@things-factory/auth-ui 10.1.241 → 10.1.245

package/dist-client/components/my-role-tasks.d.ts

@@ -0,0 +1,27 @@
+import type { TaskCoverageRef, TaskGrant } from './role-task-edit.js';
+export type MyRoleRef = {
+    name: string;
+    taskCoverage: {
+        tasks: TaskCoverageRef[];
+        unclassified: TaskGrant[];
+    };
+};
+export type MyWork = {
+    taskId: string;
+    roles: string[];
+};
+export type MyPrivilege = {
+    category: string;
+    axis: string;
+    roles: string[];
+};
+/**
+ * The work across one's roles: each task held whole by any of them, once, with the roles that give it — leaving out a
+ * task whose privileges another shown task already holds and more (reading the sales under keeping them says the same
+ * thing twice). `shared` is what every role gives, when there are two roles or more; `own` the rest, in role order.
+ */
+export declare function workOfRoles(roles: MyRoleRef[]): {
+    own: MyWork[];
+    shared: MyWork[];
+    alone: MyPrivilege[];
+};

package/dist-client/components/my-role-tasks.js

@@ -0,0 +1,30 @@
+const pairsOf = (grants) => new Set(grants.flatMap(grant => grant.axes.map(axis => `${grant.category}:${axis}`)));
+const within = (inner, outer) => inner.size < outer.size && [...inner].every(pair => outer.has(pair));
+/**
+ * The work across one's roles: each task held whole by any of them, once, with the roles that give it — leaving out a
+ * task whose privileges another shown task already holds and more (reading the sales under keeping them says the same
+ * thing twice). `shared` is what every role gives, when there are two roles or more; `own` the rest, in role order.
+ */
+export function workOfRoles(roles) {
+    const work = new Map();
+    for (const role of roles)
+        for (const task of role.taskCoverage.tasks.filter(task => task.status === 'all')) {
+            const one = work.get(task.taskId) || { taskId: task.taskId, roles: [], held: pairsOf(task.held) };
+            one.roles.push(role.name);
+            work.set(task.taskId, one);
+        }
+    const all = [...work.values()];
+    const shown = all.filter(task => !all.some(other => other !== task && within(task.held, other.held))).map(({ taskId, roles }) => ({ taskId, roles }));
+    const everyRole = (task) => roles.length > 1 && task.roles.length === roles.length;
+    const alone = new Map();
+    for (const role of roles)
+        for (const grant of role.taskCoverage.unclassified)
+            for (const axis of grant.axes) {
+                const key = `${grant.category}:${axis}`;
+                const one = alone.get(key) || { category: grant.category, axis, roles: [] };
+                one.roles.push(role.name);
+                alone.set(key, one);
+            }
+    return { own: shown.filter(task => !everyRole(task)), shared: shown.filter(everyRole), alone: [...alone.values()] };
+}
+//# sourceMappingURL=my-role-tasks.js.map

package/dist-client/components/my-role-tasks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"my-role-tasks.js","sourceRoot":"","sources":["../../client/components/my-role-tasks.ts"],"names":[],"mappings":"AAgBA,MAAM,OAAO,GAAG,CAAC,MAAmB,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;AAC9H,MAAM,MAAM,GAAG,CAAC,KAAkB,EAAE,KAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;AAE/H;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAkB;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0C,CAAA;IAC9D,KAAK,MAAM,IAAI,IAAI,KAAK;QACtB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,EAAE,CAAC;YACjF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;YACjG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC5B,CAAC;IAEH,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IACrJ,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAA;IAE1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC5C,KAAK,MAAM,IAAI,IAAI,KAAK;QACtB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY;YAChD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAA;gBACvC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;gBAC3E,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACzB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YACrB,CAAC;IAEL,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAA;AACrH,CAAC","sourcesContent":["/*\n * What one's own roles are said to hold (ADR-0139 §11-11) — the rule, apart from the popup so it is tested without a DOM.\n *\n * Every list comes from the server's `RoleBrief.taskCoverage`, the same reading the role screen groups by. A person is\n * told the work a role holds whole; a task held in part is not work they can name (a privilege shared by several tasks\n * makes each of them 「일부」), and its privileges are said by the whole task that holds them or as a privilege alone.\n *\n * A person asks what they can do, and why: the work is one list across their roles, each task once with the roles that\n * give it, and what every role of theirs gives is said once, apart (「이해하기 쉽게」, the user 2026-11-01).\n */\nimport type { TaskCoverageRef, TaskGrant } from './role-task-edit.js'\n\nexport type MyRoleRef = { name: string; taskCoverage: { tasks: TaskCoverageRef[]; unclassified: TaskGrant[] } }\nexport type MyWork = { taskId: string; roles: string[] }\nexport type MyPrivilege = { category: string; axis: string; roles: string[] }\n\nconst pairsOf = (grants: TaskGrant[]) => new Set(grants.flatMap(grant => grant.axes.map(axis => `${grant.category}:${axis}`)))\nconst within = (inner: Set<string>, outer: Set<string>) => inner.size < outer.size && [...inner].every(pair => outer.has(pair))\n\n/**\n * The work across one's roles: each task held whole by any of them, once, with the roles that give it — leaving out a\n * task whose privileges another shown task already holds and more (reading the sales under keeping them says the same\n * thing twice). `shared` is what every role gives, when there are two roles or more; `own` the rest, in role order.\n */\nexport function workOfRoles(roles: MyRoleRef[]): { own: MyWork[]; shared: MyWork[]; alone: MyPrivilege[] } {\n  const work = new Map<string, MyWork & { held: Set<string> }>()\n  for (const role of roles)\n    for (const task of role.taskCoverage.tasks.filter(task => task.status === 'all')) {\n      const one = work.get(task.taskId) || { taskId: task.taskId, roles: [], held: pairsOf(task.held) }\n      one.roles.push(role.name)\n      work.set(task.taskId, one)\n    }\n\n  const all = [...work.values()]\n  const shown = all.filter(task => !all.some(other => other !== task && within(task.held, other.held))).map(({ taskId, roles }) => ({ taskId, roles }))\n  const everyRole = (task: MyWork) => roles.length > 1 && task.roles.length === roles.length\n\n  const alone = new Map<string, MyPrivilege>()\n  for (const role of roles)\n    for (const grant of role.taskCoverage.unclassified)\n      for (const axis of grant.axes) {\n        const key = `${grant.category}:${axis}`\n        const one = alone.get(key) || { category: grant.category, axis, roles: [] }\n        one.roles.push(role.name)\n        alone.set(key, one)\n      }\n\n  return { own: shown.filter(task => !everyRole(task)), shared: shown.filter(everyRole), alone: [...alone.values()] }\n}\n"]}

