@things-factory/auth-ui 10.1.31 → 10.1.33

package/dist-client/pages/invitation/invitations.d.ts

@@ -0,0 +1,63 @@
+import '@material/web/icon/icon.js';
+import '@operato/data-grist/ox-grist.js';
+import type { FetchOption } from '@operato/data-grist';
+import { PageView } from '@operato/shell';
+declare const Invitations_base: (new (...args: any[]) => {
+    __preferenceProviders: {
+        [element: string]: import("@operato/p13n").PagePreferenceProvider;
+    };
+    getPagePreferenceProvider(element: string): import("@operato/p13n").PagePreferenceProvider | undefined;
+}) & (new (...args: any[]) => import("lit").LitElement) & typeof PageView;
+/**
+ * Who was invited into this domain, and what became of it.
+ *
+ * ── Why this screen is the reason the table exists ──────────────────────────
+ * Accepting used to delete the row, so the moment somebody joined, the fact that they had been
+ * invited stopped existing. There was nothing to put on a screen — which is why no screen was
+ * built, and why nothing called any of the invitation doors at all. The rows stay now and carry
+ * a state, and this is what that is for.
+ *
+ * ── ⚠ The token is not a column and cannot be ───────────────────────────────
+ * The token in an invitation mail is what opens the door. This is a screen an administrator
+ * reads, so printing it here would hand every pending invitation to whoever can open the list,
+ * and to any screenshot of it. It is not a GraphQL field on `Invitation` at all — the same
+ * reason `app-bindings` does not ask for a refresh token.
+ *
+ * ── The state is read as of now ─────────────────────────────────────────────
+ * `state` comes from the server's field resolver, which measures a pending row against the
+ * clock rather than trusting the stored column. A row whose expiry passed an hour ago says
+ * expired here even though nothing has been round to write that down — showing it as live would
+ * be the more dangerous of the two ways to be wrong.
+ */
+export declare class Invitations extends Invitations_base {
+    static styles: import("lit").CSSResult[];
+    active: boolean;
+    config: any;
+    mode: 'CARD' | 'LIST' | 'GRID';
+    /** The last fetch did not answer. Distinct from answering with nothing. */
+    failed: boolean;
+    private grist;
+    get context(): {
+        title: string;
+        help: string;
+        search: {
+            handler: (search: string) => void;
+            value: string;
+        };
+        actions: {
+            title: string;
+            action: () => void;
+            icon: string;
+        }[];
+    };
+    render(): import("lit-html").TemplateResult<1>;
+    pageInitialized(): Promise<void>;
+    private resend;
+    private withdraw;
+    pageUpdated(_changes: any, _lifecycle: any): Promise<void>;
+    fetchHandler({ page, limit, sortings, filters }: FetchOption): Promise<{
+        total: number;
+        records: any[];
+    }>;
+}
+export {};

package/dist-client/pages/invitation/invitations.js

@@ -0,0 +1,282 @@
+import { __decorate, __metadata } from "tslib";
+import '@material/web/icon/icon.js';
+import '@operato/data-grist/ox-grist.js';
+import gql from 'graphql-tag';
+import { css, html } from 'lit';
+import { customElement, property, query } from 'lit/decorators.js';
+import { client, gqlContext } from '@operato/graphql';
+import { i18next, localize } from '@operato/i18n';
+import { OxPrompt } from '@operato/popup/ox-prompt.js';
+import { navigate, PageView } from '@operato/shell';
+import { CommonHeaderStyles, CommonGristStyles, ScrollbarStyles, WorkSurfacePageStyles } from '@operato/styles';
+import { isMobileDevice } from '@operato/utils';
+import { p13n } from '@operato/p13n';
+import { listOutcome, pageFromResponse } from '../../utils/list-result.js';
+/**
+ * Who was invited into this domain, and what became of it.
+ *
+ * ── Why this screen is the reason the table exists ──────────────────────────
+ * Accepting used to delete the row, so the moment somebody joined, the fact that they had been
+ * invited stopped existing. There was nothing to put on a screen — which is why no screen was
+ * built, and why nothing called any of the invitation doors at all. The rows stay now and carry
+ * a state, and this is what that is for.
+ *
+ * ── ⚠ The token is not a column and cannot be ───────────────────────────────
+ * The token in an invitation mail is what opens the door. This is a screen an administrator
+ * reads, so printing it here would hand every pending invitation to whoever can open the list,
+ * and to any screenshot of it. It is not a GraphQL field on `Invitation` at all — the same
+ * reason `app-bindings` does not ask for a refresh token.
