterClass) {
+  const path = refType
+    ? `${baseHref}/${refType}/${refId}/${type}/capabilities`
+    : `${baseHref}/${type}/capabilities`;
+  const url = filterClass ? `${path}?type=${encodeURIComponent(filterClass)}` : path;
+  const { ok, status, body } = await apiRequest('GET', url, token);
+  if (!ok) throw new Error(`${status}: ${typeof body === 'string' ? body : JSON.stringify(body)}`);
+  return body; // { mayCreate, allowedTypes? } — allowedTypes (TASK-0313/TASK-0314) lists the
+               // concrete types (createTypes[].type) the caller may create when `type` was a
+               // family; empty exactly when mayCreate is false.
+}
+
 async function apiSubmitForm(token, tenantCode, pluralName, values) {
   const { status, ok, body } = await apiWriteAndFetch('POST', `/data/${tenantCode}/${pluralName}`, token, values);
   return { status, ok, body };

package/dist/collection/dev/app.js

@@ -16,6 +16,10 @@ let _navHistory        = [];      // stack van { dashboardData, dashboardRecord,
 let _meUser            = null;    // { id: href, label: name } — resolved once after login via /accounts/me
 let _detailReadOnly    = false;   // Detail View tab: readOnly toggle (TASK-0248 demo)
 let _liveApiReadOnly   = false;   // Live API tab: readOnly toggle (TASK-0248 demo)
+let _detailCanCreate   = true;    // Detail View tab: mock answer to mrdViewCheckCapabilities (TASK-0299 demo)
+let _detailAllowedTypesFiltered = false; // Detail View tab: allowedTypes demo (TASK-0314)
+let _detailAccessControlEnabled = true;  // Detail View tab: accessControlEnabled toggle (TASK-0322 demo)
+let _liveApiAccessControlEnabled = true; // Live API tab: accessControlEnabled toggle (TASK-0322 demo)
 
 /* =====================================================================
    UTILITIES
@@ -179,6 +183,7 @@ function showCompanyDetail(row) {
     section.data  = company;
     section.locale = _locale;
     section.readOnly = _detailReadOnly;
+    section.accessControlEnabled = _detailAccessControlEnabled;
 
     section.addEventListener('mrdNavigate', (e) => {
       logEvent('mrdNavigate', e.detail);
@@ -193,6 +198,21 @@ function showCompanyDetail(row) {
       await section.setViewPage(name, page, mockRows, mockRows.length);
     });
 
+    // TASK-0299: mock answer so the "Share classes" tab's add button shows up
+    // (its layout item declares actions: ['NEW', 'EXPORT']) — a real host would
+    // call apiFetchCapabilities() instead, as the Live API tab does below.
+    // _detailCanCreate is toggleable (see onDetailViewCanCreateToggle) so both the
+    // hidden and visible states can be demonstrated without a live backend.
+    // TASK-0314: when _detailAllowedTypesFiltered is on, the mock answer also reports
+    // allowedTypes: ['ordinaryShares'] — the "Share classes" createTypes picker offers
+    // ordinaryShares + preferenceShares, so this demonstrates preferenceShares dropping
+    // out of the menu even though the layout item still declares both.
