@things-factory/auth-ui 10.1.194 → 10.1.198

package/dist-client/index.js

@@ -8,7 +8,7 @@ export * from './components/role-selector.js';
 export * from './components/domain-switch.js';
 export * from './components/invite-user.js';
 export async function setAuthManagementMenus(options) {
-    const { role = true, appliance = true, application = true, user = true, authProvider = true, domain = true, attribute = true } = options || {};
+    const { role = true, appliance = true, application = true, user = true, authProvider = true, domain = true, attribute = true, audit = true } = options || {};
     if (await hasPrivilege({ privilege: 'mutation', category: 'user', domainOwnerGranted: true, superUserGranted: true })) {
         role &&
             store.dispatch({
@@ -66,6 +66,19 @@ export async function setAuthManagementMenus(options) {
                 }
             });
     }
+    /* The audit asks its own privilege - the domain owner does not pass on ownership (ADR-0141 §5). */
+    if (audit && (await hasPrivilege({ privilege: 'query', category: 'audit', superUserGranted: true }))) {
+        store.dispatch({
+            type: ADD_MORENDA,
+            morenda: {
+                icon: html ` <md-icon>policy</md-icon> `,
+                name: html ` <ox-i18n msgid="audit.title"></ox-i18n> `,
+                action: () => {
+                    navigate('audit');
+                }
+            }
+        });
+    }
     if (await hasPrivilege({ domainOwnerGranted: true, superUserGranted: true })) {
         domain &&
             store.dispatch({

package/dist-client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../client/index.ts"],"names":[],"mappings":"AAAA,OAAO,4BAA4B,CAAA;AACnC,OAAO,0BAA0B,CAAA;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAE/B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AAEpE,cAAc,+BAA+B,CAAA;AAC7C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,6BAA6B,CAAA;AAY3C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAa;IACxD,MAAM,EACJ,IAAI,GAAG,IAAI,EACX,SAAS,GAAG,IAAI,EAChB,WAAW,GAAG,IAAI,EAClB,IAAI,GAAG,IAAI,EACX,YAAY,GAAG,IAAI,EACnB,MAAM,GAAG,IAAI,EACb,SAAS,GAAG,IAAI,EACjB,GAAG,OAAO,IAAI,EAAE,CAAA;IAEjB,IACE,MAAM,YAAY,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,EACjH,CAAC;QACD,IAAI;YACF,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,iCAAiC;oBAC3C,IAAI,EAAE,IAAI,CAAA,oDAAoD;oBAC9D,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,OAAO,CAAC,CAAA;oBACnB,CAAC;iBACF;aACF,CAAC,CAAA;QAEJ,SAAS;YACP,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,8BAA8B;oBACxC,IAAI,EAAE,IAAI,CAAA,8CAA8C;oBACxD,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,gBAAgB,CAAC,CAAA;oBAC5B,CAAC;iBACF;aACF,CAAC,CAAA;QAEJ,WAAW;YACT,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,2BAA2B;oBACrC,IAAI,EAAE,IAAI,CAAA,2DAA2D;oBACrE,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,cAAc,CAAC,CAAA;oBAC1B,CAAC;iBACF;aACF,CAAC,CAAA;QAEJ,IAAI;YACF,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,6BAA6B;oBACvC,IAAI,EAAE,IAAI,CAAA,oDAAoD;oBAC9D,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,OAAO,CAAC,CAAA;oBACnB,CAAC;iBACF;aACF,CAAC,CAAA;QAEJ,YAAY;YACV,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,8BAA8B;oBACxC,IAAI,EAAE,IAAI,CAAA,6DAA6D;oBACvE,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,gBAAgB,CAAC,CAAA;oBAC5B,CAAC;iBACF;aACF,CAAC,CAAA;IACN,CAAC;IAED,IAAI,MAAM,YAAY,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7E,MAAM;YACJ,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,6CAA6C;oBACvD,IAAI,EAAE,IAAI,CAAA,kDAAkD;oBAC5D,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,eAAe,CAAC,CAAA;oBAC3B,CAAC;iBACF;aACF,CAAC,CAAA;IACN,CAAC;IAED,IAAI,MAAM,YAAY,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,MAAM;YACJ,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,+BAA+B;oBACzC,IAAI,EAAE,IAAI,CAAA,sDAAsD;oBAChE,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,SAAS,CAAC,CAAA;oBACrB,CAAC;iBACF;aACF,CAAC,CAAA;QAEJ,SAAS;YACP,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,8BAA8B;oBACxC,IAAI,EAAE,IAAI,CAAA,yDAAyD;oBACnE,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,YAAY,CAAC,CAAA;oBACxB,CAAC;iBACF;aACF,CAAC,CAAA;IACN,CAAC;AACH,CAAC","sourcesContent":["import '@material/web/icon/icon.js'\nimport '@operato/i18n/ox-i18n.js'\n\nimport { html } from 'lit-html'\n\nimport { navigate, store } from '@operato/shell'\nimport { ADD_MORENDA } from '@things-factory/more-base/client'\nimport { hasPrivilege } from '@things-factory/auth-base/dist-client'\n\nexport * from './components/role-selector.js'\nexport * from './components/domain-switch.js'\nexport * from './components/invite-user.js'\n\nexport type AuthManagementMenuOptions = {\n  role?: boolean\n  appliance?: boolean\n  application?: boolean\n  user?: boolean\n  authProvider?: boolean\n  domain?: boolean\n  attribute?: boolean\n}\n\nexport async function setAuthManagementMenus(options?: any) {\n  const {\n    role = true,\n    appliance = true,\n    application = true,\n    user = true,\n    authProvider = true,\n    domain = true,\n    attribute = true\n  } = options || {}\n\n  if (\n    await hasPrivilege({ privilege: 'mutation', category: 'user', domainOwnerGranted: true, superUserGranted: true })\n  ) {\n    role &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>how_to_reg</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.role_management\"></ox-i18n> `,\n          action: () => {\n            navigate('roles')\n          }\n        }\n      })\n\n    appliance &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>devices</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.appliance\"></ox-i18n> `,\n          action: () => {\n            navigate('appliance-home')\n          }\n        }\n      })\n\n    application &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>apps</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.application management\"></ox-i18n> `,\n          action: () => {\n            navigate('applications')\n          }\n        }\n      })\n\n    user &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>people</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.user management\"></ox-i18n> `,\n          action: () => {\n            navigate('users')\n          }\n        }\n      })\n\n    authProvider &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>id_card</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.auth-provider management\"></ox-i18n> `,\n          action: () => {\n            navigate('auth-providers')\n          }\n        }\n      })\n  }\n\n  if (await hasPrivilege({ domainOwnerGranted: true, superUserGranted: true })) {\n    domain &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>supervised_user_circle</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.domain owners\"></ox-i18n> `,\n          action: () => {\n            navigate('domain-owners')\n          }\n        }\n      })\n  }\n\n  if (await hasPrivilege({ superUserGranted: true })) {\n    domain &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>business</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.domain management\"></ox-i18n> `,\n          action: () => {\n            navigate('domains')\n          }\n        }\n      })\n\n    attribute &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>dataset</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.attribute management\"></ox-i18n> `,\n          action: () => {\n            navigate('attributes')\n          }\n        }\n      })\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../client/index.ts"],"names":[],"mappings":"AAAA,OAAO,4BAA4B,CAAA;AACnC,OAAO,0BAA0B,CAAA;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAE/B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AAEpE,cAAc,+BAA+B,CAAA;AAC7C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,6BAA6B,CAAA;AAa3C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAa;IACxD,MAAM,EACJ,IAAI,GAAG,IAAI,EACX,SAAS,GAAG,IAAI,EAChB,WAAW,GAAG,IAAI,EAClB,IAAI,GAAG,IAAI,EACX,YAAY,GAAG,IAAI,EACnB,MAAM,GAAG,IAAI,EACb,SAAS,GAAG,IAAI,EAChB,KAAK,GAAG,IAAI,EACb,GAAG,OAAO,IAAI,EAAE,CAAA;IAEjB,IACE,MAAM,YAAY,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,EACjH,CAAC;QACD,IAAI;YACF,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,iCAAiC;oBAC3C,IAAI,EAAE,IAAI,CAAA,oDAAoD;oBAC9D,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,OAAO,CAAC,CAAA;oBACnB,CAAC;iBACF;aACF,CAAC,CAAA;QAEJ,SAAS;YACP,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,8BAA8B;oBACxC,IAAI,EAAE,IAAI,CAAA,8CAA8C;oBACxD,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,gBAAgB,CAAC,CAAA;oBAC5B,CAAC;iBACF;aACF,CAAC,CAAA;QAEJ,WAAW;YACT,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,2BAA2B;oBACrC,IAAI,EAAE,IAAI,CAAA,2DAA2D;oBACrE,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,cAAc,CAAC,CAAA;oBAC1B,CAAC;iBACF;aACF,CAAC,CAAA;QAEJ,IAAI;YACF,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,6BAA6B;oBACvC,IAAI,EAAE,IAAI,CAAA,oDAAoD;oBAC9D,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,OAAO,CAAC,CAAA;oBACnB,CAAC;iBACF;aACF,CAAC,CAAA;QAEJ,YAAY;YACV,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,8BAA8B;oBACxC,IAAI,EAAE,IAAI,CAAA,6DAA6D;oBACvE,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,gBAAgB,CAAC,CAAA;oBAC5B,CAAC;iBACF;aACF,CAAC,CAAA;IACN,CAAC;IAED,mGAAmG;IACnG,IAAI,KAAK,IAAI,CAAC,MAAM,YAAY,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACrG,KAAK,CAAC,QAAQ,CAAC;YACb,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE;gBACP,IAAI,EAAE,IAAI,CAAA,6BAA6B;gBACvC,IAAI,EAAE,IAAI,CAAA,2CAA2C;gBACrD,MAAM,EAAE,GAAG,EAAE;oBACX,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACnB,CAAC;aACF;SACF,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,YAAY,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7E,MAAM;YACJ,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,6CAA6C;oBACvD,IAAI,EAAE,IAAI,CAAA,kDAAkD;oBAC5D,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,eAAe,CAAC,CAAA;oBAC3B,CAAC;iBACF;aACF,CAAC,CAAA;IACN,CAAC;IAED,IAAI,MAAM,YAAY,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,MAAM;YACJ,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,+BAA+B;oBACzC,IAAI,EAAE,IAAI,CAAA,sDAAsD;oBAChE,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,SAAS,CAAC,CAAA;oBACrB,CAAC;iBACF;aACF,CAAC,CAAA;QAEJ,SAAS;YACP,KAAK,CAAC,QAAQ,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAA,8BAA8B;oBACxC,IAAI,EAAE,IAAI,CAAA,yDAAyD;oBACnE,MAAM,EAAE,GAAG,EAAE;wBACX,QAAQ,CAAC,YAAY,CAAC,CAAA;oBACxB,CAAC;iBACF;aACF,CAAC,CAAA;IACN,CAAC;AACH,CAAC","sourcesContent":["import '@material/web/icon/icon.js'\nimport '@operato/i18n/ox-i18n.js'\n\nimport { html } from 'lit-html'\n\nimport { navigate, store } from '@operato/shell'\nimport { ADD_MORENDA } from '@things-factory/more-base/client'\nimport { hasPrivilege } from '@things-factory/auth-base/dist-client'\n\nexport * from './components/role-selector.js'\nexport * from './components/domain-switch.js'\nexport * from './components/invite-user.js'\n\nexport type AuthManagementMenuOptions = {\n  role?: boolean\n  appliance?: boolean\n  application?: boolean\n  user?: boolean\n  authProvider?: boolean\n  domain?: boolean\n  attribute?: boolean\n  audit?: boolean\n}\n\nexport async function setAuthManagementMenus(options?: any) {\n  const {\n    role = true,\n    appliance = true,\n    application = true,\n    user = true,\n    authProvider = true,\n    domain = true,\n    attribute = true,\n    audit = true\n  } = options || {}\n\n  if (\n    await hasPrivilege({ privilege: 'mutation', category: 'user', domainOwnerGranted: true, superUserGranted: true })\n  ) {\n    role &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>how_to_reg</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.role_management\"></ox-i18n> `,\n          action: () => {\n            navigate('roles')\n          }\n        }\n      })\n\n    appliance &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>devices</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.appliance\"></ox-i18n> `,\n          action: () => {\n            navigate('appliance-home')\n          }\n        }\n      })\n\n    application &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>apps</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.application management\"></ox-i18n> `,\n          action: () => {\n            navigate('applications')\n          }\n        }\n      })\n\n    user &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>people</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.user management\"></ox-i18n> `,\n          action: () => {\n            navigate('users')\n          }\n        }\n      })\n\n    authProvider &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>id_card</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.auth-provider management\"></ox-i18n> `,\n          action: () => {\n            navigate('auth-providers')\n          }\n        }\n      })\n  }\n\n  /* The audit asks its own privilege - the domain owner does not pass on ownership (ADR-0141 §5). */\n  if (audit && (await hasPrivilege({ privilege: 'query', category: 'audit', superUserGranted: true }))) {\n    store.dispatch({\n      type: ADD_MORENDA,\n      morenda: {\n        icon: html` <md-icon>policy</md-icon> `,\n        name: html` <ox-i18n msgid=\"audit.title\"></ox-i18n> `,\n        action: () => {\n          navigate('audit')\n        }\n      }\n    })\n  }\n\n  if (await hasPrivilege({ domainOwnerGranted: true, superUserGranted: true })) {\n    domain &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>supervised_user_circle</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.domain owners\"></ox-i18n> `,\n          action: () => {\n            navigate('domain-owners')\n          }\n        }\n      })\n  }\n\n  if (await hasPrivilege({ superUserGranted: true })) {\n    domain &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>business</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.domain management\"></ox-i18n> `,\n          action: () => {\n            navigate('domains')\n          }\n        }\n      })\n\n    attribute &&\n      store.dispatch({\n        type: ADD_MORENDA,\n        morenda: {\n          icon: html` <md-icon>dataset</md-icon> `,\n          name: html` <ox-i18n msgid=\"text.attribute management\"></ox-i18n> `,\n          action: () => {\n            navigate('attributes')\n          }\n        }\n      })\n  }\n}\n"]}

package/dist-client/pages/audit/audit-page.d.ts

@@ -0,0 +1,46 @@
+import '@material/web/icon/icon.js';
+import '@operato/data-grist';
+import type { CSSResultGroup } from 'lit';
+import { PageView } from '@operato/shell';
+import type { FetchOption } from '@operato/data-grist';
+declare const AuditPageBase: (new (...args: any[]) => {
+    __preferenceProviders: {
+        [element: string]: import("@operato/p13n").PagePreferenceProvider;
+    };
+    getPagePreferenceProvider(element: string): import("@operato/p13n").PagePreferenceProvider | undefined;
+}) & (new (...args: any[]) => import("lit").LitElement) & typeof PageView;
+export declare class AuditPage extends AuditPageBase {
+    static styles: CSSResultGroup;
+    mode: 'CARD' | 'GRID' | 'LIST';
+    private view;
+    private days;
+    private from;
+    private to;
+    private actor?;
+    private door?;
+    private outcome;
+    private health?;
+    private grist;
+    get context(): {