+ *
+ * ── The state is read as of now ─────────────────────────────────────────────
+ * `state` comes from the server's field resolver, which measures a pending row against the
+ * clock rather than trusting the stored column. A row whose expiry passed an hour ago says
+ * expired here even though nothing has been round to write that down — showing it as live would
+ * be the more dangerous of the two ways to be wrong.
+ */
+let Invitations = class Invitations extends p13n(localize(i18next)(PageView)) {
+    constructor() {
+        super(...arguments);
+        this.active = false;
+        this.mode = isMobileDevice() ? 'CARD' : 'GRID';
+        /** The last fetch did not answer. Distinct from answering with nothing. */
+        this.failed = false;
+    }
+    static { this.styles = [
+        WorkSurfacePageStyles,
+        CommonGristStyles,
+        CommonHeaderStyles,
+        ScrollbarStyles,
+        css `
+      [failed] {
+        padding: var(--spacing-medium);
+        color: var(--md-sys-color-error);
+        font: var(--label-font, inherit);
+      }
+    `
+    ]; }
+    get context() {
+        return {
+            title: i18next.t('label.invitations'),
+            help: 'auth/user',
+            search: {
+                handler: (search) => {
+                    this.grist.searchText = search;
+                },
+                value: this.grist?.searchText || ''
+            },
+            actions: [
+                {
+                    title: i18next.t('text.users'),
+                    action: () => navigate('users'),
+                    icon: 'group'
+                }
+            ]
+        };
+    }
+    render() {
+        return html `
+      <ox-grist
+        class="page-fill"
+        .mode=${this.mode}
+        .config=${this.config}
+        .fetchHandler=${this.fetchHandler.bind(this)}
+        .personalConfigProvider=${this.getPagePreferenceProvider('ox-grist')}
+      >
+      </ox-grist>
+
+      ${this.failed ? html `<div failed>${i18next.t('text.the list could not be loaded')}</div>` : ''}
+    `;
+    }
+    async pageInitialized() {
+        this.config = {
+            rows: { appendable: false, selectable: { multiple: false } },
+            columns: [
+                { type: 'gutter', gutterName: 'sequence' },
+                {
+                    type: 'string',
+                    name: 'email',
+                    header: i18next.t('field.email'),
+                    record: { editable: false },
+                    sortable: true,
+                    width: 240
+                },
+                {
+                    type: 'string',
+                    name: 'state',
+                    header: i18next.t('field.state'),
+                    record: { align: 'center', editable: false },
+                    width: 120
+                },
+                {
+                    type: 'string',
+                    name: 'roleNames',
+                    header: i18next.t('field.roles'),
+                    record: { editable: false },
+                    width: 200
+                },
+                {
+                    type: 'string',
+                    name: 'creatorName',
+                    header: i18next.t('field.invited'),
+                    record: { editable: false },
+                    width: 160
+                },
+                {
+                    type: 'datetime',
+                    name: 'createdAt',
+                    header: i18next.t('field.created at'),
+                    sortable: true,
+                    width: 180
+                },
+                {
+                    type: 'datetime',
+                    name: 'expiresAt',
+                    header: i18next.t('field.expires at'),
+                    sortable: true,
+                    width: 180
+                },
+                {
+                    type: 'datetime',
+                    name: 'acceptedAt',
+                    header: i18next.t('field.accepted at'),
+                    sortable: true,
+                    width: 180
+                },
+                /*
+                 * Both actions only mean anything while an invitation is still open, so they are offered
+                 * only there. A button that is always present and refuses on half the rows reads as the
+                 * screen being broken rather than as the row being finished.
+                 */
+                {
+                    type: 'gutter',
+                    gutterName: 'button',
+                    icon: 'refresh',
+                    title: i18next.t('button.resend'),
+                    handlers: {
+                        click: (_c, _d, _col, record) => record?.state === 'pending' && this.resend(record)
+                    }
+                },
+                {
+                    type: 'gutter',
+                    gutterName: 'button',
+                    icon: 'block',
+                    title: i18next.t('button.withdraw'),
+                    handlers: {
+                        click: (_c, _d, _col, record) => record?.state === 'pending' && this.withdraw(record)
+                    }
+                }
+            ]
+        };
+    }
+    async resend(record) {
+        /*
+         * A fresh token each time. Re-mailing the old one would leave two live links for one
+         * invitation, and the older mail is the one more likely to have been forwarded.