+    section.addEventListener('mrdViewCheckCapabilities', async (e) => {
+      logEvent('mrdViewCheckCapabilities', e.detail);
+      const allowedTypes = _detailAllowedTypesFiltered ? ['ordinaryShares'] : undefined;
+      await section.setViewCanCreate(e.detail.name, _detailCanCreate, allowedTypes);
+    });
+
     wrapper.appendChild(section);
     container.appendChild(wrapper);
   });
@@ -214,6 +234,36 @@ function onDetailViewReadOnlyToggle(checked) {
   });
 }
 
+/** canCreate demo (TASK-0299): flips the mock answer to mrdViewCheckCapabilities and
+ *  re-applies it to any already-rendered "Share classes" table via setViewCanCreate() —
+ *  no re-fetch, so the add button appears/disappears immediately. */
+function onDetailViewCanCreateToggle(checked) {
+  _detailCanCreate = checked;
+  document.querySelectorAll('#detail-sections mrd-layout-section').forEach((section) => {
+    section.setViewCanCreate('shareClasses', checked, _detailAllowedTypesFiltered ? ['ordinaryShares'] : undefined);
+  });
+}
+
+/** allowedTypes demo (TASK-0314): re-applies the mock capabilities answer with/without
+ *  allowedTypes so the "Share classes" +-button's picker narrows to "Ordinary shares"
+ *  only, without re-fetching. */
+function onDetailViewAllowedTypesToggle(checked) {
+  _detailAllowedTypesFiltered = checked;
+  document.querySelectorAll('#detail-sections mrd-layout-section').forEach((section) => {
+    section.setViewCanCreate('shareClasses', _detailCanCreate, checked ? ['ordinaryShares'] : undefined);
+  });
+}
+
+/** accessControlEnabled demo (TASK-0322): when disabled, mrd-layout-section skips
+ *  mrdViewCheckCapabilities entirely and the "Share classes" add button shows up
+ *  immediately, regardless of the mock canCreate answer above. */
+function onDetailViewAccessControlToggle(disabled) {
+  _detailAccessControlEnabled = !disabled;
+  document.querySelectorAll('#detail-sections mrd-layout-section').forEach((section) => {
+    section.accessControlEnabled = _detailAccessControlEnabled;
+  });
+}
+
 /* =====================================================================
    DOCUMENT PREVIEW TAB
    ===================================================================== */
@@ -510,6 +560,7 @@ async function renderSection(index) {
   section.data   = _dashboardRecord ?? { _links: _dashboardData._links ?? {} };
   section.locale = _locale;
   section.readOnly = _liveApiReadOnly;
+  section.accessControlEnabled = _liveApiAccessControlEnabled;
   // Dashboard-level archetypes describe the object itself → single-document view.
   // Only apply to the main object layout, not tab-page (related) layouts.
   section.archetypes = (!layout.tabPage && _dashboardData.archetypes) ? _dashboardData.archetypes : [];
@@ -567,6 +618,21 @@ async function renderSection(index) {
     }
   });
 
+  // TASK-0299: the table's add button stays hidden until this answers — real call
+  // against GET /data/{tenant}/{refType}/{refId}/{type}/capabilities (or the top-level
+  // /{type}/capabilities form for a VIEW without a parent).
+  section.addEventListener('mrdViewCheckCapabilities', async (e) => {
+    if (generation !== _sectionGeneration) return;
+    const { name, type, refType, refId, filterClass } = e.detail;
+    logEvent('mrdViewCheckCapabilities', e.detail);
+    try {
+      const result = await apiFetchCapabilities(authGetToken(), _baseHref, refType, refId, type, filterClass);
+      await section.setViewCanCreate(name, !!result?.mayCreate, result?.allowedTypes);
+    } catch (err) {
+      console.error('[mrdViewCheckCapabilities] mislukt', name, err);
+    }
+  });
+
   section.addEventListener('mrdNavigate', async (e) => {
     if (generation !== _sectionGeneration) return;
