@portaidentity/cli 1.7.3 → 1.9.0

package/dist/admin/presentation.js

@@ -0,0 +1,271 @@
+/** JSVision presentation for the embedded Porta administration shell. */
+import { Commands, Desktop, grow, item, MenuBar, spacer, statusItem, statusLine, subMenu, View, Window, } from '@jsvision/ui';
+import { PORTABILITY_COMMAND } from './portability-controller.js';
+import { SYSTEM_CONFIG_COMMAND } from './system-config-controller.js';
+/** Command names handled by the administration application. */
+export const ADMIN_COMMANDS = {
+    authenticate: 'authenticate',
+    retry: 'retry',
+    reauthenticate: 'reauthenticate',
+    whoAmI: 'who-am-i',
+    createOrganization: 'create-organization',
+    switchOrganization: 'switch-organization',
+    manageOrganization: 'manage-organization',
+    browseUsers: 'browse-users',
+    createUser: 'create-user',
+    inviteUser: 'invite-user',
+    unavailableUser: 'user-action-unavailable',
+    browseApplications: 'browse-applications',
+    createApplication: 'create-application',
+    browseClients: 'browse-clients',
+    createClient: 'create-client',
+    unavailableClient: 'client-action-unavailable',
+    portability: PORTABILITY_COMMAND,
+    systemConfig: SYSTEM_CONFIG_COMMAND,
+    cancel: 'cancel',
+};
+/** Minimum geometry that can display a useful compact shell. */
+const COMPACT_WIDTH = 32;
+const COMPACT_HEIGHT = 8;
+/** Provides a stable focus target and the resize-only fallback over the desktop. */
+class AdminLandingView extends View {
+    reportRecoverableGeometry;
+    /** Creates the otherwise blank landing surface. */
+    constructor(reportRecoverableGeometry) {
+        super();
+        this.reportRecoverableGeometry = reportRecoverableGeometry;
+        this.focusable = true;
+    }
+    /** Draws guidance only when the terminal is too small to operate safely. */
+    draw(context) {
+        const { width, height } = context.size;
+        const recoverable = width >= COMPACT_WIDTH && height >= COMPACT_HEIGHT;
+        this.reportRecoverableGeometry(recoverable);
+        if (recoverable)
+            return;
+        const style = context.color('desktop');
+        context.text(1, 1, 'Terminal too small.', style);
+        context.text(1, 2, `Resize to at least ${COMPACT_WIDTH}x${COMPACT_HEIGHT}.`, style);
+        context.text(1, Math.max(3, height - 2), 'Alt-X Quit', style);
+    }
+}
+/** Builds the real JSVision view tree and application chrome. */
+export function createAdminPresentation(initialState, _insecure, viewport, utf8 = true) {
+    let currentState = initialState;
+    const belowRecoverable = viewport !== undefined && (viewport.width < COMPACT_WIDTH || viewport.height < COMPACT_HEIGHT);
+    const fullMenuItems = () => {
+        // Runtime-injected initial state may predate capability claims; missing claims grant nothing.
