@things-factory/auth-base 10.1.241 → 10.1.245

package/dist-server/service/role-template/role-template-gap-resolver.d.ts

@@ -1,4 +1,5 @@
 import { Role } from '../role/role.js';
+import { RoleBrief } from '../role/role-types.js';
 import { RoleTaskCoverageListView, RoleTemplateGapView } from './role-template-types.js';
 /**
  * `Role.templateGap` and `Role.taskCoverage` - the role management screen lays a role against its base template and against
@@ -12,3 +13,10 @@ export declare class RoleTemplateGapResolver {
     templateGap(role: Role): Promise<RoleTemplateGapView | null>;
     taskCoverage(role: Role): Promise<RoleTaskCoverageListView>;
 }
+/**
+ * `RoleBrief.taskCoverage` - the same reading for one's own roles (ADR-0139 §11-11): the profile says what work each role
+ * of the caller holds. `myRoles` returns only the caller's roles, so this reaches no one else's.
+ */
+export declare class RoleBriefTaskResolver {
+    taskCoverage(role: RoleBrief): Promise<RoleTaskCoverageListView>;
+}

package/dist-server/service/role-template/role-template-gap-resolver.js

@@ -1,11 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RoleTemplateGapResolver = void 0;
+exports.RoleBriefTaskResolver = exports.RoleTemplateGapResolver = void 0;
 const tslib_1 = require("tslib");
 const type_graphql_1 = require("type-graphql");
 const shell_1 = require("@things-factory/shell");
 const privilege_js_1 = require("../privilege/privilege.js");
 const role_js_1 = require("../role/role.js");
+const role_types_js_1 = require("../role/role-types.js");
 const role_template_js_1 = require("./role-template.js");
 const role_task_js_1 = require("./role-task.js");
 const role_template_types_js_1 = require("./role-template-types.js");
@@ -51,6 +52,28 @@ tslib_1.__decorate([
 exports.RoleTemplateGapResolver = RoleTemplateGapResolver = tslib_1.__decorate([
     (0, type_graphql_1.Resolver)(role_js_1.Role)
 ], RoleTemplateGapResolver);
+/**
+ * `RoleBrief.taskCoverage` - the same reading for one's own roles (ADR-0139 §11-11): the profile says what work each role
+ * of the caller holds. `myRoles` returns only the caller's roles, so this reaches no one else's.
+ */
+let RoleBriefTaskResolver = class RoleBriefTaskResolver {
+    async taskCoverage(role) {
+        return (0, role_task_js_1.taskCoverageOf)(await heldBy(role));
+    }
+};
+exports.RoleBriefTaskResolver = RoleBriefTaskResolver;
+tslib_1.__decorate([
+    (0, type_graphql_1.FieldResolver)(type => role_template_types_js_1.RoleTaskCoverageListView, {
+        description: "The role's privileges laid against every registered task, and those no task names."
+    }),
+    tslib_1.__param(0, (0, type_graphql_1.Root)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [role_types_js_1.RoleBrief]),
+    tslib_1.__metadata("design:returntype", Promise)
+], RoleBriefTaskResolver.prototype, "taskCoverage", null);
+exports.RoleBriefTaskResolver = RoleBriefTaskResolver = tslib_1.__decorate([
+    (0, type_graphql_1.Resolver)(role_types_js_1.RoleBrief)
+], RoleBriefTaskResolver);
 async function heldBy(role) {
     const held = await (0, shell_1.getRepository)(privilege_js_1.Privilege)
         .createQueryBuilder('PRIVILEGE')

