@things-factory/auth-ui 10.1.256 → 10.1.257

package/dist-client/bootstrap.js

@@ -3,7 +3,7 @@ import '@operato/i18n/ox-i18n.js';
 import { i18next } from '@operato/i18n';
 import '@operato/attribute/grist-editor'; /* for register data-grist editor type 'attributes' */
 import { html } from 'lit-html';
-import { navigate, removeDraftsOf, store } from '@operato/shell';
+import { draftOwner, navigate, removeDraftsOf, store } from '@operato/shell';
 import { openPopup, registerNotifyAction } from '@operato/layout';
 import { OxGristEditorPrivilege } from '@operato/app/grist-editor/ox-grist-editor-privilege.js';
 import { registerEditor as registerGristEditor, registerRenderer as registerGristRenderer, OxGristRendererJson5 } from '@operato/data-grist';
@@ -71,7 +71,7 @@ export default async function bootstrap() {
      * has none to take.
      */
     auth.on('presignout', async () => {
-        const user = auth.credential?.id;
+        const user = draftOwner();
         if (user)
             await removeDraftsOf(user).catch(() => { });
     });

package/dist-client/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../client/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,4BAA4B,CAAA;AACnC,OAAO,0BAA0B,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,iCAAiC,CAAA,CAAC,sDAAsD;AAE/F,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAE/B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAChE,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAA;AAC/F,OAAO,EACL,cAAc,IAAI,mBAAmB,EACrC,gBAAgB,IAAI,qBAAqB,EACzC,oBAAoB,EACrB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,IAAI,EAAE,MAAM,+CAA+C,CAAA;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAA;AACnE,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,SAAS;IACrC,gEAAgE;IAChE,kBAAkB,EAAE,CAAA;IAEpB,+GAA+G;IAC/G,YAAY,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,0BAA0B,EAAE,CAAC,CAAA;IAEpI,mBAAmB,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAA;IACxD,qBAAqB,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAA;IAExD;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC;QACb,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,mBAAmB;YAC1B,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,GAAG,EAAE;gBACX,QAAQ,CAAC,SAAS,CAAC,CAAA;YACrB,CAAC;SACF;KACF,CAAC,CAAA;IAEF,KAAK,CAAC,QAAQ,CAAC;QACb,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,gBAAgB;YACvB,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,GAAG,EAAE;gBACX,IAAI,CAAC;oBACH,IAAI,OAAO,YAAY,KAAK,WAAW,EAAE,CAAC;wBACxC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;wBACrC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;oBACpC,CAAC;oBAED,CAAC;oBAAA,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;wBACxC,IAAI,CAAC;4BACH,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,mDAAmD,CAAA;wBAC9E,CAAC;wBAAC,OAAO,CAAC,EAAE,CAAC;4BACX,SAAS;wBACX,CAAC;oBACH,CAAC,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,OAAO,EAAE,CAAA;YAChB,CAAC;SACF;KACF,CAAC,CAAA;IAEF;;;;OAIG;IACH,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,IAAI,GAAI,IAAI,CAAC,UAAkB,EAAE,EAAE,CAAA;QACzC,IAAI,IAAI;YAAE,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF;;;;OAIG;IACH,oBAAoB,CAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE;QACpD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/E,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACvH,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC;YACjD,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,GAAG,EAAE,CACb,MAAM,CAAC,sCAAsC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CACvD,SAAS,CACP,IAAI,CAAA;0BACU,MAAM,CAAC,QAAQ;2BACd,MAAM,CAAC,SAAS;+BACZ,MAAM,CAAC,aAAa;qCACd,EACzB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,qCAAqC,CAAC,EAAE,CAC5E,CACF;SACJ,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;QACpC,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACpC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF;;;;MAIE;IACF,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;AACtB,CAAC","sourcesContent":["import '@material/web/icon/icon.js'\nimport '@operato/i18n/ox-i18n.js'\nimport { i18next } from '@operato/i18n'\nimport '@operato/attribute/grist-editor' /* for register data-grist editor type 'attributes' */\n\nimport { html } from 'lit-html'\n\nimport { navigate, removeDraftsOf, store } from '@operato/shell'\nimport { openPopup, registerNotifyAction } from '@operato/layout'\nimport { OxGristEditorPrivilege } from '@operato/app/grist-editor/ox-grist-editor-privilege.js'\nimport {\n  registerEditor as registerGristEditor,\n  registerRenderer as registerGristRenderer,\n  OxGristRendererJson5\n} from '@operato/data-grist'\n\nimport { auth } from '@things-factory/auth-base/dist-client/auth.js'\nimport { hasPrivilege } from '@things-factory/auth-base/dist-client'\nimport { ADD_USER_MENU } from '@things-factory/apptool-base/client'\nimport { registerPersonAuditSection, registerPersonKind } from './entity360/person-360.js'\nimport { requestableFrom } from './utils/access-request.js'\n\nexport default async function bootstrap() {\n  /* the person 360 - a User value anywhere opens it (ADR-0067) */\n  registerPersonKind()\n\n  /* Whose audit a person 360 shows is `audit:query`'s - only those who hold it get the section (ADR-0141 §5). */\n  hasPrivilege({ privilege: 'query', category: 'audit', superUserGranted: true }).then(holds => holds && registerPersonAuditSection())\n\n  registerGristEditor('privilege', OxGristEditorPrivilege)\n  registerGristRenderer('privilege', OxGristRendererJson5)\n\n  /*\n   * The person's own profile and sign-out are in the menu the header's avatar opens, not among the\n   * morendas - those are the app's administration (the rail's 「시스템 › 관리」).\n   */\n  store.dispatch({\n    type: ADD_USER_MENU,\n    item: {\n      name: 'profile',\n      icon: 'account_circle',\n      label: 'text.auth profile',\n      order: 10,\n      action: () => {\n        navigate('profile')\n      }\n    }\n  })\n\n  store.dispatch({\n    type: ADD_USER_MENU,\n    item: {\n      name: 'sign-out',\n      icon: 'exit_to_app',\n      label: 'field.sign out',\n      order: 15,\n      action: () => {\n        try {\n          if (typeof localStorage !== 'undefined') {\n            localStorage.removeItem('i18nextLng')\n            localStorage.removeItem('i18next')\n          }\n\n          ;['i18next', 'i18nextLng'].forEach(name => {\n            try {\n              document.cookie = `${name}=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT;`\n            } catch (e) {\n              // ignore\n            }\n          })\n        } catch (e) {\n          // ignore\n        }\n\n        auth.signout()\n      }\n    }\n  })\n\n  /*\n   * Unsaved drafts stay in this browser (ADR-0098). Signing out takes this user's away, so a shared\n   * computer keeps none of their edits. Awaited before the page leaves; a browser that keeps no drafts\n   * has none to take.\n   */\n  auth.on('presignout', async () => {\n    const user = (auth.credential as any)?.id\n    if (user) await removeDraftsOf(user).catch(() => {})\n  })\n\n  /*\n   * A refusal a role would open, of a change the person made, gets one quiet \"request access…\" on its toast. The toast\n   * does not know what an error means and @operato/graphql only reports it; this package knows, so it puts the button\n   * on (registerNotifyAction, things-factory ADR-0103 decision 5). Where auth-ui is not loaded there is no button.\n   */\n  registerNotifyAction('access-request', notification => {\n    const refusal = Array.isArray(notification.ex) ? notification.ex[0] : undefined\n    const detail = requestableFrom(refusal?.extensions, Array.isArray(refusal?.path) ? String(refusal.path[0]) : undefined)\n    if (!detail) return null\n    return {\n      label: i18next.t('access-request.button.request'),\n      emphasis: 'quiet',\n      callback: () =>\n        import('./components/access-request-popup.js').then(() =>\n          openPopup(\n            html`<access-request-popup\n              .category=${detail.category}\n              .privilege=${detail.privilege}\n              .operationName=${detail.operationName}\n            ></access-request-popup>`,\n            { size: 'medium', title: i18next.t('access-request.title.request access') }\n          )\n        )\n    }\n  })\n\n  auth.on('profile', ({ credential }) => {\n    if (credential && credential.locale) {\n      i18next.changeLanguage(credential.locale)\n    }\n  })\n\n  /* \n    Get user profile information from server. \n    As soon as response received, auth.on('profile', ...) handlers start to work.\n    It's very important point to build UI for the user.\n  */\n  await auth.profile()\n}\n"]}