     await handleNavigate(e.detail);
@@ -711,6 +777,15 @@ function onLiveApiReadOnlyToggle(checked) {
   if (section) section.readOnly = checked;
 }
 
+/** accessControlEnabled demo (TASK-0322): when disabled, mrd-layout-section skips
+ *  mrdViewCheckCapabilities entirely (no apiFetchCapabilities call) and every
+ *  VIEW/RELATED_VIEW's create affordance shows up immediately. */
+function onLiveApiAccessControlToggle(disabled) {
+  _liveApiAccessControlEnabled = !disabled;
+  const section = document.querySelector('#sections-container mrd-layout-section');
+  if (section) section.accessControlEnabled = _liveApiAccessControlEnabled;
+}
+
 function toggleJsonViewer() {
   const viewer = document.getElementById('json-viewer');
   const btn    = document.getElementById('btn-json-toggle');

package/dist/components/mrd-document-container2.js

@@ -1 +1 @@
-import{proxyCustomElement as t,HTMLElement as r,createEvent as e,h as o,Host as i,transformTag as n}from"@stencil/core/internal/client";import{e as d}from"./client-layout.js";import{t as s}from"./i18n.js";import{a}from"./document-attachments.js";import{d as c}from"./mrd-document-list2.js";import{d as l}from"./mrd-table2.js";const m=t(class extends r{constructor(t){super(),!1!==t&&this.__registerHost(),this.mrdLoadPage=e(this,"mrdLoadPage",7),this.mrdLoadDistinct=e(this,"mrdLoadDistinct",7),this.mrdLoadAggregations=e(this,"mrdLoadAggregations",7),this.mrdNavigate=e(this,"mrdNavigate",7),this.mrdAction=e(this,"mrdAction",7),this.mrdUpdateObject=e(this,"mrdUpdateObject",7),this.mrdUpload=e(this,"mrdUpload",7),this.mrdCreateObject=e(this,"mrdCreateObject",7),this.item=null,this.parentId="",this.containerHref="",this.viewKey="",this.height=460,this.locale=navigator.language,this.readOnly=!1,this.mode="tree",this.canCreate=!1,this.targetLabel="",this.tableInited=!1,this.createFolder=()=>{var t;null===(t=this.listEl)||void 0===t||t.createFolder()},this.pickFile=()=>{var t;this.readOnly||null===(t=this.fileInputEl)||void 0===t||t.click()},this.onFilePicked=t=>{var r,e;const o=t.target,i=null===(r=o.files)||void 0===r?void 0:r[0];i&&(null===(e=this.listEl)||void 0===e||e.uploadFile(i)),o.value=""}}componentDidRender(){var t;if("list"===this.mode&&this.tableEl&&!this.tableInited){this.tableInited=!0;const r=this.tableEl;Promise.resolve(null===(t=r.componentOnReady)||void 0===t?void 0:t.call(r)).then((()=>r.init()))}}setMode(t){t!==this.mode&&(this.canCreate=!1,this.tableInited=!1,this.mode=t)}renderToolbar(){return o("div",{class:"mrd-document-container__toolbar"},"tree"===this.mode&&o("button",{type:"button",class:"mrd-document-container__action",disabled:this.readOnly||!this.canCreate,title:this.readOnly?s("readonly_access",this.locale):void 0,onClick:this.createFolder},o("svg",{viewBox:"0 0 24 24",fill:"none",stroke:"currentColor","stroke-width":"2","stroke-linecap":"round","stroke-linejoin":"round","aria-hidden":"true"},o("path",{d:"M3 7a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"}),o("path",{d:"M12 11v4M10 13h4"})),s("new_folder",this.locale)),"tree"===this.mode&&o("button",{type:"button",class:"mrd-document-container__action",disabled:this.readOnly||!this.canCreate,title:this.readOnly?s("readonly_access",this.locale):this.targetLabel?