package/dist-client/components/my-role-tasks.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist-client/components/my-role-tasks.test.js

@@ -0,0 +1,69 @@
+import { workOfRoles } from './my-role-tasks';
+const task = (taskId, status, held, missing = []) => {
+    const grants = (pairs) => pairs.map(pair => ({ category: pair.split(':')[0], axes: [pair.split(':')[1]] }));
+    return { taskId, status, held: grants(held), missing: grants(missing) };
+};
+const role = (name, tasks, unclassified = []) => ({
+    name,
+    taskCoverage: { tasks, unclassified: unclassified.map(pair => ({ category: pair.split(':')[0], axes: [pair.split(':')[1]] })) }
+});
+const ids = (work) => work.map(one => one.taskId);
+const self = () => task('office.self', 'all', ['office-self:query', 'office-self:mutation']);
+describe('the work my roles are said to hold', () => {
+    it('★ is the tasks a role holds whole - not one held in part, nor one naming an undeclared privilege', () => {
+        const { own } = workOfRoles([
+            role('직원', [
+                self(),
+                task('office.payroll', 'none', [], ['office-payroll:query']),
+                task('accounting.expense-authoring', 'some', ['counterparty-published:query'], ['accounting-self:mutation']),
+                task('board.exporting', 'broken', [], ['board:query'])
+            ])
+        ]);
+        expect(ids(own)).toEqual(['office.self']);
+    });
+    it('★ says each task once across my roles, with the roles that give it', () => {
+        const { own } = workOfRoles([
+            role('경영지원', [self(), task('office.checks', 'all', ['office-check:query'])]),
+            role('인사급여', [self(), task('office.checks', 'all', ['office-check:query']), task('office.payroll', 'all', ['office-payroll:query'])]),
+            role('직원', [self()])
+        ]);
+        expect(own).toEqual([
+            { taskId: 'office.checks', roles: ['경영지원', '인사급여'] },
+            { taskId: 'office.payroll', roles: ['인사급여'] }
+        ]);
+    });
+    it('★ says what every role of mine gives once, apart - and with one role, nothing is apart', () => {
+        const two = workOfRoles([role('직원', [self()]), role('팀장', [self(), task('office.team', 'all', ['office-team:query'])])]);
+        expect(ids(two.shared)).toEqual(['office.self']);
+        expect(ids(two.own)).toEqual(['office.team']);
+        const one = workOfRoles([role('직원', [self()])]);
+        expect(ids(one.shared)).toEqual([]);
+        expect(ids(one.own)).toEqual(['office.self']);
+    });
+    it('★ leaves out a task whose privileges a wider one I hold already has, whichever role gives it', () => {
+        const { own } = workOfRoles([
+            role('경영진', [task('sales.reading', 'all', ['sales:query'])]),
+            role('대표', [task('sales.keeping', 'all', ['sales:query', 'sales:mutation'])])
+        ]);
+        expect(own).toEqual([{ taskId: 'sales.keeping', roles: ['대표'] }]);
+    });
+    it('keeps two tasks that hold the same privileges, and two that only overlap', () => {
+        const { own } = workOfRoles([
+            role('하나', [
+                task('a.one', 'all', ['a:query']),
+                task('a.two', 'all', ['a:query']),
+                task('b.one', 'all', ['b:query', 'c:query']),
+                task('b.two', 'all', ['c:query', 'd:query'])
+            ])
+        ]);
+        expect(ids(own)).toEqual(['a.one', 'a.two', 'b.one', 'b.two']);
+    });
+    it('says a privilege no task names once, with the roles that hold it', () => {
+        const { alone } = workOfRoles([role('하나', [], ['board:mutation']), role('둘', [], ['board:mutation', 'order:query'])]);
+        expect(alone).toEqual([
+            { category: 'board', axis: 'mutation', roles: ['하나', '둘'] },
+            { category: 'order', axis: 'query', roles: ['둘'] }
+        ]);
+    });
+});
+//# sourceMappingURL=my-role-tasks.test.js.map