package/dist-server/service/role-template/role-template-gap-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"role-template-gap-resolver.js","sourceRoot":"","sources":["../../../server/service/role-template/role-template-gap-resolver.ts"],"names":[],"mappings":";;;;AAAA,+CAA4D;AAE5D,iDAAqD;AAErD,4DAAqD;AACrD,6CAAsC;AACtC,yDAAkD;AAClD,iDAA+C;AAC/C,qEAAwF;AAExF;;;;;;;GAOG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAM5B,AAAN,KAAK,CAAC,WAAW,CAAS,IAAU;QAClC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,IAAA,gCAAa,EAAC,IAAI,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3D,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY,CAAS,IAAU;QACnC,OAAO,IAAA,6BAAc,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3C,CAAC;CACF,CAAA;AApBY,0DAAuB;AAM5B;IALL,IAAA,4BAAa,EAAC,IAAI,CAAC,EAAE,CAAC,4CAAmB,EAAE;QAC1C,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,sMAAsM;KACzM,CAAC;IACiB,mBAAA,IAAA,mBAAI,GAAE,CAAA;;6CAAO,cAAI;;0DAMnC;AAKK;IAHL,IAAA,4BAAa,EAAC,IAAI,CAAC,EAAE,CAAC,iDAAwB,EAAE;QAC/C,WAAW,EAAE,oFAAoF;KAClG,CAAC;IACkB,mBAAA,IAAA,mBAAI,GAAE,CAAA;;6CAAO,cAAI;;2DAEpC;kCAnBU,uBAAuB;IADnC,IAAA,uBAAQ,EAAC,cAAI,CAAC;GACF,uBAAuB,CAoBnC;AAED,KAAK,UAAU,MAAM,CAAC,IAAU;IAC9B,MAAM,IAAI,GAAG,MAAM,IAAA,qBAAa,EAAC,wBAAS,CAAC;SACxC,kBAAkB,CAAC,WAAW,CAAC;SAC/B,MAAM,CAAC,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;SAChD,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC;SACpC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;SACvC,OAAO,EAAE,CAAA;IAEZ,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;AAClF,CAAC","sourcesContent":["import { FieldResolver, Resolver, Root } from 'type-graphql'\n\nimport { getRepository } from '@things-factory/shell'\n\nimport { Privilege } from '../privilege/privilege.js'\nimport { Role } from '../role/role.js'\nimport { templateGapOf } from './role-template.js'\nimport { taskCoverageOf } from './role-task.js'\nimport { RoleTaskCoverageListView, RoleTemplateGapView } from './role-template-types.js'\n\n/**\n * `Role.templateGap` and `Role.taskCoverage` - the role management screen lays a role against its base template and against\n * the tasks (ADR-0075 decision 1, ADR-0139 decision 11). The rules are `templateGapAgainst` and `taskCoverageOf`;\n * this only reads the role's privileges.\n *\n * Both are fields of a role, so they are reached only through a door that already returned the role - the same\n * privilege and the same domain the role list asks for. They add no door of their own.\n */\n@Resolver(Role)\nexport class RoleTemplateGapResolver {\n  @FieldResolver(type => RoleTemplateGapView, {\n    nullable: true,\n    description:\n      \"What the role's base template grants here that the role does not hold, and what the role holds beyond it. Null when the role has no base template, or its base is not declared in this installation.\"\n  })\n  async templateGap(@Root() role: Role): Promise<RoleTemplateGapView | null> {\n    if (!role.templateId) {\n      return null\n    }\n\n    return templateGapOf(role.templateId, await heldBy(role))\n  }\n\n  @FieldResolver(type => RoleTaskCoverageListView, {\n    description: \"The role's privileges laid against every registered task, and those no task names.\"\n  })\n  async taskCoverage(@Root() role: Role): Promise<RoleTaskCoverageListView> {\n    return taskCoverageOf(await heldBy(role))\n  }\n}\n\nasync function heldBy(role: Role): Promise<Set<string>> {\n  const held = await getRepository(Privilege)\n    .createQueryBuilder('PRIVILEGE')\n    .select(['PRIVILEGE.category', 'PRIVILEGE.name'])\n    .innerJoin('PRIVILEGE.roles', 'ROLE')\n    .where('ROLE.id = :id', { id: role.id })\n    .getMany()\n\n  return new Set(held.map(privilege => `${privilege.category} ${privilege.name}`))\n}\n"]}