`${s("doc_upload_to",this.locale)} ${this.targetLabel}`:void 0,onClick:this.pickFile},o("svg",{viewBox:"0 0 24 24",fill:"none",stroke:"currentColor","stroke-width":"2","stroke-linecap":"round","stroke-linejoin":"round","aria-hidden":"true"},o("path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"}),o("path",{d:"M12 3v13M7 8l5-5 5 5"})),s("doc_upload",this.locale)),o("input",{type:"file",class:"mrd-document-container__file-input",ref:t=>this.fileInputEl=t,onChange:this.onFilePicked}),o("div",{class:"mrd-document-container__seg",role:"group","aria-label":s("doc_view_switch",this.locale)},o("button",{class:"mrd-document-container__seg-btn","aria-pressed":String("tree"===this.mode),title:s("doc_view_tree",this.locale),"aria-label":s("doc_view_tree",this.locale),onClick:()=>this.setMode("tree")},o("svg",{viewBox:"0 0 24 24",fill:"none",stroke:"currentColor","stroke-width":"2","stroke-linecap":"round","stroke-linejoin":"round","aria-hidden":"true"},o("path",{d:"M3 5h6M3 12h9M3 19h6"}),o("circle",{cx:"18",cy:"5",r:"1.6"}),o("circle",{cx:"18",cy:"19",r:"1.6"}),o("path",{d:"M16 12h4"}))),o("button",{class:"mrd-document-container__seg-btn","aria-pressed":String("list"===this.mode),title:s("doc_view_list",this.locale),"aria-label":s("doc_view_list",this.locale),onClick:()=>this.setMode("list")},o("svg",{viewBox:"0 0 24 24",fill:"none",stroke:"currentColor","stroke-width":"2","stroke-linecap":"round","stroke-linejoin":"round","aria-hidden":"true"},o("path",{d:"M8 6h13M8 12h13M8 18h13M3 6h.01M3 12h.01M3 18h.01"})))))}renderTree(){return o("mrd-document-list",{"data-doclist":this.viewKey,ref:t=>this.listEl=t,item:this.item,archetype:this.archetype,parentId:this.parentId,containerHref:this.containerHref,locale:this.locale,readOnly:this.readOnly,onMrdLoadDistinct:t=>{t.stopPropagation(),this.mrdLoadDistinct.emit(t.detail)},onMrdLoadPage:t=>{t.stopPropagation(),this.mrdLoadPage.emit(t.detail)},onMrdNavigate:t=>{t.stopPropagation(),this.mrdNavigate.emit(Object.assign(Object.assign({},t.detail),{navigateBehaviour:d.OVERLAY_PAGE}))},onMrdCanCreate:t=>{t.stopPropagation(),this.canCreate=t.detail},onMrdTargetLabel:t=>{t.stopPropagation(),this.targetLabel=t.detail},onMrdUpdateObject:t=>{t.stopPropagation(),this.mrdUpdateObject.emit(t.detail)},onMrdUpload:t=>{t.stopPropagation(),this.mrdUpload.emit(t.detail)},onMrdCreateObject:t=>{t.stopPropagation(),this.mrdCreateObject.emit(t.detail)}})}renderList(){return o("mrd-table",{"data-view":this.viewKey,ref:t=>this.tableEl=t,item:this.item,parentId:this.parentId,locale:this.locale,readOnly:this.readOnly,onMrdLoadPage:t=>{t.stopPropagation(),this.mrdLoadPage.emit(t.detail)},onMrdLoadAggregations:t=>{t.stopPropagation(),this.mrdLoadAggregations.emit(t.detail)},onMrdRowClick:t=>{var r,e,o;t.stopPropagation();const{row:i,listContext:n}=t.detail;this.mrdNavigate.emit({href:null===(e=null===(r=null==i?void 0:i._links)||void 0===r?void 0:r.self)||void 0===e?void 0:e.href,label:null!==(o=null==i?void 0:i.name)&&void 0!==o?o:"",navigateBehaviour:d.OVERLAY_PAGE,listContext:n,attachments:a(this.archetype,i)})},onMrdAction:t=>{t.stopPropagation(),this.mrdAction.emit(t.detail)}})}render(){const t="tree"===this.mode;return o(i,{key:"6792d49f08dd19f6c51e4b656df06bbd8bc14f3e"},this.renderToolbar(),o("div",{key:"702f4c288f8c40bd2c5999beb392b9dfd022b0bc",class:{"mrd-document-container__body":!0,"mrd-document-container__body--tree":t},style:t?{height:`${this.height}px`,overflowY:"auto"}:{}},t?this.renderTree():this.renderList()))}get el(){return this}static get style(){return".sc-mrd-document-container-h{display:block}.mrd-document-container__toolbar.sc-mrd-document-container{display:flex;align-items:center;justify-content:flex-end;gap:var(--mrd-space-2);padding:var(--mrd-space-2) 0;border-bottom:1px solid var(--mrd-color-neutral-100)}.mrd-document-container__body--tree.sc-mrd-document-container{border:1px solid var(--mrd-border-color);border-radius:var(--mrd-border-radius);overflow:hidden}.mrd-document-container__action.sc-mrd-document-container{display:inline-flex;align-items:center;gap:var(--mrd-space-2);height:1.625rem;padding:0 