@wssto2/vue-core 0.4.27 → 0.5.0

package/dist/SignIns-eoYPB6kB.js

@@ -0,0 +1,121 @@
+import { defineComponent as y, computed as k, openBlock as _, createElementBlock as b, createVNode as r, unref as t, withCtx as l, createElementVNode as u, toDisplayString as d, createTextVNode as $, ref as v, watch as w, createBlock as I, createCommentVNode as S } from "vue";
+import { useI18n as h } from "vue-i18n";
+import { P as V, i as N } from "./index-kqk7Mclb.js";
+import { u as B } from "./platform-Dl1fbScN.js";
+import { b as E } from "./routeResource-CcYA75T2.js";
+import { _ as R } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
+import { u as C } from "./useLoad-W4tfxmm5.js";
+import { _ as P } from "./PageBar.vue_vue_type_script_setup_true_lang-B7qdEeej.js";
+import { _ as L } from "./SectionIntro.vue_vue_type_script_setup_true_lang-CZtPrmXD.js";
+import { _ as T } from "./DataTable.vue_vue_type_script_setup_true_lang-BEvz5zqo.js";
+import { _ as U } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
+import { d as q, s as D, a as G } from "./signInEvents-DWShrJox.js";
+import { _ as K } from "./ViewTabs.vue_vue_type_script_setup_true_lang-BJIoZAlH.js";
+const O = {
+  class: "overflow-hidden rounded-group bg-surface-cell shadow-group",
+  "data-signin-table": ""
+}, W = ["title"], j = { class: "font-mono text-footnote" }, z = {
+  class: "px-4 py-8 text-center text-body text-content-muted",
+  "data-signin-empty": ""
+}, A = /* @__PURE__ */ y({
+  __name: "SignInTable",
+  props: {
+    rows: {},
+    loading: { type: Boolean }
+  },
+  setup(f) {
+    const m = f, { t: o } = h(), p = k(() => [
+      { key: "created_at", label: o("core.account.signins.columns.time"), kind: "timestamp", width: 170, mobile: "meta" },
+      { key: "event", label: o("core.account.signins.columns.event"), mobile: "primary" },
+      { key: "device", label: o("core.account.signins.columns.device"), hideBelow: "md", width: 320, mobile: "hidden" },
+      { key: "ip", label: o("core.account.signins.columns.ip"), hideBelow: "md", width: 140, mobile: "hidden" }
+    ]), c = (n) => o(G(n.event, n.actor?.name || null), { name: n.actor?.name ?? "" });
+    return (n, i) => (_(), b("div", O, [
+      r(t(T), {
+        rows: m.rows,
+        columns: p.value,
+        "row-key": (e) => e.id,
+        loading: m.loading
+      }, {
+        "cell-event": l(({ item: e }) => [
+          r(t(U), {
+            tone: t(D)(e.event).tone,
+            "data-event": e.event
+          }, {
+            default: l(() => [
+              $(d(c(e)), 1)
+            ]),
+            _: 2
+          }, 1032, ["tone", "data-event"])
+        ]),
+        "cell-device": l(({ item: e }) => [
+          u("span", {
+            class: "block truncate",
+            title: e.device
+          }, d(t(q)(e.device) || "—"), 9, W)
+        ]),
+        "cell-ip": l(({ item: e }) => [
+          u("span", j, d(e.ip || "—"), 1)
+        ]),
+        empty: l(() => [
+          u("p", z, d(t(o)("core.account.signins.empty")), 1)
+        ]),
+        _: 1
+      }, 8, ["rows", "columns", "row-key", "loading"])
+    ]));
+  }
+}), F = {
+  class: "flex min-w-0 flex-col gap-group-gap",
+  "data-person-signins": ""
+}, H = { class: "px-row-inset text-footnote text-content-muted" }, le = /* @__PURE__ */ y({
+  __name: "SignIns",
+  setup(f) {
+    const m = ["all", "failed"], { t: o } = h(), { http: p } = B(), c = E(V), n = v("all"), i = v(1), e = C(
+      async ({ signal: g }) => {
+        const s = c.id.value;
+        return s === null ? null : (await p.request(N.usersSignins, { id: s, view: n.value, page: i.value, per_page: 20 }, { signal: g })).data;
+      },
+      { watch: () => c.id.value }
+    );
+    return w(n, () => {
+      i.value = 1, e.reload();
+    }), w(i, () => void e.reload()), (g, s) => (_(), b("div", F, [
+      r(L, {
+        title: t(o)("core.users.sections.signins"),
+        description: t(o)("core.users.intro.signins", { name: t(c).data.value?.name ?? "" })
+      }, null, 8, ["title", "description"]),
+      r(K, {
+        modelValue: n.value,
+        "onUpdate:modelValue": s[0] || (s[0] = (a) => n.value = a),
+        views: m,
+        counts: t(e).data.value?.meta?.views,
+        "label-of": (a) => t(o)(`core.account.signins.views.${a}`),
+        label: t(o)("core.users.sections.signins")
+      }, null, 8, ["modelValue", "counts", "label-of", "label"]),
+      r(t(R), {
+        state: t(e).state.value,
+        "skeleton-rows": 5,
+        "is-empty": () => !1,
+        onRetry: s[2] || (s[2] = (a) => t(e).reload())
+      }, {
+        default: l(({ value: a }) => [
+          r(A, {
+            rows: a?.data ?? []
+          }, null, 8, ["rows"]),
+          a ? (_(), I(P, {
+            key: 0,
+            page: i.value,
+            "onUpdate:page": s[1] || (s[1] = (x) => i.value = x),
+            "last-page": a.last_page,
+            total: a.total
+          }, null, 8, ["page", "last-page", "total"])) : S("", !0),
+          u("p", H, d(t(o)("core.account.signins.footer_user")), 1)
+        ]),
+        _: 1
+      }, 8, ["state"])
+    ]));
+  }
+});
+export {
+  le as default
+};