+        const capabilities = currentState.kind === 'authenticated'
+            ? (currentState.capabilities ?? {
+                canReadOrganizations: false,
+                canCreateOrganizations: false,
+                canUpdateOrganizations: false,
+                canSuspendOrganizations: false,
+                canReadUsers: false,
+                canCreateUsers: false,
+                canInviteUsers: false,
+                canUpdateUsers: false,
+                canManageUserLifecycle: false,
+                canDeleteOrganizations: false,
+                canDeleteUsers: false,
+                canReadApplications: false,
+                canCreateApplications: false,
+                canUpdateApplications: false,
+                canDeleteApplications: false,
+                canDeleteModules: false,
+                canReadRoles: false,
+                canCreateRoles: false,
+                canUpdateRoles: false,
+                canDeleteRoles: false,
+                canReadPermissions: false,
+                canCreatePermissions: false,
+                canUpdatePermissions: false,
+                canDeletePermissions: false,
+                canAssignRoles: false,
+                canReadClients: false,
+                canCreateClients: false,
+                canUpdateClients: false,
+                canDeleteClients: false,
+                canRevokeClientSecrets: false,
+                canExportData: false,
+                canReadConfig: false,
+                canUpdateConfig: false,
+                canImportData: false,
+                canReadClaims: false,
+                canCreateClaims: false,
+                canUpdateClaims: false,
+                isSuperAdmin: false,
+            })
+            : {
+                canReadOrganizations: false,
+                canCreateOrganizations: false,
+                canUpdateOrganizations: false,
+                canSuspendOrganizations: false,
+                canReadUsers: false,
+                canCreateUsers: false,
+                canInviteUsers: false,
+                canUpdateUsers: false,
+                canManageUserLifecycle: false,
+                canDeleteOrganizations: false,
+                canDeleteUsers: false,
+                canReadApplications: false,
+                canCreateApplications: false,
+                canUpdateApplications: false,
+                canDeleteApplications: false,
+                canDeleteModules: false,
+                canReadRoles: false,
+                canCreateRoles: false,
+                canUpdateRoles: false,
+                canDeleteRoles: false,
+                canReadPermissions: false,
+                canCreatePermissions: false,
+                canUpdatePermissions: false,
+                canDeletePermissions: false,
+                canAssignRoles: false,
+                canReadClients: false,
+                canCreateClients: false,
+                canUpdateClients: false,
+                canDeleteClients: false,
+                canRevokeClientSecrets: false,
+                canExportData: false,
+                canReadConfig: false,
+                canUpdateConfig: false,
+                canImportData: false,
+                canReadClaims: false,
+                canCreateClaims: false,
+                canUpdateClaims: false,
+                isSuperAdmin: false,
+            };
+        const hasOrganization = currentState.kind === 'authenticated' && currentState.organization;
+        const hasUserCapability = capabilities.canReadUsers ||
+            capabilities.canCreateUsers ||
+            capabilities.canInviteUsers ||
+            capabilities.canUpdateUsers ||
+            capabilities.canManageUserLifecycle ||
+            capabilities.canDeleteUsers;
+        const unavailableUserItem = (label, reason) => item(`${label} (${reason})`, ADMIN_COMMANDS.unavailableUser);
+        const usersMenu = hasOrganization && hasUserCapability
+            ? subMenu('~U~sers', [
+                capabilities.canReadUsers
+                    ? item('~B~rowse users…', ADMIN_COMMANDS.browseUsers)
+                    : unavailableUserItem('Browse users…', 'requires user read'),
+                capabilities.canCreateUsers
+                    ? item('~C~reate user…', ADMIN_COMMANDS.createUser)
+                    : unavailableUserItem('Create user…', 'requires user create'),
+                capabilities.canInviteUsers
+                    ? item('~I~nvite user…', ADMIN_COMMANDS.inviteUser)
+                    : unavailableUserItem('Invite user…', 'requires user invite'),
+            ])
+            : subMenu('~U~sers', [