+         */
+        const response = await client.mutate({
+            mutation: gql `
+        mutation ($id: String!) {
+          resendInvitation(id: $id)
+        }
+      `,
+            variables: { id: record.id },
+            context: gqlContext()
+        });
+        if (!response.errors?.length) {
+            document.dispatchEvent(new CustomEvent('notify', { detail: { level: 'info', message: i18next.t('text.invitation resent') } }));
+        }
+        this.grist.fetch();
+    }
+    async withdraw(record) {
+        const confirmed = await OxPrompt.open({
+            type: 'warning',
+            title: i18next.t('button.withdraw'),
+            text: i18next.t('text.are you sure you want to delete x', { x: record.email }),
+            confirmButton: { text: i18next.t('button.withdraw') },
+            cancelButton: { text: i18next.t('button.cancel') }
+        });
+        if (!confirmed) {
+            return;
+        }
+        await client.mutate({
+            mutation: gql `
+        mutation ($id: String!) {
+          cancelInvitation(id: $id)
+        }
+      `,
+            variables: { id: record.id },
+            context: gqlContext()
+        });
+        this.grist.fetch();
+    }
+    async pageUpdated(_changes, _lifecycle) {
+        if (this.active) {
+            await this.updateComplete;
+            this.grist.fetch();
+        }
+    }
+    async fetchHandler({ page, limit, sortings = [], filters = [] }) {
+        const response = await client.query({
+            query: gql `
+        query ($filters: [Filter!], $pagination: Pagination, $sortings: [Sorting!]) {
+          invitations(filters: $filters, pagination: $pagination, sortings: $sortings) {
+            items {
+              id
+              email
+              state
+              createdAt
+              expiresAt
+              acceptedAt
+              roles {
+                id
+                name
+              }
+              creator {
+                id
+                name
+              }
+            }
+            total
+          }
+        }
+      `,
+            variables: { filters, pagination: { page, limit }, sortings },
+            context: gqlContext()
+        });
+        const { items, total, failed } = listOutcome(pageFromResponse(response, 'invitations'));
+        this.failed = failed;
+        return {
+            total,
+            records: items.map((item) => ({
+                ...item,
+                roleNames: (item.roles || []).map((role) => role.name).join(', '),
+                creatorName: item.creator?.name || ''
+            }))
+        };
+    }
+};
+__decorate([
+    property({ type: Boolean }),
+    __metadata("design:type", Boolean)
+], Invitations.prototype, "active", void 0);
+__decorate([
+    property({ type: Object }),
+    __metadata("design:type", Object)
+], Invitations.prototype, "config", void 0);
+__decorate([
+    property({ type: String }),
+    __metadata("design:type", String)
+], Invitations.prototype, "mode", void 0);
+__decorate([
+    property({ type: Boolean }),
+    __metadata("design:type", Boolean)
+], Invitations.prototype, "failed", void 0);
+__decorate([
+    query('ox-grist'),
+    __metadata("design:type", Function)
+], Invitations.prototype, "grist", void 0);
+Invitations = __decorate([
+    customElement('invitations-page')
+], Invitations);
+export { Invitations };
+//# sourceMappingURL=invitations.js.map

package/dist-client/pages/invitation/invitations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.js","sourceRoot":"","sources":["../../../client/pages/invitation/invitations.ts"],"names":[],"mappings":";AAAA,OAAO,4BAA4B,CAAA;AAEnC,OAAO,iCAAiC,CAAA;AAExC,OAAO,GAAG,MAAM,aAAa,CAAA;AAC7B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,KAAK,CAAA;AAC/B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAGlE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AACtD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAC/G,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAA;AAEpC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAE1E;;;;;;;;;;;;;;;;;;;;GAoBG;AAEI,IAAM,WAAW,GAAjB,MAAM,WAAY,SAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;IAA3D;;QAewB,WAAM,GAAY,KAAK,CAAA;QAExB,SAAI,GAA6B,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;QAE/F,2EAA2E;QAC9C,WAAM,GAAY,KAAK,CAAA;IA4NtD,CAAC;aA/OQ,WAAM,GAAG;QACd,qBAAqB;QACrB,iBAAiB;QACjB,kBAAkB;QAClB,eAAe;QACf,GAAG,CAAA;;;;;;KAMF;KACF,AAZY,CAYZ;IAWD,IAAI,OAAO;QACT,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;YACrC,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE;gBACN,OAAO,EAAE,CAAC,MAAc,EAAE,EAAE;oBAC1B,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,CAAA;gBAChC,CAAC;gBACD,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE;aACpC;YACD,OAAO,EAAE;gBACP;oBACE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;oBAC9B,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAC/B,IAAI,EAAE,OAAO;iBACd;aACF;SACF,CAAA;IACH,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAA;;;gBAGC,IAAI,CAAC,IAAI;kBACP,IAAI,CAAC,MAAM;wBACL,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;kCAClB,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAE;;;;QAIrE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA,eAAe,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;KAC/F,CAAA;IACH,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC,MAAM,GAAG;YACZ,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;YAC5D,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE;gBAC1C;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;oBAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;oBAC3B,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,GAAG;iBACX;gBACD;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;oBAChC,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;oBAC5C,KAAK,EAAE,GAAG;iBACX;gBACD;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;oBAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;oBAC3B,KAAK,EAAE,GAAG;iBACX;gBACD;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;oBAClC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;oBAC3B,KAAK,EAAE,GAAG;iBACX;gBACD;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;oBACrC,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,GAAG;iBACX;gBACD;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;oBACrC,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,GAAG;iBACX;gBACD;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;oBACtC,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,GAAG;iBACX;gBACD;;;;mBAIG;gBACH;oBACE,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,QAAQ;oBACpB,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;oBACjC,QAAQ,EAAE;wBACR,KAAK,EAAE,CAAC,EAAO,EAAE,EAAO,EAAE,IAAS,EAAE,MAAW,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;qBACxG;iBACF;gBACD;oBACE,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,QAAQ;oBACpB,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC;oBACnC,QAAQ,EAAE;wBACR,KAAK,EAAE,CAAC,EAAO,EAAE,EAAO,EAAE,IAAS,EAAE,MAAW,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;qBAC1G;iBACF;aACF;SACF,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,MAAW;QAC9B;;;WAGG;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,GAAG,CAAA;;;;OAIZ;YACD,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;YAC5B,OAAO,EAAE,UAAU,EAAE;SACtB,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YAC7B,QAAQ,CAAC,aAAa,CACpB,IAAI,WAAW,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,EAAE,EAAE,CAAC,CACvG,CAAA;QACH,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,MAAW;QAChC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;YACpC,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC;YACnC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,wCAAwC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YAC9E,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;YACrD,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE;SACnD,CAAC,CAAA;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAM;QACR,CAAC;QAED,MAAM,MAAM,CAAC,MAAM,CAAC;YAClB,QAAQ,EAAE,GAAG,CAAA;;;;OAIZ;YACD,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;YAC5B,OAAO,EAAE,UAAU,EAAE;SACtB,CAAC,CAAA;QAEF,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAa,EAAE,UAAe;QAC9C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,cAAc,CAAA;YACzB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAe;QAC1E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;OAsBT;YACD,SAAS,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE;YAC7D,OAAO,EAAE,UAAU,EAAE;SACtB,CAAC,CAAA;QAEF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAA;QAEvF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QAEpB,OAAO;YACL,KAAK;YACL,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC;gBACjC,GAAG,IAAI;gBACP,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE;aACtC,CAAC,CAAC;SACJ,CAAA;IACH,CAAC;;AAhO4B;IAA5B,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;2CAAwB;AACxB;IAA3B,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;2CAAY;AACX;IAA3B,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;yCAAoE;AAGlE;IAA5B,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;2CAAwB;AAEzB;IAA1B,KAAK,CAAC,UAAU,CAAC;;0CAA0B;AAtBjC,WAAW;IADvB,aAAa,CAAC,kBAAkB,CAAC;GACrB,WAAW,CAgPvB","sourcesContent":["import '@material/web/icon/icon.js'\n\nimport '@operato/data-grist/ox-grist.js'\n\nimport gql from 'graphql-tag'\nimport { css, html } from 'lit'\nimport { customElement, property, query } from 'lit/decorators.js'\n\nimport type { DataGrist, FetchOption } from '@operato/data-grist'\nimport { client, gqlContext } from '@operato/graphql'\nimport { i18next, localize } from '@operato/i18n'\nimport { OxPrompt } from '@operato/popup/ox-prompt.js'\nimport { navigate, PageView } from '@operato/shell'\nimport { CommonHeaderStyles, CommonGristStyles, ScrollbarStyles, WorkSurfacePageStyles } from '@operato/styles'\nimport { isMobileDevice } from '@operato/utils'\nimport { p13n } from '@operato/p13n'\n\nimport { listOutcome, pageFromResponse } from '../../utils/list-result.js'\n\n/**\n * Who was invited into this domain, and what became of it.