@portaidentity/cli 1.7.3 → 1.9.0

package/dist/admin/user-role-controller.js

@@ -0,0 +1,337 @@
+/** Exact-context orchestration for direct roles assigned to one selected user. */
+import { createAdminUserRoleDialog } from './user-role-dialog.js';
+/** Creates the focused selected-user role workflow controller. */
+export function createAdminUserRoleController(options) {
+    let generation = 0;
+    let operation;
+    let operationKind;
+    let mutationDispatched = false;
+    let projection;
+    let recoveryRequired = false;
+    let disposed = false;
+    /** Publishes only while this controller still owns the focused dialog. */
+    const publish = (state) => {
+        if (!disposed)
+            options.publishState(state);
+    };
+    /** Confirms exact organization, user, and session ownership for one continuation. */
+    const owns = (capturedGeneration, context, controller) => {
+        const current = options.readContext();
+        return (!disposed &&
+            generation === capturedGeneration &&
+            operation === controller &&
+            !controller.signal.aborted &&
+            current.organizationId === context.organizationId &&
+            current.userId === context.userId &&
+            current.sessionEpoch === context.sessionEpoch);
+    };
+    /** Publishes a fixed failure while retaining the last validated role data. */
+    const publishFailure = (failure) => {
+        publish({ kind: 'failure', failure, ...(projection ? { previous: projection } : {}) });
+    };
+    /** Clears protected state and enters the existing authentication flow. */
+    const requireAuthentication = () => {
+        generation += 1;
+        operation?.abort();
+        operation = undefined;
+        operationKind = undefined;
+        mutationDispatched = false;
+        projection = undefined;
+        recoveryRequired = false;
+        options.setRecoveryRequired?.(false);
+        publish({ kind: 'closed' });
+        options.requestAuthentication();
+    };
+    /** Retains validated state until an explicit read-only Reload reconciles it. */
+    const requireReconciliation = () => {
+        recoveryRequired = true;
+        options.setRecoveryRequired?.(true);
+        publish({ kind: 'indeterminate', ...(projection ? { previous: projection } : {}) });
+    };
+    /** Cancels one owned continuation and records uncertainty only after dispatch. */
+    const cancel = (reconcileDispatchedMutation = false) => {
+        const uncertain = reconcileDispatchedMutation && mutationDispatched;
+        generation += 1;
+        operation?.abort();
+        operation = undefined;
+        operationKind = undefined;
+        mutationDispatched = false;
+        if (uncertain)
+            requireReconciliation();
+    };
+    /** Adds safe application labels without changing role identity or ownership. */
+    const assignedRows = (roles, applications) => {
+        const names = new Map(applications.map((application) => [application.id, application.name]));
+        return Object.freeze(roles.map((role) => {
+            const applicationName = names.get(role.applicationId);
+            return Object.freeze({ ...role, ...(applicationName ? { applicationName } : {}) });
+        }));
+    };
+    /** Loads direct assignments and readable applications for the exact current context. */
+    const load = async () => {
+        if (disposed || operation)
+            return;
+        const context = options.readContext();
+        const operations = options.readOperations();
+        if (!operations)
+            return;
+        const controller = new AbortController();
+        operation = controller;
+        operationKind = 'load';
+        const capturedGeneration = ++generation;
+        try {
+            const roleResult = await operations.listUserRoles(context.organizationId, context.userId, controller.signal);
+            if (!owns(capturedGeneration, context, controller))
+                return;
+            if (roleResult.kind === 'session-invalid') {
+                requireAuthentication();
+                return;
+            }
+            if (roleResult.kind === 'failure') {
+                publishFailure(roleResult.failure);
+                return;
+            }
+            const applicationResult = await options.listApplications(controller.signal);
+            if (!owns(capturedGeneration, context, controller))