package/dist-client/components/my-role-tasks.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"my-role-tasks.test.js","sourceRoot":"","sources":["../../client/components/my-role-tasks.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAkB,MAAM,iBAAiB,CAAA;AAG7D,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,MAAiC,EAAE,IAAc,EAAE,UAAoB,EAAE,EAAmB,EAAE;IAC1H,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;AACzE,CAAC,CAAA;AACD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAwB,EAAE,eAAyB,EAAE,EAAa,EAAE,CAAC,CAAC;IAChG,IAAI;IACJ,YAAY,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;CAChI,CAAC,CAAA;AACF,MAAM,GAAG,GAAG,CAAC,IAA0B,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AAEvE,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC,CAAA;AAE5F,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,kGAAkG,EAAE,GAAG,EAAE;QAC1G,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC;YAC1B,IAAI,CAAC,IAAI,EAAE;gBACT,IAAI,EAAE;gBACN,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC;gBAC5D,IAAI,CAAC,8BAA8B,EAAE,MAAM,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC;gBAC5G,IAAI,CAAC,iBAAiB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC;aACvD,CAAC;SACH,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC;YAC1B,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;YAC5E,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;YACrI,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;SACrB,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;YAClB,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;YACpD,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE;SAC9C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxH,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;QAChD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;QAE7C,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8FAA8F,EAAE,GAAG,EAAE;QACtG,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC;YAC1B,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;SAC9E,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC;YAC1B,IAAI,CAAC,IAAI,EAAE;gBACT,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;gBACjC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;gBACjC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAC5C,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aAC7C,CAAC;SACH,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;QACrH,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE;YAC3D,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE;SACnD,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { workOfRoles, type MyRoleRef } from './my-role-tasks'\nimport type { TaskCoverageRef } from './role-task-edit'\n\nconst task = (taskId: string, status: TaskCoverageRef['status'], held: string[], missing: string[] = []): TaskCoverageRef => {\n  const grants = (pairs: string[]) => pairs.map(pair => ({ category: pair.split(':')[0], axes: [pair.split(':')[1]] }))\n  return { taskId, status, held: grants(held), missing: grants(missing) }\n}\nconst role = (name: string, tasks: TaskCoverageRef[], unclassified: string[] = []): MyRoleRef => ({\n  name,\n  taskCoverage: { tasks, unclassified: unclassified.map(pair => ({ category: pair.split(':')[0], axes: [pair.split(':')[1]] })) }\n})\nconst ids = (work: { taskId: string }[]) => work.map(one => one.taskId)\n\nconst self = () => task('office.self', 'all', ['office-self:query', 'office-self:mutation'])\n\ndescribe('the work my roles are said to hold', () => {\n  it('★ is the tasks a role holds whole - not one held in part, nor one naming an undeclared privilege', () => {\n    const { own } = workOfRoles([\n      role('직원', [\n        self(),\n        task('office.payroll', 'none', [], ['office-payroll:query']),\n        task('accounting.expense-authoring', 'some', ['counterparty-published:query'], ['accounting-self:mutation']),\n        task('board.exporting', 'broken', [], ['board:query'])\n      ])\n    ])\n    expect(ids(own)).toEqual(['office.self'])\n  })\n\n  it('★ says each task once across my roles, with the roles that give it', () => {\n    const { own } = workOfRoles([\n      role('경영지원', [self(), task('office.checks', 'all', ['office-check:query'])]),\n      role('인사급여', [self(), task('office.checks', 'all', ['office-check:query']), task('office.payroll', 'all', ['office-payroll:query'])]),\n      role('직원', [self()])\n    ])\n    expect(own).toEqual([\n      { taskId: 'office.checks', roles: ['경영지원', '인사급여'] },\n      { taskId: 'office.payroll', roles: ['인사급여'] }\n    ])\n  })\n\n  it('★ says what every role of mine gives once, apart - and with one role, nothing is apart', () => {\n    const two = workOfRoles([role('직원', [self()]), role('팀장', [self(), task('office.team', 'all', ['office-team:query'])])])\n    expect(ids(two.shared)).toEqual(['office.self'])\n    expect(ids(two.own)).toEqual(['office.team'])\n\n    const one = workOfRoles([role('직원', [self()])])\n    expect(ids(one.shared)).toEqual([])\n    expect(ids(one.own)).toEqual(['office.self'])\n  })\n\n  it('★ leaves out a task whose privileges a wider one I hold already has, whichever role gives it', () => {\n    const { own } = workOfRoles([\n      role('경영진', [task('sales.reading', 'all', ['sales:query'])]),\n      role('대표', [task('sales.keeping', 'all', ['sales:query', 'sales:mutation'])])\n    ])\n    expect(own).toEqual([{ taskId: 'sales.keeping', roles: ['대표'] }])\n  })\n\n  it('keeps two tasks that hold the same privileges, and two that only overlap', () => {\n    const { own } = workOfRoles([\n      role('하나', [\n        task('a.one', 'all', ['a:query']),\n        task('a.two', 'all', ['a:query']),\n        task('b.one', 'all', ['b:query', 'c:query']),\n        task('b.two', 'all', ['c:query', 'd:query'])\n      ])\n    ])\n    expect(ids(own)).toEqual(['a.one', 'a.two', 'b.one', 'b.two'])\n  })\n\n  it('says a privilege no task names once, with the roles that hold it', () => {\n    const { alone } = workOfRoles([role('하나', [], ['board:mutation']), role('둘', [], ['board:mutation', 'order:query'])])\n    expect(alone).toEqual([\n      { category: 'board', axis: 'mutation', roles: ['하나', '둘'] },\n      { category: 'order', axis: 'query', roles: ['둘'] }\n    ])\n  })\n})\n"]}