\n *\n * ── Why this screen is the reason the table exists ──────────────────────────\n * Accepting used to delete the row, so the moment somebody joined, the fact that they had been\n * invited stopped existing. There was nothing to put on a screen — which is why no screen was\n * built, and why nothing called any of the invitation doors at all. The rows stay now and carry\n * a state, and this is what that is for.\n *\n * ── ⚠ The token is not a column and cannot be ───────────────────────────────\n * The token in an invitation mail is what opens the door. This is a screen an administrator\n * reads, so printing it here would hand every pending invitation to whoever can open the list,\n * and to any screenshot of it. It is not a GraphQL field on `Invitation` at all — the same\n * reason `app-bindings` does not ask for a refresh token.\n *\n * ── The state is read as of now ─────────────────────────────────────────────\n * `state` comes from the server's field resolver, which measures a pending row against the\n * clock rather than trusting the stored column. A row whose expiry passed an hour ago says\n * expired here even though nothing has been round to write that down — showing it as live would\n * be the more dangerous of the two ways to be wrong.\n */\n@customElement('invitations-page')\nexport class Invitations extends p13n(localize(i18next)(PageView)) {\n  static styles = [\n    WorkSurfacePageStyles,\n    CommonGristStyles,\n    CommonHeaderStyles,\n    ScrollbarStyles,\n    css`\n      [failed] {\n        padding: var(--spacing-medium);\n        color: var(--md-sys-color-error);\n        font: var(--label-font, inherit);\n      }\n    `\n  ]\n\n  @property({ type: Boolean }) active: boolean = false\n  @property({ type: Object }) config: any\n  @property({ type: String }) mode: 'CARD' | 'LIST' | 'GRID' = isMobileDevice() ? 'CARD' : 'GRID'\n\n  /** The last fetch did not answer. Distinct from answering with nothing. */\n  @property({ type: Boolean }) failed: boolean = false\n\n  @query('ox-grist') private grist!: DataGrist\n\n  get context() {\n    return {\n      title: i18next.t('label.invitations'),\n      help: 'auth/user',\n      search: {\n        handler: (search: string) => {\n          this.grist.searchText = search\n        },\n        value: this.grist?.searchText || ''\n      },\n      actions: [\n        {\n          title: i18next.t('text.users'),\n          action: () => navigate('users'),\n          icon: 'group'\n        }\n      ]\n    }\n  }\n\n  render() {\n    return html`\n      <ox-grist\n        class=\"page-fill\"\n        .mode=${this.mode}\n        .config=${this.config}\n        .fetchHandler=${this.fetchHandler.bind(this)}\n        .personalConfigProvider=${this.getPagePreferenceProvider('ox-grist')!}\n      >\n      </ox-grist>\n\n      ${this.failed ? html`<div failed>${i18next.t('text.the list could not be loaded')}</div>` : ''}\n    `\n  }\n\n  async pageInitialized() {\n    this.config = {\n      rows: { appendable: false, selectable: { multiple: false } },\n      columns: [\n        { type: 'gutter', gutterName: 'sequence' },\n        {\n          type: 'string',\n          name: 'email',\n          header: i18next.t('field.email'),\n          record: { editable: false },\n          sortable: true,\n          width: 240\n        },\n        {\n          type: 'string',\n          name: 'state',\n          header: i18next.t('field.state'),\n          record: { align: 'center', editable: false },\n          width: 120\n        },\n        {\n          type: 'string',\n          name: 'roleNames',\n          header: i18next.t('field.roles'),\n          record: { editable: false },\n          width: 200\n        },\n        {\n          type: 'string',\n          name: 'creatorName',\n          header: i18next.t('field.invited'),\n          record: { editable: false },\n          width: 160\n        },\n        {\n          type: 'datetime',\n          name: 'createdAt',\n          header: i18next.t('field.created at'),\n          sortable: true,\n          width: 180\n        },\n        {\n          type: 'datetime',\n          name: 'expiresAt',\n          header: i18next.t('field.expires at'),\n          sortable: true,\n          width: 180\n        },\n        {\n          type: 'datetime',\n          name: 'acceptedAt',\n          header: i18next.t('field.accepted at'),\n          sortable: true,\n          width: 180\n        },\n        /*\n         * Both actions only mean anything while an invitation is still open, so they are offered\n         * only there. A button that is always present and refuses on half the rows reads as the\n         * screen being broken rather than as the row being finished.