@things-factory/auth-ui 10.1.256 → 10.1.258

package/dist-client/pages/role/role-task-review.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"role-task-review.test.js","sourceRoot":"","sources":["../../../client/pages/role/role-task-review.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AACjC,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB;;;;;GAKG;AAEH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,EAAE,OAAO,CAAC,CAAA;AACpF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA;AAEjF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;AAC9F,MAAM,KAAK,GAAG,OAAO,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAA;AACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,yBAAyB,EAAE,0BAA0B,CAAC,CAAA;AAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,+BAA+B,EAAE,2BAA2B,CAAC,CAAA;AAClF,MAAM,OAAO,GAAG,OAAO,CAAC,gCAAgC,EAAE,wBAAwB,CAAC,CAAA;AACnF,MAAM,OAAO,GAAG,OAAO,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAAA;AAC9E,MAAM,GAAG,GAAG,OAAO,CAAC,2BAA2B,EAAE,wBAAwB,CAAC,CAAA;AAC1E,MAAM,UAAU,GAAG,OAAO,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAA;AAChF,MAAM,IAAI,GAAG,OAAO,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,CAAA;AAEtE,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,0FAA0F,EAAE,GAAG,EAAE;QAClG,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAA;QAC/D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qHAAqH,EAAE,GAAG,EAAE;QAC7H,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAA;QACpE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4GAA4G,EAAE,GAAG,EAAE;QACpH,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAA;QACxF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAA;QACxF,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAA;QAChD,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAA;QAClG,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAA;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAA;QACvD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,oEAAoE,CAAC,CAAA;QAC7F,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yGAAyG,EAAE,GAAG,EAAE;QACjH,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAA;QACnF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAA;QACtF,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAA;QAC1E,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAA;QACxE,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,oHAAoH,CAAC,CAAA;IAChJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAA;QAC1D,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QACxC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAClG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mGAAmG,EAAE,GAAG,EAAE;QAC3G,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,0EAA0E,CAAC,CAAA;QAC/F,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAA;QACvF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,yEAAyE,CAAC,CAAA;QAC9F,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,qGAAqG,CAAC,CAAA;IACjI,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { readFileSync } from 'fs'\nimport path from 'path'\n\n/**\n * The role privilege page reads a role by task and against its base template (ADR-0139 decision 11; ADR-0075\n * decision 1, amended 2026-10-26). What is computed - all, some, none, wider, missing - is tested in auth-base (`tests/role-task.test.ts`,\n * `tests/role-template-gap-db.test.ts`); this holds what the screen does with it. The page needs a DOM, so the test\n * reads its source with comments stripped.\n */\n\nconst source = readFileSync(path.join(__dirname, 'role-privilege-page.ts'), 'utf-8')\nconst code = source.replace(/\\/\\*[\\s\\S]*?\\*\\//g, '').replace(/^\\s*\\/\\/.