package/dist/{SwitchField.vue_vue_type_script_setup_true_lang-ALvJisiP.js → SwitchField.vue_vue_type_script_setup_true_lang-D_-HACqT.js}

@@ -1,6 +1,6 @@
 import { defineComponent as v, useModel as w, computed as y, openBlock as g, createBlock as k, mergeProps as _, unref as t, createSlots as $, withCtx as l, createElementVNode as s, renderSlot as i, normalizeClass as d, normalizeStyle as B, toDisplayString as S, mergeModels as z, mergeDefaults as C } from "vue";
 import { useI18n as M } from "vue-i18n";
-import { u as V, _ as D, f as T, b as E } from "./control-B4SdblL6.js";
+import { u as V, _ as D, f as T, b as E } from "./options-g8RwEhBk.js";
 const F = { class: "flex items-center gap-2" }, I = ["id", "aria-checked", "aria-label", "aria-describedby", "aria-invalid", "disabled"], P = { class: "sr-only" }, Z = /* @__PURE__ */ v({
   __name: "SwitchField",
   props: /* @__PURE__ */ z(/* @__PURE__ */ C({

package/dist/{TextField.vue_vue_type_script_setup_true_lang-CP2WeU36.js → TextField.vue_vue_type_script_setup_true_lang-DTAQPbW0.js}

@@ -1,10 +1,10 @@
 import { defineComponent as K, useTemplateRef as N, computed as v, watch as te, nextTick as oe, openBlock as n, createElementBlock as l, withModifiers as se, normalizeStyle as ne, unref as i, createElementVNode as m, toDisplayString as r, createCommentVNode as p, Fragment as R, renderList as ae, normalizeClass as B, createBlock as P, renderSlot as b, createTextVNode as E, useModel as ie, ref as le, mergeProps as re, createSlots as ce, withCtx as w, withDirectives as de, vModelDynamic as ue, mergeModels as H, mergeDefaults as pe } from "vue";
 import { useI18n as G } from "vue-i18n";
 import { b as me } from "./controlSurface-t7OEFESJ.js";
-import { a as fe, c as he, _ as ve, f as ge, b as ye } from "./control-B4SdblL6.js";
+import { a as fe, c as he, _ as ve, f as ge, b as ye } from "./options-g8RwEhBk.js";
 import { _ as xe } from "./Icon.vue_vue_type_script_lang-D7oC-d-S.js";
 import { u as be, N as ke } from "./anchored-DpuUwf-9.js";
-import { l as U, m as _e, u as we, c as $e } from "./suggestions-DHJFKB26.js";
+import { l as U, m as _e, u as we, c as $e } from "./suggestions-CfFTHi8y.js";
 const Me = ["id", "aria-busy"], qe = { class: "min-h-0 flex-1 overflow-y-auto p-1.5" }, Be = {
   key: 0,
   class: "px-2.5 pb-1 pt-1.5 text-caption font-semibold uppercase text-content-disabled",

package/dist/{TextareaField.vue_vue_type_script_setup_true_lang-BJ4__cvJ.js → TextareaField.vue_vue_type_script_setup_true_lang-DsjK2C9T.js}