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../client/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,4BAA4B,CAAA;AACnC,OAAO,0BAA0B,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,iCAAiC,CAAA,CAAC,sDAAsD;AAE/F,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAE/B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAC5E,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAA;AAC/F,OAAO,EACL,cAAc,IAAI,mBAAmB,EACrC,gBAAgB,IAAI,qBAAqB,EACzC,oBAAoB,EACrB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,IAAI,EAAE,MAAM,+CAA+C,CAAA;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAA;AACnE,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,SAAS;IACrC,gEAAgE;IAChE,kBAAkB,EAAE,CAAA;IAEpB,+GAA+G;IAC/G,YAAY,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,0BAA0B,EAAE,CAAC,CAAA;IAEpI,mBAAmB,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAA;IACxD,qBAAqB,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAA;IAExD;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC;QACb,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,mBAAmB;YAC1B,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,GAAG,EAAE;gBACX,QAAQ,CAAC,SAAS,CAAC,CAAA;YACrB,CAAC;SACF;KACF,CAAC,CAAA;IAEF,KAAK,CAAC,QAAQ,CAAC;QACb,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,gBAAgB;YACvB,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,GAAG,EAAE;gBACX,IAAI,CAAC;oBACH,IAAI,OAAO,YAAY,KAAK,WAAW,EAAE,CAAC;wBACxC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;wBACrC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;oBACpC,CAAC;oBAED,CAAC;oBAAA,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;wBACxC,IAAI,CAAC;4BACH,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,mDAAmD,CAAA;wBAC9E,CAAC;wBAAC,OAAO,CAAC,EAAE,CAAC;4BACX,SAAS;wBACX,CAAC;oBACH,CAAC,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,OAAO,EAAE,CAAA;YAChB,CAAC;SACF;KACF,CAAC,CAAA;IAEF;;;;OAIG;IACH,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,IAAI,GAAG,UAAU,EAAE,CAAA;QACzB,IAAI,IAAI;YAAE,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF;;;;OAIG;IACH,oBAAoB,CAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE;QACpD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/E,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACvH,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC;YACjD,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,GAAG,EAAE,CACb,MAAM,CAAC,sCAAsC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CACvD,SAAS,CACP,IAAI,CAAA;0BACU,MAAM,CAAC,QAAQ;2BACd,MAAM,CAAC,SAAS;+BACZ,MAAM,CAAC,aAAa;qCACd,EACzB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,qCAAqC,CAAC,EAAE,CAC5E,CACF;SACJ,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;QACpC,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACpC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF;;;;MAIE;IACF,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;AACtB,CAAC","sourcesContent":["import '@material/web/icon/icon.js'\nimport '@operato/i18n/ox-i18n.js'\nimport { i18next } from '@operato/i18n'\nimport '@operato/attribute/grist-editor' /* for register data-grist editor type 'attributes' */\n\nimport { html } from 'lit-html'\n\nimport { draftOwner, navigate, removeDraftsOf, store } from '@operato/shell'\nimport { openPopup, registerNotifyAction } from '@operato/layout'\nimport { OxGristEditorPrivilege } from '@operato/app/grist-editor/ox-grist-editor-privilege.js'\nimport {\n  registerEditor as registerGristEditor,\n  registerRenderer as registerGristRenderer,\n  OxGristRendererJson5\n} from '@operato/data-grist'\n\nimport { auth } from '@things-factory/auth-base/dist-client/auth.js'\nimport { hasPrivilege } from '@things-factory/auth-base/dist-client'\nimport { ADD_USER_MENU } from '@things-factory/apptool-base/client'\nimport { registerPersonAuditSection, registerPersonKind } from './entity360/person-360.js'\nimport { requestableFrom } from './utils/access-request.js'\n\nexport default async function bootstrap() {\n  /* the person 360 - a User value anywhere opens it (ADR-0067) */\n  registerPersonKind()\n\n  /* Whose audit a person 360 shows is `audit:query`'s - only those who hold it get the section (ADR-0141 §5). */\n  hasPrivilege({ privilege: 'query', category: 'audit', superUserGranted: true }).then(holds => holds && registerPersonAuditSection())\n\n  registerGristEditor('privilege', OxGristEditorPrivilege)\n  registerGristRenderer('privilege', OxGristRendererJson5)\n\n  /*\n   * The person's own profile and sign-out are in the menu the header's avatar opens, not among the\n   * morendas - those are the app's administration (the rail's 「시스템 › 관리」).\n   */\n  store.dispatch({\n    type: ADD_USER_MENU,\n    item: {\n      name: 'profile',\n      icon: 'account_circle',\n      label: 'text.auth profile',\n      order: 10,\n      action: () => {\n        navigate('profile')\n      }\n    }\n  })\n\n  store.dispatch({\n    type: ADD_USER_MENU,\n    item: {\n      name: 'sign-out',\n      icon: 'exit_to_app',\n      label: 'field.sign out',\n      order: 15,\n      action: () => {\n        try {\n          if (typeof localStorage !== 'undefined') {\n            localStorage.removeItem('i18nextLng')\n            localStorage.removeItem('i18next')\n          }\n\n          ;['i18next', 'i18nextLng'].forEach(name => {\n            try {\n              document.cookie = `${name}=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT;`\n            } catch (e) {\n              // ignore\n            }\n          })\n        } catch (e) {\n          // ignore\n        }\n\n        auth.signout()\n      }\n    }\n  })\n\n  /*\n   * Unsaved drafts stay in this browser (ADR-0098). Signing out takes this user's away, so a shared\n   * computer keeps none of their edits. Awaited before the page leaves; a browser that keeps no drafts\n   * has none to take.\n   */\n  auth.on('presignout', async () => {\n    const user = draftOwner()\n    if (user) await removeDraftsOf(user).catch(() => {})\n  })\n\n  /*\n   * A refusal a role would open, of a change the person made, gets one quiet \"request access…\" on its toast. The toast\n   * does not know what an error means and @operato/graphql only reports it; this package knows, so it puts the button\n   * on (registerNotifyAction, things-factory ADR-0103 decision 5). Where auth-ui is not loaded there is no button.\n   */\n  registerNotifyAction('access-request', notification => {\n    const refusal = Array.isArray(notification.ex) ? notification.ex[0] : undefined\n    const detail = requestableFrom(refusal?.extensions, Array.isArray(refusal?.path) ? String(refusal.path[0]) : undefined)\n    if (!detail) return null\n    return {\n      label: i18next.t('access-request.button.request'),\n      emphasis: 'quiet',\n      callback: () =>\n        import('./components/access-request-popup.js').then(() =>\n          openPopup(\n            html`<access-request-popup\n              .category=${detail.category}\n              .privilege=${detail.privilege}\n              .operationName=${detail.operationName}\n            ></access-request-popup>`,\n            { size: 'medium', title: i18next.t('access-request.title.request access') }\n          )\n        )\n    }\n  })\n\n  auth.on('profile', ({ credential }) => {\n    if (credential && credential.locale) {\n      i18next.changeLanguage(credential.locale)\n    }\n  })\n\n  /* \n    Get user profile information from server. \n    As soon as response received, auth.on('profile', ...) handlers start to work.\n    It's very important point to build UI for the user.\n  */\n  await auth.profile()\n}\n"]}