+                return;
+            if (applicationResult.kind === 'session-invalid') {
+                requireAuthentication();
+            }
+            else if (applicationResult.kind === 'failure') {
+                publishFailure(applicationResult.failure);
+            }
+            else {
+                projection = {
+                    kind: 'ready',
+                    organizationId: context.organizationId,
+                    userId: context.userId,
+                    assignedRoles: assignedRows(roleResult.value, applicationResult.value),
+                    applications: applicationResult.value,
+                    availableRoles: [],
+                };
+                recoveryRequired = false;
+                options.setRecoveryRequired?.(false);
+                publish(projection);
+            }
+        }
+        finally {
+            if (operation === controller) {
+                operation = undefined;
+                operationKind = undefined;
+            }
+        }
+    };
+    /** Loads one application's roles and removes assignments already held by the user. */
+    const loadAvailableRoles = async (applicationId) => {
+        if (disposed || recoveryRequired || (operation && operationKind !== 'available'))
+            return;
+        if (operationKind === 'available')
+            cancel();
+        const context = options.readContext();
+        const operations = options.readOperations();
+        if (!operations || !projection)
+            return;
+        projection = {
+            kind: 'ready',
+            organizationId: projection.organizationId,
+            userId: projection.userId,
+            assignedRoles: projection.assignedRoles,
+            applications: projection.applications,
+            availableRoles: [],
+        };
+        publish(projection);
+        const controller = new AbortController();
+        operation = controller;
+        operationKind = 'available';
+        const capturedGeneration = ++generation;
+        try {
+            const result = await operations.listRoles(applicationId, controller.signal);
+            if (!owns(capturedGeneration, context, controller))
+                return;
+            if (result.kind === 'session-invalid') {
+                requireAuthentication();
+            }
+            else if (result.kind === 'failure') {
+                publishFailure(result.failure);
+            }
+            else if (projection) {
+                const assignedIds = new Set(projection.assignedRoles.map((role) => role.id));
+                projection = {
+                    ...projection,
+                    availableRoles: Object.freeze(result.value.filter((role) => !assignedIds.has(role.id))),
+                    availableRolesApplicationId: applicationId,
+                };
+                publish(projection);
+            }
+        }
+        finally {
+            if (operation === controller) {
+                operation = undefined;
+                operationKind = undefined;
+            }
+        }
+    };
+    /** Interprets one mutation result before authoritative reconciliation. */
+    const acceptsReload = (result) => {
+        mutationDispatched = false;
+        if (result.kind === 'session-invalid') {
+            requireAuthentication();
+            return false;
+        }
+        if (result.kind === 'outcome-unknown') {
+            requireReconciliation();
+            return false;
+        }
+        if (result.kind === 'failure') {
+            publishFailure(result.failure);
+            return false;
+        }
+        if (result.kind === 'cancelled')
+            return false;
+        if ('reauthenticationRequired' in result && result.reauthenticationRequired) {
+            requireAuthentication();
+            return false;
+        }
+        return true;
+    };
+    /** Runs one one-role mutation and reloads only after a definite committed success. */
+    const mutate = async (roleId, remove) => {
+        if (disposed || operation || recoveryRequired)
+            return;
+        const context = options.readContext();
+        const operations = options.readOperations();
+        if (!operations)
+            return;
+        const controller = new AbortController();
+        operation = controller;
+        operationKind = 'mutation';
+        const capturedGeneration = ++generation;
+        try {