var(--mrd-space-3);font-size:var(--mrd-font-size-sm);color:var(--mrd-color-neutral-700);background:var(--mrd-color-white);border:1px solid var(--mrd-color-neutral-200);border-radius:var(--mrd-border-radius);cursor:pointer;transition:background var(--mrd-transition-fast), border-color var(--mrd-transition-fast)}.mrd-document-container__action.sc-mrd-document-container svg.sc-mrd-document-container{width:1rem;height:1rem;color:var(--mrd-color-folder)}.mrd-document-container__action.sc-mrd-document-container:hover:not(:disabled){background:var(--mrd-color-neutral-50);border-color:var(--mrd-color-neutral-300)}.mrd-document-container__action.sc-mrd-document-container:disabled{opacity:0.5;cursor:not-allowed}.mrd-document-container__file-input.sc-mrd-document-container{display:none}.mrd-document-container__seg.sc-mrd-document-container{display:inline-flex;gap:2px;padding:2px;background:var(--mrd-color-neutral-100);border-radius:var(--mrd-border-radius)}.mrd-document-container__seg-btn.sc-mrd-document-container{width:1.875rem;height:1.625rem;display:grid;place-items:center;border:none;background:none;border-radius:var(--mrd-border-radius-sm);color:var(--mrd-color-neutral-500);cursor:pointer;transition:color var(--mrd-transition-fast), background var(--mrd-transition-fast)}.mrd-document-container__seg-btn.sc-mrd-document-container:hover{color:var(--mrd-color-neutral-800)}.mrd-document-container__seg-btn[aria-pressed=true].sc-mrd-document-container{background:var(--mrd-color-white);color:var(--mrd-color-primary-dark);box-shadow:var(--mrd-shadow-sm)}.mrd-document-container__seg-btn.sc-mrd-document-container svg.sc-mrd-document-container{width:1rem;height:1rem}"}},[2,"mrd-document-container",{item:[16],archetype:[16],parentId:[1,"parent-id"],containerHref:[1,"container-href"],viewKey:[1,"view-key"],height:[2],locale:[1],readOnly:[4,"read-only"],mode:[32],canCreate:[32],targetLabel:[32]}]);function h(){"undefined"!=typeof customElements&&["mrd-document-container","mrd-document-list","mrd-table"].forEach((t=>{switch(t){case"mrd-document-container":customElements.get(n(t))||customElements.define(n(t),m);break;case"mrd-document-list":customElements.get(n(t))||c();break;case"mrd-table":customElements.get(n(t))||l()}}))}export{m as M,h as d}
+import{proxyCustomElement as t,HTMLElement as r,createEvent as e,h as o,Host as i,transformTag as n}from"@stencil/core/internal/client";import{e as d}from"./client-layout.js";import{t as a}from"./i18n.js";import{a as s}from"./document-attachments.js";import{d as c}from"./mrd-document-list2.js";import{d as l}from"./mrd-table2.js";const m=t(class extends r{constructor(t){super(),!1!==t&&this.__registerHost(),this.mrdLoadPage=e(this,"mrdLoadPage",7),this.mrdLoadDistinct=e(this,"mrdLoadDistinct",7),this.mrdLoadAggregations=e(this,"mrdLoadAggregations",7),this.mrdNavigate=e(this,"mrdNavigate",7),this.mrdAction=e(this,"mrdAction",7),this.mrdUpdateObject=e(this,"mrdUpdateObject",7),this.mrdUpload=e(this,"mrdUpload",7),this.mrdCreateObject=e(this,"mrdCreateObject",7),this.item=null,this.parentId="",this.containerHref="",this.viewKey="",this.height=460,this.locale=navigator.language,this.readOnly=!1,this.mayCreate=!1,this.mode="tree",this.canCreate=!1,this.targetLabel="",this.tableInited=!1,this.createFolder=()=>{var t;null===(t=this.listEl)||void 0===t||t.createFolder()},this.pickFile=()=>{var t;!this.readOnly&&this.mayCreate&&(null===(t=this.fileInputEl)||void 0===t||t.click())},this.onFilePicked=t=>{var r,e;const o=t.target,i=null===(r=o.files)||void 0===r?void 0:r[0];i&&(null===(e=this.listEl)||void 0===e||e.uploadFile(i)),o.value=""}}componentDidRender(){var t;if("list"===this.mode&&this.tableEl&&!this.tableInited){this.tableInited=!0;const r=this.tableEl;Promise.resolve(null===(t=r.componentOnReady)||void 0===t?void 0:t.call(r)).then((()=>r.init()))}}setMode(t){t!