\n         */\n        {\n          type: 'gutter',\n          gutterName: 'button',\n          icon: 'refresh',\n          title: i18next.t('button.resend'),\n          handlers: {\n            click: (_c: any, _d: any, _col: any, record: any) => record?.state === 'pending' && this.resend(record)\n          }\n        },\n        {\n          type: 'gutter',\n          gutterName: 'button',\n          icon: 'block',\n          title: i18next.t('button.withdraw'),\n          handlers: {\n            click: (_c: any, _d: any, _col: any, record: any) => record?.state === 'pending' && this.withdraw(record)\n          }\n        }\n      ]\n    }\n  }\n\n  private async resend(record: any) {\n    /*\n     * A fresh token each time. Re-mailing the old one would leave two live links for one\n     * invitation, and the older mail is the one more likely to have been forwarded.\n     */\n    const response = await client.mutate({\n      mutation: gql`\n        mutation ($id: String!) {\n          resendInvitation(id: $id)\n        }\n      `,\n      variables: { id: record.id },\n      context: gqlContext()\n    })\n\n    if (!response.errors?.length) {\n      document.dispatchEvent(\n        new CustomEvent('notify', { detail: { level: 'info', message: i18next.t('text.invitation resent') } })\n      )\n    }\n\n    this.grist.fetch()\n  }\n\n  private async withdraw(record: any) {\n    const confirmed = await OxPrompt.open({\n      type: 'warning',\n      title: i18next.t('button.withdraw'),\n      text: i18next.t('text.are you sure you want to delete x', { x: record.email }),\n      confirmButton: { text: i18next.t('button.withdraw') },\n      cancelButton: { text: i18next.t('button.cancel') }\n    })\n\n    if (!confirmed) {\n      return\n    }\n\n    await client.mutate({\n      mutation: gql`\n        mutation ($id: String!) {\n          cancelInvitation(id: $id)\n        }\n      `,\n      variables: { id: record.id },\n      context: gqlContext()\n    })\n\n    this.grist.fetch()\n  }\n\n  async pageUpdated(_changes: any, _lifecycle: any) {\n    if (this.active) {\n      await this.updateComplete\n      this.grist.fetch()\n    }\n  }\n\n  async fetchHandler({ page, limit, sortings = [], filters = [] }: FetchOption) {\n    const response = await client.query({\n      query: gql`\n        query ($filters: [Filter!], $pagination: Pagination, $sortings: [Sorting!]) {\n          invitations(filters: $filters, pagination: $pagination, sortings: $sortings) {\n            items {\n              id\n              email\n              state\n              createdAt\n              expiresAt\n              acceptedAt\n              roles {\n                id\n                name\n              }\n              creator {\n                id\n                name\n              }\n            }\n            total\n          }\n        }\n      `,\n      variables: { filters, pagination: { page, limit }, sortings },\n      context: gqlContext()\n    })\n\n    const { items, total, failed } = listOutcome(pageFromResponse(response, 'invitations'))\n\n    this.failed = failed\n\n    return {\n      total,\n      records: items.map((item: any) => ({\n        ...item,\n        roleNames: (item.roles || []).map((role: any) => role.name).join(', '),\n        creatorName: item.creator?.name || ''\n      }))\n    }\n  }\n}\n"]}

package/dist-client/pages/role/role-list-page.d.ts

@@ -209,9 +209,10 @@ export declare class RoleListPage extends RoleListPageBase {
      */
     private openCreate;
     /** 템플릿에서 — 이름은 이 공장이 정한 것을 그대로 보낸다. */
-    createFromTemplate(templateId: string, name: string): Promise<boolean>;
+    createFromTemplate(templateId: string, name: string, separately?: boolean): any;
+    private confirmStandingSeparately;
     /** 백지에서 — 권한 없이 선다. 목록의 권한 수 칸이 0 을 빨갛게 말하므로 다음 걸음이 보인다. */
-    createBlankRole(name: string, description: string): Promise<boolean>;
+    createBlankRole(name: string, description: string): Promise<any>;
     /**
      * 새 역할.