*$/gm, '')\n\nconst between = (from: string, to: string) => code.slice(code.indexOf(from), code.indexOf(to))\nconst tasks = between('private renderTasks(', 'private renderTask(')\nconst template = between('private renderTemplate(', 'private renderSentences(')\nconst pick = between('private async fetchTemplates(', 'private async addMissing(')\nconst setBase = between('private async setBaseTemplate(', 'private async readGap(')\nconst readGap = between('private async readGap(', 'private async addMissing(')\nconst add = between('private async addMissing(', '\\n  private cellCount(')\nconst editButton = between('private taskEditButton(', 'private async editTask(')\nconst edit = between('private async editTask(', 'private renderTask(')\n\ndescribe('the role by task and against a template', () => {\n  it('★ asks the server for the coverage with the role - the screen keeps no copy of the tasks', () => {\n    expect(code).toMatch(/taskCoverage\\s*\\{\\s*tasks\\s*\\{\\s*taskId/)\n    expect(code).not.toMatch(/registerRoleTask|ROLE_TASKS/)\n  })\n\n  it('★ edits by task through the rule - what is added is what the role lacks, what is taken off spares other whole tasks', () => {\n    expect(edit).toMatch(/pairsToRemove\\(task, this\\.coverage\\.tasks\\)/)\n    expect(edit).toMatch(/pairsToAdd\\(task\\)/)\n    expect(tasks).not.toMatch(/createRoleFromTemplate/)\n  })\n\n  it('★ shows the privileges before saving, and offers no task edit over unsaved changes or on an inherited role', () => {\n    expect(edit).toMatch(/if \\(this\\.dirty \\|\\| this\\.saving \\|\\| this\\.inherited\\) return/)\n    expect(edit.indexOf('OxPrompt.open(')).toBeLessThan(edit.indexOf('await this.onSave()'))\n    expect(edit).toMatch(/if \\(!confirmed\\) return/)\n    expect(editButton).toMatch(/if \\(this\\.inherited \\|\\| task\\.status === 'broken'\\) return nothing/)\n    expect(editButton).toMatch(/const disabled = this\\.dirty \\|\\| this\\.saving/)\n  })\n\n  it('★ keeps the tasks the role holds nothing of folded, and what no task names apart', () => {\n    expect(tasks).toMatch(/task\\.status === 'none'/)\n    expect(tasks).toMatch(/this\\.showUnheldTasks\\s*\\?/)\n    expect(tasks).toMatch(/this\\.coverage\\.unclassified/)\n  })\n\n  it('★ lays the role against its stored base, never a template found by the role\\'s name', () => {\n    expect(code).toMatch(/templateId\\s+domain\\s*\\{/)\n    expect(code).not.toMatch(/one\\.name === this\\.subject/)\n    expect(readGap).toMatch(/const baseId = this\\.subject\\?\\.templateId\\s*if \\(!baseId\\) return/)\n    expect(readGap).toMatch(/templateGap \\{/)\n  })\n\n  it('★ saves the picked base at once through updateRole, touching no privilege, and not on an inherited role', () => {\n    expect(template).toMatch(/@change=\\$\\{\\(event: Event\\) => this\\.setBaseTemplate\\(/)\n    expect(template).toMatch(/<select \\?disabled=\\$\\{this\\.inherited \\|\\| this\\.saving\\}/)\n    expect(setBase).toMatch(/if \\(this\\.inherited \\|\\| this\\.saving\\) return/)\n    expect(setBase).toMatch(/patch: \\{ templateId: templateId \\|\\| null \\}/)\n    expect(setBase).not.toMatch(/privileges/)\n  })\n\n  it('★ says so when the base is a template this installation does not declare', () => {\n    expect(template).toMatch(/baseId && !template \\? html`<div note attention>\\$\\{i18next\\.t\\('text\\.base template not in this installation'\\)\\}/)\n  })\n\n  it('★ shows what the role holds beyond the template as wider, with nothing to take it away', () => {\n    expect(template).toMatch(/label\\.wider than the template/)\n    expect(template).toMatch(/gap\\.extra\\b/)\n    expect(template.slice(template.indexOf('label.wider than the template'))).not.toMatch(/<button/)\n  })\n\n  it('★ adds what is missing onto this role by its name, after showing it, and not over unsaved changes', () => {\n    expect(add).toMatch(/OxPrompt\\.open\\(/)\n    expect(add).toMatch(/if \\(!gap\\?\\.missingCount \\|\\| this\\.dirty \\|\\| this\\.inherited\\) return/)\n    expect(add).toMatch(/createRoleFromTemplate\\(templateId: \\$templateId, name: \\$name\\)/)\n    expect(add).toMatch(/variables: \\{ templateId: gap\\.templateId, name: this\\.subject\\.name \\}/)\n    expect(template).toMatch(/\\?disabled=\\$\\{this\\.dirty \\|\\| this\\.saving \\|\\| Boolean\\(template\\?\\.definitionErrors\\.length\\)\\}/)\n  })\n\n  it('names a task in the words of the module that declares it, the id when there are none', () => {\n    expect(code).toMatch(/i18next\\.t\\(`task\\.\\$\\{id\\}\\.name`, \\{ defaultValue: id \\}\\)/)\n  })\n})\n"]}