+                unavailableUserItem('Users', hasOrganization ? 'user permission required' : 'organization required'),
+            ]);
+        const applicationsMenu = capabilities.canReadApplications
+            ? subMenu('~A~pplications', [
+                item('~B~rowse applications…', ADMIN_COMMANDS.browseApplications),
+                capabilities.canCreateApplications
+                    ? item('~C~reate application…', ADMIN_COMMANDS.createApplication)
+                    : item('Create application… (requires application create)', ADMIN_COMMANDS.createApplication),
+            ])
+            : item('Applications (application read required)', ADMIN_COMMANDS.browseApplications);
+        const clientsMenu = hasOrganization && capabilities.canReadClients
+            ? subMenu('OIDC ~C~lients', [
+                item('~B~rowse clients…', ADMIN_COMMANDS.browseClients),
+                capabilities.canCreateClients && capabilities.canReadApplications
+                    ? item('~C~reate client…', ADMIN_COMMANDS.createClient)
+                    : item('Create client… (requires client create and application read)', ADMIN_COMMANDS.createClient),
+            ])
+            : subMenu('OIDC ~C~lients', [
+                item(hasOrganization
+                    ? 'OIDC Clients (client read required)'
+                    : 'OIDC Clients (organization required)', ADMIN_COMMANDS.unavailableClient),
+            ]);
+        return [
+            subMenu(utf8 ? '≡' : '[=]', [
+                item('~W~ho am I…', ADMIN_COMMANDS.whoAmI),
+                item('~R~eauthenticate', ADMIN_COMMANDS.reauthenticate, 'Ctrl+R'),
+                item('~Q~uit', Commands.quit, 'Alt+X'),
+            ]),
+            subMenu('~O~rganizations', [
+                item(capabilities.canCreateOrganizations
+                    ? '~C~reate organization…'
+                    : 'Create organization… (requires organization create)', ADMIN_COMMANDS.createOrganization),
+                item(capabilities.canReadOrganizations
+                    ? '~S~witch organization…'
+                    : 'Switch organization… (requires organization read)', ADMIN_COMMANDS.switchOrganization),
+                item(hasOrganization && capabilities.canReadOrganizations
+                    ? '~M~anage current organization…'
+                    : hasOrganization
+                        ? 'Manage current organization… (requires organization read)'
+                        : 'Manage current organization… (select an organization)', ADMIN_COMMANDS.manageOrganization),
+            ]),
+            item('~S~ystem Configuration…', ADMIN_COMMANDS.systemConfig),
+            usersMenu,
+            applicationsMenu,
+            clientsMenu,
+            item('~I~mport / Export…', ADMIN_COMMANDS.portability),
+        ];
+    };
+    const fullStatusItems = () => [
+        statusItem('~Alt-X~ Quit', Commands.quit, 'Alt+X'),
+        spacer(),
+        statusItem('~Ctrl-R~ Reauthenticate', ADMIN_COMMANDS.reauthenticate, 'Ctrl+R'),
+    ];
+    const quitStatusItems = () => [statusItem('~Alt-X~ Quit', Commands.quit, 'Alt+X')];
+    const menu = new MenuBar();
+    menu.setItems(belowRecoverable ? [] : fullMenuItems());
+    const status = statusLine(belowRecoverable ? quitStatusItems() : fullStatusItems());
+    let geometryIsRecoverable = !belowRecoverable;
+    const landing = new AdminLandingView((recoverable) => {
+        if (recoverable === geometryIsRecoverable)
+            return;
+        geometryIsRecoverable = recoverable;
+        menu.setItems(recoverable ? fullMenuItems() : []);
+        status.setItems(recoverable ? fullStatusItems() : quitStatusItems());
+    });
+    const content = new Desktop();
+    content.add(grow(landing));
+    let workspace = null;
+    /** Replaces the complete main surface without retaining covered feature content. */
+    const setWorkspace = (next) => {
+        if (next === workspace)
+            return;
+        // Keep a focusable child visible while Desktop removes its active window and restores focus.
+        landing.state.visible = true;
+        if (workspace instanceof Window)
+            content.removeWindow(workspace);
+        else if (workspace)
+            content.remove(workspace);
+        workspace = next;
+        landing.state.visible = next === null;
+        if (next instanceof Window) {
+            content.addWindow(next);
+            if (!next.isZoomed()) {
+                // A workspace always fills the desktop, even when it deliberately hides the restore control.
+                // Temporarily enable the Window operation so its resize tracking retains maximized geometry.