+        title: string;
+        help: string;
+        filter: {
+            handler: () => void;
+        };
+    };
+    render(): import("lit-html").TemplateResult<1>;
+    private renderControls;
+    private renderHealth;
+    private show;
+    private lastDays;
+    private pick;
+    private narrow;
+    pageUpdated(_changes: any, _lifecycle: any): Promise<void>;
+    private readHealth;
+    private configOf;
+    fetchHandler({ page, limit }: FetchOption): Promise<{
+        total: any;
+        records: any;
+    }>;
+}
+export {};

package/dist-client/pages/audit/audit-page.js

@@ -0,0 +1,417 @@
+import { __decorate, __metadata } from "tslib";
+import '@material/web/icon/icon.js';
+import '@operato/data-grist';
+import gql from 'graphql-tag';
+import { css, html, nothing } from 'lit';
+import { customElement, property, query, state } from 'lit/decorators.js';
+import { keyed } from 'lit/directives/keyed.js';
+import { client } from '@operato/graphql';
+import { i18next, localize } from '@operato/i18n';
+import { p13n } from '@operato/p13n';
+import { PageView } from '@operato/shell';
+import { ButtonStyles, CommonGristStyles, CommonHeaderStyles, ScrollbarStyles, WorkSurfacePageStyles } from '@operato/styles';
+import { isMobileDevice } from '@operato/utils';
+import { statusRenderer } from '../../components/user-status-renderer.js';
+import { doorWords, lastDays, recordWords } from '../../utils/audit-words.js';
+const PERIODS = [7, 30, 90];
+const VIEWS = ['people', 'doors', 'records'];
+const OUTCOMES = ['', 'denied', 'error', 'failed'];
+const AuditPageBase = p13n(localize(i18next)(PageView));
+function dateInputValue(date) {
+    const pad = (n) => String(n).padStart(2, '0');
+    return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())}`;
+}
+let AuditPage = class AuditPage extends AuditPageBase {
+    constructor() {
+        super(...arguments);
+        this.mode = isMobileDevice() ? 'LIST' : 'GRID';
+        this.view = 'people';
+        this.days = 30;
+        this.from = lastDays(30).from;
+        this.to = new Date();
+        this.outcome = '';
+    }
+    static { this.styles = [
+        WorkSurfacePageStyles,
+        ScrollbarStyles,
+        CommonGristStyles,
+        CommonHeaderStyles,
+        ButtonStyles,
+        css `
+      .filters {
+        flex-wrap: wrap;
+      }
+
+      [group] {
+        display: flex;
+        align-items: center;
+        gap: var(--spacing-tiny, 2px);
+      }
+
+      button[aria-pressed='true'] {
+        background-color: var(--md-sys-color-secondary-container);
+        color: var(--md-sys-color-on-secondary-container);
+      }
+
+      input[type='date'] {
+        height: var(--context-action-height, 28px);
+        box-sizing: border-box;
+        border: 1px solid var(--md-sys-color-outline-variant);
+        border-radius: var(--md-sys-shape-corner-small, 4px);
+        background: var(--md-sys-color-surface-container-lowest);
+        color: var(--md-sys-color-on-surface);
+        font: inherit;
+        font-size: var(--ui-t-body, 13px);
+        padding: 0 var(--spacing-small, 4px);
+      }
+
+      [narrowed] {
+        display: flex;
+        align-items: center;
+        gap: var(--spacing-small, 4px);
+        font-size: var(--ui-t-body, 13px);
+        color: var(--md-sys-color-on-surface);
+      }
+
+      [health] {
+        margin-left: auto;
+        font-size: var(--ui-t-body, 13px);
+        color: var(--ui-crit, var(--md-sys-color-error));
+      }
+    `
+    ]; }
+    get context() {
+        return {
+            title: i18next.t('audit.title'),
+            help: 'auth/audit',
+            filter: {
+                handler: () => this.grist.toggleHeadroom()
+            }
+        };
+    }
+    render() {
+        return html `${keyed(this.view, html `<ox-grist class="page-fill" .mode=${this.mode} .config=${this.configOf(this.view)} .fetchHandler=${this.fetchHandler.bind(this)}>
+        <div slot="headroom" class="header">
+          <div class="filters">${this.renderControls()}</div>
+        </div>
+      </ox-grist>`)}`;
+    }
+    renderControls() {
+        const t = i18next.t.bind(i18next);
+        const pressed = (on) => (on ? 'true' : 'false');
+        return html `
+      <div group>
+        ${VIEWS.map(view => html `<button quiet aria-pressed=${pressed(this.view === view)} @click=${() => this.show(view)}>${t(`audit.view.${view}`)}</button>`)}
+      </div>
+
+      <div group>
+        ${PERIODS.map(days => html `<button quiet aria-pressed=${pressed(this.days === days)} @click=${() => this.lastDays(days)}>${t('audit.period.days', { count: days })}</button>`)}
+        <input type="date" aria-label=${t('audit.period.from')} .value=${dateInputValue(this.from)} @change=${(e) => this.pick('from', e)} />
+        <span>~</span>
+        <input type="date" aria-label=${t('audit.period.to')} .value=${dateInputValue(this.to)} @change=${(e) => this.pick('to', e)} />
+      </div>
+
+      ${this.view === 'records'
+            ? html `<div group>
+            ${OUTCOMES.map(outcome => html `<button quiet aria-pressed=${pressed(this.outcome === outcome)} @click=${() => this.narrow({ outcome })}>${t(outcome ? `audit.outcome.${outcome}` : 'audit.outcome.all')}</button>`)}
+          </div>`
+            : nothing}
+      ${this.view === 'records' && this.actor
+            ? html `<span narrowed>${this.actor.name}<button quiet small @click=${() => this.narrow({ actor: undefined })}>${t('audit.button.all-people')}</button></span>`
+            : nothing}
+      ${this.view === 'records' && this.door
+            ? html `<span narrowed>${doorWords(t, this.door)}<button quiet small @click=${() => this.narrow({ door: undefined })}>${t('audit.button.all-privileges')}</button></span>`
+            : nothing}
+      ${this.renderHealth()}
+    `;
+    }
+    /* Only what is wrong is said: failures, or that they could not be counted. Never a 0 for "unknown". */
+    renderHealth() {
+        const health = this.health;
+        if (health === 'unknown')
+            return html `<span health>${i18next.t('audit.health.unknown')}</span>`;
+        if (!health?.failures)
+            return nothing;
+        return html `<span health>${i18next.t('audit.health.failures', { count: health.failures, since: new Date(health.since).toLocaleString() })}</span>`;
+    }
+    show(view) {
+        this.view = view;
+    }
+    lastDays(days) {
+        const { from, to } = lastDays(days);
+        this.days = days;
+        this.from = from;
+        this.to = to;
+        this.grist?.fetch();
+    }
+    pick(which, event) {
+        const value = event.target.value;
+        if (!value)
+            return;
+        const [year, month, day] = value.split('-').map(Number);
+        this[which] = which === 'from' ? new Date(year, month - 1, day, 0, 0, 0) : new Date(year, month - 1, day, 23, 59, 59, 999);
+        this.days = null;
+        this.grist?.fetch();
+    }
+    narrow(change) {
+        Object.assign(this, change);
+        if (this.view !== 'records')
+            this.view = 'records';
+        else
+            this.grist?.fetch();
+    }
+    async pageUpdated(_changes, _lifecycle) {
+        if (this.active) {
+            await this.updateComplete;
+            this.grist?.fetch();
+            this.readHealth();
+        }
+    }
+    async readHealth() {
+        try {
+            const response = await client.query({ query: gql `{ auditHealth { failures since } }`, fetchPolicy: 'no-cache' });
+            this.health = response.errors?.length || !response.data?.auditHealth ? 'unknown' : response.data.auditHealth;
+        }
+        catch {
+            this.health = 'unknown';