+{"version":3,"file":"role-task-review.test.js","sourceRoot":"","sources":["../../../client/pages/role/role-task-review.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AACjC,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB;;;;;GAKG;AAEH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,EAAE,OAAO,CAAC,CAAA;AACpF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA;AAEjF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;AAC9F,MAAM,KAAK,GAAG,OAAO,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAA;AACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,yBAAyB,EAAE,0BAA0B,CAAC,CAAA;AAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,+BAA+B,EAAE,2BAA2B,CAAC,CAAA;AAClF,MAAM,OAAO,GAAG,OAAO,CAAC,gCAAgC,EAAE,4BAA4B,CAAC,CAAA;AACvF,MAAM,GAAG,GAAG,OAAO,CAAC,2BAA2B,EAAE,wBAAwB,CAAC,CAAA;AAC1E,MAAM,UAAU,GAAG,OAAO,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAA;AAChF,MAAM,IAAI,GAAG,OAAO,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,CAAA;AAEtE,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,0FAA0F,EAAE,GAAG,EAAE;QAClG,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAA;QAC/D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qHAAqH,EAAE,GAAG,EAAE;QAC7H,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAA;QACpE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4GAA4G,EAAE,GAAG,EAAE;QACpH,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAA;QAClF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAA;QACxF,oGAAoG;QACpG,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kIAAkI,CAAC,CAAA;QACxJ,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAA;QAClG,uFAAuF;QACvF,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAA;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAA;QACvD,mGAAmG;QACnG,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,yEAAyE,CAAC,CAAA;QAC/F,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yGAAyG,EAAE,GAAG,EAAE;QACjH,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAA;QACnF,uGAAuG;QACvG,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,sHAAsH,CAAC,CAAA;QAChJ,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,2FAA2F,CAAC,CAAA;QACpH,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,wFAAwF,CAAC,CAAA;QACjH,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,oHAAoH,CAAC,CAAA;IAChJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAA;QAC1D,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QACxC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAC5G,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mGAAmG,EAAE,GAAG,EAAE;QAC3G,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,sFAAsF,CAAC,CAAA;QAC3G,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,wHAAwH,CAAC,CAAA;QAC7I,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAA;QACxF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,+EAA+E,CAAC,CAAA;QACpG,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,uGAAuG,CAAC,CAAA;IACnI,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { readFileSync } from 'fs'\nimport path from 'path'\n\n/**\n * The role privilege page reads a role by task and against its base template (ADR-0139 decision 11; ADR-0075\n * decision 1, amended 2026-10-26). What is computed - all, some, none, wider, missing - is tested in auth-base (`tests/role-task.test.ts`,\n * `tests/role-template-gap-db.test.ts`); this holds what the screen does with it. The page needs a DOM, so the test\n * reads its source with comments stripped.\n */\n\nconst source = readFileSync(path.join(__dirname, 'role-privilege-page.ts'), 'utf-8')\nconst code = source.replace(/\\/\\*[\\s\\S]*?\\*\\//g, '').replace(/^\\s*\\/\\/.