+                const zoomable = next.zoomable;
+                next.zoomable = true;
+                next.zoom();
+                next.zoomable = zoomable;
+            }
+        }
+        else if (next) {
+            content.add(grow(next));
+        }
+        content.invalidateLayout();
+    };
+    return {
+        content,
+        menu,
+        status,
+        setState: (state) => {
+            currentState = state;
+            if (geometryIsRecoverable)
+                menu.setItems(fullMenuItems());
+            landing.invalidate();
+        },
+        getState: () => currentState,
+        setWorkspace,
+        setUserWorkspace: setWorkspace,
+    };
+}
+//# sourceMappingURL=presentation.js.map

package/dist/admin/presentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation.js","sourceRoot":"","sources":["../../src/admin/presentation.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAGzE,OAAO,EACL,QAAQ,EACR,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,MAAM,EACN,UAAU,EACV,UAAU,EACV,OAAO,EACP,IAAI,EACJ,MAAM,GACP,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,OAAO;IACd,cAAc,EAAE,gBAAgB;IAChC,MAAM,EAAE,UAAU;IAClB,kBAAkB,EAAE,qBAAqB;IACzC,kBAAkB,EAAE,qBAAqB;IACzC,kBAAkB,EAAE,qBAAqB;IACzC,WAAW,EAAE,cAAc;IAC3B,UAAU,EAAE,aAAa;IACzB,UAAU,EAAE,aAAa;IACzB,eAAe,EAAE,yBAAyB;IAC1C,kBAAkB,EAAE,qBAAqB;IACzC,iBAAiB,EAAE,oBAAoB;IACvC,aAAa,EAAE,gBAAgB;IAC/B,YAAY,EAAE,eAAe;IAC7B,iBAAiB,EAAE,2BAA2B;IAC9C,WAAW,EAAE,mBAAmB;IAChC,YAAY,EAAE,qBAAqB;IACnC,MAAM,EAAE,QAAQ;CACR,CAAC;AAEX,gEAAgE;AAChE,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,cAAc,GAAG,CAAC,CAAC;AAoBzB,oFAAoF;AACpF,MAAM,gBAAiB,SAAQ,IAAI;IAEJ,yBAAyB;IADtD,mDAAmD;IACnD,YAA6B,yBAAyD;QACpF,KAAK,EAAE,CAAC;yCADmB,yBAAyB;QAEpD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,4EAA4E;IAC5E,IAAI,CAAC,OAAoB;QACvB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QACvC,MAAM,WAAW,GAAG,KAAK,IAAI,aAAa,IAAI,MAAM,IAAI,cAAc,CAAC;QACvE,IAAI,CAAC,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,WAAW;YAAE,OAAO;QACxB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,qBAAqB,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,sBAAsB,aAAa,IAAI,cAAc,GAAG,EAAE,KAAK,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;CACF;AAED,iEAAiE;AACjE,MAAM,UAAU,uBAAuB,CACrC,YAAkC,EAClC,SAAkB,EAClB,QAAiB,EACjB,IAAI,GAAG,IAAI;IAEX,IAAI,YAAY,GAAG,YAAY,CAAC;IAChC,MAAM,gBAAgB,GACpB,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,aAAa,IAAI,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC;IACjG,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,8FAA8F;QAC9F,MAAM,YAAY,GAChB,YAAY,CAAC,IAAI,KAAK,eAAe;YACnC,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,IAAI;gBAC5B,oBAAoB,EAAE,KAAK;gBAC3B,sBAAsB,EAAE,KAAK;gBAC7B,sBAAsB,EAAE,KAAK;gBAC7B,uBAAuB,EAAE,KAAK;gBAC9B,YAAY,EAAE,KAAK;gBACnB,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK;gBACrB,sBAAsB,EAAE,KAAK;gBAC7B,sBAAsB,EAAE,KAAK;gBAC7B,cAAc,EAAE,KAAK;gBACrB,mBAAmB,EAAE,KAAK;gBAC1B,qBAAqB,EAAE,KAAK;gBAC5B,qBAAqB,EAAE,KAAK;gBAC5B,qBAAqB,EAAE,KAAK;gBAC5B,gBAAgB,EAAE,KAAK;gBACvB,YAAY,EAAE,KAAK;gBACnB,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK;gBACrB,kBAAkB,EAAE,KAAK;