package/dist-client/components/my-roles.d.ts

@@ -0,0 +1,18 @@
+import { LitElement, nothing } from 'lit';
+/**
+ * 내 역할과 업무 권한 — the roles one holds and the work they give, the body of its page (`my-roles`, ADR-0139 §11-11).
+ * Read only: a role is given by whoever manages roles, and one asks for more through an access request (ADR-0103).
+ *
+ * The roles first, each in a line; then the work, one list across them with the roles that give each; what every role
+ * gives last, once. A task is said in the words of the module that declares it (`task.<id>.name` · `.description`); a
+ * privilege no task names, by the sentence written for it (`privilege.allows.<category>.<axis>`), else by its code.
+ */
+export declare class MyRoles extends LitElement {
+    static styles: import("lit").CSSResult[];
+    private roles?;
+    private failed;
+    render(): import("lit-html").TemplateResult<1> | typeof nothing;
+    private renderTask;
+    firstUpdated(): void;
+    private fetch;
+}

package/dist-client/components/my-roles.js

@@ -0,0 +1,211 @@
+import { __decorate, __metadata } from "tslib";
+import gql from 'graphql-tag';
+import { css, html, LitElement, nothing } from 'lit';
+import { customElement, state } from 'lit/decorators.js';
+import { client } from '@operato/graphql';
+import { i18next } from '@operato/i18n';
+import { store } from '@operato/shell';
+import { workOfRoles } from './my-role-tasks.js';
+import { axisLabel } from '../utils/privilege-axis.js';
+/**
+ * 내 역할과 업무 권한 — the roles one holds and the work they give, the body of its page (`my-roles`, ADR-0139 §11-11).
+ * Read only: a role is given by whoever manages roles, and one asks for more through an access request (ADR-0103).
+ *
+ * The roles first, each in a line; then the work, one list across them with the roles that give each; what every role
+ * gives last, once. A task is said in the words of the module that declares it (`task.<id>.name` · `.description`); a
+ * privilege no task names, by the sentence written for it (`privilege.allows.<category>.<axis>`), else by its code.
+ */
+let MyRoles = class MyRoles extends LitElement {
+    constructor() {
+        super(...arguments);
+        this.failed = false;
+    }
+    static { this.styles = [
+        css `
+      :host {
+        display: block;
+        font-size: var(--ui-t-body, 13px);
+        line-height: 1.55;
+      }
+
+      section + section {
+        margin-top: var(--spacing-large);
+        padding-top: var(--spacing-large);
+        border-top: 1px solid var(--md-sys-color-outline-variant);
+      }
+
+      h3 {
+        margin: 0 0 var(--spacing-small);
+        font-size: 0.95rem;
+      }
+
+      [quiet] {
+        color: var(--md-sys-color-on-surface-variant);
+      }
+
+      p {
+        margin: 0 0 var(--spacing-small);
+      }
+
+      ul {
+        margin: 0;
+        padding: 0;
+        list-style: none;
+      }
+
+      li + li {
+        margin-top: var(--spacing-medium);
+      }
+
+      dl {
+        display: grid;
+        grid-template-columns: max-content 1fr;
+        gap: var(--spacing-small) var(--spacing-medium);
+        margin: 0;
+      }
+
+      dt {
+        font-weight: 600;
+      }
+
+      dd {
+        margin: 0;
+      }
+
+      [task-head] {
+        display: flex;
+        flex-wrap: wrap;
+        align-items: baseline;
+        gap: var(--spacing-small);
+      }
+
+      [task-name] {
+        font-weight: 600;
+      }
+
+      [from] {
+        padding: 0 6px;
+        border-radius: 999px;
+        background-color: var(--md-sys-color-surface-variant);
+        color: var(--md-sys-color-on-surface-variant);
+        font-size: 0.8rem;
+      }
+
+      code {
+        font-size: 0.9em;
+      }
+
+      [failed] {
+        color: var(--md-sys-color-error);
+      }
+    `
+    ]; }
+    render() {
+        if (this.failed)
+            return html `<div failed>${i18next.t('text.the list could not be loaded')}</div>`;
+        if (!this.roles)
+            return nothing;
+        const owner = store.getState().auth?.user?.owner;
+        if (!this.roles.length)
+            return html `<p quiet>${owner ? i18next.t('text.my roles owner') : i18next.t('text.my roles none')}</p>`;
+        const { own, shared, alone } = workOfRoles(this.roles);
+        /* Which roles give it - said only when they are not all of mine (then it would say nothing). */
+        const from = (roles) => (this.roles.length > 1 && roles.length < this.roles.length ? roles.map(name => html `<span from>${name}</span>`) : nothing);
+        return html `
+      <section>
+        <h3>${i18next.t('text.my roles count', { count: this.roles.length })}</h3>
+        ${owner ? html `<p quiet>${i18next.t('text.my roles owner')}</p>` : nothing}
+        <dl>
+          ${this.roles.map(role => html `<dt>${role.name}</dt><dd quiet>${role.description || ''}</dd>`)}
+        </dl>
+      </section>
+
+      ${own.length || alone.length
+            ? html `<section>
+              <h3>${i18next.t('text.my role tasks')}</h3>
+              <ul>
+                ${own.map(task => this.renderTask(task, from(task.roles)))}
+                ${alone.map(one => {
+                const says = i18next.t(`privilege.allows.${one.category}.${one.axis}`, { defaultValue: '' });
+                return html `<li>
+                    <div task-head>${says ? html `<span>${says}</span>` : html `<span><code>${one.category}</code> · ${axisLabel(one.axis)}</span>`} ${from(one.roles)}</div>
+                  </li>`;
+            })}
+              </ul>
+            </section>`
+            : nothing}
+
+      ${shared.length
+            ? html `<section>
+              <h3>${i18next.t('text.my roles shared tasks')}</h3>
+              <ul>
+                ${shared.map(task => this.renderTask(task, nothing))}
+              </ul>
+            </section>`
+            : nothing}
+    `;
+    }
+    renderTask(task, from) {
+        const says = i18next.t(`task.${task.taskId}.description`, { defaultValue: '' });
+        return html `<li>
+      <div task-head><span task-name>${i18next.t(`task.${task.taskId}.name`, { defaultValue: task.taskId })}</span> ${from}</div>
+      ${says ? html `<div quiet>${says}</div>` : nothing}
+    </li>`;
+    }
+    firstUpdated() {
+        this.fetch();
+    }
+    async fetch() {
+        try {
+            const response = await client.query({
+                query: gql `
+          query {
+            myRoles {
+              id
+              name
+              description
+              taskCoverage {
+                tasks {
+                  taskId
+                  status
+                  held {
+                    category
+                    axes
+                  }
+                  missing {
+                    category
+                    axes
+                  }
+                }
+                unclassified {
+                  category
+                  axes
+                }
+              }
+            }
+          }
+        `,
+                fetchPolicy: 'no-cache'
+            });
+            if (response.errors?.length || !response.data?.myRoles)
+                throw new Error();
+            this.roles = response.data.myRoles;
+        }
+        catch {
+            this.failed = true;
+        }
+    }
+};
+__decorate([
+    state(),
+    __metadata("design:type", Array)
+], MyRoles.prototype, "roles", void 0);
+__decorate([
+    state(),
+    __metadata("design:type", Object)
+], MyRoles.prototype, "failed", void 0);
+MyRoles = __decorate([
+    customElement('my-roles')
+], MyRoles);
+export { MyRoles };
+//# sourceMappingURL=my-roles.js.map