*$/gm, '')\n\nconst between = (from: string, to: string) => code.slice(code.indexOf(from), code.indexOf(to))\nconst tasks = between('private renderTasks(', 'private renderTask(')\nconst template = between('private renderTemplate(', 'private renderSentences(')\nconst pick = between('private async fetchTemplates(', 'private async addMissing(')\nconst setBase = between('private async setBaseTemplate(', 'private async removeExtra(')\nconst add = between('private async addMissing(', '\\n  private cellCount(')\nconst editButton = between('private taskEditButton(', 'private async editTask(')\nconst edit = between('private async editTask(', 'private renderTask(')\n\ndescribe('the role by task and against a template', () => {\n  it('★ asks the server for the coverage with the role - the screen keeps no copy of the tasks', () => {\n    expect(code).toMatch(/taskCoverage\\s*\\{\\s*tasks\\s*\\{\\s*taskId/)\n    expect(code).not.toMatch(/registerRoleTask|ROLE_TASKS/)\n  })\n\n  it('★ edits by task through the rule - what is added is what the role lacks, what is taken off spares other whole tasks', () => {\n    expect(edit).toMatch(/pairsToRemove\\(task, this\\.coverage\\.tasks\\)/)\n    expect(edit).toMatch(/pairsToAdd\\(task\\)/)\n    expect(tasks).not.toMatch(/createRoleFromTemplate/)\n  })\n\n  it('★ shows the privileges before saving, and offers no task edit over unsaved changes or on an inherited role', () => {\n    expect(edit).toMatch(/if \\(!roleId \\|\\| this\\.dirty \\|\\| !this\\.savable\\) return/)\n    expect(edit.indexOf('OxPrompt.open(')).toBeLessThan(edit.indexOf('await this.onSave()'))\n    /* A confirmation for a role the screen moved on from, or read again, changes nothing (ADR-0190). */\n    expect(edit).toMatch(/if \\(!confirmed \\|\\| this\\.shownRoleId !== roleId \\|\\| this\\.coverage !== coverage \\|\\| this\\.dirty \\|\\| !this\\.savable\\) return/)\n    expect(editButton).toMatch(/if \\(this\\.inherited \\|\\| task\\.status === 'broken'\\) return nothing/)\n    /* Every change of the role's privileges waits while one is out (savable, ADR-0190). */\n    expect(editButton).toMatch(/const disabled = this\\.dirty \\|\\| !this\\.savable/)\n  })\n\n  it('★ keeps the tasks the role holds nothing of folded, and what no task names apart', () => {\n    expect(tasks).toMatch(/task\\.status === 'none'/)\n    expect(tasks).toMatch(/this\\.showUnheldTasks\\s*\\?/)\n    expect(tasks).toMatch(/this\\.coverage\\.unclassified/)\n  })\n\n  it('★ lays the role against its stored base, never a template found by the role\\'s name', () => {\n    expect(code).toMatch(/templateId\\s+domain\\s*\\{/)\n    expect(code).not.toMatch(/one\\.name === this\\.subject/)\n    /* Read while the comparison is open, for the role shown and only when it has a base (ADR-0190). */\n    expect(code).toMatch(/return this\\.view === 'template' && roleId && this\\.subject\\.templateId/)\n    expect(code).toMatch(/templateGap \\{/)\n  })\n\n  it('★ saves the picked base at once through updateRole, touching no privilege, and not on an inherited role', () => {\n    expect(template).toMatch(/@change=\\$\\{\\(event: Event\\) => this\\.setBaseTemplate\\(/)\n    /* One change at a time (ADR-0190): the choice is locked while one is out, and shows the base saved. */\n    expect(template).toMatch(/<select \\.value=\\$\\{live\\(baseId\\)\\} \\?disabled=\\$\\{this\\.inherited \\|\\| this\\.saving \\|\\| this\\.baseSave\\.pending\\}/)\n    expect(setBase).toMatch(/if \\(!roleId \\|\\| this\\.inherited \\|\\| this\\.saving \\|\\| this\\.baseSave\\.pending\\) return/)\n    expect(setBase).toMatch(/this\\.baseSave\\.run\\(\\{ id: roleId, patch: \\{ templateId: templateId \\|\\| null \\} \\}\\)/)\n    expect(setBase).not.toMatch(/privileges/)\n  })\n\n  it('★ says so when the base is a template this installation does not declare', () => {\n    expect(template).toMatch(/baseId && !template \\? html`<div note attention>\\$\\{i18next\\.t\\('text\\.base template not in this installation'\\)\\}/)\n  })\n\n  it('★ shows extra privileges with an explicit removal action', () => {\n    expect(template).toMatch(/label\\.wider than the template/)\n    expect(template).toMatch(/gap\\.extra\\b/)\n    expect(template.slice(template.indexOf('label.wider than the template'))).toMatch(/this\\.removeExtra\\(\\)/)\n  })\n\n  it('★ adds what is missing onto this role by its name, after showing it, and not over unsaved changes', () => {\n    expect(add).toMatch(/OxPrompt\\.open\\(/)\n    expect(add).toMatch(/if \\(!gap\\?\\.missingCount \\|\\| !roleId \\|\\| this\\.dirty \\|\\| !this\\.savable\\) return/)\n    expect(add).toMatch(/if \\(!confirmed \\|\\| this\\.shownRoleId !