+        }
+    }
+    configOf(view) {
+        const t = i18next.t.bind(i18next);
+        const number = (name, header, click) => ({
+            type: 'integer',
+            name,
+            header,
+            record: { align: 'right', editable: false },
+            width: 90,
+            ...(click ? { handlers: { click: (_c, _d, _col, record) => record && click(record) } } : {})
+        });
+        if (view === 'people') {
+            const person = (record) => ({ id: record.id, name: record.name || record.email });
+            return {
+                rows: { appendable: false, selectable: false },
+                pagination: { infinite: true },
+                columns: [
+                    { type: 'gutter', gutterName: 'sequence' },
+                    {
+                        type: 'string',
+                        name: 'name',
+                        header: t('field.name'),
+                        record: { editable: false },
+                        width: 140,
+                        handlers: { click: (_c, _d, _col, record) => record && this.narrow({ actor: person(record), door: undefined, outcome: '' }) }
+                    },
+                    { type: 'string', name: 'email', header: t('field.email'), record: { editable: false }, width: 200 },
+                    { type: 'string', name: 'roles', header: t('field.roles'), record: { editable: false }, width: 200 },
+                    { type: 'string', name: 'status', header: t('field.status'), record: { editable: false, align: 'center', renderer: statusRenderer(() => 0) }, width: 80 },
+                    { type: 'datetime', name: 'lastCheckinAt', header: t('audit.field.last-checkin'), record: { editable: false }, width: 160 },
+                    number('checkins', t('audit.field.checkins')),
+                    number('failedSignins', t('audit.field.failed-signins'), record => this.narrow({ actor: person(record), door: undefined, outcome: 'failed' })),
+                    number('granted', t('audit.field.granted'), record => this.narrow({ actor: person(record), door: undefined, outcome: '' })),
+                    number('denied', t('audit.field.denied'), record => this.narrow({ actor: person(record), door: undefined, outcome: 'denied' }))
+                ]
+            };
+        }
+        if (view === 'doors') {
+            return {
+                rows: { appendable: false, selectable: false },
+                pagination: { infinite: true },
+                columns: [
+                    { type: 'gutter', gutterName: 'sequence' },
+                    {
+                        type: 'string',
+                        name: 'doorWords',
+                        header: t('audit.field.privilege'),
+                        record: { editable: false },
+                        width: 240,
+                        handlers: { click: (_c, _d, _col, record) => record && this.narrow({ door: record.door, actor: undefined, outcome: '' }) }
+                    },
+                    number('people', t('audit.field.people')),
+                    number('granted', t('audit.field.granted'), record => this.narrow({ door: record.door, actor: undefined, outcome: '' })),
+                    number('denied', t('audit.field.denied'), record => this.narrow({ door: record.door, actor: undefined, outcome: 'denied' }))
+                ]
+            };
+        }
+        return {
+            rows: { appendable: false, selectable: false },
+            pagination: { pages: [50, 100, 200] },
+            columns: [
+                { type: 'gutter', gutterName: 'sequence' },
+                { type: 'datetime', name: 'createdAt', header: t('audit.field.time'), record: { editable: false }, width: 160 },
+                { type: 'string', name: 'actorName', header: t('audit.field.actor'), record: { editable: false }, width: 120 },
+                { type: 'string', name: 'operation', header: t('audit.field.request'), record: { editable: false }, width: 200 },
+                { type: 'string', name: 'what', header: t('audit.field.actions'), record: { editable: false }, width: 360 },
+                { type: 'string', name: 'ip', header: t('audit.field.address'), record: { editable: false }, width: 120 },
+                { type: 'integer', name: 'durationMs', header: t('audit.field.duration'), record: { editable: false, align: 'right' }, width: 80 }
+            ]
+        };
+    }
+    async fetchHandler({ page, limit }) {
+        const t = i18next.t.bind(i18next);
+        const period = { from: this.from.toISOString(), to: this.to.toISOString() };
+        if (this.view === 'people') {
+            const response = await client.query({
+                query: gql `
+          query ($from: DateTimeISO!, $to: DateTimeISO!) {
+            auditPeople(from: $from, to: $to) {
+              user {
+                id
+                name
+                email
+                status
+              }
+              roles
+              lastCheckinAt
+              checkins
+              failedSignins
+              granted
+              denied
+            }
+          }
+        `,
+                variables: period,
+                fetchPolicy: 'no-cache'
+            });
+            const people = response.data?.auditPeople || [];
+            const records = people
+                .map((one) => ({
+                ...one,
+                id: one.user.id,
+                name: one.user.name,
+                email: one.user.email,
+                roles: one.roles.join(', '),
+                status: one.user.status
+            }))
+                .sort((a, b) => String(b.lastCheckinAt || '').localeCompare(String(a.lastCheckinAt || '')));
+            return { total: records.length, records };
+        }
+        if (this.view === 'doors') {
+            const response = await client.query({
+                query: gql `
+          query ($from: DateTimeISO!, $to: DateTimeISO!) {
+            auditDoors(from: $from, to: $to) {
+              door
+              people
+              granted
+              denied
+            }
+          }
+        `,
+                variables: period,
+                fetchPolicy: 'no-cache'
+            });
+            /* The doors used come first; the rest keep the server's order. */
+            const used = (one) => one.granted + one.denied;
+            const records = (response.data?.auditDoors || [])
+                .map((one) => ({ ...one, doorWords: doorWords(t, one.door) }))
+                .sort((a, b) => used(b) - used(a));
+            return { total: records.length, records };
+        }
+        const response = await client.query({
+            query: gql `
+        query ($filter: AuditRecordFilter!) {
+          auditRecords(filter: $filter) {
+            items {
+              request {
+                id
+                createdAt
+                actor {
+                  id
+                  name
+                  email
+                }
+                ip
+                channel
+                operationType
+                operationName
+                fields
+                route
+                durationMs
+              }
+              actions {
+                kind
+                door
+                decision
+                outcome
+                code
+                count
+                objectId
+                detail
+              }
+            }
+            total
+          }
+        }
+      `,
+            variables: {
+                filter: {
+                    ...period,
+                    actorId: this.actor?.id,
+                    door: this.door,