==this.mode&&(this.canCreate=!1,this.tableInited=!1,this.mode=t)}renderToolbar(){return o("div",{class:"mrd-document-container__toolbar"},"tree"===this.mode&&this.mayCreate&&o("button",{type:"button",class:"mrd-document-container__action",disabled:this.readOnly||!this.canCreate,title:this.readOnly?a("readonly_access",this.locale):void 0,onClick:this.createFolder},o("svg",{viewBox:"0 0 24 24",fill:"none",stroke:"currentColor","stroke-width":"2","stroke-linecap":"round","stroke-linejoin":"round","aria-hidden":"true"},o("path",{d:"M3 7a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"}),o("path",{d:"M12 11v4M10 13h4"})),a("new_folder",this.locale)),"tree"===this.mode&&this.mayCreate&&o("button",{type:"button",class:"mrd-document-container__action",disabled:this.readOnly||!this.canCreate,title:this.readOnly?a("readonly_access",this.locale):this.targetLabel?`${a("doc_upload_to",this.locale)} ${this.targetLabel}`:void 0,onClick:this.pickFile},o("svg",{viewBox:"0 0 24 24",fill:"none",stroke:"currentColor","stroke-width":"2","stroke-linecap":"round","stroke-linejoin":"round","aria-hidden":"true"},o("path",{d:"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"}),o("path",{d:"M12 3v13M7 8l5-5 5 5"})),a("doc_upload",this.locale)),o("input",{type:"file",class:"mrd-document-container__file-input",ref:t=>this.fileInputEl=t,onChange:this.onFilePicked}),o("div",{class:"mrd-document-container__seg",role:"group","aria-label":a("doc_view_switch",this.locale)},o("button",{class:"mrd-document-container__seg-btn","aria-pressed":String("tree"===this.mode),title:a("doc_view_tree",this.locale),"aria-label":a("doc_view_tree",this.locale),onClick:()=>this.setMode("tree")},o("svg",{viewBox:"0 0 24 24",fill:"none",stroke:"currentColor","stroke-width":"2","stroke-linecap":"round","stroke-linejoin":"round","aria-hidden":"true"},o("path",{d:"M3 5h6M3 12h9M3 19h6"}),o("circle",{cx:"18",cy:"5",r:"1.6"}),o("circle",{cx:"18",cy:"19",r:"1.6"}),o("path",{d:"M16 12h4"}))),o("button",{class:"mrd-document-container__seg-btn","aria-pressed":String("list"===this.mode),title:a("doc_view_list",this.locale),"aria-label":a("doc_view_list",this.locale),onClick:()=>this.setMode("list")},o("svg",{viewBox:"0 0 24 24",fill:"none",stroke:"currentColor","stroke-width":"2","stroke-linecap":"round","stroke-linejoin":"round","aria-hidden":"true"},o("path",{d:"M8 6h13M8 12h13M8 18h13M3 6h.01M3 12h.01M3 18h.01"})))))}renderTree(){return o("mrd-document-list",{"data-doclist":this.viewKey,ref:t=>this.listEl=t,item:this.item,archetype:this.archetype,parentId:this.parentId,containerHref:this.containerHref,locale:this.locale,readOnly:this.readOnly,onMrdLoadDistinct:t=>{t.stopPropagation(),this.mrdLoadDistinct.emit(t.detail)},onMrdLoadPage:t=>{t.stopPropagation(),this.mrdLoadPage.emit(t.detail)},onMrdNavigate:t=>{t.stopPropagation(),this.mrdNavigate.emit(Object.assign(Object.assign({},t.detail),{navigateBehaviour:d.OVERLAY_PAGE}))},onMrdCanCreate:t=>{t.stopPropagation(),this.canCreate=t.detail},onMrdTargetLabel:t=>{t.stopPropagation(),this.targetLabel=t.detail},onMrdUpdateObject:t=>{t.stopPropagation(),this.mrdUpdateObject.emit(t.detail)},onMrdUpload:t=>{t.stopPropagation(),this.mrdUpload.emit(t.detail)},onMrdCreateObject:t=>{t.stopPropagation(),this.mrdCreateObject.emit(t.detail)}})}renderList(){return o("mrd-table",{"data-view":this.viewKey,ref:t=>this.tableEl=t,item:this.item,parentId:this.parentId,locale:this.locale,readOnly:this.readOnly,canCreate:this.mayCreate,onMrdLoadPage:t=>{t.stopPropagation(),this.mrdLoadPage.emit(t.detail)},onMrdLoadAggregations:t=>{t.stopPropagation(),this.mrdLoadAggregations.emit(t.detail)},onMrdRowClick:t=>{var r,e,o;t.stopPropagation();const{row:i,listContext:n}=t.detail;this.mrdNavigate.emit({href:null===(e=null===(r=null==i?void 0:i._links)||void 0===r?void 0:r.self)||void 0===e?void 0:e.href,label:null!