package/dist-client/components/my-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"my-roles.js","sourceRoot":"","sources":["../../client/components/my-roles.ts"],"names":[],"mappings":";AAAA,OAAO,GAAG,MAAM,aAAa,CAAA;AAC7B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,KAAK,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAEtC,OAAO,EAAE,WAAW,EAA+B,MAAM,oBAAoB,CAAA;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AAItD;;;;;;;GAOG;AAEI,IAAM,OAAO,GAAb,MAAM,OAAQ,SAAQ,UAAU;IAAhC;;QAmFY,WAAM,GAAG,KAAK,CAAA;IAsGjC,CAAC;aAxLQ,WAAM,GAAG;QACd,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA6EF;KACF,AA/EY,CA+EZ;IAKD,MAAM;QACJ,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA,eAAe,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAC,QAAQ,CAAA;QACjG,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,OAAO,CAAA;QAE/B,MAAM,KAAK,GAAI,KAAK,CAAC,QAAQ,EAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAA;QACzD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAA;QAE/H,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtD,gGAAgG;QAChG,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,KAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAA,cAAc,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QAE9J,OAAO,IAAI,CAAA;;cAED,OAAO,CAAC,CAAC,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;UAClE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA,YAAY,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;;YAEtE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAA,OAAO,IAAI,CAAC,IAAI,kBAAkB,IAAI,CAAC,WAAW,IAAI,EAAE,OAAO,CAAC;;;;QAK/F,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM;YACxB,CAAC,CAAC,IAAI,CAAA;oBACI,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC;;kBAEjC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;kBACxD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;gBAChB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,oBAAoB,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;gBAC5F,OAAO,IAAI,CAAA;qCACQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAA,eAAe,GAAG,CAAC,QAAQ,aAAa,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;wBAC5I,CAAA;YACR,CAAC,CAAC;;uBAEK;YACb,CAAC,CAAC,OACN;;QAGE,MAAM,CAAC,MAAM;YACX,CAAC,CAAC,IAAI,CAAA;oBACI,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC;;kBAEzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;;uBAE7C;YACb,CAAC,CAAC,OACN;KACD,CAAA;IACH,CAAC;IAEO,UAAU,CAAC,IAAY,EAAE,IAAa;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,cAAc,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;QAC/E,OAAO,IAAI,CAAA;uCACwB,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,IAAI;QAClH,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA,cAAc,IAAI,QAAQ,CAAC,CAAC,CAAC,OAAO;UAC7C,CAAA;IACR,CAAC;IAED,YAAY;QACV,IAAI,CAAC,KAAK,EAAE,CAAA;IACd,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;gBAClC,KAAK,EAAE,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;SA0BT;gBACD,WAAW,EAAE,UAAU;aACxB,CAAC,CAAA;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAA;YACzE,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAA;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QACpB,CAAC;IACH,CAAC;;AAtGgB;IAAhB,KAAK,EAAE;;sCAAyB;AAChB;IAAhB,KAAK,EAAE;;uCAAuB;AAnFpB,OAAO;IADnB,aAAa,CAAC,UAAU,CAAC;GACb,OAAO,CAyLnB","sourcesContent":["import gql from 'graphql-tag'\nimport { css, html, LitElement, nothing } from 'lit'\nimport { customElement, state } from 'lit/decorators.js'\n\nimport { client } from '@operato/graphql'\nimport { i18next } from '@operato/i18n'\nimport { store } from '@operato/shell'\n\nimport { workOfRoles, type MyRoleRef, type MyWork } from './my-role-tasks.js'\nimport { axisLabel } from '../utils/privilege-axis.js'\n\ntype MyRole = MyRoleRef & { id: string; description?: string }\n\n/**\n * 내 역할과 업무 권한 — the roles one holds and the work they give, the body of its page (`my-roles`, ADR-0139 §11-11).\n * Read only: a role is given by whoever manages roles, and one asks for more through an access request (ADR-0103).\n *\n * The roles first, each in a line; then the work, one list across them with the roles that give each; what every role\n * gives last, once. A task is said in the words of the module that declares it (`task.<id>.name` · `.description`); a\n * privilege no task names, by the sentence written for it (`privilege.allows.<category>.<axis>`), else by its code.