+            mutationDispatched = true;
+            const result = remove
+                ? await operations.removeUserRoles(context.organizationId, context.userId, [roleId], controller.signal)
+                : await operations.assignUserRoles(context.organizationId, context.userId, [roleId], controller.signal);
+            if (!owns(capturedGeneration, context, controller))
+                return;
+            if (!acceptsReload(result))
+                return;
+            operation = undefined;
+            operationKind = undefined;
+            await load();
+        }
+        finally {
+            if (operation === controller) {
+                operation = undefined;
+                operationKind = undefined;
+                mutationDispatched = false;
+            }
+        }
+    };
+    return {
+        load,
+        loadAvailableRoles,
+        assignRole: (roleId) => mutate(roleId, false),
+        removeRole: (roleId) => mutate(roleId, true),
+        reload: load,
+        cancelActiveOperation: () => cancel(true),
+        dispose() {
+            if (disposed)
+                return;
+            cancel(true);
+            disposed = true;
+            projection = undefined;
+            if (!recoveryRequired)
+                options.setRecoveryRequired?.(false);
+            options.publishState({ kind: 'closed' });
+        },
+    };
+}
+/** Opens one modal User Roles workflow using the existing shell event loop. */
+export function openAdminUserRoleWorkflow(options) {
+    const initialState = options.readState();
+    const initialSelection = options.readSelection();
+    const initialOperations = options.readOperations();
+    if (initialState.kind !== 'authenticated' ||
+        !initialState.organization ||
+        !initialState.capabilities.canReadRoles ||
+        !initialSelection ||
+        !initialOperations) {
+        return undefined;
+    }
+    let controller;
+    let closed = false;
+    const dialog = createAdminUserRoleDialog({
+        organization: { id: initialState.organization.id, name: initialState.organization.name },
+        user: { id: initialSelection.selected.id, label: initialSelection.detail.email },
+        capabilities: initialState.capabilities,
+        viewport: {
+            width: options.host.desktop.bounds.width,
+            height: options.host.desktop.bounds.height,
+        },
+        focusView: (view) => options.host.loop.focusView(view),
+        onIntent: (intent) => {
+            if (!controller || closed)
+                return;
+            if (intent.kind === 'load-available')
+                void controller.loadAvailableRoles(intent.applicationId);
+            else if (intent.kind === 'assign')
+                void controller.assignRole(intent.roleId);
+            else if (intent.kind === 'remove')
+                void controller.removeRole(intent.roleId);
+            else if (intent.kind === 'reload')
+                void controller.reload();
+            else
+                close();
+        },
+    });
+    /** Releases state before removing the window from the shell's desktop. */
+    const close = (endModal = true) => {
+        if (closed)
+            return;
+        closed = true;
+        const ownedController = controller;
+        controller = undefined;
+        ownedController?.dispose();
+        dialog.clear();
+        dialog.dispose();
+        if (endModal)
+            options.host.loop.endModal(undefined);
+        options.host.desktop.removeWindow(dialog.content);
+        options.onClosed();
+    };
+    controller = createAdminUserRoleController({
+        readContext: () => {
+            const active = options.readState();
+            const activeSelection = options.readSelection();
+            return {
+                organizationId: active.kind === 'authenticated' ? (active.organization?.id ?? '') : '',
+                userId: activeSelection?.selected.id ?? '',
+                sessionEpoch: options.readSessionEpoch(),
+            };
+        },
+        readOperations: options.readOperations,
+        listApplications: () => {
+            const active = options.readState();
+            if (active.kind !== 'authenticated' || !active.capabilities.canReadApplications) {
+                return Promise.resolve({ kind: 'success', value: [] });
+            }
+            return (options.readApplicationOperations()?.listAll() ??
