@things-factory/auth-ui 10.1.221 → 10.1.225

package/dist-client/pages/role/role-privilege-page.d.ts

@@ -56,7 +56,6 @@ export declare class RolePrivilegePage extends RolePrivilegePage_base {
     private showUnheldTasks;
     /** null until asked for; [] when this person may not read templates (`roleTemplates` asks user:mutation). */
     private templates;
-    private templateId;
     private gap;
     /**
      * 부모 도메인의 역할은 여기서 못 고친다 — `updateRole` 의 범위가 `domain.id` 하나다.
@@ -147,10 +146,11 @@ export declare class RolePrivilegePage extends RolePrivilegePage_base {
     private editTask;
     private renderTask;
     /**
-     * **The role against a template the administrator picks** (ADR-0139 decision 11) — whatever the role is called.
+     * **The role against its base template** (ADR-0139 decision 11; ADR-0075 decision 1, amended 2026-10-26).
      *
-     * The template of the role's name is picked to begin with; a role named in the site's own words (경영지원, 인사급여)
-     * has no such pair, and the administrator picks one. The role is never renamed to make a pair: an approval line
+     * A role keeps one base template (`Role.templateId`), whatever the role is called — a role named in the site's own
+     * words (경영지원, 인사급여) is given its base here, once, and the role list counts what it lacks from then on.
+     * Picking saves the base at once and touches no privilege. The role is never renamed to make a pair: an approval line
      * holds the role. What the role holds beyond the template is shown as wider, not wrong — the site may have widened it
      * on purpose — and nothing takes it away. What it lacks can be added; adding is the same top-up the template button
      * on the role list runs (`createRoleFromTemplate` onto this role's name).
@@ -160,7 +160,9 @@ export declare class RolePrivilegePage extends RolePrivilegePage_base {
     /** A privilege in words — the sentence the privileges view draws, or its module and axis when there is none. */
     private sentenceOf;
     private fetchTemplates;
-    private pickTemplate;
+    /** Saves the role's base template - `''` bases it on none. The privileges stay as they are. */
+    private setBaseTemplate;
+    private readGap;
     /** Adds what the role lacks against the picked template — after showing what it adds. */
     private addMissing;
     /**