@@ -1,6 +1,6 @@
 import { defineComponent as V, useModel as L, useTemplateRef as M, computed as i, openBlock as p, createBlock as D, mergeProps as F, unref as f, createSlots as S, withCtx as n, createElementVNode as v, normalizeClass as b, withDirectives as z, vModelText as E, createElementBlock as P, toDisplayString as R, createCommentVNode as N, renderSlot as d, mergeModels as y, mergeDefaults as _ } from "vue";
 import { u as j } from "./mediaQuery-CygcXmFW.js";
-import { a as G, u as H, c as U, _ as A, f as I, b as J } from "./control-B4SdblL6.js";
+import { a as G, u as H, c as U, _ as A, f as I, b as J } from "./options-g8RwEhBk.js";
 const K = ["id", "name", "rows", "placeholder", "maxlength", "autocomplete", "disabled", "required", "aria-required", "aria-invalid", "aria-describedby"], O = {
   key: 0,
   class: "mt-1 self-end text-footnote tabular-nums text-content-muted"

package/dist/{TimeField.vue_vue_type_script_setup_true_lang-DBxKAWRo.js → TimeField.vue_vue_type_script_setup_true_lang-Cz7KhUqt.js}

@@ -5,7 +5,7 @@ import { u as oe } from "./format-D8X4zsx6.js";
 import { _ as le } from "./Icon.vue_vue_type_script_lang-D7oC-d-S.js";
 import { u as ae } from "./mediaQuery-CygcXmFW.js";
 import { _ as re } from "./Popover.vue_vue_type_script_setup_true_lang-C70GrCP7.js";
-import { c as se, _ as ie, f as ne, b as ue } from "./control-B4SdblL6.js";
+import { c as se, _ as ie, f as ne, b as ue } from "./options-g8RwEhBk.js";
 import { d as me, r as de, t as I, p as ce, u as pe, a as fe, i as Q, _ as ve, b as be, c as ye } from "./useTypedEntry-C7k7Dyl-.js";
 function ke(s) {
   const { t: i } = R(), y = m(() => [i("core.form.time.words.now").toLowerCase(), "now"]);

package/dist/Timestamp.vue_vue_type_script_setup_true_lang-CutyQkJb.js

@@ -0,0 +1,52 @@
+import { defineComponent as x, computed as s, openBlock as n, createElementBlock as o, createVNode as m, createElementVNode as l, toDisplayString as a, unref as u, createTextVNode as f } from "vue";
+import { useI18n as v } from "vue-i18n";
+import { u as h, t as g } from "./format-D8X4zsx6.js";
+import { _ as w } from "./Icon.vue_vue_type_script_lang-D7oC-d-S.js";
+import { _ as y } from "./Avatar.vue_vue_type_script_setup_true_lang-BPj_fkJR.js";
+const k = {
+  key: 0,
+  class: "inline-grid max-w-full min-w-0 grid-cols-[auto_minmax(0,1fr)] items-center gap-x-2 text-xs",
+  "data-timestamp-author": ""
+}, T = { class: "min-w-0 truncate text-content" }, V = ["datetime"], E = ["datetime"], I = {
+  key: 2,
+  class: "text-xs text-content-muted"
+}, z = /* @__PURE__ */ x({
+  __name: "Timestamp",
+  props: {
+    value: { default: void 0 },
+    precision: { default: "dateTime" },
+    author: { default: null }
+  },
+  setup(d) {
+    const p = /^\d{4}-\d{2}-\d{2}$/, t = d, { t: _ } = v(), r = h(), e = s(() => g(t.value)), i = s(() => {
+      if (e.value)
+        return typeof t.value == "string" && p.test(t.value) ? t.value : e.value.toISOString();
+    }), c = s(() => t.precision === "date" ? r.date(e.value) : r.dateTime(e.value));
+    return (D, N) => e.value && t.author ? (n(), o("span", k, [
+      m(y, {
+        name: t.author.name,
+        src: t.author.avatarUrl,
+        size: "xs",
+        class: "row-span-2"
+      }, null, 8, ["name", "src"]),
+      l("span", T, a(t.author.name), 1),
+      l("time", {
+        datetime: i.value,
+        class: "whitespace-nowrap text-content-muted"
+      }, a(c.value), 9, V)
+    ])) : e.value ? (n(), o("time", {
+      key: 1,
+      datetime: i.value,
+      class: "inline-flex items-center gap-2 text-xs text-content"
+    }, [
+      m(u(w), {
+        name: "calendarEventFill",
+        class: "text-content-muted"
+      }),
+      f(a(c.value), 1)
+    ], 8, E)) : (n(), o("span", I, a(u(_)("core.state.empty")), 1));
+  }
+});
+export {
+  z as _
+};