+                    outcome: this.outcome || undefined,
+                    page,
+                    limit
+                }
+            },
+            fetchPolicy: 'no-cache'
+        });
+        const list = response.data?.auditRecords;
+        return {
+            total: list?.total || 0,
+            records: (list?.items || []).map(({ request, actions }) => ({
+                id: request.id,
+                createdAt: request.createdAt,
+                actorName: request.actor?.name || request.actor?.email || '',
+                what: recordWords(t, actions),
+                operation: request.channel === 'graphql' ? [request.operationType, request.fields || request.operationName].filter(Boolean).join(' ') : request.route || '',
+                ip: request.ip,
+                durationMs: request.durationMs
+            }))
+        };
+    }
+};
+__decorate([
+    property({ type: String }),
+    __metadata("design:type", String)
+], AuditPage.prototype, "mode", void 0);
+__decorate([
+    state(),
+    __metadata("design:type", String)
+], AuditPage.prototype, "view", void 0);
+__decorate([
+    state(),
+    __metadata("design:type", Object)
+], AuditPage.prototype, "days", void 0);
+__decorate([
+    state(),
+    __metadata("design:type", Date)
+], AuditPage.prototype, "from", void 0);
+__decorate([
+    state(),
+    __metadata("design:type", Date)
+], AuditPage.prototype, "to", void 0);
+__decorate([
+    state(),
+    __metadata("design:type", Object)
+], AuditPage.prototype, "actor", void 0);
+__decorate([
+    state(),
+    __metadata("design:type", String)
+], AuditPage.prototype, "door", void 0);
+__decorate([
+    state(),
+    __metadata("design:type", String)
+], AuditPage.prototype, "outcome", void 0);
+__decorate([
+    state(),
+    __metadata("design:type", Object)
+], AuditPage.prototype, "health", void 0);
+__decorate([
+    query('ox-grist'),
+    __metadata("design:type", Function)
+], AuditPage.prototype, "grist", void 0);
+AuditPage = __decorate([
+    customElement('audit-page')
+], AuditPage);
+export { AuditPage };
+//# sourceMappingURL=audit-page.js.map

package/dist-client/pages/audit/audit-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-page.js","sourceRoot":"","sources":["../../../client/pages/audit/audit-page.ts"],"names":[],"mappings":";AAAA,OAAO,4BAA4B,CAAA;AACnC,OAAO,qBAAqB,CAAA;AAE5B,OAAO,GAAG,MAAM,aAAa,CAAA;AAC7B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,CAAA;AAExC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACzE,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAE/C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAA;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAC7H,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAI/C,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAA;AACzE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAY7E,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AAC3B,MAAM,KAAK,GAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;AACpD,MAAM,QAAQ,GAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;AAE7D,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;AAEvD,SAAS,cAAc,CAAC,IAAU;IAChC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACrD,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAA;AACnF,CAAC;AAGM,IAAM,SAAS,GAAf,MAAM,SAAU,SAAQ,aAAa;IAArC;;QAmDuB,SAAI,GAA6B,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;QAE9E,SAAI,GAAS,QAAQ,CAAA;QACrB,SAAI,GAAkB,EAAE,CAAA;QACxB,SAAI,GAAS,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAA;QAC9B,OAAE,GAAS,IAAI,IAAI,EAAE,CAAA;QAGrB,YAAO,GAAY,EAAE,CAAA;IAsTxC,CAAC;aAhXQ,WAAM,GAAmB;QAC9B,qBAAqB;QACrB,eAAe;QACf,iBAAiB;QACjB,kBAAkB;QAClB,YAAY;QACZ,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAyCF;KACF,AAhDY,CAgDZ;IAeD,IAAI,OAAO;QACT,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YAC/B,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE;gBACN,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE;aAC3C;SACF,CAAA;IACH,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAA,GAAG,KAAK,CACjB,IAAI,CAAC,IAAI,EACT,IAAI,CAAA,qCAAqC,IAAI,CAAC,IAAI,YAAY,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;;iCAEzG,IAAI,CAAC,cAAc,EAAE;;kBAEpC,CACb,EAAE,CAAA;IACL,CAAC;IAEO,cAAc;QACpB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,CAAC,EAAW,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QAExD,OAAO,IAAI,CAAA;;UAEL,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAA,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,WAAW,CAAC;;;;UAItJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAA,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC;wCAC9I,CAAC,CAAC,mBAAmB,CAAC,WAAW,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;;wCAExG,CAAC,CAAC,iBAAiB,CAAC,WAAW,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,CAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;;;QAGlI,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,CAAC,CAAC,IAAI,CAAA;cACA,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAA,8BAA8B,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC;iBAC9M;YACT,CAAC,CAAC,OAAO;QACT,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK;YACrC,CAAC,CAAC,IAAI,CAAA,kBAAkB,IAAI,CAAC,KAAK,CAAC,IAAI,8BAA8B,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,yBAAyB,CAAC,kBAAkB;YAC9J,CAAC,CAAC,OAAO;QACT,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI;YACpC,CAAC,CAAC,IAAI,CAAA,kBAAkB,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,8BAA8B,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,6BAA6B,CAAC,kBAAkB;YACzK,CAAC,CAAC,OAAO;QACT,IAAI,CAAC,YAAY,EAAE;KACtB,CAAA;IACH,CAAC;IAED,uGAAuG;IAC/F,YAAY;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA,gBAAgB,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,SAAS,CAAA;QAC/F,IAAI,CAAC,MAAM,EAAE,QAAQ;YAAE,OAAO,OAAO,CAAA;QACrC,OAAO,IAAI,CAAA,gBAAgB,OAAO,CAAC,CAAC,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,SAAS,CAAA;IACpJ,CAAC;IAEO,IAAI,CAAC,IAAU;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACZ,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAA;IACrB,CAAC;IAEO,IAAI,CAAC,KAAoB,EAAE,KAAY;QAC7C,MAAM,KAAK,GAAI,KAAK,CAAC,MAA2B,CAAC,KAAK,CAAA;QACtD,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACvD,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC1H,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAA;IACrB,CAAC;IAEO,MAAM,CAAC,MAAkF;QAC/F,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,SAAS,CAAA;;YAC7C,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAa,EAAE,UAAe;QAC9C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,cAAc,CAAA;YACzB,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAA;YACnB,IAAI,CAAC,UAAU,EAAE,CAAA;QACnB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAA,oCAAoC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAA;YAChH,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAA;QAC9G,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;QACzB,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,IAAU;QACzB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACjC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,KAA6B,EAAE,EAAE,CAAC,CAAC;YAC/E,IAAI,EAAE,SAAS;YACf,IAAI;YACJ,MAAM;YACN,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC3C,KAAK,EAAE,EAAE;YACT,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAO,EAAE,EAAO,EAAE,IAAS,EAAE,MAAW,EAAE,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjH,CAAC,CAAA;QAEF,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,CAAC,MAAW,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;YACtF,OAAO;gBACL,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE;gBAC9C,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC9B,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE;oBAC1C;wBACE,