package/dist-client/components/access-decision-popup.d.ts

@@ -15,15 +15,16 @@ declare const AccessDecisionPopup_base: (new (...args: any[]) => LitElement) & t
 export declare class AccessDecisionPopup extends AccessDecisionPopup_base {
     static styles: import("lit").CSSResult[];
     request: any;
-    private candidates;
-    private roleId?;
+    /** The role chosen; until one is, the first candidate. */
+    private chosen?;
     private reason;
-    private grantIssues;
-    private denyIssues;
-    private asked;
-    firstUpdated(): Promise<void>;
-    /** Asks the server again; an answer to an older question is dropped. */
-    private review;
+    private granting;
+    private grantReview;
+    private denyReview;
+    private get candidates();
+    private get roleId();
+    private get grantIssues();
+    private get denyIssues();
     render(): import("lit-html").TemplateResult<1>;
     private decide;
 }

package/dist-client/components/access-decision-popup.js

@@ -7,7 +7,7 @@ import '@material/web/textfield/outlined-text-field.js';
 import gql from 'graphql-tag';
 import { css, html, LitElement, nothing } from 'lit';
 import { customElement, property, state } from 'lit/decorators.js';
-import { client, gqlContext } from '@operato/graphql';
+import { client, gqlContext, QueryController } from '@operato/graphql';
 import { i18next, localize } from '@operato/i18n';
 import { CommonPopupStyles, ScrollbarStyles } from '@operato/styles';
 import { decisionButtons, firstCandidate, issueWords, neededWords, orderedIssues, taskSays } from '../utils/access-request.js';
@@ -31,11 +31,32 @@ const REVIEW = gql `
 let AccessDecisionPopup = class AccessDecisionPopup extends localize(i18next)(LitElement) {
     constructor() {
         super(...arguments);
-        this.candidates = [];
         this.reason = '';
-        this.grantIssues = null;
-        this.denyIssues = null;
-        this.asked = 0;
+        this.granting = new QueryController(this, gql `
+      query ($category: String!, $privilege: String!, $taskId: String) {
+        rolesGranting(category: $category, privilege: $privilege, taskId: $taskId) {
+          id
+          name
+          privilegeCount
+          holdsTask
+        }
+      }
+    `, {
+            variables: () => this.request ? { category: this.request.category, privilege: this.request.privilege, taskId: this.request.taskId || null } : undefined,
+            context: gqlContext()
+        });
+        /* The server reviews both decisions as they stand now - the role chosen, the reason typed. While a new review is out,
+           the last one stays drawn. */
+        this.grantReview = new QueryController(this, REVIEW, {
+            variables: () => this.granting.data ? { decision: { requestId: this.request.id, decision: 'GRANT', roleId: this.roleId } } : undefined,
+            context: gqlContext(),
+            keepPrevious: true
+        });
+        this.denyReview = new QueryController(this, REVIEW, {
+            variables: () => this.granting.data ? { decision: { requestId: this.request.id, decision: 'DENY', reason: this.reason } } : undefined,
+            context: gqlContext(),
+            keepPrevious: true
+        });
     }
     static { this.styles = [
         CommonPopupStyles,
@@ -86,38 +107,17 @@ let AccessDecisionPopup = class AccessDecisionPopup extends localize(i18next)(Li
       }
     `
     ]; }
-    async firstUpdated() {
-        const response = await client.query({
-            query: gql `
-        query ($category: String!, $privilege: String!, $taskId: String) {
-          rolesGranting(category: $category, privilege: $privilege, taskId: $taskId) {
-            id
-            name
-            privilegeCount
-            holdsTask
-          }
-        }
-      `,
-            variables: { category: this.request.category, privilege: this.request.privilege, taskId: this.request.taskId || null },
-            context: gqlContext(),
-            fetchPolicy: 'network-only'
-        });
-        this.candidates = response.data?.rolesGranting || [];
-        this.roleId = firstCandidate(this.candidates)?.id;
-        await this.review();
+    get candidates() {
+        return this.granting.data?.rolesGranting || [];
+    }
+    get roleId() {
+        return this.chosen ?? firstCandidate(this.candidates)?.id;
     }
-    /** Asks the server again; an answer to an older question is dropped. */
-    async review() {
-        const asked = ++this.asked;
-        const ask = (decision) => client.query({ query: REVIEW, variables: { decision }, context: gqlContext(), fetchPolicy: 'network-only' });
-        const [grant, deny] = await Promise.all([
-            ask({ requestId: this.request.id, decision: 'GRANT', roleId: this.roleId }),
-            ask({ requestId: this.request.id, decision: 'DENY', reason: this.reason })
-        ]);
-        if (asked !== this.asked)
-            return;
-        this.grantIssues = grant.errors?.length ? null : grant.data?.reviewAccessDecision || [];
-        this.denyIssues = deny.errors?.length ? null : deny.data?.reviewAccessDecision || [];
+    get grantIssues() {
+        return issuesOf(this.grantReview);
+    }
+    get denyIssues() {
+        return issuesOf(this.denyReview);
     }
     render() {
         const t = i18next.t.bind(i18next);
@@ -139,10 +139,7 @@ let AccessDecisionPopup = class AccessDecisionPopup extends localize(i18next)(Li
                   <md-radio
                     name="role"
                     .checked=${candidate.id === this.roleId}
-                    @change=${() => {
-                this.roleId = candidate.id;
-                this.review();
-            }}
+                    @change=${() => (this.chosen = candidate.id)}
                   ></md-radio>
                   <span>${candidate.name}</span>
                   <span count>${t('access-request.text.privilege count', { count: candidate.privilegeCount })}</span>
@@ -155,10 +152,7 @@ let AccessDecisionPopup = class AccessDecisionPopup extends localize(i18next)(Li
           type="textarea"
           rows="2"
           .value=${this.reason}
-          @input=${(e) => {
-            this.reason = e.target.value;
-            this.review();
-        }}
+          @input=${(e) => (this.reason = e.target.value)}
         ></md-outlined-text-field>
         ${reasonIssues.length && this.reason ? reasonIssues.map(issue => html `<div issue blocking>${issueWords(t, issue)}</div>`) : nothing}
       </div>
@@ -197,7 +191,7 @@ let AccessDecisionPopup = class AccessDecisionPopup extends localize(i18next)(Li
         }
         else {
             /* Somebody may have decided meanwhile - show what the server says now. */
-            await this.review();
+            await Promise.all([this.grantReview.refetch(), this.denyReview.refetch()]);
         }
     }
 };
@@ -205,28 +199,22 @@ __decorate([