package/dist/{UserRecord-C1SzdpKu.js → UserRecord-BaQl2zzQ.js}

@@ -1,25 +1,25 @@
 import { defineComponent as R, openBlock as q, createBlock as P, unref as e, withCtx as u, createVNode as t, mergeProps as L, provide as N, computed as g, useTemplateRef as $, createElementVNode as x, toDisplayString as C, createTextVNode as j } from "vue";
 import { useI18n as A } from "vue-i18n";
-import { a as F } from "./neighbors-RVQ4O3Qv.js";
+import { a as F } from "./neighbors-IMRQ4rkm.js";
 import { _ as H } from "./Avatar.vue_vue_type_script_setup_true_lang-BPj_fkJR.js";
-import { u as J } from "./describeError-B-NMa--w.js";
-import { i as w, P as Q, p as W, f as X, M as Y, g as Z, d as ee } from "./index-LP6NNnow.js";
+import { u as J } from "./describeError-BqGAUZgX.js";
+import { i as w, P as Q, p as W, f as X, M as Y, g as Z, d as ee } from "./index-kqk7Mclb.js";
 import { _ as se } from "./AlertDialog.vue_vue_type_script_setup_true_lang-whA4WLdl.js";
 import { t as k } from "./toast-CqSDTWRX.js";
-import { _ as ae } from "./SectionNavigator.vue_vue_type_script_setup_true_lang-Dmv6TpCi.js";
-import { u as E } from "./platform-PZpUkkMS.js";
-import { a as te } from "./routeResource-DlTsGTg_.js";
+import { _ as ae } from "./SectionNavigator.vue_vue_type_script_setup_true_lang-Cy9Oi0ts.js";
+import { u as E } from "./platform-Dl1fbScN.js";
+import { a as te } from "./routeResource-CcYA75T2.js";
 import { a as oe } from "./ResourcePage.vue_vue_type_script_setup_true_lang-BFBGvevP.js";
 import { A as re } from "./access-DmAceEo5.js";
 import { _ as ne } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
-import { u as ie } from "./useLoad-M7V-AVwR.js";
+import { u as ie } from "./useLoad-W4tfxmm5.js";
 import { _ as V } from "./IconTile.vue_vue_type_script_setup_true_lang-_FXvaj93.js";
-import { _ as T } from "./FormGroup.vue_vue_type_script_setup_true_lang-DSwSRsA5.js";
-import { e as B } from "./control-B4SdblL6.js";
-import { u as z, _ as K } from "./useCommand-Cj-APj-P.js";
-import { u as U } from "./fieldMessages-6HVzSDqG.js";
-import { u as ce, s as le } from "./status-D9iQJJiz.js";
-import { _ as M } from "./TextField.vue_vue_type_script_setup_true_lang-CP2WeU36.js";
+import { _ as T } from "./FormGroup.vue_vue_type_script_setup_true_lang-BPchlRCl.js";
+import { g as B } from "./options-g8RwEhBk.js";
+import { u as z, _ as K } from "./useCommand-CtqheKUv.js";
+import { u as U } from "./fieldMessages-DTXpWnBd.js";
+import { u as ce, s as le } from "./status-C2gHqkj6.js";
+import { _ as M } from "./TextField.vue_vue_type_script_setup_true_lang-DTAQPbW0.js";
 const ue = /* @__PURE__ */ R({
   __name: "DeactivateDialog",
   props: {