      *

package/dist-client/pages/role/role-list-page.js

@@ -14,6 +14,7 @@ import { InheritedValueType, navigate, PageView } from '@operato/shell';
 import { CommonGristStyles, CommonHeaderStyles, ScrollbarStyles, WorkSurfacePageStyles } from '@operato/styles';
 import { isMobileDevice } from '@operato/utils';
 import { getDomain } from '@things-factory/auth-base/dist-client';
+import { standsInheritedRefusal } from '../../utils/inherited-name-refusal.js';
 /**
  * 역할 목록 — **보이는 것과 고칠 수 있는 것을 가른다.**
  *
@@ -777,25 +778,54 @@ let RoleListPage = class RoleListPage extends RoleListPageBase {
         });
     }
     /** 템플릿에서 — 이름은 이 공장이 정한 것을 그대로 보낸다. */
-    async createFromTemplate(templateId, name) {
+    async createFromTemplate(templateId, name, separately) {
         const response = await client.mutate({
             mutation: gql `
-        mutation ($templateId: String!, $name: String) {
-          createRoleFromTemplate(templateId: $templateId, name: $name) {
+        mutation ($templateId: String!, $name: String, $separately: Boolean) {
+          createRoleFromTemplate(templateId: $templateId, name: $name, separately: $separately) {
             id
           }
         }
       `,
-            variables: { templateId, name },
+            variables: { templateId, name, separately },
             context: gqlContext()
         });
         if (response.errors?.length) {
+            if (await this.confirmStandingSeparately(response)) {
+                return await this.createFromTemplate(templateId, name, true);
+            }
             document.dispatchEvent(new CustomEvent('notify', { detail: { level: 'error', message: response.errors[0]?.message } }));
             return false;
         }
         this.grist.fetch();
         return true;
     }
+    /*
+     * ── The one refusal this screen can offer a way out of ──────────────────
+     * A role name already visible through the parent domain is refused so that it cannot happen
+     * silently, not because it must not happen: standing up the same names here is the first step
+     * of moving a domain off an inherited structure (ADR-0062 decisions 2 and 3). So the operator
+     * is told which domain the other one stands in and asked whether that is what they mean.
+     *
+     * The name does not change. Offering to rename instead would close the only route decision 2
+     * defines — the role standing up here is the one that replaces what is inherited, and cutting
+     * the parent last leaves one name again.
+     *
+     * Every other refusal returns false and is reported as it arrives.
+     */
+    async confirmStandingSeparately(response) {
+        const refusal = standsInheritedRefusal(response);
+        if (!refusal) {
+            return false;
+        }
+        return !!(await OxPrompt.open({
+            type: 'warning',
+            title: i18next.t('text.a role of this name is already visible'),
+            text: i18next.t('text.stand this domain own role of the same name', refusal),
+            confirmButton: { text: i18next.t('button.stand it here') },
+            cancelButton: { text: i18next.t('button.cancel') }
+        }));
+    }
     /** 백지에서 — 권한 없이 선다. 목록의 권한 수 칸이 0 을 빨갛게 말하므로 다음 걸음이 보인다. */
     async createBlankRole(name, description) {
         return await this.onCreateRole({ name, description });
@@ -806,7 +836,7 @@ let RoleListPage = class RoleListPage extends RoleListPageBase {
      * **권한 없이 만들어진다.** 그것이 맞다 — 이름을 정하는 것과 무엇을 열지 정하는 것은 다른
      * 판단이고, 목록의 요약 칸이 「여는 것이 없음」을 빨갛게 말하므로 다음 걸음이 보인다.
      */
-    async onCreateRole(record) {
+    async onCreateRole(record, separately) {
         const response = await client.mutate({
             mutation: gql `
         mutation ($role: NewRole!) {
@@ -815,10 +845,13 @@ let RoleListPage = class RoleListPage extends RoleListPageBase {
           }
         }
       `,
-            variables: { role: { name: record.name, description: record.description } },
+            variables: { role: { name: record.name, description: record.description, separately } },
             context: gqlContext()
         });
         if (response.errors?.length) {
+            if (await this.confirmStandingSeparately(response)) {
+                return await this.onCreateRole(record, true);
+            }
             document.dispatchEvent(new CustomEvent('notify', { detail: { level: 'error', message: response.errors[0]?.message } }));
             return false;
         }