gBACzB,oBAAoB,EAAE,KAAK;gBAC3B,oBAAoB,EAAE,KAAK;gBAC3B,oBAAoB,EAAE,KAAK;gBAC3B,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK;gBACrB,gBAAgB,EAAE,KAAK;gBACvB,gBAAgB,EAAE,KAAK;gBACvB,gBAAgB,EAAE,KAAK;gBACvB,sBAAsB,EAAE,KAAK;gBAC7B,aAAa,EAAE,KAAK;gBACpB,aAAa,EAAE,KAAK;gBACpB,eAAe,EAAE,KAAK;gBACtB,aAAa,EAAE,KAAK;gBACpB,aAAa,EAAE,KAAK;gBACpB,eAAe,EAAE,KAAK;gBACtB,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC;YACJ,CAAC,CAAC;gBACE,oBAAoB,EAAE,KAAK;gBAC3B,sBAAsB,EAAE,KAAK;gBAC7B,sBAAsB,EAAE,KAAK;gBAC7B,uBAAuB,EAAE,KAAK;gBAC9B,YAAY,EAAE,KAAK;gBACnB,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK;gBACrB,sBAAsB,EAAE,KAAK;gBAC7B,sBAAsB,EAAE,KAAK;gBAC7B,cAAc,EAAE,KAAK;gBACrB,mBAAmB,EAAE,KAAK;gBAC1B,qBAAqB,EAAE,KAAK;gBAC5B,qBAAqB,EAAE,KAAK;gBAC5B,qBAAqB,EAAE,KAAK;gBAC5B,gBAAgB,EAAE,KAAK;gBACvB,YAAY,EAAE,KAAK;gBACnB,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK;gBACrB,kBAAkB,EAAE,KAAK;gBACzB,oBAAoB,EAAE,KAAK;gBAC3B,oBAAoB,EAAE,KAAK;gBAC3B,oBAAoB,EAAE,KAAK;gBAC3B,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK;gBACrB,gBAAgB,EAAE,KAAK;gBACvB,gBAAgB,EAAE,KAAK;gBACvB,gBAAgB,EAAE,KAAK;gBACvB,sBAAsB,EAAE,KAAK;gBAC7B,aAAa,EAAE,KAAK;gBACpB,aAAa,EAAE,KAAK;gBACpB,eAAe,EAAE,KAAK;gBACtB,aAAa,EAAE,KAAK;gBACpB,aAAa,EAAE,KAAK;gBACpB,eAAe,EAAE,KAAK;gBACtB,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,KAAK;aACpB,CAAC;QACR,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,KAAK,eAAe,IAAI,YAAY,CAAC,YAAY,CAAC;QAC3F,MAAM,iBAAiB,GACrB,YAAY,CAAC,YAAY;YACzB,YAAY,CAAC,cAAc;YAC3B,YAAY,CAAC,cAAc;YAC3B,YAAY,CAAC,cAAc;YAC3B,YAAY,CAAC,sBAAsB;YACnC,YAAY,CAAC,cAAc,CAAC;QAC9B,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,EAAE,CAC5D,IAAI,CAAC,GAAG,KAAK,KAAK,MAAM,GAAG,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;QAC/D,MAAM,SAAS,GACb,eAAe,IAAI,iBAAiB;YAClC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE;gBACjB,YAAY,CAAC,YAAY;oBACvB,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,WAAW,CAAC;oBACrD,CAAC,CAAC,mBAAmB,CAAC,eAAe,EAAE,oBAAoB,CAAC;gBAC9D,YAAY,CAAC,cAAc;oBACzB,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,UAAU,CAAC;oBACnD,CAAC,CAAC,mBAAmB,CAAC,cAAc,EAAE,sBAAsB,CAAC;gBAC/D,YAAY,CAAC,cAAc;oBACzB,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,UAAU,CAAC;oBACnD,CAAC,CAAC,mBAAmB,CAAC,cAAc,EAAE,sBAAsB,CAAC;aAChE,CAAC;YACJ,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE;gBACjB,mBAAmB,CACjB,OAAO,EACP,eAAe,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,uBAAuB,CACvE;aACF,CAAC,CAAC;QACT,MAAM,gBAAgB,GAAG,YAAY,CAAC,mBAAmB;YACvD,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE;gBACxB,IAAI,CAAC,wBAAwB,EAAE,cAAc,CAAC,kBAAkB,CAAC;gBACjE,YAAY,CAAC,qBAAqB;oBAChC,CAAC,CAAC,IAAI,CAAC,uBAAuB,EAAE,cAAc,CAAC,iBAAiB,CAAC;oBACjE,CAAC,CAAC,IAAI,CACF,mDAAmD,EACnD,cAAc,CAAC,iBAAiB,CACjC;aACN,CAAC;YACJ,CAAC,CAAC,IAAI,CAAC,0CAA0C,EAAE,cAAc,CAAC,kBAAkB,CAAC,CAAC;QACxF,MAAM,WAAW,GACf,eAAe,IAAI,YAAY,CAAC,cAAc;YAC5C,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE;gBACxB,IAAI,CAAC,mBAAmB,EAAE,cAAc,CAAC,aAAa,CAAC;gBACvD,YAAY,CAAC,gBAAgB,IAAI,YAAY,CAAC,mBAAmB;oBAC/D,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,YAAY,CAAC;oBACvD,CAAC,CAAC,IAAI,CACF,8DAA8D,EAC9D,cAAc,CAAC,YAAY,CAC5B;aACN,CAAC;YACJ,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE;gBACxB,IAAI,CACF,eAAe;oBACb,CAAC,CAAC,qCAAqC;oBACvC,CAAC,CAAC,sCAAsC,EAC1C,cAAc,CAAC,iBAAiB,CACjC;aACF,CAAC,CAAC;QACT,OAAO;YACL,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;gBAC1B,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,MAAM,CAAC;gBAC1C,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,cAAc,EAAE,QAAQ,CAAC;gBACjE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;aACvC,CAAC;YACF,OAAO,CAAC,iBAAiB,EAAE;gBACzB,IAAI,CACF,YAAY,CAAC,sBAAsB;oBACjC,CAAC,CAAC,wBAAwB;oBAC1B,CAAC,CAAC,qDAAqD,EACzD,cAAc,CAAC,kBAAkB,CAClC;gBACD,IAAI,CACF,YAAY,CAAC,oBAAoB;oBAC/B,CAAC,CAAC,wBAAwB;oBAC1B,CAAC,CAAC,mDAAmD,EACvD,cAAc,CAAC,kBAAkB,CAClC;gBACD,IAAI,CACF,eAAe,IAAI,YAAY,CAAC,oBAAoB;oBAClD,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,eAAe;wBACf,CAAC,CAAC,2DAA2D;wBAC7D,CAAC,CAAC,uDAAuD,EAC7D,cAAc,CAAC,kBAAkB,CAClC;aACF,CAAC;YACF,IAAI,CAAC,yBAAyB,EAAE,cAAc,CAAC,YAAY,CAAC;YAC5D,SAAS;YACT,gBAAgB;YAChB,WAAW;YACX,IAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC,WAAW,CAAC;SACvD,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC;QAC5B,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;QAClD,MAAM,EAAE;QACR,UAAU,CAAC,yBAAyB,EAAE,cAAc,CAAC,cAAc,EAAE,QAAQ,CAAC;KAC/E,CAAC;IACF,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAC3B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IACpF,IAAI,qBAAqB,GAAG,CAAC,gBAAgB,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,CAAC,WAAW,EAAE,EAAE;QACnD,IAAI,WAAW,KAAK,qBAAqB;YAAE,OAAO;QAClD,qBAAqB,GAAG,WAAW,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,IAAI,SAAS,GAAgB,IAAI,CAAC;IAElC,oFAAoF;IACpF,MAAM,YAAY,GAAG,CAAC,IAAiB,EAAQ,EAAE;QAC/C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QAC/B,6FAA6F;QAC7F,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QAC7B,IAAI,SAAS,YAAY,MAAM;YAAE,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;aAC5D,IAAI,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9C,SAAS,GAAG,IAAI,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC;QACtC,IAAI,IAAI,YAAY,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACrB,6FAA6F;gBAC7F,6FAA6F;gBAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;gBAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAC7B,CAAC,CAAC;IAEF,OAAO;QACL,OAAO;QACP,IAAI;QACJ,MAAM;QACN,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,YAAY,GAAG,KAAK,CAAC;YACrB,IAAI,qBAAqB;gBAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YAC1D,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,YAAY;QAC5B,YAAY;QACZ,gBAAgB,EAAE,YAAY;KAC/B,CAAC;AACJ,CAAC"}

package/dist/admin/rbac-dialogs.d.ts

@@ -0,0 +1,73 @@
+/** Focused dialogs for Application-owned roles, permissions, and direct mappings. */
+import type { CreatePermissionInput, CreateRoleInput, UpdatePermissionInput, UpdateRoleInput } from '@portaidentity/sdk';
+import type { AdminApplication, AdminApplicationModule } from './application-state.js';
+import type { AdminApplicationDialogHost } from './application-dialogs.js';
+import type { AdminPermission, AdminRole } from './rbac-state.js';
+/** Result returned by the role creation dialog. */