package/dist-client/pages/role/role-privilege-page.js

@@ -70,7 +70,6 @@ let RolePrivilegePage = class RolePrivilegePage extends localize(i18next)(PageVi
         this.showUnheldTasks = false;
         /** null until asked for; [] when this person may not read templates (`roleTemplates` asks user:mutation). */
         this.templates = null;
-        this.templateId = '';
         this.gap = null;
     }
     static { this.styles = [
@@ -915,10 +914,11 @@ let RolePrivilegePage = class RolePrivilegePage extends localize(i18next)(PageVi
     `;
     }
     /**
-     * **The role against a template the administrator picks** (ADR-0139 decision 11) — whatever the role is called.
+     * **The role against its base template** (ADR-0139 decision 11; ADR-0075 decision 1, amended 2026-10-26).
      *
-     * The template of the role's name is picked to begin with; a role named in the site's own words (경영지원, 인사급여)
-     * has no such pair, and the administrator picks one. The role is never renamed to make a pair: an approval line
+     * A role keeps one base template (`Role.templateId`), whatever the role is called — a role named in the site's own
+     * words (경영지원, 인사급여) is given its base here, once, and the role list counts what it lacks from then on.
+     * Picking saves the base at once and touches no privilege. The role is never renamed to make a pair: an approval line
      * holds the role. What the role holds beyond the template is shown as wider, not wrong — the site may have widened it
      * on purpose — and nothing takes it away. What it lacks can be added; adding is the same top-up the template button
      * on the role list runs (`createRoleFromTemplate` onto this role's name).
@@ -930,14 +930,17 @@ let RolePrivilegePage = class RolePrivilegePage extends localize(i18next)(PageVi
         if (!this.templates.length) {
             return html `<div review><div empty>${i18next.t('text.no template to compare with')}</div></div>`;
         }
-        const template = this.templates.find(one => one.id === this.templateId);
+        const baseId = this.subject?.templateId || '';
+        const template = this.templates.find(one => one.id === baseId);
         const gap = this.gap;
         return html `
       <div review>
-        <select @change=${(event) => this.pickTemplate(event.target.value)}>
-          <option value="" ?selected=${!this.templateId}>${i18next.t('text.pick a template to compare with')}</option>
-          ${this.templates.map(one => html `<option value=${one.id} ?selected=${one.id === this.templateId}>${one.name}</option>`)}
+        <select ?disabled=${this.inherited || this.saving} @change=${(event) => this.setBaseTemplate(event.target.value)}>
+          <option value="" ?selected=${!baseId}>${i18next.t('text.no base template')}</option>
+          ${this.templates.map(one => html `<option value=${one.id} ?selected=${one.id === baseId}>${one.name}</option>`)}
+          ${baseId && !template ? html `<option value=${baseId} selected>${baseId}</option>` : nothing}
         </select>
+        ${baseId && !template ? html `<div note attention>${i18next.t('text.base template not in this installation')}</div>` : nothing}
         ${this.dirty ? html `<div stale>${i18next.t('text.counted from the saved privileges')}</div>` : nothing}
         ${template?.definitionErrors.length
             ? html `<div note attention>${i18next.t('text.template cannot be applied because', { list: template.definitionErrors.join(' · ') })}</div>`
@@ -990,21 +993,44 @@ let RolePrivilegePage = class RolePrivilegePage extends localize(i18next)(PageVi
         /* Reading templates asks the same door creating a role does; without it there is nothing to compare with. */
         const templates = response.errors?.length ? [] : response.data?.roleTemplates || [];
         this.templates = templates;
-        const paired = templates.find(one => one.name === this.subject?.name);
-        await this.pickTemplate(paired?.id || '');
+        await this.readGap();
     }
-    async pickTemplate(templateId) {
-        this.templateId = templateId;
+    /** Saves the role's base template - `''` bases it on none. The privileges stay as they are. */
+    async setBaseTemplate(templateId) {
+        if (this.inherited || this.saving)
+            return;
+        const response = await client.mutate({
+            mutation: gql `
+        mutation ($id: String!, $patch: RolePatch!) {
+          updateRole(id: $id, patch: $patch) {
+            id
+            templateId
+          }
+        }
+      `,
+            variables: { id: this.subject.id, patch: { templateId: templateId || null } },
+            context: gqlContext()
+        });
+        if (response.errors?.length) {
+            document.dispatchEvent(new CustomEvent('notify', { detail: { level: 'error', message: response.errors[0]?.message } }));
+            this.requestUpdate();
+            return;
+        }
+        this.subject = { ...this.subject, templateId: response.data?.updateRole?.templateId || null };
+        await this.readGap();
+    }
+    async readGap() {
         this.gap = null;
-        if (!templateId)
+        const baseId = this.subject?.templateId;
+        if (!baseId)
             return;
         const response = await client.query({
             query: gql `
-        query ($filters: [Filter!], $templateId: String) {
+        query ($filters: [Filter!]) {
           roles(filters: $filters) {
             items {
               id
-              templateGap(templateId: $templateId) {
+              templateGap {
                 templateId
                 templateName
                 missing { ${GRANT_FIELDS} }
@@ -1016,14 +1042,14 @@ let RolePrivilegePage = class RolePrivilegePage extends localize(i18next)(PageVi
           }
         }
       `,
-            variables: { filters: [{ name: 'id', operator: 'eq', value: this.subject.id }], templateId },
+            variables: { filters: [{ name: 'id', operator: 'eq', value: this.subject.id }] },
             context: gqlContext()
         });
         if (response.errors?.length) {
             document.dispatchEvent(new CustomEvent('notify', { detail: { level: 'error', message: response.errors[0]?.message } }));
             return;
         }
-        if (this.templateId === templateId)
+        if (this.subject?.templateId === baseId)
             this.gap = response.data?.roles?.items?.[0]?.templateGap || null;
     }
     /** Adds what the role lacks against the picked template — after showing what it adds. */
@@ -1058,7 +1084,7 @@ let RolePrivilegePage = class RolePrivilegePage extends localize(i18next)(PageVi
         }
         document.dispatchEvent(new CustomEvent('notify', { detail: { message: i18next.t('text.data_updated_successfully') } }));
         await this.fetch();
-        await this.pickTemplate(gap.templateId);
+        await this.readGap();
     }
     /**
      * 한 줄 — 문장과 [떼기].
@@ -1300,6 +1326,7 @@ let RolePrivilegePage = class RolePrivilegePage extends localize(i18next)(PageVi
               id
               name
               description
+              templateId
               domain {
                 id
                 name
@@ -1524,10 +1551,6 @@ __decorate([
     state(),
     __metadata("design:type", Object)
 ], RolePrivilegePage.prototype, "templates", void 0);
-__decorate([
-    state(),
-    __metadata("design:type", String)
-], RolePrivilegePage.prototype, "templateId", void 0);
 __decorate([
     state(),
     __metadata("design:type", Object)