+                Promise.resolve({ kind: 'failure', failure: 'unavailable' }));
+        },
+        publishState: (state) => {
+            dialog.setState(state);
+            dialog.focusCurrent();
+        },
+        setRecoveryRequired: options.setRecoveryRequired,
+        requestAuthentication: () => {
+            close();
+            options.requestAuthentication();
+        },
+    });
+    options.host.desktop.addWindow(dialog.content);
+    void options.host.loop.execView(dialog.content).finally(() => close(false));
+    dialog.focusCurrent();
+    void controller.load();
+    return { close };
+}
+//# sourceMappingURL=user-role-controller.js.map

package/dist/admin/user-role-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-role-controller.js","sourceRoot":"","sources":["../../src/admin/user-role-controller.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAiBlF,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAqFlE,kEAAkE;AAClE,MAAM,UAAU,6BAA6B,CAC3C,OAAuC;IAEvC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAsC,CAAC;IAC3C,IAAI,aAA4D,CAAC;IACjE,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,UAAoD,CAAC;IACzD,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,0EAA0E;IAC1E,MAAM,OAAO,GAAG,CAAC,KAA6B,EAAQ,EAAE;QACtD,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,qFAAqF;IACrF,MAAM,IAAI,GAAG,CACX,kBAA0B,EAC1B,OAA6B,EAC7B,UAA2B,EAClB,EAAE;QACX,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACtC,OAAO,CACL,CAAC,QAAQ;YACT,UAAU,KAAK,kBAAkB;YACjC,SAAS,KAAK,UAAU;YACxB,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;YAC1B,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;YACjD,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YACjC,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,CAC9C,CAAC;IACJ,CAAC,CAAC;IAEF,8EAA8E;IAC9E,MAAM,cAAc,GAAG,CAAC,OAA6B,EAAQ,EAAE;QAC7D,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC;IAEF,0EAA0E;IAC1E,MAAM,qBAAqB,GAAG,GAAS,EAAE;QACvC,UAAU,IAAI,CAAC,CAAC;QAChB,SAAS,EAAE,KAAK,EAAE,CAAC;QACnB,SAAS,GAAG,SAAS,CAAC;QACtB,aAAa,GAAG,SAAS,CAAC;QAC1B,kBAAkB,GAAG,KAAK,CAAC;QAC3B,UAAU,GAAG,SAAS,CAAC;QACvB,gBAAgB,GAAG,KAAK,CAAC;QACzB,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5B,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAClC,CAAC,CAAC;IAEF,gFAAgF;IAChF,MAAM,qBAAqB,GAAG,GAAS,EAAE;QACvC,gBAAgB,GAAG,IAAI,CAAC;QACxB,OAAO,CAAC,mBAAmB,EAAE,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC,CAAC;IAEF,kFAAkF;IAClF,MAAM,MAAM,GAAG,CAAC,2BAA2B,GAAG,KAAK,EAAQ,EAAE;QAC3D,MAAM,SAAS,GAAG,2BAA2B,IAAI,kBAAkB,CAAC;QACpE,UAAU,IAAI,CAAC,CAAC;QAChB,SAAS,EAAE,KAAK,EAAE,CAAC;QACnB,SAAS,GAAG,SAAS,CAAC;QACtB,aAAa,GAAG,SAAS,CAAC;QAC1B,kBAAkB,GAAG,KAAK,CAAC;QAC3B,IAAI,SAAS;YAAE,qBAAqB,EAAE,CAAC;IACzC,CAAC,CAAC;IAEF,gFAAgF;IAChF,MAAM,YAAY,GAAG,CACnB,KAA2B,EAC3B,YAAyC,EACP,EAAE;QACpC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7F,OAAO,MAAM,CAAC,MAAM,CAClB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACjB,MAAM,eAAe,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACtD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;IAEF,wFAAwF;IACxF,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,IAAI,QAAQ,IAAI,SAAS;YAAE,OAAO;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,SAAS,GAAG,UAAU,CAAC;QACvB,aAAa,GAAG,MAAM,CAAC;QACvB,MAAM,kBAAkB,GAAG,EAAE,UAAU,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,aAAa,CAC/C,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,MAAM,EACd,UAAU,CAAC,MAAM,CAClB,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,EAAE,UAAU,CAAC;gBAAE,OAAO;YAC3D,IAAI,UAAU,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC1C,qBAAqB,EAAE,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAClC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,EAAE,UAAU,CAAC;gBAAE,OAAO;YAC3D,IAAI,iBAAiB,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACjD,qBAAqB,EAAE,CAAC;YAC1B,CAAC;iBAAM,IAAI,iBAAiB,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChD,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG;oBACX,IAAI,EAAE,OAAO;oBACb,cAAc,EAAE,OAAO,CAAC,cAAc;oBACtC,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,aAAa,EAAE,