\n */\n@customElement('my-roles')\nexport class MyRoles extends LitElement {\n  static styles = [\n    css`\n      :host {\n        display: block;\n        font-size: var(--ui-t-body, 13px);\n        line-height: 1.55;\n      }\n\n      section + section {\n        margin-top: var(--spacing-large);\n        padding-top: var(--spacing-large);\n        border-top: 1px solid var(--md-sys-color-outline-variant);\n      }\n\n      h3 {\n        margin: 0 0 var(--spacing-small);\n        font-size: 0.95rem;\n      }\n\n      [quiet] {\n        color: var(--md-sys-color-on-surface-variant);\n      }\n\n      p {\n        margin: 0 0 var(--spacing-small);\n      }\n\n      ul {\n        margin: 0;\n        padding: 0;\n        list-style: none;\n      }\n\n      li + li {\n        margin-top: var(--spacing-medium);\n      }\n\n      dl {\n        display: grid;\n        grid-template-columns: max-content 1fr;\n        gap: var(--spacing-small) var(--spacing-medium);\n        margin: 0;\n      }\n\n      dt {\n        font-weight: 600;\n      }\n\n      dd {\n        margin: 0;\n      }\n\n      [task-head] {\n        display: flex;\n        flex-wrap: wrap;\n        align-items: baseline;\n        gap: var(--spacing-small);\n      }\n\n      [task-name] {\n        font-weight: 600;\n      }\n\n      [from] {\n        padding: 0 6px;\n        border-radius: 999px;\n        background-color: var(--md-sys-color-surface-variant);\n        color: var(--md-sys-color-on-surface-variant);\n        font-size: 0.8rem;\n      }\n\n      code {\n        font-size: 0.9em;\n      }\n\n      [failed] {\n        color: var(--md-sys-color-error);\n      }\n    `\n  ]\n\n  @state() private roles?: MyRole[]\n  @state() private failed = false\n\n  render() {\n    if (this.failed) return html`<div failed>${i18next.t('text.the list could not be loaded')}</div>`\n    if (!this.roles) return nothing\n\n    const owner = (store.getState() as any).auth?.user?.owner\n    if (!this.roles.length) return html`<p quiet>${owner ? i18next.t('text.my roles owner') : i18next.t('text.my roles none')}</p>`\n\n    const { own, shared, alone } = workOfRoles(this.roles)\n    /* Which roles give it - said only when they are not all of mine (then it would say nothing). */\n    const from = (roles: string[]) => (this.roles!.length > 1 && roles.length < this.roles!.length ? roles.map(name => html`<span from>${name}</span>`) : nothing)\n\n    return html`\n      <section>\n        <h3>${i18next.t('text.my roles count', { count: this.roles.length })}</h3>\n        ${owner ? html`<p quiet>${i18next.t('text.my roles owner')}</p>` : nothing}\n        <dl>\n          ${this.roles.map(role => html`<dt>${role.name}</dt><dd quiet>${role.description || ''}</dd>`)}\n        </dl>\n      </section>\n\n      ${\n        own.length || alone.length\n          ? html`<section>\n              <h3>${i18next.t('text.my role tasks')}</h3>\n              <ul>\n                ${own.map(task => this.renderTask(task, from(task.roles)))}\n                ${alone.map(one => {\n                  const says = i18next.t(`privilege.allows.${one.category}.${one.axis}`, { defaultValue: '' })\n                  return html`<li>\n                    <div task-head>${says ? html`<span>${says}</span>` : html`<span><code>${one.category}</code> · ${axisLabel(one.axis)}</span>`} ${from(one.roles)}</div>\n                  </li>`\n                })}\n              </ul>\n            </section>`\n          : nothing\n      }\n\n      ${\n        shared.length\n          ? html`<section>\n              <h3>${i18next.t('text.my roles shared tasks')}</h3>\n              <ul>\n                ${shared.map(task => this.renderTask(task, nothing))}\n              </ul>\n            </section>`\n          : nothing\n      }\n    `\n  }\n\n  private renderTask(task: MyWork, from: unknown) {\n    const says = i18next.t(`task.${task.taskId}.description`, { defaultValue: '' })\n    return html`<li>\n      <div task-head><span task-name>${i18next.t(`task.${task.taskId}.name`, { defaultValue: task.taskId })}</span> ${from}</div>\n      ${says ? html`<div quiet>${says}</div>` : nothing}\n    </li>`\n  }\n\n  firstUpdated() {\n    this.fetch()\n  }\n\n  private async fetch() {\n    try {\n      const response = await client.query({\n        query: gql`\n          query {\n            myRoles {\n              id\n              name\n              description\n              taskCoverage {\n                tasks {\n                  taskId\n                  status\n                  held {\n                    category\n                    axes\n                  }\n                  missing {\n                    category\n                    axes\n                  }\n                }\n                unclassified {\n                  category\n                  axes\n                }\n              }\n            }\n          }\n        `,\n        fetchPolicy: 'no-cache'\n      })\n      if (response.errors?.length || !response.data?.myRoles) throw new Error()\n      this.roles = response.data.myRoles\n    } catch {\n      this.failed = true\n    }\n  }\n}\n"]}