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC;wBACvB,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;wBAC3B,KAAK,EAAE,GAAG;wBACV,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAO,EAAE,EAAO,EAAE,IAAS,EAAE,MAAW,EAAE,EAAE,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE;qBAClJ;oBACD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;oBACpG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;oBACpG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;oBACzJ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,0BAA0B,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;oBAC3H,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC;oBAC7C,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,4BAA4B,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC9I,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC3H,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;iBAChI;aACF,CAAA;QACH,CAAC;QAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO;gBACL,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE;gBAC9C,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC9B,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE;oBAC1C;wBACE,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,WAAW;wBACjB,MAAM,EAAE,CAAC,CAAC,uBAAuB,CAAC;wBAClC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;wBAC3B,KAAK,EAAE,GAAG;wBACV,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAO,EAAE,EAAO,EAAE,IAAS,EAAE,MAAW,EAAE,EAAE,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE;qBAC/I;oBACD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC;oBACzC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;oBACxH,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;iBAC7H;aACF,CAAA;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE;YAC9C,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE;YACrC,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE;gBAC1C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;gBAC/G,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;gBAC9G,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;gBAChH,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;gBAC3G,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;gBACzG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;aACnI;SACF,CAAA;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,EAAe;QAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACjC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAA;QAE3E,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;gBAClC,KAAK,EAAE,GAAG,CAAA;;;;;;;;;;;;;;;;;SAiBT;gBACD,SAAS,EAAE,MAAM;gBACjB,WAAW,EAAE,UAAU;aACxB,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAA;YAC/C,MAAM,OAAO,GAAG,MAAM;iBACnB,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC;gBAClB,GAAG,GAAG;gBACN,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;gBACf,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK;gBACrB,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC3B,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;aACxB,CAAC,CAAC;iBACF,IAAI,CAAC,CAAC,CAAM,EAAE,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YACvG,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAA;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;gBAClC,KAAK,EAAE,GAAG,CAAA;;;;;;;;;SAST;gBACD,SAAS,EAAE,MAAM;gBACjB,WAAW,EAAE,UAAU;aACxB,CAAC,CAAA;YACF,kEAAkE;YAClE,MAAM,IAAI,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,MAAM,CAAA;YACnD,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC;iBAC9C,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;iBAClE,IAAI,CAAC,CAAC,CAAM,EAAE,CAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YAC9C,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAA;QAC3C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCT;YACD,SAAS,EAAE;gBACT,MAAM,EAAE;oBACN,GAAG,MAAM;oBACT,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE;oBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS;oBAClC,IAAI;oBACJ,KAAK;iBACN;aACF;YACD,WAAW,EAAE,UAAU;SACxB,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;QACxC,OAAO;YACL,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC;YACvB,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAO,EAAE,EAAE,CAAC,CAAC;gBAC/D,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;gBAC5D,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC;gBAC7B,SAAS,EAAE,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;gBAC3J,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;SACJ,CAAA;IACH,CAAC;;AA7T2B;IAA3B,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;uCAAoE;AAE9E;IAAhB,KAAK,EAAE;;uCAA8B;AACrB;IAAhB,KAAK,EAAE;;uCAAiC;AACxB;IAAhB,KAAK,EAAE;8BAAe,IAAI;uCAAoB;AAC9B;IAAhB,KAAK,EAAE;8BAAa,IAAI;qCAAa;AACrB;IAAhB,KAAK,EAAE;;wCAA6C;AACpC;IAAhB,KAAK,EAAE;;uCAAsB;AACb;IAAhB,KAAK,EAAE;;0CAA8B;AACrB;IAAhB,KAAK,EAAE;;yCAAiE;AAE9C;IAA1B,KAAK,CAAC,UAAU,CAAC;;wCAA0B;AA9DjC,SAAS;IADrB,aAAa,CAAC,YAAY,CAAC;GACf,SAAS,CAiXrB","sourcesContent":["import '@material/web/icon/icon.js'\nimport '@operato/data-grist'\n\nimport gql from 'graphql-tag'\nimport { css, html, nothing } from 'lit'\nimport type { CSSResultGroup } from 'lit'\nimport { customElement, property, query, state } from 'lit/decorators.js'\nimport { keyed } from 'lit/directives/keyed.js'\n\nimport { client } from '@operato/graphql'\nimport { i18next, localize } from '@operato/i18n'\nimport { p13n } from '@operato/p13n'\nimport { PageView } from '@operato/shell'\nimport { ButtonStyles, CommonGristStyles, CommonHeaderStyles, ScrollbarStyles, WorkSurfacePageStyles } from '@operato/styles'\nimport { isMobileDevice } from '@operato/utils'\n\nimport type { DataGrist, FetchOption } from '@operato/data-grist'\n\nimport { statusRenderer } from '../../components/user-status-renderer.js'\nimport { doorWords, lastDays, recordWords } from '../../utils/audit-words.js'\n\n/**\n * 감사 기록 (ADR-0141 §6.1) - who did what in this domain, read three ways: by person, by privilege,\n * and the requests one by one. A person's or a privilege's numbers open the requests behind them.\n *\n * Reading only. The audit has no door that changes a row (§4-6), so this screen has no action.\n */\n\ntype View = 'people' | 'doors' | 'records'\ntype Outcome = '' | 'denied' | 'error' | 'failed'\n\nconst PERIODS = [7, 30, 90]\nconst VIEWS: View[] = ['people', 'doors', 'records']\nconst OUTCOMES: Outcome[] = ['', 'denied', 'error', 'failed']\n\nconst AuditPageBase = p13n(localize(i18next)(PageView))\n\nfunction dateInputValue(date: Date) {\n  const pad = (n: number) => String(n).padStart(2, '0')\n  return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())}`\n}\n\n@customElement('audit-page')\nexport class AuditPage extends AuditPageBase {\n  static styles: CSSResultGroup = [\n    WorkSurfacePageStyles,\n    ScrollbarStyles,\n    CommonGristStyles,\n    CommonHeaderStyles,\n    ButtonStyles,\n    css`\n      .filters {\n        flex-wrap: wrap;\n      }\n\n      [group] {\n        display: flex;\n        align-items: center;\n        gap: var(--spacing-tiny, 2px);\n      }\n\n      button[aria-pressed='true'] {\n        background-color: var(--md-sys-color-secondary-container);\n        color: var(--md-sys-color-on-secondary-container);\n      }\n\n      input[type='date'] {\n        height: var(--context-action-height, 28px);\n        box-sizing: border-box;\n        border: 1px solid var(--md-sys-color-outline-variant);\n        border-radius: var(--md-sys-shape-corner-small, 4px);\n        background: var(--md-sys-color-surface-container-lowest);\n        color: var(--md-sys-color-on-surface);\n        font: inherit;\n        font-size: var(--ui-t-body, 13px);\n        padding: 0 var(--spacing-small, 4px);\n      }\n\n      [narrowed] {\n        display: flex;\n        align-items: center;\n        gap: var(--spacing-small, 4px);\n        font-size: var(--ui-t-body, 13px);\n        color: var(--md-sys-color-on-surface);\n      }\n\n      [health] {\n        margin-left: auto;\n        font-size: var(--ui-t-body, 13px);\n        color: var(--ui-crit, var(--md-sys-color-error));\n      }\n    `\n  ]\n\n  @property({ type: String }) mode: 'CARD' | 'GRID' | 'LIST' = isMobileDevice() ? 