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC;oBACtE,YAAY,EAAE,iBAAiB,CAAC,KAAK;oBACrC,cAAc,EAAE,EAAE;iBACnB,CAAC;gBACF,gBAAgB,GAAG,KAAK,CAAC;gBACzB,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC;gBACrC,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;gBAC7B,SAAS,GAAG,SAAS,CAAC;gBACtB,aAAa,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,sFAAsF;IACtF,MAAM,kBAAkB,GAAG,KAAK,EAAE,aAAqB,EAAiB,EAAE;QACxE,IAAI,QAAQ,IAAI,gBAAgB,IAAI,CAAC,SAAS,IAAI,aAAa,KAAK,WAAW,CAAC;YAAE,OAAO;QACzF,IAAI,aAAa,KAAK,WAAW;YAAE,MAAM,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU;YAAE,OAAO;QACvC,UAAU,GAAG;YACX,IAAI,EAAE,OAAO;YACb,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,cAAc,EAAE,EAAE;SACnB,CAAC;QACF,OAAO,CAAC,UAAU,CAAC,CAAC;QACpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,SAAS,GAAG,UAAU,CAAC;QACvB,aAAa,GAAG,WAAW,CAAC;QAC5B,MAAM,kBAAkB,GAAG,EAAE,UAAU,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,EAAE,UAAU,CAAC;gBAAE,OAAO;YAC3D,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACtC,qBAAqB,EAAE,CAAC;YAC1B,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACrC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;iBAAM,IAAI,UAAU,EAAE,CAAC;gBACtB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC7E,UAAU,GAAG;oBACX,GAAG,UAAU;oBACb,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;oBACvF,2BAA2B,EAAE,aAAa;iBAC3C,CAAC;gBACF,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;gBAC7B,SAAS,GAAG,SAAS,CAAC;gBACtB,aAAa,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,0EAA0E;IAC1E,MAAM,aAAa,GAAG,CAAC,MAA0D,EAAW,EAAE;QAC5F,kBAAkB,GAAG,KAAK,CAAC;QAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtC,qBAAqB,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtC,qBAAqB,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,0BAA0B,IAAI,MAAM,IAAI,MAAM,CAAC,wBAAwB,EAAE,CAAC;YAC5E,qBAAqB,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,sFAAsF;IACtF,MAAM,MAAM,GAAG,KAAK,EAAE,MAAc,EAAE,MAAe,EAAiB,EAAE;QACtE,IAAI,QAAQ,IAAI,SAAS,IAAI,gBAAgB;YAAE,OAAO;QACtD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,SAAS,GAAG,UAAU,CAAC;QACvB,aAAa,GAAG,UAAU,CAAC;QAC3B,MAAM,kBAAkB,GAAG,EAAE,UAAU,CAAC;QACxC,IAAI,CAAC;YACH,kBAAkB,GAAG,IAAI,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM;gBACnB,CAAC,CAAC,MAAM,UAAU,CAAC,eAAe,CAC9B,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,MAAM,EACd,CAAC,MAAM,CAAC,EACR,UAAU,CAAC,MAAM,CAClB;gBACH,CAAC,CAAC,MAAM,UAAU,CAAC,eAAe,CAC9B,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,MAAM,EACd,CAAC,MAAM,CAAC,EACR,UAAU,CAAC,MAAM,CAClB,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,EAAE,UAAU,CAAC;gBAAE,OAAO;YAC3D,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;gBAAE,OAAO;YACnC,SAAS,GAAG,SAAS,CAAC;YACtB,aAAa,GAAG,SAAS,CAAC;YAC1B,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;gBAC7B,SAAS,GAAG,SAAS,CAAC;gBACtB,aAAa,GAAG,SAAS,CAAC;gBAC1B,kBAAkB,GAAG,KAAK,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,kBAAkB;QAClB,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;QAC7C,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;QAC5C,MAAM,EAAE,IAAI;QACZ,qBAAqB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QACzC,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAO;YACrB,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,GAAG,SAAS,CAAC;YACvB,IAAI,CAAC,gBAAgB;gBAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC;YAC5D,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,yBAAyB,CACvC,OAAqC;IAErC,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,gBAAgB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IACjD,MAAM,iBAAiB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IACnD,IACE,YAAY,CAAC,IAAI,KAAK,eAAe;QACrC,CAAC,YAAY,CAAC,YAAY;QAC1B,CAAC,YAAY,CAAC,YAAY,CAAC,YAAY;QACvC,CAAC,gBAAgB;QACjB,CAAC,iBAAiB,EAClB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,UAA+C,CAAC;IACpD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,MAAM,GAAwB,yBAAyB,CAAC;QAC5D,YAAY,EAAE,EAAE,EAAE,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,YAAY,CAAC,IAAI,EAAE;QACxF,IAAI,EAAE,EAAE,EAAE,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE;QAChF,YAAY,