== roleId \\|\\| this\\.gap !== gap \\|\\| this\\.dirty \\|\\| !this\\.savable\\) return/)\n    expect(code).toMatch(/createRoleFromTemplate\\(templateId: \\$templateId, name: \\$name\\)/)\n    expect(add).toMatch(/this\\.templateTopUp\\.run\\(\\{ templateId: gap\\.templateId, name: roleName \\}\\)/)\n    expect(template).toMatch(/\\?disabled=\\$\\{this\\.dirty \\|\\| !this\\.savable \\|\\| Boolean\\(template\\?\\.definitionErrors\\.length\\)\\}/)\n  })\n\n  it('names a task in the words of the module that declares it, the id when there are none', () => {\n    expect(code).toMatch(/i18next\\.t\\(`task\\.\\$\\{id\\}\\.name`, \\{ defaultValue: id \\}\\)/)\n  })\n})\n"]}

package/dist-client/pages/role/role-template-gap.test.js

@@ -12,15 +12,20 @@ const cell = code.slice(code.indexOf('private templateGapCell('), code.indexOf('
 const add = code.slice(code.indexOf('private async addFromTemplate('), code.indexOf('async createBlankRole('));
 describe('the role list and its template gap', () => {
     it('★ asks the server for the gap with the list', () => {
-        expect(code).toMatch(/templateGap\s*\{\s*templateId\s+templateName\s+missingCount\s+missing\s*\{\s*category\s+axes/);
+        expect(code).toMatch(/templateGap\s*\{\s*templateId\s+templateName\s+extraCount\s+missingCount\s+missing\s*\{\s*category\s+axes/);
     });
-    it('★ draws nothing for an inherited role, a role with no template, or one that is up to date', () => {
-        expect(cell).toMatch(/if \(!gap \|\| !gap\.missingCount \|\| this\.isInherited\(record\)\)\s*\{\s*return nothing/);
+    it('★ draws nothing for an inherited role, a role with no template, or one with no differences', () => {
+        expect(cell).toMatch(/if \(!gap \|\| \(!gap\.missingCount && !gap\.extraCount\) \|\| this\.isInherited\(record\)\)\s*\{\s*return nothing/);
     });
     it('★ offers a visible button, not a number to press', () => {
         expect(cell).toMatch(/<md-text-button/);
         expect(cell).toMatch(/this\.addFromTemplate\(record\)/);
     });
+    it('shows extra counts and opens the template comparison for review', () => {
+        expect(cell).toMatch(/gap\.extraCount/);
+        expect(cell).toContain('?view=template');
+        expect(cell).toContain('button.review extra privileges');
+    });
     it('★ shows what will be added before adding it, and adds through the template top-up', () => {
         expect(add).toMatch(/OxPrompt\.open\(/);
         expect(add).toMatch(/text\.add template privileges/);

package/dist-client/pages/role/role-template-gap.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"role-template-gap.test.js","sourceRoot":"","sources":["../../../client/pages/role/role-template-gap.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AACjC,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB;;;;;GAKG;AAEH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAA;AAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA;AAEjF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAA;AACjH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAA;AAE9G,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,8FAA8F,CAAC,CAAA;IACtH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;QACnG,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,4FAA4F,CAAC,CAAA;IACpH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;QACpD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,yFAAyF,CAAC,CAAA;IAChH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { readFileSync } from 'fs'\nimport path from 'path'\n\n/**\n * The role list says what each role lacks against its template, and the administrator adds it\n * (ADR-0075 decision 1). The gap itself is computed and tested in auth-base\n * (`tests/role-template-gap-db.test.ts`); this holds what the screen does with it. The page needs a\n * DOM, so the test reads its source with comments stripped.\n */\n\nconst source = readFileSync(path.join(__dirname, 'role-list-page.ts'), 'utf-8')\nconst code = source.replace(/\\/\\*[\\s\\S]*?\\*\\//g, '').replace(/^\\s*\\/\\/.