     property({ type: Object }),
     __metadata("design:type", Object)
 ], AccessDecisionPopup.prototype, "request", void 0);
-__decorate([
-    state(),
-    __metadata("design:type", Array)
-], AccessDecisionPopup.prototype, "candidates", void 0);
 __decorate([
     state(),
     __metadata("design:type", String)
-], AccessDecisionPopup.prototype, "roleId", void 0);
+], AccessDecisionPopup.prototype, "chosen", void 0);
 __decorate([
     state(),
     __metadata("design:type", Object)
 ], AccessDecisionPopup.prototype, "reason", void 0);
-__decorate([
-    state(),
-    __metadata("design:type", Object)
-], AccessDecisionPopup.prototype, "grantIssues", void 0);
-__decorate([
-    state(),
-    __metadata("design:type", Object)
-], AccessDecisionPopup.prototype, "denyIssues", void 0);
 AccessDecisionPopup = __decorate([
     customElement('access-decision-popup')
 ], AccessDecisionPopup);
 export { AccessDecisionPopup };
+/** A review that failed says nothing - the buttons wait for one that answered. */
+function issuesOf(review) {
+    if (review.error || !review.data)
+        return null;
+    return review.data.reviewAccessDecision || [];
+}
 //# sourceMappingURL=access-decision-popup.js.map

package/dist-client/components/access-decision-popup.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-decision-popup.js","sourceRoot":"","sources":["../../client/components/access-decision-popup.ts"],"names":[],"mappings":";AAAA,OAAO,oCAAoC,CAAA;AAC3C,OAAO,qCAAqC,CAAA;AAC5C,OAAO,uCAAuC,CAAA;AAC9C,OAAO,8BAA8B,CAAA;AACrC,OAAO,gDAAgD,CAAA;AAEvD,OAAO,GAAG,MAAM,aAAa,CAAA;AAC7B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,KAAK,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAElE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEpE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAoB,MAAM,4BAA4B,CAAA;AAEhJ,MAAM,MAAM,GAAG,GAAG,CAAA;;;;;;;;;CASjB,CAAA;AAED;;;;;;GAMG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,QAAQ,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;IAA/D;;QAqDY,eAAU,GAA+E,EAAE,CAAA;QAE3F,WAAM,GAAG,EAAE,CAAA;QACX,gBAAW,GAAyB,IAAI,CAAA;QACxC,eAAU,GAAyB,IAAI,CAAA;QAEhD,UAAK,GAAG,CAAC,CAAA;IA0HnB,CAAC;aApLQ,WAAM,GAAG;QACd,iBAAiB;QACjB,eAAe;QACf,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4CF;KACF,AAhDY,CAgDZ;IAYD,KAAK,CAAC,YAAY;QAChB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,GAAG,CAAA;;;;;;;;;OAST;YACD,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE;YACtH,OAAO,EAAE,UAAU,EAAE;YACrB,WAAW,EAAE,cAAc;SAC5B,CAAC,CAAA;QACF,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,aAAa,IAAI,EAAE,CAAA;QACpD,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAA;QACjD,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;IACrB,CAAC;IAED,wEAAwE;IAChE,KAAK,CAAC,MAAM;QAClB,MAAM,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,CAAA;QAC1B,MAAM,GAAG,GAAG,CAAC,QAAa,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAA;QAC3I,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3E,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;SAC3E,CAAC,CAAA;QACF,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK;YAAE,OAAM;QAChC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,IAAI,EAAE,CAAA;QACvF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,IAAI,EAAE,CAAA;IACtF,CAAC;IAED,MAAM;QACJ,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACjC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;QACxB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAClE,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAA;QAEtF,OAAO,IAAI,CAAA;;mBAEI,CAAC,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;sBACnG,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC;UACnC,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA,YAAY,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;UAC7G,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA,YAAY,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,OAAO;;eAE5D,CAAC,CAAC,qCAAqC,CAAC;UAC7C,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAC5B,CAAC,CAAC,IAAI,CAAA,aAAa,CAAC,CAAC,uCAAuC,CAAC,QAAQ;YACrE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CACjB,SAAS,CAAC,EAAE,CAAC,IAAI,CAAA;;;;+BAIA,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM;8BAC7B,GAAG,EAAE;gBACb,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAA;gBAC1B,IAAI,CAAC,MAAM,EAAE,CAAA;YACf,CAAC;;0BAEK,SAAS,CAAC,IAAI;gCACR,CAAC,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC;;eAE9F,CACF;UACH,aAAa,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAA,wBAAwB,KAAK,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC;;;kBAGtH,CAAC,CAAC,kCAAkC,CAAC;;;mBAGpC,IAAI,CAAC,MAAM;mBACX,CAAC,CAAM,EAAE,EAAE;YAClB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAA;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAA;QACf,CAAC;;UAED,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAA,uBAAuB,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO;;;;+CAI5F,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,eAAe,CAAC;iDACxC,CAAC,OAAO,CAAC,IAAI,WAAW,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtF,CAAC,CAAC,4BAA4B,CAAC;;qDAEU,CAAC,OAAO,CAAC,KAAK,WAAW,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAC5F,CAAC,CAAC,6BAA6B,CAAC;;;KAGvC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,QAA0B;QAC7C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,GAAG,CAAA;;;;;;;OAOZ;YACD,SAAS,EAAE;gBACT,QAAQ,EACN,QAAQ,KAAK,OAAO;oBAClB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;oBAC/D,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;aACpE;YACD,OAAO,EAAE,UAAU,EAAE;SACtB,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YAC7B,IAAI,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAChG,OAAO,CAAC,IAAI,EAAE,CAAA;QAChB,CAAC;aAAM,CAAC;YACN,0EAA0E;YAC1E,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACrB,CAAC;IACH,CAAC;;AAjI2B;IAA3B,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;oDAAa;AAEvB;IAAhB,KAAK,EAAE;;uDAAoG;AAC3F;IAAhB,KAAK,EAAE;;mDAAwB;AACf;IAAhB,KAAK,EAAE;;mDAAoB;AACX;IAAhB,KAAK,EAAE;;wDAAiD;AACxC;IAAhB,KAAK,EAAE;;uDAAgD;AAzD7C,mBAAmB;IAD/B,aAAa,CAAC,uBAAuB,CAAC;GAC1B,mBAAmB,CAqL/B","sourcesContent":["import '@operato/popup/ox-popup-actions.js'\nimport '@material/web/button/text-button.js'\nimport '@material/web/button/filled-button.js'\nimport '@material/web/radio/radio.js'\nimport '@material/web/textfield/outlined-text-field.js'\n\nimport gql from 'graphql-tag'\nimport { css, html, LitElement, nothing } from 'lit'\nimport { customElement, property, state } from 'lit/decorators.js'\n\nimport { client, gqlContext } from '@operato/graphql'\nimport { i18next, localize } from '@operato/i18n'\nimport { CommonPopupStyles, ScrollbarStyles } from '@operato/styles'\n\nimport { decisionButtons, firstCandidate, issueWords, neededWords, orderedIssues, taskSays, type ReviewIssue } from '../utils/access-request.js'\n\nconst REVIEW = gql`\n  query ($decision: AccessDecisionInput!) {\n    reviewAccessDecision(decision: $decision) {\n      code\n      blocking\n      field\n      params\n    }\n  }\n`\n\n/**\n * Deciding one access request (ADR-0103 · docs/design/access-request.md §6-1).\n *\n * The findings are the server's review - the same function the AI draft card and the decision door read - so\n * this popup never judges a role itself. Each change of role or reason asks again. A blocking finding takes\n * the button away; a warning stays beside it.