@webx-ui/module-auth 0.7.3 → 0.8.0

package/README.md

@@ -66,6 +66,27 @@ Placed outside a panel, with no server to ask, the card falls back to the Englis
 
 `WxLoginCard` is exported for a panel that wants to place it itself.
 
+## The sections
+
+Two of them, alongside the plugin:
+
+```ts
+import { admins, connect } from '@webx-ui/module-auth'
+
+createAdmin({ modules: [admins(), connect()] })
+```
+
+`admins()` is the people, and two more views of the same section for whoever may see them:
+**Agent calls** (`admins.audit`) — every tool call an agent made, narrowed by person, tool and
+outcome — and **Connections** (`admins.manage`), the agents everybody has let in, with a
+button that ends one.
+
+`connect()` is the page that tells somebody how to connect their own agent: the address, a
+button that copies it, three steps per client, one-click links for Cursor and VS Code, and
+their own connections underneath. It carries no permission — whoever got into the panel may
+connect an agent, and the agent cannot do anything they cannot. Both appear only where the
+server reports them, so a panel with no agent server has no such entry.
+
 ## The session
 
 ```ts

package/dist/AdminList.d.ts

@@ -53,10 +53,10 @@ declare const _default: import('vue').DefineComponent<__VLS_Props, {
     onSelection?: ((admins: Admin[]) => any) | undefined;
     onRemove?: ((admin: Admin) => any) | undefined;
 }>, {
+    filters: boolean;
     multiple: boolean;
     picking: boolean;
     removable: boolean;
-    filters: boolean;
     resolveAvatar: (key: string) => Promise<string | null>;
 }, {}, {}, {}, string, import('vue').ComponentProvideOptions, false, {
     root: HTMLDivElement;

package/dist/AdminPicker.d.ts

@@ -51,10 +51,10 @@ declare const _default: import('vue').DefineComponent<__VLS_Props, {}, {}, {}, {
         selection: (admins: Admin[]) => any;
         remove: (admin: Admin) => any;
     }, import('vue').PublicProps, {
+        filters: boolean;
         multiple: boolean;
         picking: boolean;
         removable: boolean;
-        filters: boolean;
         resolveAvatar: (key: string) => Promise<string | null>;
     }, false, {}, {}, import('vue').GlobalComponents, import('vue').GlobalDirectives, string, {
         root: HTMLDivElement;
@@ -96,10 +96,10 @@ declare const _default: import('vue').DefineComponent<__VLS_Props, {}, {}, {}, {
             }[];
         }[];
     }, {}, {}, {}, {
+        filters: boolean;
         multiple: boolean;
         picking: boolean;
         removable: boolean;
-        filters: boolean;
         resolveAvatar: (key: string) => Promise<string | null>;
     }> | null;
 }, any>;

package/dist/AdminsPage.d.ts

@@ -1,23 +1,39 @@
 import { Component } from 'vue';
+import { AdminsView } from './module';
 import { Admin } from './types';
 /**
- * The administrators section: the list, and the form over it.
+ * The administrators section: the list, the form over it, the trail of what their agents did,
+ * and the agents themselves.
  *
- * A dialog rather than a second route. Editing somebody is half a dozen fields, and a screen
- * that takes over the page for that loses the list you were reading — which is where you
- * decide who to open next.
+ * A dialog rather than a second route for the form. Editing somebody is half a dozen fields,
+ * and a screen that takes over the page for that loses the list you were reading — which is
+ * where you decide who to open next.
+ *
+ * The calls and the connections are further views of the same section rather than sections of
+ * their own: "who did what" is a question about these people, whether a hand or a program was
+ * at the other end. A route each rather than panels of one, because each has its own paging
+ * and filters, and a view that quietly resets both when you come back to it is worse than a
+ * second address. The calls are behind `admins.audit`, the permission the sign-in trail is
+ * behind; everybody's connections are behind `admins.manage`, the one that is about other
+ * people's accounts.
  *
  * The heading and `Add` used to live inside the card, which made this the one section of the
  * panel with no line of its own at the top. They stand outside it now, where every other list
  * keeps them (§19).
  */
 type __VLS_Props = {
+    /** The section's own path, for the address of the second view. */
+    base?: string;
+    /** Which view is open. */
+    current?: AdminsView;
     avatarField?: Component;
     resolveAvatar?: (key: string) => Promise<string | null>;
 };
 declare const _default: import('vue').DefineComponent<__VLS_Props, {}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {}, string, import('vue').PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {
+    base: string;
     avatarField: Component;
     resolveAvatar: (key: string) => Promise<string | null>;
+    current: AdminsView;
 }, {}, {}, {}, string, import('vue').ComponentProvideOptions, false, {
     list: import('vue').CreateComponentPublicInstanceWithMixins<Readonly<{
         picking?: boolean;
@@ -55,10 +71,10 @@ declare const _default: import('vue').DefineComponent<__VLS_Props, {}, {}, {}, {
         selection: (admins: Admin[]) => any;
         remove: (admin: Admin) => any;
     }, import('vue').PublicProps, {
+        filters: boolean;
         multiple: boolean;
         picking: boolean;
         removable: boolean;
-        filters: boolean;
         resolveAvatar: (key: string) => Promise<string | null>;
     }, false, {}, {}, import('vue').GlobalComponents, import('vue').GlobalDirectives, string, {
         root: HTMLDivElement;
@@ -100,10 +116,10 @@ declare const _default: import('vue').DefineComponent<__VLS_Props, {}, {}, {}, {