*$/gm, '')\n\nconst cell = code.slice(code.indexOf('private templateGapCell('), code.indexOf('private async addFromTemplate('))\nconst add = code.slice(code.indexOf('private async addFromTemplate('), code.indexOf('async createBlankRole('))\n\ndescribe('the role list and its template gap', () => {\n  it('★ asks the server for the gap with the list', () => {\n    expect(code).toMatch(/templateGap\\s*\\{\\s*templateId\\s+templateName\\s+missingCount\\s+missing\\s*\\{\\s*category\\s+axes/)\n  })\n\n  it('★ draws nothing for an inherited role, a role with no template, or one that is up to date', () => {\n    expect(cell).toMatch(/if \\(!gap \\|\\| !gap\\.missingCount \\|\\| this\\.isInherited\\(record\\)\\)\\s*\\{\\s*return nothing/)\n  })\n\n  it('★ offers a visible button, not a number to press', () => {\n    expect(cell).toMatch(/<md-text-button/)\n    expect(cell).toMatch(/this\\.addFromTemplate\\(record\\)/)\n  })\n\n  it('★ shows what will be added before adding it, and adds through the template top-up', () => {\n    expect(add).toMatch(/OxPrompt\\.open\\(/)\n    expect(add).toMatch(/text\\.add template privileges/)\n    expect(add).toMatch(/if \\(confirmed\\)\\s*\\{\\s*await this\\.createFromTemplate\\(gap\\.templateId, record\\.name\\)/)\n  })\n})\n"]}
+{"version":3,"file":"role-template-gap.test.js","sourceRoot":"","sources":["../../../client/pages/role/role-template-gap.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AACjC,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB;;;;;GAKG;AAEH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAA;AAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA;AAEjF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAA;AACjH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAA;AAE9G,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,2GAA2G,CAAC,CAAA;IACnI,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,oHAAoH,CAAC,CAAA;IAC5I,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;QACpD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,yFAAyF,CAAC,CAAA;IAChH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["import { readFileSync } from 'fs'\nimport path from 'path'\n\n/**\n * The role list says what each role lacks against its template, and the administrator adds it\n * (ADR-0075 decision 1). The gap itself is computed and tested in auth-base\n * (`tests/role-template-gap-db.test.ts`); this holds what the screen does with it. The page needs a\n * DOM, so the test reads its source with comments stripped.\n */\n\nconst source = readFileSync(path.join(__dirname, 'role-list-page.ts'), 'utf-8')\nconst code = source.replace(/\\/\\*[\\s\\S]*?\\*\\//g, '').replace(/^\\s*\\/\\/.*$/gm, '')\n\nconst cell = code.slice(code.indexOf('private templateGapCell('), code.indexOf('private async addFromTemplate('))\nconst add = code.slice(code.indexOf('private async addFromTemplate('), code.indexOf('async createBlankRole('))\n\ndescribe('the role list and its template gap', () => {\n  it('★ asks the server for the gap with the list', () => {\n    expect(code).toMatch(/templateGap\\s*\\{\\s*templateId\\s+templateName\\s+extraCount\\s+missingCount\\s+missing\\s*\\{\\s*category\\s+axes/)\n  })\n\n  it('★ draws nothing for an inherited role, a role with no template, or one with no differences', () => {\n    expect(cell).toMatch(/if \\(!gap \\|\\| \\(!gap\\.missingCount && !gap\\.extraCount\\) \\|\\| this\\.isInherited\\(record\\)\\)\\s*\\{\\s*return nothing/)\n  })\n\n  it('★ offers a visible button, not a number to press', () => {\n    expect(cell).toMatch(/<md-text-button/)\n    expect(cell).toMatch(/this\\.addFromTemplate\\(record\\)/)\n  })\n\n  it('shows extra counts and opens the template comparison for review', () => {\n    expect(cell).toMatch(/gap\\.extraCount/)\n    expect(cell).toContain('?view=template')\n    expect(cell).toContain('button.review extra privileges')\n  })\n\n  it('★ shows what will be added before adding it, and adds through the template top-up', () => {\n    expect(add).toMatch(/OxPrompt\\.open\\(/)\n    expect(add).toMatch(/text\\.add template privileges/)\n    expect(add).toMatch(/if \\(confirmed\\)\\s*\\{\\s*await this\\.createFromTemplate\\(gap\\.templateId, record\\.name\\)/)\n  })\n})\n"]}