package/dist/{UsersList-B3hc683r.js → UsersList-BfXWgH5K.js}

@@ -1,21 +1,21 @@
 import { defineComponent as U, openBlock as p, createBlock as C, unref as e, withCtx as c, createVNode as r, mergeProps as i, useTemplateRef as V, computed as q, createTextVNode as z, toDisplayString as $, createCommentVNode as A, createElementBlock as S, normalizeClass as N } from "vue";
 import { useI18n as B } from "vue-i18n";
 import { useRouter as M } from "vue-router";
-import { u as P, _ as D } from "./CollectionPage.vue_vue_type_script_setup_true_lang-CVEYkb26.js";
+import { u as P, _ as D } from "./CollectionPage.vue_vue_type_script_setup_true_lang-CtvHtFLy.js";
 import { _ as I } from "./Avatar.vue_vue_type_script_setup_true_lang-BPj_fkJR.js";
 import { u as F } from "./format-D8X4zsx6.js";
-import { u as L } from "./platform-PZpUkkMS.js";
+import { u as L } from "./platform-Dl1fbScN.js";
 import { _ as G } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
-import { i as K, f as E, M as W } from "./index-LP6NNnow.js";
-import { U as j, u as H, s as J } from "./status-D9iQJJiz.js";
+import { i as K, f as E, M as W } from "./index-kqk7Mclb.js";
+import { U as j, u as H, s as J } from "./status-C2gHqkj6.js";
 import { u as O } from "./environment-Dva-SG8D.js";
 import { u as Q } from "./languages-BShG9LpE.js";
-import { _ as X } from "./FormGroup.vue_vue_type_script_setup_true_lang-DSwSRsA5.js";
-import { _ as Y } from "./SelectField.vue_vue_type_script_setup_true_lang-C3FbRQW7.js";
-import { _ as d } from "./TextField.vue_vue_type_script_setup_true_lang-CP2WeU36.js";
-import { u as Z, _ as ee } from "./useCommand-Cj-APj-P.js";
+import { _ as X } from "./FormGroup.vue_vue_type_script_setup_true_lang-BPchlRCl.js";
+import { _ as Y } from "./SelectField.vue_vue_type_script_setup_true_lang-BzQC1qDQ.js";
+import { _ as d } from "./TextField.vue_vue_type_script_setup_true_lang-DTAQPbW0.js";
+import { u as Z, _ as ee } from "./useCommand-CtqheKUv.js";
 import { t as se } from "./toast-CqSDTWRX.js";
-import { u as te } from "./fieldMessages-6HVzSDqG.js";
+import { u as te } from "./fieldMessages-DTXpWnBd.js";
 const oe = /* @__PURE__ */ U({
   __name: "NewUserDialog",
   emits: ["created"],

package/dist/access/RoleCompareDialog.vue.d.ts

@@ -1,6 +1,6 @@
 import type { Role, RoleSummary } from "../modules/access/entities";
 /**
- * *Compare with a predefined role*: what a custom role holds that the other does not, what it lacks, and where the whose
+ * *Compare with another role* (any the actor may view, the standard ones too): what a custom role holds that the other does not, what it lacks, and where the whose
  * differs. The way to see how far a copy has drifted before replacing it.
  */
 type __VLS_Props = {

package/dist/access/RoleEditor.vue.d.ts

@@ -15,6 +15,8 @@ interface Draft {
     name: string;
     description: string;
     grants: Grants;
+    /** The choice of each of the application's constraints on the role, "" for none. */
+    constraints: Record<string, string>;
 }
 declare function save(): Promise<void>;
 declare const _default: import("vue").DefineComponent<__VLS_Props, {