package/dist-client/pages/audit/audit-page.d.ts

@@ -1,5 +1,6 @@
 import '@material/web/icon/icon.js';
 import '@operato/data-grist';
+import '@operato/input/ox-input-select-buttons.js';
 import type { CSSResultGroup } from 'lit';
 import { PageView } from '@operato/shell';
 import type { FetchOption } from '@operato/data-grist';
@@ -19,6 +20,8 @@ export declare class AuditPage extends AuditPageBase {
     private actor?;
     private door?;
     private outcome;
+    /** How many records each outcome chip would show under the other conditions, counted by the records' own door. */
+    private outcomeCounts;
     private health?;
     private grist;
     get context(): {
@@ -34,6 +37,7 @@ export declare class AuditPage extends AuditPageBase {
     private show;
     private lastDays;
     private pick;
+    private countOutcomes;
     private narrow;
     pageUpdated(_changes: any, _lifecycle: any): Promise<void>;
     private readHealth;

package/dist-client/pages/audit/audit-page.js

@@ -1,6 +1,7 @@
 import { __decorate, __metadata } from "tslib";
 import '@material/web/icon/icon.js';
 import '@operato/data-grist';
+import '@operato/input/ox-input-select-buttons.js';
 import gql from 'graphql-tag';
 import { css, html, nothing } from 'lit';
 import { customElement, property, query, state } from 'lit/decorators.js';
@@ -31,6 +32,8 @@ let AuditPage = class AuditPage extends AuditPageBase {
         this.from = lastDays(30).from;
         this.to = new Date();
         this.outcome = '';
+        /** How many records each outcome chip would show under the other conditions, counted by the records' own door. */
+        this.outcomeCounts = new Map();
     }
     static { this.styles = [
         WorkSurfacePageStyles,
@@ -49,11 +52,6 @@ let AuditPage = class AuditPage extends AuditPageBase {
         gap: var(--spacing-tiny, 2px);
       }
 