\n */\n@customElement('access-decision-popup')\nexport class AccessDecisionPopup extends localize(i18next)(LitElement) {\n  static styles = [\n    CommonPopupStyles,\n    ScrollbarStyles,\n    css`\n      :host {\n        display: flex;\n        flex-direction: column;\n        overflow: hidden;\n        background-color: var(--md-sys-color-surface);\n      }\n      [body] {\n        flex: 1;\n        min-height: 0;\n        overflow: auto;\n        display: flex;\n        flex-direction: column;\n        gap: var(--spacing-medium);\n        padding: var(--spacing-large);\n      }\n      [who],\n      [why] {\n        font: var(--label-font, inherit);\n        color: var(--md-sys-color-on-surface-variant);\n      }\n      [needed] {\n        font: var(--title-font, inherit);\n      }\n      label[candidate] {\n        display: flex;\n        align-items: center;\n        gap: var(--spacing-small);\n      }\n      [count] {\n        color: var(--md-sys-color-on-surface-variant);\n      }\n      [issue][blocking] {\n        color: var(--md-sys-color-error);\n      }\n      [issue]:not([blocking]) {\n        color: var(--md-sys-color-tertiary);\n      }\n      [none] {\n        color: var(--md-sys-color-on-surface-variant);\n      }\n      md-outlined-text-field {\n        width: 100%;\n      }\n    `\n  ]\n\n  @property({ type: Object }) request: any\n\n  @state() private candidates: { id: string; name: string; privilegeCount: number; holdsTask: boolean }[] = []\n  @state() private roleId?: string\n  @state() private reason = ''\n  @state() private grantIssues: ReviewIssue[] | null = null\n  @state() private denyIssues: ReviewIssue[] | null = null\n\n  private asked = 0\n\n  async firstUpdated() {\n    const response = await client.query({\n      query: gql`\n        query ($category: String!, $privilege: String!, $taskId: String) {\n          rolesGranting(category: $category, privilege: $privilege, taskId: $taskId) {\n            id\n            name\n            privilegeCount\n            holdsTask\n          }\n        }\n      `,\n      variables: { category: this.request.category, privilege: this.request.privilege, taskId: this.request.taskId || null },\n      context: gqlContext(),\n      fetchPolicy: 'network-only'\n    })\n    this.candidates = response.data?.rolesGranting || []\n    this.roleId = firstCandidate(this.candidates)?.id\n    await this.review()\n  }\n\n  /** Asks the server again; an answer to an older question is dropped. */\n  private async review() {\n    const asked = ++this.asked\n    const ask = (decision: any) => client.query({ query: REVIEW, variables: { decision }, context: gqlContext(), fetchPolicy: 'network-only' })\n    const [grant, deny] = await Promise.all([\n      ask({ requestId: this.request.id, decision: 'GRANT', roleId: this.roleId }),\n      ask({ requestId: this.request.id, decision: 'DENY', reason: this.reason })\n    ])\n    if (asked !== this.asked) return\n    this.grantIssues = grant.errors?.length ? null : grant.data?.reviewAccessDecision || []\n    this.denyIssues = deny.errors?.length ? null : deny.data?.reviewAccessDecision || []\n  }\n\n  render() {\n    const t = i18next.t.bind(i18next)\n    const { request } = this\n    const buttons = decisionButtons(this.grantIssues, this.denyIssues)\n    const reasonIssues = (this.denyIssues || []).filter(issue => issue.field === 'reason')\n\n    return html`\n      <div body>\n        <div who>${t('access-request.text.who asks', { name: request.requester?.name || request.requester?.email || '' })}</div>\n        <div needed>${neededWords(t, request)}</div>\n        ${request.taskId && taskSays(t, request.taskId) ? html`<div who>${taskSays(t, request.taskId)}</div>` : nothing}\n        ${request.reason ? html`<div why>${request.reason}</div>` : nothing}\n\n        <div>${t('access-request.text.grant with role')}</div>\n        ${this.candidates.length === 0\n          ? html`<div none>${t('access-request.text.no role grants it')}</div>`\n          : this.candidates.map(\n              candidate => html`\n                <label candidate>\n                  <md-radio\n                    name=\"role\"\n                    .checked=${candidate.id === this.roleId}\n                    @change=${() => {\n                      this.roleId = candidate.id\n                      this.review()\n                    }}\n                  ></md-radio>\n                  <span>${candidate.name}</span>\n                  <span count>${t('access-request.text.privilege count', { count: candidate.privilegeCount })}</span>\n                </label>\n              `\n            )}\n        ${orderedIssues(this.grantIssues || []).map(issue => html`<div issue ?blocking=${issue.blocking}>${issueWords(t, issue)}</div>`)}\n\n        <md-outlined-text-field\n          label=${t('access-request.field.deny reason')}\n          type=\"textarea\"\n          rows=\"2\"\n          .value=${this.reason}\n          @input=${(e: any) => {\n            this.reason = e.target.value\n            this.review()\n          }}\n        ></md-outlined-text-field>\n        ${reasonIssues.length && this.reason ? reasonIssues.map(issue => html`<div issue blocking>${issueWords(t, issue)}</div>`) : nothing}\n      </div>\n\n      <ox-popup-actions>\n        <md-text-button slot=\"cancel\" @click=${() => history.back()}>${t('button.cancel')}</md-text-button>\n        <md-text-button slot=\"start\" ?disabled=${!buttons.deny} @click=${() => this.decide('DENY')}>\n          ${t('access-request.button.deny')}\n        </md-text-button>\n        <md-filled-button slot=\"confirm\" ?disabled=${!buttons.grant} @click=${() => this.decide('GRANT')}>\n          ${t('access-request.button.grant')}\n        </md-filled-button>\n      </ox-popup-actions>\n    `\n  }\n\n  private async decide(decision: 'GRANT' | 'DENY') {\n    const response = await client.mutate({\n      mutation: gql`\n        mutation ($decision: AccessDecisionInput!) {\n          decideAccessRequest(decision: $decision) {\n            id\n            state\n          }\n        }\n      `,\n      variables: {\n        decision:\n          decision === 'GRANT'\n            ? { requestId: this.request.id, decision, roleId: this.roleId }\n            : { requestId: this.request.id, decision, reason: this.reason }\n      },\n      context: gqlContext()\n    })\n\n    if (!response.errors?.length) {\n      this.dispatchEvent(new CustomEvent('access-request-decided', { bubbles: true, composed: true }))\n      history.back()\n    } else {\n      /* Somebody may have decided meanwhile - show what the server says now. */\n      await this.review()\n    }\n  }\n}\n"]}
+{"version":3,"file":"access-decision-popup.js","sourceRoot":"","sources":["../../client/components/access-decision-popup.ts"],"names":[],"mappings":";AAAA,OAAO,oCAAoC,CAAA;AAC3C,OAAO,qCAAqC,CAAA;AAC5C,OAAO,uCAAuC,CAAA;AAC9C,OAAO,8BAA8B,CAAA;AACrC,OAAO,gDAAgD,CAAA;AAEvD,OAAO,GAAG,MAAM,aAAa,CAAA;AAC7B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,KAAK,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAElE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEpE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAoB,MAAM,4BAA4B,CAAA;AAEhJ,MAAM,MAAM,GAAG,GAAG,CAAA;;;;;;;;;CASjB,CAAA;AAED;;;;;;GAMG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,QAAQ,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;IAA/D;;QAuDY,WAAM,GAAG,EAAE,CAAA;QAEpB,aAAQ,GAAG,IAAI,eAAe,CACpC,IAAI,EACJ,GAAG,CAAA;;;;;;;;;KASF,EACD;YACE,SAAS,EAAE,GAAG,EAAE,CACd,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YACxI,OAAO,EAAE,UAAU,EAAE;SACtB,CACF,CAAA;QAED;uCAC+B;QACvB,gBAAW,GAAG,IAAI,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE;YACtD,SAAS,EAAE,GAAG,EAAE,CACd,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;YACvH,OAAO,EAAE,UAAU,EAAE;YACrB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAA;QAEM,eAAU,GAAG,IAAI,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE;YACrD,SAAS,EAAE,GAAG,EAAE,CACd,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;YACtH,OAAO,EAAE,UAAU,EAAE;YACrB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAA;IAkGJ,CAAC;aA3LQ,WAAM,GAAG;QACd,iBAAiB;QACjB,eAAe;QACf,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4CF;KACF,AAhDY,CAgDZ;IA2CD,IAAY,UAAU;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,IAAI,EAAE,CAAA;IAChD,CAAC;IAED,IAAY,MAAM;QAChB,OAAO,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAA;IAC3D,CAAC;IAED,IAAY,WAAW;QACrB,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACnC,CAAC;IAED,IAAY,UAAU;QACpB,OAAO,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAClC,CAAC;IAED,MAAM;QACJ,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACjC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;QACxB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAClE,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAA;QAEtF,OAAO,IAAI,CAAA;;mBAEI,CAAC,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;sBACnG,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC;UACnC,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA,YAAY,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;UAC7G,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA,YAAY,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,OAAO;;eAE5D,CAAC,CAAC,qCAAqC,CAAC;UAC7C,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAC5B,CAAC,CAAC,IAAI,CAAA,aAAa,CAAC,CAAC,uCAAuC,CAAC,QAAQ;YACrE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CACjB,SAAS,CAAC,EAAE,CAAC,IAAI,CAAA;;;;+BAIA,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM;8BAC7B,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;;0BAEtC,SAAS,CAAC,IAAI;gCACR,CAAC,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC;;eAE9F,CACF;UACH,aAAa,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAA,wBAAwB,KAAK,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC;;;kBAGtH,CAAC,CAAC,kCAAkC,CAAC;;;mBAGpC,IAAI,CAAC,MAAM;mBACX,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;;UAEnD,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAA,uBAAuB,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO;;;;+CAI5F,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,eAAe,CAAC;iDACxC,CAAC,OAAO,CAAC,IAAI,WAAW,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtF,CAAC,CAAC,4BAA4B,CAAC;;qDAEU,CAAC,OAAO,CAAC,KAAK,WAAW,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAC5F,CAAC,CAAC,6BAA6B,CAAC;;;KAGvC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,QAA0B;QAC7C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,GAAG,CAAA;;;;;;;OAOZ;YACD,SAAS,EAAE;gBACT,QAAQ,EACN,QAAQ,KAAK,OAAO;oBAClB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;oBAC/D,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;aACpE;YACD,OAAO,EAAE,UAAU,EAAE;SACtB,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YAC7B,IAAI,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAChG,OAAO,CAAC,IAAI,EAAE,CAAA;QAChB,CAAC;aAAM,CAAC;YACN,0EAA0E;YAC1E,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAC5E,CAAC;IACH,CAAC;;AAxI2B;IAA3B,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;oDAAa;AAGvB;IAAhB,KAAK,EAAE;;mDAAwB;AACf;IAAhB,KAAK,EAAE;;mDAAoB;AAvDjB,mBAAmB;IAD/B,aAAa,CAAC,uBAAuB,CAAC;GAC1B,mBAAmB,CA4L/B;;AAED,kFAAkF;AAClF,SAAS,QAAQ,CAAC,MAAuB;IACvC,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAA;AAC/C,CAAC","sourcesContent":["import '@operato/popup/ox-popup-actions.js'\nimport '@material/web/button/text-button.js'\nimport '@material/web/button/filled-button.js'\nimport '@material/web/radio/radio.js'\nimport '@material/web/textfield/outlined-text-field.js'\n\nimport gql from 'graphql-tag'\nimport { css, html, LitElement, nothing } from 'lit'\nimport { customElement, property, state } from 'lit/decorators.js'\n\nimport { client, gqlContext, QueryController } from '@operato/graphql'\nimport { i18next, localize } from '@operato/i18n'\nimport { CommonPopupStyles, ScrollbarStyles } from '@operato/styles'\n\nimport { decisionButtons, firstCandidate, issueWords, neededWords, orderedIssues, taskSays, type ReviewIssue } from '../utils/access-request.js'\n\nconst REVIEW = gql`\n  query ($decision: AccessDecisionInput!) {\n    reviewAccessDecision(decision: $decision) {\n      code\n      blocking\n      field\n      params\n    }\n  }\n`\n\n/**\n * Deciding one access request (ADR-0103 · docs/design/access-request.md §6-1).\n *\n * The findings are the server's review - the same function the AI draft card and the decision door read - so\n * this popup never judges a role itself. Each change of role or reason asks again. A blocking finding takes\n * the button away; a warning stays beside it.\n */\n@customElement('access-decision-popup')\nexport class AccessDecisionPopup extends localize(i18next)(LitElement) {\n  static styles = [\n    CommonPopupStyles,\n    ScrollbarStyles,\n    css`\n      :host {\n        display: flex;\n        flex-direction: column;\n        overflow: hidden;\n        background-color: var(--md-sys-color-surface);\n      }\n      [body] {\n        flex: 1;\n        min-height: 0;\n        overflow: auto;\n        display: flex;\n        flex-direction: column;\n        gap: var(--spacing-medium);\n        padding: var(--spacing-large);\n      }\n      [who],\n      [why] {\n        font: var(--label-font, inherit);\n        color: var(--md-sys-color-on-surface-variant);\n      }\n      [needed] {\n        font: var(--title-font, inherit);\n      }\n      label[candidate] {\n        display: flex;\n        align-items: center;\n        gap: var(--spacing-small);\n      }\n      [count] {\n        color: var(--md-sys-color-on-surface-variant);\n      }\n      [issue][blocking] {\n        color: var(--md-sys-color-error);\n      }\n      [issue]:not([blocking]) {\n        color: var(--md-sys-color-tertiary);\n      }\n      [none] {\n        color: var(--md-sys-color-on-surface-variant);\n      }\n      md-outlined-text-field {\n        width: 100%;\n      }\n    `\n  ]\n\n  @property({ type: Object }) request: any\n\n  /** The role chosen; until one is, the first candidate. */\n  @state() private chosen?: string\n  @state() private reason = ''\n\n  private granting = new QueryController(\n    this,\n    gql`\n      query ($category: String!, $privilege: String!, $taskId: String) {\n        rolesGranting(category: $category, privilege: $privilege, taskId: $taskId) {\n          id\n          name\n          privilegeCount\n          holdsTask\n        }\n      }\n    `,\n    {\n      variables: () =>\n        this.request ? { category: this.request.category, privilege: this.request.privilege, taskId: this.request.taskId || null } : undefined,\n      context: gqlContext()\n    }\n  )\n\n  /* The server reviews both decisions as they stand now - the role chosen, the reason typed. While a new review is out,\n     the last one stays drawn. */\n  private grantReview = new QueryController(this, REVIEW, {\n    variables: () =>\n      this.granting.data ? { decision: { requestId: this.request.id, decision: 'GRANT', roleId: this.roleId } } : undefined,\n    context: gqlContext(),\n    keepPrevious: true\n  })\n\n  private denyReview = new QueryController(this, REVIEW, {\n    variables: () =>\n      this.granting.data ? { decision: { requestId: this.request.id, decision: 'DENY', reason: this.reason } } : undefined,\n    context: gqlContext(),\n    keepPrevious: true\n  })\n\n  private get candidates(): { id: string; name: string; privilegeCount: number; holdsTask: boolean }[] {\n    return this.granting.data?.rolesGranting || []\n  }\n\n  private get roleId(): string | undefined {\n    return this.chosen ?? firstCandidate(this.candidates)?.id\n  }\n\n  private get grantIssues(): ReviewIssue[] | null {\n    return issuesOf(this.grantReview)\n  }\n\n  private get denyIssues(): ReviewIssue[] | null {\n    return