package/dist/access/constraints.d.ts

@@ -0,0 +1,28 @@
+import type { Constraint } from "../modules/access/entities";
+/** One option of a role constraint. */
+export interface RoleConstraintOption {
+    /** What is stored in the role's `attrs` for it. */
+    readonly value: string;
+    /** i18n key of its label. */
+    readonly labelKey: string;
+}
+/**
+ * A constraint the application puts on a role (go-core's `attrs`: attribute key -> values), edited as one choice among `options`
+ * (the vehicle kinds a role may work with: new only, used only) or none, which leaves the key out of `attrs` ("allows all").
+ */
+export interface RoleConstraint {
+    /** The attribute key the permissions declare (`authz.Attributes("vehicle_kind")`). */
+    readonly attribute: string;
+    /** i18n key of the field's label. */
+    readonly labelKey: string;
+    readonly options: readonly RoleConstraintOption[];
+    /** i18n key of the choice for no constraint; by default `core.access.constraints.any` ("All"). */
+    readonly anyLabelKey?: string;
+}
+/** The chosen option of each constraint, "" for none; a stored value list that is not exactly one value reads as none. */
+export declare function constraintChoices(constraints: readonly RoleConstraint[], attrs: readonly Constraint[]): Record<string, string>;
+/**
+ * The `attrs` to save: what the role holds for attributes this editor does not manage stays as it is, and so does a managed one
+ * the person left alone (a stored list the choice cannot show is not lost by saving something else); a changed choice replaces it.
+ */
+export declare function constraintAttrs(constraints: readonly RoleConstraint[], stored: readonly Constraint[], loaded: Record<string, string>, chosen: Record<string, string>): Constraint[];

package/dist/access/context.d.ts

@@ -1,12 +1,17 @@
 import type { RouteLocationRaw } from "vue-router";
 import type { ScopeOptions, SubjectRef } from "../modules/access/entities";
 import type { PermissionCatalogue } from "./catalogue";
+import type { RoleConstraint } from "./constraints";
 /** What the access screens need from the feature that installed them. */
 export interface AccessContext {
     readonly catalogue: PermissionCatalogue;
     /** Where a holder's name leads (their record), or null for a name that is not a link. */
     readonly subjectRoute: (subject: SubjectRef) => RouteLocationRaw | null;
     /** The places `subject` may be given roles at; by default what the server says (`GET /v1/iam/users/:id/scopes`). */
+    /** The application's constraints on a role, edited next to its name and kept in its `attrs`. */
+    readonly constraints: readonly RoleConstraint[];
+    /** The i18n key of the sentence for each of the application's own role-problem codes (`authz.invalid`). */
+    readonly problems: Readonly<Record<string, string>>;
     readonly scopes: ((subject: SubjectRef, signal: AbortSignal) => Promise<ScopeOptions>) | null;
 }
 export declare const accessContextKey: import("vue").InjectionKey<AccessContext>, useAccessContext: () => AccessContext;

package/dist/access/feature.d.ts

@@ -3,6 +3,7 @@ import { type Feature } from "../app";
 import type { ScopeOptions, SubjectRef } from "../modules/access/entities";
 import type { Destination } from "../router";
 import type { PermissionCatalogue } from "./catalogue";
+import type { RoleConstraint } from "./constraints";
 export interface AccessFeatureOptions {
     /**
      * The application's permissions: the `permissions` object go-core's `authzts` writes (`frontend/generated/permissions.ts`).
@@ -13,6 +14,22 @@ export interface AccessFeatureOptions {
     subjectRoute?: (subject: SubjectRef) => RouteLocationRaw | null;
     /** The places a person may be given roles at. Default: what the server says (`GET /v1/iam/users/:id/scopes`). */
     scopes?: (subject: SubjectRef, signal: AbortSignal) => Promise<ScopeOptions>;
+    /**
+     * Constraints the application puts on a role, kept in the role's `attrs` (go-core: attribute key -> values). Each is a field in the role
+     * editor and on the role page, one choice among its options or none (no key in `attrs`: allows all). The attribute keys are the ones
+     * the permissions declare, or the server refuses the role (`unknown_attribute`). Attributes not listed here are kept as the role has them.
+     *
+     *   accessFeature({ catalogue, roleConstraints: [{ attribute: "vehicle_kind", labelKey: "roles.vehicle_kind", options: [{ value: "new", labelKey: "roles.kind.new" }, { value: "used", labelKey: "roles.kind.used" }] }] })
+     */
+    roleConstraints?: readonly RoleConstraint[];
+    /**
+     * The sentence for each problem code the application's own role check reports (`access.WithRoleCheck`), as an i18n key; a text may use
+     * `{permission}` (the permission's label, when the problem has one) and `{detail}`. Built-in codes have library texts (`core.access.problems.<code>`);
+     * a key here rewords one. A refused role (`authz.invalid`) shows one sentence per problem.
+     *
+     *   accessFeature({ catalogue, problems: { vehicle_kind_conflict: "roles.problems.vehicle_kind_conflict" } })
+     */
+    problems?: Readonly<Record<string, string>>;
     /** The backend's navigation destination that opens the roles list. Without it the application links to `accessPages.roles` itself. */
     destination?: Destination;
 }