+{"version":3,"file":"role-template-gap-resolver.js","sourceRoot":"","sources":["../../../server/service/role-template/role-template-gap-resolver.ts"],"names":[],"mappings":";;;;AAAA,+CAA4D;AAE5D,iDAAqD;AAErD,4DAAqD;AACrD,6CAAsC;AACtC,yDAAiD;AACjD,yDAAkD;AAClD,iDAA+C;AAC/C,qEAAwF;AAExF;;;;;;;GAOG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAM5B,AAAN,KAAK,CAAC,WAAW,CAAS,IAAU;QAClC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,IAAA,gCAAa,EAAC,IAAI,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3D,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY,CAAS,IAAU;QACnC,OAAO,IAAA,6BAAc,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3C,CAAC;CACF,CAAA;AApBY,0DAAuB;AAM5B;IALL,IAAA,4BAAa,EAAC,IAAI,CAAC,EAAE,CAAC,4CAAmB,EAAE;QAC1C,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,sMAAsM;KACzM,CAAC;IACiB,mBAAA,IAAA,mBAAI,GAAE,CAAA;;6CAAO,cAAI;;0DAMnC;AAKK;IAHL,IAAA,4BAAa,EAAC,IAAI,CAAC,EAAE,CAAC,iDAAwB,EAAE;QAC/C,WAAW,EAAE,oFAAoF;KAClG,CAAC;IACkB,mBAAA,IAAA,mBAAI,GAAE,CAAA;;6CAAO,cAAI;;2DAEpC;kCAnBU,uBAAuB;IADnC,IAAA,uBAAQ,EAAC,cAAI,CAAC;GACF,uBAAuB,CAoBnC;AAED;;;GAGG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAI1B,AAAN,KAAK,CAAC,YAAY,CAAS,IAAe;QACxC,OAAO,IAAA,6BAAc,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3C,CAAC;CACF,CAAA;AAPY,sDAAqB;AAI1B;IAHL,IAAA,4BAAa,EAAC,IAAI,CAAC,EAAE,CAAC,iDAAwB,EAAE;QAC/C,WAAW,EAAE,oFAAoF;KAClG,CAAC;IACkB,mBAAA,IAAA,mBAAI,GAAE,CAAA;;6CAAO,yBAAS;;yDAEzC;gCANU,qBAAqB;IADjC,IAAA,uBAAQ,EAAC,yBAAS,CAAC;GACP,qBAAqB,CAOjC;AAED,KAAK,UAAU,MAAM,CAAC,IAAqB;IACzC,MAAM,IAAI,GAAG,MAAM,IAAA,qBAAa,EAAC,wBAAS,CAAC;SACxC,kBAAkB,CAAC,WAAW,CAAC;SAC/B,MAAM,CAAC,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;SAChD,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC;SACpC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;SACvC,OAAO,EAAE,CAAA;IAEZ,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;AAClF,CAAC","sourcesContent":["import { FieldResolver, Resolver, Root } from 'type-graphql'\n\nimport { getRepository } from '@things-factory/shell'\n\nimport { Privilege } from '../privilege/privilege.js'\nimport { Role } from '../role/role.js'\nimport { RoleBrief } from '../role/role-types.js'\nimport { templateGapOf } from './role-template.js'\nimport { taskCoverageOf } from './role-task.js'\nimport { RoleTaskCoverageListView, RoleTemplateGapView } from './role-template-types.js'\n\n/**\n * `Role.templateGap` and `Role.taskCoverage` - the role management screen lays a role against its base template and against\n * the tasks (ADR-0075 decision 1, ADR-0139 decision 11). The rules are `templateGapAgainst` and `taskCoverageOf`;\n * this only reads the role's privileges.\n *\n * Both are fields of a role, so they are reached only through a door that already returned the role - the same\n * privilege and the same domain the role list asks for. They add no door of their own.\n */\n@Resolver(Role)\nexport class RoleTemplateGapResolver {\n  @FieldResolver(type => RoleTemplateGapView, {\n    nullable: true,\n    description:\n      \"What the role's base template grants here that the role does not hold, and what the role holds beyond it. Null when the role has no base template, or its base is not declared in this installation.\"\n  })\n  async templateGap(@Root() role: Role): Promise<RoleTemplateGapView | null> {\n    if (!role.templateId) {\n      return null\n    }\n\n    return templateGapOf(role.templateId, await heldBy(role))\n  }\n\n  @FieldResolver(type => RoleTaskCoverageListView, {\n    description: \"The role's privileges laid against every registered task, and those no task names.\"\n  })\n  async taskCoverage(@Root() role: Role): Promise<RoleTaskCoverageListView> {\n    return taskCoverageOf(await heldBy(role))\n  }\n}\n\n/**\n * `RoleBrief.taskCoverage` - the same reading for one's own roles (ADR-0139 §11-11): the profile says what work each role\n * of the caller holds. `myRoles` returns only the caller's roles, so this reaches no one else's.\n */\n@Resolver(RoleBrief)\nexport class RoleBriefTaskResolver {\n  @FieldResolver(type => RoleTaskCoverageListView, {\n    description: \"The role's privileges laid against every registered task, and those no task names.\"\n  })\n  async taskCoverage(@Root() role: RoleBrief): Promise<RoleTaskCoverageListView> {\n    return taskCoverageOf(await heldBy(role))\n  }\n}\n\nasync function heldBy(role: { id?: string }): Promise<Set<string>> {\n  const held = await getRepository(Privilege)\n    .createQueryBuilder('PRIVILEGE')\n    .select(['PRIVILEGE.category', 'PRIVILEGE.name'])\n    .innerJoin('PRIVILEGE.roles', 'ROLE')\n    .where('ROLE.id = :id', { id: role.id })\n    .getMany()\n\n  return new Set(held.map(privilege => `${privilege.category} ${privilege.name}`))\n}\n"]}