+export type CreateRoleDialogResult = {
+    readonly kind: 'create-role';
+    readonly input: CreateRoleInput;
+} | {
+    readonly kind: 'cancel';
+};
+/** Result returned by the role editor. */
+export type EditRoleDialogResult = {
+    readonly kind: 'update-role';
+    readonly roleId: string;
+    readonly input: UpdateRoleInput;
+} | {
+    readonly kind: 'cancel';
+};
+/** Result returned by permanent role deletion confirmation. */
+export type DeleteRoleDialogResult = {
+    readonly kind: 'delete-role';
+    readonly roleId: string;
+} | {
+    readonly kind: 'cancel';
+};
+/** Result returned by the permission creation dialog. */
+export type CreatePermissionDialogResult = {
+    readonly kind: 'create-permission';
+    readonly input: CreatePermissionInput;
+} | {
+    readonly kind: 'cancel';
+};
+/** Result returned by the permission editor. */
+export type EditPermissionDialogResult = {
+    readonly kind: 'update-permission';
+    readonly permissionId: string;
+    readonly input: UpdatePermissionInput;
+} | {
+    readonly kind: 'cancel';
+};
+/** Result returned by permanent permission deletion confirmation. */
+export type DeletePermissionDialogResult = {
+    readonly kind: 'delete-permission';
+    readonly permissionId: string;
+} | {
+    readonly kind: 'cancel';
+};
+/** Saved checkbox differences for one role, or cancellation. */
+export type ManageRolePermissionsDialogResult = {
+    readonly kind: 'update-role-permissions';
+    readonly roleId: string;
+    readonly assignPermissionIds: readonly string[];
+    readonly removePermissionIds: readonly string[];
+} | {
+    readonly kind: 'cancel';
+};
+/** Opens the focused role creation form. */
+export declare function showCreateRoleDialog(host: AdminApplicationDialogHost, operationSignal: AbortSignal, application: AdminApplication): Promise<CreateRoleDialogResult>;
+/** Opens the role editor with all mutable role metadata. */
+export declare function showEditRoleDialog(host: AdminApplicationDialogHost, operationSignal: AbortSignal, application: AdminApplication, role: AdminRole): Promise<EditRoleDialogResult>;
+/** Shows the permanent role cascade before dispatch. */
+export declare function showDeleteRoleDialog(host: AdminApplicationDialogHost, operationSignal: AbortSignal, application: AdminApplication, role: AdminRole): Promise<DeleteRoleDialogResult>;
+/** Opens the focused permission creation form. */
+export declare function showCreatePermissionDialog(host: AdminApplicationDialogHost, operationSignal: AbortSignal, application: AdminApplication, modules: readonly AdminApplicationModule[]): Promise<CreatePermissionDialogResult>;
+/** Opens the permission editor while keeping identity and scope read-only. */
+export declare function showEditPermissionDialog(host: AdminApplicationDialogHost, operationSignal: AbortSignal, application: AdminApplication, permission: AdminPermission, modules: readonly AdminApplicationModule[]): Promise<EditPermissionDialogResult>;
+/** Shows the permanent permission cascade before dispatch. */
+export declare function showDeletePermissionDialog(host: AdminApplicationDialogHost, operationSignal: AbortSignal, application: AdminApplication, permission: AdminPermission): Promise<DeletePermissionDialogResult>;