             }[];
         }[];
     }, {}, {}, {}, {
+        filters: boolean;
         multiple: boolean;
         picking: boolean;
         removable: boolean;
-        filters: boolean;
         resolveAvatar: (key: string) => Promise<string | null>;
     }> | null;
 }, HTMLDivElement>;

package/dist/CallList.d.ts

@@ -0,0 +1,6 @@
+declare const _default: import('vue').DefineComponent<{}, {
+    reload: () => Promise<void>;
+}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {}, string, import('vue').PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import('vue').ComponentProvideOptions, true, {
+    root: HTMLDivElement;
+}, HTMLDivElement>;
+export default _default;

package/dist/ConnectPage.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import('vue').DefineComponent<{}, {}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {}, string, import('vue').PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import('vue').ComponentProvideOptions, true, {}, HTMLDivElement>;
+export default _default;

package/dist/ConnectionList.d.ts

@@ -0,0 +1,28 @@
+import { ConnectionScope } from './types';
+/**
+ * The agents somebody let in, and the one button that ends one.
+ *
+ * A row is who is connected, on what terms, and when it was last heard from. The terms are
+ * the part worth reading: "read only" is not a scope the client asked for, it is what the
+ * person chose on the consent screen, and it outranks their own permissions.
+ *
+ * Ending a connection is not paged, sorted or searched, and the list is not either. A person
+ * has one agent, or three; a table of them that needed a search would mean something else had
+ * gone wrong.
+ *
+ * A connection that was ended stays in the list, greyed, because it is what the call log
+ * points at — the rows an agent left behind outlive the connection that made them.
+ */
+type __VLS_Props = {
+    /** Whose connections: this person's, or everybody's (`admins.manage`). */
+    scope?: ConnectionScope;
+};
+declare function load(): Promise<void>;
+declare const _default: import('vue').DefineComponent<__VLS_Props, {
+    reload: typeof load;
+}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {}, string, import('vue').PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {
+    scope: ConnectionScope;
+}, {}, {}, {}, string, import('vue').ComponentProvideOptions, false, {
+    root: HTMLDivElement;
+}, HTMLDivElement>;
+export default _default;

package/dist/admins.d.ts

@@ -1,5 +1,5 @@
 import { AdminContext } from '@webx-ui/module-admin';
-import { Admin, AdminInput, AdminPage, AdminQuery, Role } from './types';
+import { Admin, AdminInput, AdminPage, AdminQuery, AgentCallPage, AgentCallQuery, Role } from './types';
 export interface AdminsApi {
     list(query?: AdminQuery): Promise<AdminPage>;
     get(id: number): Promise<Admin>;
@@ -7,6 +7,8 @@ export interface AdminsApi {
     update(id: number, input: AdminInput): Promise<Admin>;
     remove(id: number): Promise<void>;
     roles(): Promise<Role[]>;
+    /** What agents did, newest first. Behind `admins.audit`. */
+    calls(query?: AgentCallQuery): Promise<AgentCallPage>;
 }
 /**
  * The calls behind the administrators screen, and behind the picker that opens from code.

package/dist/connections.d.ts

@@ -0,0 +1,17 @@
+import { AdminContext } from '@webx-ui/module-admin';
+import { Connection, ConnectionScope, Connections } from './types';
+export interface ConnectionsApi {
+    /** The agents connected — this person's, or everybody's for whoever may see them. */
+    list(scope?: ConnectionScope): Promise<Connections>;
+    /** End one. The row survives; the tokens behind it do not. */
+    disconnect(id: number): Promise<Connection>;
+}
+/**
+ * The two calls behind the connections list.
+ *
+ * Separate from the administrators API because the audiences are: everybody signed in reads
+ * their own connections and ends them, and nothing about that is managing other people's
+ * accounts. The server decides which list it hands back — the scope here is a request, not a
+ * claim.
+ */
+export declare function createConnectionsApi(admin: AdminContext): ConnectionsApi;

package/dist/index.d.ts

@@ -28,12 +28,16 @@ export interface AuthOptions {
  * itself knows nothing about authentication — it holds the answer, not the question.
  */
 export declare function auth(options?: AuthOptions): AdminPlugin;
-export { admins, type AdminsOptions } from './module';
+export { admins, connect, type AdminsOptions, type AdminsView, type ConnectOptions } from './module';
 export { createAdminsApi, type AdminsApi } from './admins';
+export { createConnectionsApi, type ConnectionsApi } from './connections';
 export { selectAdmin, selectAdmins, type AdminPickerOptions } from './selectAdmin';
 export { default as WxAdminsPage } from './AdminsPage';
 export { default as WxAdminList } from './AdminList';
-export type { Admin, AdminInput, AdminPage, AdminQuery, AdminRole, Role } from './types';
+export { default as WxAgentCallList } from './CallList';
+export { default as WxConnectionList } from './ConnectionList';
+export { default as WxConnectPage } from './ConnectPage';
+export type { Admin, AdminInput, AdminPage, AdminQuery, AdminRole, AgentCall, AgentCallFilters, AgentCallOutcome, AgentCallPage, AgentCallQuery, Connection, ConnectionScope, Connections, Role, } from './types';
 export { createAuthSession, provideAuth, useAuth, authKey, avatarFieldKey, avatarResolverKey, type ProfileInput, } from './session';
 export { default as WxProfileDialog } from './ProfileDialog';
 export type { AuthSession, AvatarResolver, Credentials } from './session';