-      button[aria-pressed='true'] {
-        background-color: var(--md-sys-color-secondary-container);
-        color: var(--md-sys-color-on-secondary-container);
-      }
-
       input[type='date'] {
         height: var(--context-action-height, 28px);
         box-sizing: border-box;
@@ -99,23 +97,41 @@ let AuditPage = class AuditPage extends AuditPageBase {
     }
     renderControls() {
         const t = i18next.t.bind(i18next);
-        const pressed = (on) => (on ? 'true' : 'false');
+        /* One of each is always chosen: a press on the chosen chip leaves it chosen. */
+        const choose = (e, chosen, pick) => {
+            if (e.detail)
+                pick(e.detail);
+            else
+                e.target.value = chosen;
+        };
         return html `
-      <div group>
-        ${VIEWS.map(view => html `<button quiet aria-pressed=${pressed(this.view === view)} @click=${() => this.show(view)}>${t(`audit.view.${view}`)}</button>`)}
-      </div>
+      <ox-input-select-buttons
+        .options=${VIEWS.map(view => ({ value: view, display: t(`audit.view.${view}`) }))}
+        .value=${this.view}
+        @change=${(e) => choose(e, this.view, view => this.show(view))}
+      ></ox-input-select-buttons>
 
       <div group>
-        ${PERIODS.map(days => html `<button quiet aria-pressed=${pressed(this.days === days)} @click=${() => this.lastDays(days)}>${t('audit.period.days', { count: days })}</button>`)}
+        <ox-input-select-buttons
+          .options=${PERIODS.map(days => ({ value: String(days), display: t('audit.period.days', { count: days }) }))}
+          .value=${this.days ? String(this.days) : undefined}
+          @change=${(e) => choose(e, this.days ? String(this.days) : undefined, days => this.lastDays(Number(days)))}
+        ></ox-input-select-buttons>
         <input type="date" aria-label=${t('audit.period.from')} .value=${dateInputValue(this.from)} @change=${(e) => this.pick('from', e)} />
         <span>~</span>
         <input type="date" aria-label=${t('audit.period.to')} .value=${dateInputValue(this.to)} @change=${(e) => this.pick('to', e)} />
       </div>
 
       ${this.view === 'records'
-            ? html `<div group>
-            ${OUTCOMES.map(outcome => html `<button quiet aria-pressed=${pressed(this.outcome === outcome)} @click=${() => this.narrow({ outcome })}>${t(outcome ? `audit.outcome.${outcome}` : 'audit.outcome.all')}</button>`)}
-          </div>`
+            ? html `<ox-input-select-buttons
+            .options=${OUTCOMES.map(outcome => ({
+                value: outcome || 'all',
+                display: t(outcome ? `audit.outcome.${outcome}` : 'audit.outcome.all'),
+                count: this.outcomeCounts.get(outcome || 'all') ?? 0
+            }))}
+            .value=${this.outcome || 'all'}
+            @change=${(e) => choose(e, this.outcome || 'all', outcome => this.narrow({ outcome: (outcome === 'all' ? '' : outcome) }))}
+          ></ox-input-select-buttons>`
             : nothing}
       ${this.view === 'records' && this.actor
             ? html `<span narrowed>${this.actor.name}<button quiet small @click=${() => this.narrow({ actor: undefined })}>${t('audit.button.all-people')}</button></span>`
@@ -154,6 +170,24 @@ let AuditPage = class AuditPage extends AuditPageBase {
         this.days = null;
         this.grist?.fetch();
     }
+    /*
+     * The outcome chips' numbers - the records' own door asked for its total once per outcome, under the period, the
+     * person and the privilege narrowed to, in one request.
+     */
+    async countOutcomes(filter) {
+        const response = await client.query({
+            query: gql `
+        query (${OUTCOMES.map((_, at) => `$f${at}: AuditRecordFilter!`).join(', ')}) {
+          ${OUTCOMES.map((_, at) => `c${at}: auditRecords(filter: $f${at}) { total }`).join('\n')}
+        }
+      `,
+            variables: Object.fromEntries(OUTCOMES.map((outcome, at) => [`f${at}`, { ...filter, outcome: outcome || undefined, page: 1, limit: 1 }])),
+            fetchPolicy: 'no-cache'
+        });
+        if (response.errors?.length)
+            return console.error(response.errors);
+        this.outcomeCounts = new Map(OUTCOMES.map((outcome, at) => [outcome || 'all', response.data?.[`c${at}`]?.total ?? 0]));
+    }
     narrow(change) {
         Object.assign(this, change);
         if (this.view !== 'records')
@@ -308,6 +342,7 @@ let AuditPage = class AuditPage extends AuditPageBase {
                 .sort((a, b) => used(b) - used(a));
             return { total: records.length, records };
         }
+        this.countOutcomes({ ...period, actorId: this.actor?.id, door: this.door });
         const response = await client.query({
             query: gql `
         query ($filter: AuditRecordFilter!) {
@@ -403,6 +438,10 @@ __decorate([
     state(),
     __metadata("design:type", String)
 ], AuditPage.prototype, "outcome", void 0);
+__decorate([
+    state(),
+    __metadata("design:type", Object)
+], AuditPage.prototype, "outcomeCounts", void 0);
 __decorate([
     state(),
     __metadata("design:type", Object)