+/** Opens assignable permissions in two checkbox columns and returns their saved differences. */
+export declare function showManageRolePermissionsDialog(host: AdminApplicationDialogHost, operationSignal: AbortSignal, application: AdminApplication, role: AdminRole, assigned: readonly AdminPermission[], available: readonly AdminPermission[], canManage: boolean): Promise<ManageRolePermissionsDialogResult>;
+//# sourceMappingURL=rbac-dialogs.d.ts.map

package/dist/admin/rbac-dialogs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-dialogs.d.ts","sourceRoot":"","sources":["../../src/admin/rbac-dialogs.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,qBAAqB,EACrB,eAAe,EAChB,MAAM,oBAAoB,CAAC;AAsB5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACvF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAI3E,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAMlE,mDAAmD;AACnD,MAAM,MAAM,sBAAsB,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAElG,0CAA0C;AAC1C,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GAC1F;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEhC,+DAA+D;AAC/D,MAAM,MAAM,sBAAsB,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAE1F,yDAAyD;AACzD,MAAM,MAAM,4BAA4B,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEhC,gDAAgD;AAChD,MAAM,MAAM,0BAA0B,GAClC;IACE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;CACvC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEhC,qEAAqE;AACrE,MAAM,MAAM,4BAA4B,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEhC,gEAAgE;AAChE,MAAM,MAAM,iCAAiC,GACzC;IACE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;CACjD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAyMhC,4CAA4C;AAC5C,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,0BAA0B,EAChC,eAAe,EAAE,WAAW,EAC5B,WAAW,EAAE,gBAAgB,GAC5B,OAAO,CAAC,sBAAsB,CAAC,CA2BjC;AAED,4DAA4D;AAC5D,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,0BAA0B,EAChC,eAAe,EAAE,WAAW,EAC5B,WAAW,EAAE,gBAAgB,EAC7B,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,oBAAoB,CAAC,CA8B/B;AAED,wDAAwD;AACxD,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,0BAA0B,EAChC,eAAe,EAAE,WAAW,EAC5B,WAAW,EAAE,gBAAgB,EAC7B,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,sBAAsB,CAAC,CAmBjC;AAuBD,kDAAkD;AAClD,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,0BAA0B,EAChC,eAAe,EAAE,WAAW,EAC5B,WAAW,EAAE,gBAAgB,EAC7B,OAAO,EAAE,SAAS,sBAAsB,EAAE,GACzC,OAAO,CAAC,4BAA4B,CAAC,CAoCvC;AAED,8EAA8E;AAC9E,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,0BAA0B,EAChC,eAAe,EAAE,WAAW,EAC5B,WAAW,EAAE,gBAAgB,EAC7B,UAAU,EAAE,eAAe,EAC3B,OAAO,EAAE,SAAS,sBAAsB,EAAE,GACzC,OAAO,CAAC,0BAA0B,CAAC,CAqCrC;AAED,8DAA8D;AAC9D,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,0BAA0B,EAChC,eAAe,EAAE,WAAW,EAC5B,WAAW,EAAE,gBAAgB,EAC7B,UAAU,EAAE,eAAe,GAC1B,OAAO,CAAC,4BAA4B,CAAC,CAmBvC;AAED,gGAAgG;AAChG,wBAAsB,+BAA+B,CACnD,IAAI,EAAE,0BAA0B,EAChC,eAAe,EAAE,WAAW,EAC5B,WAAW,EAAE,gBAAgB,EAC7B,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,SAAS,eAAe,EAAE,EACpC,SAAS,EAAE,SAAS,eAAe,EAAE,EACrC,SAAS,EAAE,OAAO,GACjB,OAAO,CAAC,iCAAiC,CAAC,CAkG5C"}