EAAE,YAAY,CAAC,YAAY;QACvC,QAAQ,EAAE;YACR,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;YACxC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM;SAC3C;QACD,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QACtD,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YACnB,IAAI,CAAC,UAAU,IAAI,MAAM;gBAAE,OAAO;YAClC,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB;gBAClC,KAAK,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;iBACtD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,KAAK,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;iBACxE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,KAAK,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;iBACxE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;;gBACvD,KAAK,EAAE,CAAC;QACf,CAAC;KACF,CAAC,CAAC;IAEH,0EAA0E;IAC1E,MAAM,KAAK,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAQ,EAAE;QACtC,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,MAAM,eAAe,GAAG,UAAU,CAAC;QACnC,UAAU,GAAG,SAAS,CAAC;QACvB,eAAe,EAAE,OAAO,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,CAAC,QAAQ,EAAE,CAAC;IACrB,CAAC,CAAC;IAEF,UAAU,GAAG,6BAA6B,CAAC;QACzC,WAAW,EAAE,GAAG,EAAE;YAChB,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,MAAM,eAAe,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;YAChD,OAAO;gBACL,cAAc,EAAE,MAAM,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;gBACtF,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE;gBAC1C,YAAY,EAAE,OAAO,CAAC,gBAAgB,EAAE;aACzC,CAAC;QACJ,CAAC;QACD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,gBAAgB,EAAE,GAAG,EAAE;YACrB,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;gBAChF,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,CACL,OAAO,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE;gBAC9C,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAC7D,CAAC;QACJ,CAAC;QACD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;YACtB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACvB,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,CAAC;QACD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,qBAAqB,EAAE,GAAG,EAAE;YAC1B,KAAK,EAAE,CAAC;YACR,OAAO,CAAC,qBAAqB,EAAE,CAAC;QAClC,CAAC;KACF,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,MAAM,CAAC,YAAY,EAAE,CAAC;IACtB,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;IACvB,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/admin/user-role-dialog.d.ts

@@ -0,0 +1,94 @@
+/** Focused DataGrid dialog for direct roles assigned to one selected user. */
+import { Dialog } from '@jsvision/ui';
+import type { View } from '@jsvision/ui';
+import type { AdminApplication } from './application-state.js';
+import type { AdminRbacFailureKind, AdminRole } from './rbac-state.js';
+import type { AdminCapabilities } from './state.js';
+/** Assigned role with an optional validated application label for presentation. */
+export interface AdminAssignedUserRole extends AdminRole {
+    /** Application name when the current session may read the application catalog. */
+    readonly applicationName?: string;
+}
+/** Last complete validated projection retained by the focused dialog. */
+export interface AdminUserRoleReadyProjection {
+    /** Ready-state discriminator. */
+    readonly kind: 'ready';
+    /** Organization that owns the selected user. */
+    readonly organizationId: string;
+    /** Selected user whose assignments are displayed. */
+    readonly userId: string;
+    /** Complete direct role assignments for the selected user. */
+    readonly assignedRoles: readonly AdminAssignedUserRole[];
+    /** Applications visible to the current session. */
+    readonly applications: readonly AdminApplication[];
+    /** Unassigned roles for the application currently chosen by Add. */
+    readonly availableRoles: readonly AdminRole[];
+    /** Application that owns `availableRoles`; absent while no successful role read is current. */
+    readonly availableRolesApplicationId?: string;
+}
+/** Complete state accepted by the focused User Roles dialog. */
+export type AdminUserRoleViewState = {
+    readonly kind: 'closed';
+} | AdminUserRoleReadyProjection | {