==(o=null==i?void 0:i.name)&&void 0!==o?o:"",navigateBehaviour:d.OVERLAY_PAGE,listContext:n,attachments:s(this.archetype,i)})},onMrdAction:t=>{t.stopPropagation(),this.mrdAction.emit(t.detail)}})}render(){const t="tree"===this.mode;return o(i,{key:"4b674a508ac7ddf6af80a40836b72dc65f41c741"},this.renderToolbar(),o("div",{key:"19968916f685a2e3cd075dabf170f67fb104251c",class:{"mrd-document-container__body":!0,"mrd-document-container__body--tree":t},style:t?{height:`${this.height}px`,overflowY:"auto"}:{}},t?this.renderTree():this.renderList()))}get el(){return this}static get style(){return".sc-mrd-document-container-h{display:block}.mrd-document-container__toolbar.sc-mrd-document-container{display:flex;align-items:center;justify-content:flex-end;gap:var(--mrd-space-2);padding:var(--mrd-space-2) 0;border-bottom:1px solid var(--mrd-color-neutral-100)}.mrd-document-container__body--tree.sc-mrd-document-container{border:1px solid var(--mrd-border-color);border-radius:var(--mrd-border-radius);overflow:hidden}.mrd-document-container__action.sc-mrd-document-container{display:inline-flex;align-items:center;gap:var(--mrd-space-2);height:1.625rem;padding:0 var(--mrd-space-3);font-size:var(--mrd-font-size-sm);color:var(--mrd-color-neutral-700);background:var(--mrd-color-white);border:1px solid var(--mrd-color-neutral-200);border-radius:var(--mrd-border-radius);cursor:pointer;transition:background var(--mrd-transition-fast), border-color var(--mrd-transition-fast)}.mrd-document-container__action.sc-mrd-document-container svg.sc-mrd-document-container{width:1rem;height:1rem;color:var(--mrd-color-folder)}.mrd-document-container__action.sc-mrd-document-container:hover:not(:disabled){background:var(--mrd-color-neutral-50);border-color:var(--mrd-color-neutral-300)}.mrd-document-container__action.sc-mrd-document-container:disabled{opacity:0.5;cursor:not-allowed}.mrd-document-container__file-input.sc-mrd-document-container{display:none}.mrd-document-container__seg.sc-mrd-document-container{display:inline-flex;gap:2px;padding:2px;background:var(--mrd-color-neutral-100);border-radius:var(--mrd-border-radius)}.mrd-document-container__seg-btn.sc-mrd-document-container{width:1.875rem;height:1.625rem;display:grid;place-items:center;border:none;background:none;border-radius:var(--mrd-border-radius-sm);color:var(--mrd-color-neutral-500);cursor:pointer;transition:color var(--mrd-transition-fast), background var(--mrd-transition-fast)}.mrd-document-container__seg-btn.sc-mrd-document-container:hover{color:var(--mrd-color-neutral-800)}.mrd-document-container__seg-btn[aria-pressed=true].sc-mrd-document-container{background:var(--mrd-color-white);color:var(--mrd-color-primary-dark);box-shadow:var(--mrd-shadow-sm)}.mrd-document-container__seg-btn.sc-mrd-document-container svg.sc-mrd-document-container{width:1rem;height:1rem}"}},[2,"mrd-document-container",{item:[16],archetype:[16],parentId:[1,"parent-id"],containerHref:[1,"container-href"],viewKey:[1,"view-key"],height:[2],locale:[1],readOnly:[4,"read-only"],mayCreate:[4,"may-create"],mode:[32],canCreate:[32],targetLabel:[32]}]);function h(){"undefined"!=typeof customElements&&["mrd-document-container","mrd-document-list","mrd-table"].forEach((t=>{switch(t){case"mrd-document-container":customElements.get(n(t))||customElements.define(n(t),m);break;case"mrd-document-list":customElements.get(n(t))||c();break;case"mrd-table":customElements.get(n(t))||l()}}))}export{m as M,h as d}