issuesOf(this.denyReview)\n  }\n\n  render() {\n    const t = i18next.t.bind(i18next)\n    const { request } = this\n    const buttons = decisionButtons(this.grantIssues, this.denyIssues)\n    const reasonIssues = (this.denyIssues || []).filter(issue => issue.field === 'reason')\n\n    return html`\n      <div body>\n        <div who>${t('access-request.text.who asks', { name: request.requester?.name || request.requester?.email || '' })}</div>\n        <div needed>${neededWords(t, request)}</div>\n        ${request.taskId && taskSays(t, request.taskId) ? html`<div who>${taskSays(t, request.taskId)}</div>` : nothing}\n        ${request.reason ? html`<div why>${request.reason}</div>` : nothing}\n\n        <div>${t('access-request.text.grant with role')}</div>\n        ${this.candidates.length === 0\n          ? html`<div none>${t('access-request.text.no role grants it')}</div>`\n          : this.candidates.map(\n              candidate => html`\n                <label candidate>\n                  <md-radio\n                    name=\"role\"\n                    .checked=${candidate.id === this.roleId}\n                    @change=${() => (this.chosen = candidate.id)}\n                  ></md-radio>\n                  <span>${candidate.name}</span>\n                  <span count>${t('access-request.text.privilege count', { count: candidate.privilegeCount })}</span>\n                </label>\n              `\n            )}\n        ${orderedIssues(this.grantIssues || []).map(issue => html`<div issue ?blocking=${issue.blocking}>${issueWords(t, issue)}</div>`)}\n\n        <md-outlined-text-field\n          label=${t('access-request.field.deny reason')}\n          type=\"textarea\"\n          rows=\"2\"\n          .value=${this.reason}\n          @input=${(e: any) => (this.reason = e.target.value)}\n        ></md-outlined-text-field>\n        ${reasonIssues.length && this.reason ? reasonIssues.map(issue => html`<div issue blocking>${issueWords(t, issue)}</div>`) : nothing}\n      </div>\n\n      <ox-popup-actions>\n        <md-text-button slot=\"cancel\" @click=${() => history.back()}>${t('button.cancel')}</md-text-button>\n        <md-text-button slot=\"start\" ?disabled=${!buttons.deny} @click=${() => this.decide('DENY')}>\n          ${t('access-request.button.deny')}\n        </md-text-button>\n        <md-filled-button slot=\"confirm\" ?disabled=${!buttons.grant} @click=${() => this.decide('GRANT')}>\n          ${t('access-request.button.grant')}\n        </md-filled-button>\n      </ox-popup-actions>\n    `\n  }\n\n  private async decide(decision: 'GRANT' | 'DENY') {\n    const response = await client.mutate({\n      mutation: gql`\n        mutation ($decision: AccessDecisionInput!) {\n          decideAccessRequest(decision: $decision) {\n            id\n            state\n          }\n        }\n      `,\n      variables: {\n        decision:\n          decision === 'GRANT'\n            ? { requestId: this.request.id, decision, roleId: this.roleId }\n            : { requestId: this.request.id, decision, reason: this.reason }\n      },\n      context: gqlContext()\n    })\n\n    if (!response.errors?.length) {\n      this.dispatchEvent(new CustomEvent('access-request-decided', { bubbles: true, composed: true }))\n      history.back()\n    } else {\n      /* Somebody may have decided meanwhile - show what the server says now. */\n      await Promise.all([this.grantReview.refetch(), this.denyReview.refetch()])\n    }\n  }\n}\n\n/** A review that failed says nothing - the buttons wait for one that answered. */\nfunction issuesOf(review: QueryController): ReviewIssue[] | null {\n  if (review.error || !review.data) return null\n  return review.data.reviewAccessDecision || []\n}\n"]}

package/dist-client/components/access-request-popup.d.ts

@@ -20,18 +20,23 @@ export declare class AccessRequestPopup extends AccessRequestPopup_base {
     category: string;
     privilege: string;
     operationName?: string;
+    /** What the person typed; until then, the reason of the request already waiting. */
+    private typed?;
+    /** The task chosen; until one is, the one the waiting request named, else the first. */
+    private chosen?;
+    private standing;
+    private request;
+    private get mine();
     /** The request of this person and privilege that is still waiting, if any. */
-    private waiting;
+    private get waiting();
     /** A denial of the same privilege in the last days - its reason is shown before the person writes (Q9 · 5). */
-    private denied;
+    private get denied();
     /** How many people a request reaches - said before sending (Q9 · 2). */
-    private deciders;
-    private reason;
-    private sending;
+    private get deciders();
+    private get reason();
     /** The tasks that hold the refused privilege, fewest privileges first - the server's order (tasksGranting). */
-    private tasks;
-    private taskId?;
-    firstUpdated(): Promise<void>;
+    private get tasks();
+    private get taskId();
     render(): import("lit-html").TemplateResult<1>;
     /** The work the refused privilege belongs to - one line for one task, a choice for several, the privilege for none. */
     private renderNeeded;

package/dist-client/components/access-request-popup.js

@@ -6,7 +6,7 @@ import '@material/web/textfield/outlined-text-field.js';
 import gql from 'graphql-tag';
 import { css, html, LitElement } from 'lit';
 import { customElement, property, state } from 'lit/decorators.js';
-import { client, gqlContext } from '@operato/graphql';
+import { gqlContext, MutationController, QueryController } from '@operato/graphql';
 import { i18next, localize } from '@operato/i18n';
 import { CommonPopupStyles } from '@operato/styles';
 import '@material/web/radio/radio.js';
@@ -26,16 +26,37 @@ let AccessRequestPopup = class AccessRequestPopup extends localize(i18next)(LitE
         super(...arguments);
         this.category = '';
         this.privilege = '';
-        /** The request of this person and privilege that is still waiting, if any. */
-        this.waiting = null;
-        /** A denial of the same privilege in the last days - its reason is shown before the person writes (Q9 · 5). */
-        this.denied = null;
-        /** How many people a request reaches - said before sending (Q9 · 2). */
-        this.deciders = null;
-        this.reason = '';
-        this.sending = false;
-        /** The tasks that hold the refused privilege, fewest privileges first - the server's order (tasksGranting). */
-        this.tasks = [];
+        this.standing = new QueryController(this, gql `
+      query ($category: String!, $privilege: String!) {
+        myAccessRequests {
+          id
+          category
+          privilege
+          taskId
+          state
+          reason
+          count
+          lastRequestedAt
+          decidedAt
+          decisionReason
+        }
+        accessRequestDeciderCount
+        tasksGranting(category: $category, privilege: $privilege) {
+          taskId
+        }
+      }
+    `, {
+            variables: () => (this.category && this.privilege ? { category: this.category, privilege: this.privilege } : undefined),
+            context: gqlContext()
+        });
+        this.request = new MutationController(this, gql `
+      mutation ($request: NewAccessRequest!) {
+        requestAccess(request: $request) {
+          id
+          count
+        }
+      }
+    `, { context: gqlContext() });
     }
     static { this.styles = [
         CommonPopupStyles,
@@ -89,40 +110,32 @@ let AccessRequestPopup = class AccessRequestPopup extends localize(i18next)(LitE
       }
     `
     ]; }
-    async firstUpdated() {
-        const response = await client.query({