'LIST' : 'GRID'\n\n  @state() private view: View = 'people'\n  @state() private days: number | null = 30\n  @state() private from: Date = lastDays(30).from\n  @state() private to: Date = new Date()\n  @state() private actor?: { id: string; name: string }\n  @state() private door?: string\n  @state() private outcome: Outcome = ''\n  @state() private health?: { failures: number; since: string } | 'unknown'\n\n  @query('ox-grist') private grist!: DataGrist\n\n  get context() {\n    return {\n      title: i18next.t('audit.title'),\n      help: 'auth/audit',\n      filter: {\n        handler: () => this.grist.toggleHeadroom()\n      }\n    }\n  }\n\n  render() {\n    return html`${keyed(\n      this.view,\n      html`<ox-grist class=\"page-fill\" .mode=${this.mode} .config=${this.configOf(this.view)} .fetchHandler=${this.fetchHandler.bind(this)}>\n        <div slot=\"headroom\" class=\"header\">\n          <div class=\"filters\">${this.renderControls()}</div>\n        </div>\n      </ox-grist>`\n    )}`\n  }\n\n  private renderControls() {\n    const t = i18next.t.bind(i18next)\n    const pressed = (on: boolean) => (on ? 'true' : 'false')\n\n    return html`\n      <div group>\n        ${VIEWS.map(view => html`<button quiet aria-pressed=${pressed(this.view === view)} @click=${() => this.show(view)}>${t(`audit.view.${view}`)}</button>`)}\n      </div>\n\n      <div group>\n        ${PERIODS.map(days => html`<button quiet aria-pressed=${pressed(this.days === days)} @click=${() => this.lastDays(days)}>${t('audit.period.days', { count: days })}</button>`)}\n        <input type=\"date\" aria-label=${t('audit.period.from')} .value=${dateInputValue(this.from)} @change=${(e: Event) => this.pick('from', e)} />\n        <span>~</span>\n        <input type=\"date\" aria-label=${t('audit.period.to')} .value=${dateInputValue(this.to)} @change=${(e: Event) => this.pick('to', e)} />\n      </div>\n\n      ${this.view === 'records'\n        ? html`<div group>\n            ${OUTCOMES.map(outcome => html`<button quiet aria-pressed=${pressed(this.outcome === outcome)} @click=${() => this.narrow({ outcome })}>${t(outcome ? `audit.outcome.${outcome}` : 'audit.outcome.all')}</button>`)}\n          </div>`\n        : nothing}\n      ${this.view === 'records' && this.actor\n        ? html`<span narrowed>${this.actor.name}<button quiet small @click=${() => this.narrow({ actor: undefined })}>${t('audit.button.all-people')}</button></span>`\n        : nothing}\n      ${this.view === 'records' && this.door\n        ? html`<span narrowed>${doorWords(t, this.door)}<button quiet small @click=${() => this.narrow({ door: undefined })}>${t('audit.button.all-privileges')}</button></span>`\n        : nothing}\n      ${this.renderHealth()}\n    `\n  }\n\n  /* Only what is wrong is said: failures, or that they could not be counted. Never a 0 for \"unknown\". */\n  private renderHealth() {\n    const health = this.health\n    if (health === 'unknown') return html`<span health>${i18next.t('audit.health.unknown')}</span>`\n    if (!health?.failures) return nothing\n    return html`<span health>${i18next.t('audit.health.failures', { count: health.failures, since: new Date(health.since).toLocaleString() })}</span>`\n  }\n\n  private show(view: View) {\n    this.view = view\n  }\n\n  private lastDays(days: number) {\n    const { from, to } = lastDays(days)\n    this.days = days\n    this.from = from\n    this.to = to\n    this.grist?.fetch()\n  }\n\n  private pick(which: 'from' | 'to', event: Event) {\n    const value = (event.target as HTMLInputElement).value\n    if (!value) return\n    const [year, month, day] = value.split('-').map(Number)\n    this[which] = which === 'from' ? new Date(year, month - 1, day, 0, 0, 0) : new Date(year, month - 1, day, 23, 59, 59, 999)\n    this.days = null\n    this.grist?.fetch()\n  }\n\n  private narrow(change: { actor?: { id: string; name: string }; door?: string; outcome?: Outcome }) {\n    Object.assign(this, change)\n    if (this.view !== 'records') this.view = 'records'\n    else this.grist?.fetch()\n  }\n\n  async pageUpdated(_changes: any, _lifecycle: any) {\n    if (this.active) {\n      await this.updateComplete\n      this.grist?.fetch()\n      this.readHealth()\n    }\n  }\n\n  private async readHealth() {\n    try {\n      const response = await client.query({ query: gql`{ auditHealth { failures since } }`, fetchPolicy: 'no-cache' })\n      this.health = response.errors?.length || !response.data?.auditHealth ? 'unknown' : response.data.auditHealth\n    } catch {\n      this.health = 'unknown'\n    }\n  }\n\n  private configOf(view: View) {\n    const t = i18next.t.bind(i18next)\n    const number = (name: string, header: string, click?: (record: any) => void) => ({\n      type: 'integer',\n      name,\n      header,\n      record: { align: 'right', editable: false },\n      width: 90,\n      ...(click ? { handlers: { click: (_c: any, _d: any, _col: any, record: any) => record && click(record) } } : {})\n    })\n\n    if (view === 'people') {\n      const person = (record: any) => ({ id: record.id, name: record.name || record.email })\n      return {\n        rows: { appendable: false, selectable: false },\n        pagination: { infinite: true },\n        columns: [\n          { type: 'gutter', gutterName: 'sequence' },\n          {\n            type: 'string',\n            name: 'name',\n            header: t('field.name'),\n            record: { editable: false },\n            width: 140,\n            handlers: { click: (_c: any, _d: any, _col: any, record: any) => record && this.narrow({ actor: person(record), door: undefined, outcome: '' }) }\n          },\n          { type: 'string', name: 'email', header: t('field.email'), record: { editable: false }, width: 200 },\n          { type: 'string', name: 'roles', header: t('field.roles'), record: { editable: false }, width: 200 },\n          { type: 'string', name: 'status', header: t('field.status'), record: { editable: false, align: 'center', renderer: statusRenderer(() => 0) }, width: 80 },\n          { type: 'datetime', name: 'lastCheckinAt', header: t('audit.field.last-checkin'), record: { editable: false }, width: 160 },\n          number('checkins', t('audit.field.checkins')),\n          number('failedSignins', t('audit.field.failed-signins'), record => this.narrow({ actor: person(record), door: undefined, outcome: 'failed' })),\n          number('granted', t('audit.field.granted'), record => this.narrow({ actor: person(record), door: undefined, outcome: '' })),\n          number('denied', t('audit.field.denied'), record => this.narrow({ actor: person(record), door: undefined, outcome: 'denied' }))\n        ]\n      }\n    }\n\n    if (view === 'doors') {\n      return {\n        rows: { appendable: false, selectable: false },\n        pagination: { infinite: true },\n        columns: [\n          { type: 'gutter', gutterName: 'sequence' },\n          {\n            type: 'string',\n            name: 'doorWords',\n            header: t('audit.field.privilege'),\n            record: { editable: false },\n            width: 240,\n            handlers: { click: (_c: any, _d: any, _col: any, record: any) => record && this.narrow({ door: record.door, actor: undefined, outcome: '' }) }\n          },\n          