+    readonly kind: 'indeterminate';
+    readonly previous?: AdminUserRoleReadyProjection;
+} | {
+    readonly kind: 'failure';
+    readonly failure: AdminRbacFailureKind;
+    readonly previous?: AdminUserRoleReadyProjection;
+};
+/** Closed set of direct actions emitted by the focused dialog. */
+export type AdminUserRoleIntent = {
+    readonly kind: 'load-available';
+    readonly applicationId: string;
+} | {
+    readonly kind: 'assign';
+    readonly roleId: string;
+} | {
+    readonly kind: 'remove';
+    readonly roleId: string;
+} | {
+    readonly kind: 'reload';
+} | {
+    readonly kind: 'close';
+};
+/** Construction inputs for one selected user's role dialog. */
+export interface AdminUserRoleDialogOptions {
+    /** Selected organization label and immutable owner. */
+    readonly organization: {
+        readonly id: string;
+        readonly name: string;
+    };
+    /** Selected user label and immutable owner. */
+    readonly user: {
+        readonly id: string;
+        readonly label: string;
+    };
+    /** Exact capabilities from the current verified session. */
+    readonly capabilities: AdminCapabilities;
+    /** Current terminal surface used to keep the modal fully visible. */
+    readonly viewport: {
+        readonly width: number;
+        readonly height: number;
+    };
+    /** Receives one explicit dialog action. */
+    readonly onIntent: (intent: AdminUserRoleIntent) => void;
+    /** Focuses a mounted control through the owning application loop. */
+    readonly focusView?: (view: View) => void;
+}
+/** Mounted owner for the focused User Roles dialog. */
+export interface AdminUserRoleDialog {
+    /** Dialog mounted by the selected-user controller. */
+    readonly content: Dialog;
+    /** Replaces the complete validated projection. */
+    readonly setState: (state: AdminUserRoleViewState) => void;
+    /** Restores focus to the current grid or choice. */
+    readonly focusCurrent: () => void;
+    /** Clears protected role data without disposing the owner. */
+    readonly clear: () => void;
+    /** Releases retained rows and reactive sort observers. */
+    readonly dispose: () => void;
+}
+/** Creates the direct focused dialog without a reusable CRUD abstraction. */
+export declare function createAdminUserRoleDialog(options: AdminUserRoleDialogOptions): AdminUserRoleDialog;
+//# sourceMappingURL=user-role-dialog.d.ts.map

package/dist/admin/user-role-dialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-role-dialog.d.ts","sourceRoot":"","sources":["../../src/admin/user-role-dialog.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EAOL,MAAM,EAUP,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAA6B,IAAI,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,mFAAmF;AACnF,MAAM,WAAW,qBAAsB,SAAQ,SAAS;IACtD,kFAAkF;IAClF,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,yEAAyE;AACzE,MAAM,WAAW,4BAA4B;IAC3C,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,gDAAgD;IAChD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACzD,mDAAmD;IACnD,QAAQ,CAAC,YAAY,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACnD,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,SAAS,SAAS,EAAE,CAAC;IAC9C,+FAA+F;IAC/F,QAAQ,CAAC,2BAA2B,CAAC,EAAE,MAAM,CAAC;CAC/C;AAED,gEAAgE;AAChE,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B,4BAA4B,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,CAAA;CAAE,GACpF;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,CAAC;CAClD,CAAC;AAEN,kEAAkE;AAClE,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/B,+DAA+D;AAC/D,MAAM,WAAW,0BAA0B;IACzC,uDAAuD;IACvD,QAAQ,CAAC,YAAY,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,2CAA2C;IAC3C,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;IACzD,qEAAqE;IACrE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;CAC3C;AAED,uDAAuD;AACvD,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC3D,oDAAoD;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC;IAClC,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AAuCD,6EAA6E;AAC7E,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,0BAA0B,GAClC,mBAAmB,CA0RrB"}