-            query: gql `
-        query ($category: String!, $privilege: String!) {
-          myAccessRequests {
-            id
-            category
-            privilege
-            taskId
-            state
-            reason
-            count
-            lastRequestedAt
-            decidedAt
-            decisionReason
-          }
-          accessRequestDeciderCount
-          tasksGranting(category: $category, privilege: $privilege) {
-            taskId
-          }
-        }
-      `,
-            variables: { category: this.category, privilege: this.privilege },
-            context: gqlContext(),
-            fetchPolicy: 'network-only'
-        });
-        const mine = response.data?.myAccessRequests || [];
-        this.waiting = mine.find((r) => r.state === 'PENDING' && r.category === this.category && r.privilege === this.privilege) || null;
-        this.denied = this.waiting ? null : recentDenial(mine, this.category, this.privilege) || null;
-        this.deciders = typeof response.data?.accessRequestDeciderCount === 'number' ? response.data.accessRequestDeciderCount : null;
-        this.reason = this.waiting?.reason || '';
-        this.tasks = response.data?.tasksGranting || [];
-        /* A request already waiting keeps the work it named - asking again adds to it and does not change it. */
-        this.taskId = this.tasks.find(task => task.taskId === this.waiting?.taskId)?.taskId ?? this.tasks[0]?.taskId;
+    get mine() {
+        return this.standing.data?.myAccessRequests || [];
+    }
+    /** The request of this person and privilege that is still waiting, if any. */
+    get waiting() {
+        return this.mine.find((r) => r.state === 'PENDING' && r.category === this.category && r.privilege === this.privilege) || null;
+    }
+    /** A denial of the same privilege in the last days - its reason is shown before the person writes (Q9 · 5). */
+    get denied() {
+        return this.waiting ? null : recentDenial(this.mine, this.category, this.privilege) || null;
+    }
+    /** How many people a request reaches - said before sending (Q9 · 2). */
+    get deciders() {
+        const count = this.standing.data?.accessRequestDeciderCount;
+        return typeof count === 'number' ? count : null;
+    }
+    get reason() {
+        return this.typed ?? (this.waiting?.reason || '');
+    }
+    /** The tasks that hold the refused privilege, fewest privileges first - the server's order (tasksGranting). */
+    get tasks() {
+        return this.standing.data?.tasksGranting || [];
+    }
+    /* A request already waiting keeps the work it named - asking again adds to it and does not change it. */
+    get taskId() {
+        return this.chosen ?? this.tasks.find(task => task.taskId === this.waiting?.taskId)?.taskId ?? this.tasks[0]?.taskId;
     }
     render() {
         return html `
@@ -150,7 +163,7 @@ let AccessRequestPopup = class AccessRequestPopup extends localize(i18next)(LitE
           type="textarea"
           rows="2"
           .value=${this.reason}
-          @input=${(e) => (this.reason = e.target.value)}
+          @input=${(e) => (this.typed = e.target.value)}
         ></md-outlined-text-field>
         ${this.deciders === null
             ? ''
@@ -163,7 +176,7 @@ let AccessRequestPopup = class AccessRequestPopup extends localize(i18next)(LitE
 
       <ox-popup-actions>
         <md-text-button slot="cancel" @click=${() => history.back()}>${i18next.t('button.cancel')}</md-text-button>
-        <md-filled-button slot="confirm" ?disabled=${this.sending || !maySend(this.reason, this.denied) || this.deciders === 0} @click=${this.send}>
+        <md-filled-button slot="confirm" ?disabled=${this.request.pending || !maySend(this.reason, this.denied) || this.deciders === 0} @click=${this.send}>
           ${i18next.t('access-request.button.send')}
         </md-filled-button>
       </ox-popup-actions>
@@ -181,7 +194,7 @@ let AccessRequestPopup = class AccessRequestPopup extends localize(i18next)(LitE
         }
         return this.tasks.map(task => html `
         <label task>
-          <md-radio name="task" .checked=${task.taskId === this.taskId} @change=${() => (this.taskId = task.taskId)}></md-radio>
+          <md-radio name="task" .checked=${task.taskId === this.taskId} @change=${() => (this.chosen = task.taskId)}></md-radio>
           <span>
             <div choice>${taskName(t, task.taskId)}</div>
             ${taskSays(t, task.taskId) ? html `<div says>${taskSays(t, task.taskId)}</div>` : ''}
@@ -190,38 +203,21 @@ let AccessRequestPopup = class AccessRequestPopup extends localize(i18next)(LitE
       `);
     }
     async send() {
-        this.sending = true;
-        try {
-            const response = await client.mutate({
-                mutation: gql `
-          mutation ($request: NewAccessRequest!) {
-            requestAccess(request: $request) {
-              id
-              count
+        const sent = await this.request.run({
+            request: {
+                category: this.category,
+                privilege: this.privilege,
+                operationName: this.operationName,
+                taskId: this.taskId,
+                reason: this.reason.trim()
             }
-          }
-        `,
-                variables: {
-                    request: {
-                        category: this.category,
-                        privilege: this.privilege,
-                        operationName: this.operationName,
-                        taskId: this.taskId,
-                        reason: this.reason.trim()
-                    }
-                },
-                context: gqlContext()
-            });
-            if (!response.errors?.length) {
-                const merged = (response.data?.requestAccess?.count || 1) > 1;
-                document.dispatchEvent(new CustomEvent('notify', {
-                    detail: { level: 'info', message: i18next.t(merged ? 'access-request.text.added to waiting' : 'access-request.text.sent') }
-                }));
-                history.back();
-            }
-        }
-        finally {
-            this.sending = false;
+        });
+        if (sent) {
+            const merged = (sent.requestAccess?.count || 1) > 1;
+            document.dispatchEvent(new CustomEvent('notify', {
+                detail: { level: 'info', message: i18next.t(merged ? 'access-request.text.added to waiting' : 'access-request.text.sent') }
+            }));
+            history.back();
         }
     }
 };
@@ -239,32 +235,12 @@ __decorate([
 ], AccessRequestPopup.prototype, "operationName", void 0);
 __decorate([
     state(),
-    __metadata("design:type", Object)
-], AccessRequestPopup.prototype, "waiting", void 0);
-__decorate([
-    state(),
-    __metadata("design:type", Object)
-], AccessRequestPopup.prototype, "denied", void 0);
-__decorate([
-    state(),
-    __metadata("design:type", Object)
-], AccessRequestPopup.prototype, "deciders", void 0);
-__decorate([
-    state(),
-    __metadata("design:type", Object)
-], AccessRequestPopup.prototype, "reason", void 0);
-__decorate([
-    state(),
-    __metadata("design:type", Object)
-], AccessRequestPopup.prototype, "sending", void 0);
-__decorate([
-    state(),
-    __metadata("design:type", Array)
-], AccessRequestPopup.prototype, "tasks", void 0);
+    __metadata("design:type", String)
+], AccessRequestPopup.prototype, "typed", void 0);
 __decorate([
     state(),
     __metadata("design:type", String)
-], AccessRequestPopup.prototype, "taskId", void 0);
+], AccessRequestPopup.prototype, "chosen", void 0);
 AccessRequestPopup = __decorate([
     customElement('access-request-popup')
 ], AccessRequestPopup);