number('people', t('audit.field.people')),\n          number('granted', t('audit.field.granted'), record => this.narrow({ door: record.door, actor: undefined, outcome: '' })),\n          number('denied', t('audit.field.denied'), record => this.narrow({ door: record.door, actor: undefined, outcome: 'denied' }))\n        ]\n      }\n    }\n\n    return {\n      rows: { appendable: false, selectable: false },\n      pagination: { pages: [50, 100, 200] },\n      columns: [\n        { type: 'gutter', gutterName: 'sequence' },\n        { type: 'datetime', name: 'createdAt', header: t('audit.field.time'), record: { editable: false }, width: 160 },\n        { type: 'string', name: 'actorName', header: t('audit.field.actor'), record: { editable: false }, width: 120 },\n        { type: 'string', name: 'operation', header: t('audit.field.request'), record: { editable: false }, width: 200 },\n        { type: 'string', name: 'what', header: t('audit.field.actions'), record: { editable: false }, width: 360 },\n        { type: 'string', name: 'ip', header: t('audit.field.address'), record: { editable: false }, width: 120 },\n        { type: 'integer', name: 'durationMs', header: t('audit.field.duration'), record: { editable: false, align: 'right' }, width: 80 }\n      ]\n    }\n  }\n\n  async fetchHandler({ page, limit }: FetchOption) {\n    const t = i18next.t.bind(i18next)\n    const period = { from: this.from.toISOString(), to: this.to.toISOString() }\n\n    if (this.view === 'people') {\n      const response = await client.query({\n        query: gql`\n          query ($from: DateTimeISO!, $to: DateTimeISO!) {\n            auditPeople(from: $from, to: $to) {\n              user {\n                id\n                name\n                email\n                status\n              }\n              roles\n              lastCheckinAt\n              checkins\n              failedSignins\n              granted\n              denied\n            }\n          }\n        `,\n        variables: period,\n        fetchPolicy: 'no-cache'\n      })\n      const people = response.data?.auditPeople || []\n      const records = people\n        .map((one: any) => ({\n          ...one,\n          id: one.user.id,\n          name: one.user.name,\n          email: one.user.email,\n          roles: one.roles.join(', '),\n          status: one.user.status\n        }))\n        .sort((a: any, b: any) => String(b.lastCheckinAt || '').localeCompare(String(a.lastCheckinAt || '')))\n      return { total: records.length, records }\n    }\n\n    if (this.view === 'doors') {\n      const response = await client.query({\n        query: gql`\n          query ($from: DateTimeISO!, $to: DateTimeISO!) {\n            auditDoors(from: $from, to: $to) {\n              door\n              people\n              granted\n              denied\n            }\n          }\n        `,\n        variables: period,\n        fetchPolicy: 'no-cache'\n      })\n      /* The doors used come first; the rest keep the server's order. */\n      const used = (one: any) => one.granted + one.denied\n      const records = (response.data?.auditDoors || [])\n        .map((one: any) => ({ ...one, doorWords: doorWords(t, one.door) }))\n        .sort((a: any, b: any) => used(b) - used(a))\n      return { total: records.length, records }\n    }\n\n    const response = await client.query({\n      query: gql`\n        query ($filter: AuditRecordFilter!) {\n          auditRecords(filter: $filter) {\n            items {\n              request {\n                id\n                createdAt\n                actor {\n                  id\n                  name\n                  email\n                }\n                ip\n                channel\n                operationType\n                operationName\n                fields\n                route\n                durationMs\n              }\n              actions {\n                kind\n                door\n                decision\n                outcome\n                code\n                count\n                objectId\n                detail\n              }\n            }\n            total\n          }\n        }\n      `,\n      variables: {\n        filter: {\n          ...period,\n          actorId: this.actor?.id,\n          door: this.door,\n          outcome: this.outcome || undefined,\n          page,\n          limit\n        }\n      },\n      fetchPolicy: 'no-cache'\n    })\n\n    const list = response.data?.auditRecords\n    return {\n      total: list?.total || 0,\n      records: (list?.items || []).map(({ request, actions }: any) => ({\n        id: request.id,\n        createdAt: request.createdAt,\n        actorName: request.actor?.name || request.actor?.email || '',\n        what: recordWords(t, actions),\n        operation: request.channel === 'graphql' ? [request.operationType, request.fields || request.operationName].filter(Boolean).join(' ') : request.route || '',\n        ip: request.ip,\n        durationMs: request.durationMs\n      }))\n    }\n  }\n}\n"]}

package/dist-client/pages/role/role-privilege-page.d.ts

@@ -50,6 +50,14 @@ export declare class RolePrivilegePage extends RolePrivilegePage_base {
     private loadError;
     private saving;
     private dirty;
+    private view;
+    /** The role laid against every task - computed by the server from the saved privileges (`Role.taskCoverage`). */
+    private coverage;
+    private showUnheldTasks;
+    /** null until asked for; [] when this person may not read templates (`roleTemplates` asks user:mutation). */
+    private templates;
+    private templateId;
+    private gap;
     /**
      * 부모 도메인의 역할은 여기서 못 고친다 — `updateRole` 의 범위가 `domain.id` 하나다.
      * 목록이 상속으로 보여 주므로 관리자가 여기까지 온다. 읽기 전용으로 두고 어디로 가야 하는지
@@ -117,6 +125,36 @@ export declare class RolePrivilegePage extends RolePrivilegePage_base {
      * `privilege.category.*` 57개와 「읽기/쓰기」가 사람 말이다.
      */
     private renderGranted;
+    private viewButton;
+    private showView;
+    /**
+     * **The role by task** (ADR-0139 decision 11) — which of each task's privileges this role holds, as the server
+     * computes it from the saved privileges.
+     *
+     * It says what the role holds, nothing more: 「전부」 is not "this person can do the work" (another role, the
+     * data's own scope or an approval line decide that too), and 「일부」 is not a fault — a privilege several tasks
+     * share makes each of them 「일부」. So nothing here offers to add or take away; the privileges view and the
+     * template view do that.
+     */
+    private renderTasks;
+    private renderTask;
+    /**
+     * **The role against a template the administrator picks** (ADR-0139 decision 11) — whatever the role is called.
+     *
+     * The template of the role's name is picked to begin with; a role named in the site's own words (경영지원, 인사급여)
+     * has no such pair, and the administrator picks one. The role is never renamed to make a pair: an approval line
+     * holds the role. What the role holds beyond the template is shown as wider, not wrong — the site may have widened it
+     * on purpose — and nothing takes it away. What it lacks can be added; adding is the same top-up the template button
+     * on the role list runs (`createRoleFromTemplate` onto this role's name).
+     */
+    private renderTemplate;
+    private renderSentences;
+    /** A privilege in words — the sentence the privileges view draws, or its module and axis when there is none. */
+    private sentenceOf;
+    private fetchTemplates;
+    private pickTemplate;
+    /** Adds what the role lacks against the picked template — after showing what it adds. */
+    private addMissing;
     /**
      * 한 줄 — 문장과 [떼기].
      *