package/dist/access/index.d.ts

@@ -7,7 +7,9 @@ export { accessPages, personRolesSection } from "./routes";
 export { accessPermissions } from "./context";
 export { dependantsClosure, permissionTree, requiredClosure } from "./catalogue";
 export type { Grants, PermissionCatalogue, PermissionEntry, PermissionGroup, PermissionMeta, PermissionScreen } from "./catalogue";
+export type { RoleConstraint, RoleConstraintOption } from "./constraints";
 export { useAccessLabels } from "./labels";
-export { useRefusalMessage } from "./refusals";
+export { roleProblems, useDescribeRefusal, useRefusalMessage } from "./refusals";
+export type { RoleProblem } from "./refusals";
 export { default as PersonAccess } from "./PersonAccess.vue";
 export { default as BindingRow } from "./BindingRow.vue";

package/dist/access/index.js

@@ -1,15 +1,17 @@
-import { _ as a, i as c, j as o, c as r, b as n, k as i, l as u, p as l, m as p, n as t, u as d, f as m } from "../index-C3E6DcO0.js";
+import { _ as a, j as c, k as r, c as o, b as u, l as i, m as n, p as l, n as t, q as m, t as p, u as R, i as b, f as d } from "../index-WkbzC_ee.js";
 export {
   a as BindingRow,
   c as PersonAccess,
-  o as accessFeature,
-  r as accessPages,
-  n as accessPermissions,
+  r as accessFeature,
+  o as accessPages,
+  u as accessPermissions,
   i as accessRoutes,
-  u as dependantsClosure,
+  n as dependantsClosure,
   l as permissionTree,
-  p as personRolesSection,
-  t as requiredClosure,
-  d as useAccessLabels,
-  m as useRefusalMessage
+  t as personRolesSection,
+  m as requiredClosure,
+  p as roleProblems,
+  R as useAccessLabels,
+  b as useDescribeRefusal,
+  d as useRefusalMessage
 };

package/dist/access/refusals.d.ts

@@ -1,6 +1,24 @@
+import { type DescribeError } from "../i18n";
+/** One thing wrong with a role or a binding, as go-core's `authz.invalid` carries it (`params.problems`): `{code, permission?, detail?}`. */
+export interface RoleProblem {
+    readonly code: string;
+    readonly permission?: string;
+    readonly detail?: string;
+}
+/** The problems of an `authz.invalid` refusal, in the server's order (by code, then permission); empty for any other error. */
+export declare function roleProblems(error: unknown): readonly RoleProblem[];
+/**
+ * The sentence for a failed request on the access screens: `describeError`, except that a role the server refused as invalid
+ * (`authz.invalid`) says every problem, one sentence each. A problem's text is the application's (`accessFeature({ problems: { <code>: "<i18n key>" } })`,
+ * for its own codes or to reword a built-in one), then the library's `core.access.problems.<code>`, then a general sentence with the code.
+ * `{permission}` in a text is the permission's label (its id outside the access screens), `{detail}` the server's detail.
+ * Call it in `setup`.
+ */
+export declare function useDescribeRefusal(): DescribeError;
 /**
  * For a form's `failureMessage`: a refusal of go-core's delegation rules (`authz.escalation`, `self_assignment`, `last_admin`,
- * `role_in_use`, ...) says which rule it was, in the app's language (`core.errors.authz.*`, overridable with `errors.authz.*`);
- * any other failure keeps the form's own sentence for its kind. Call it in `setup`.
+ * `role_in_use`, ...) says which rule it was, in the app's language (`core.errors.authz.*`, overridable with `errors.authz.*`),
+ * and a role refused as invalid says its problems (see `useDescribeRefusal`); any other failure keeps the form's own sentence for
+ * its kind. Call it in `setup`.
  */
 export declare function useRefusalMessage(): (kind: unknown, error: unknown) => string | undefined;

package/dist/app/index.js

@@ -10,16 +10,16 @@ import { coreMessages as oe, createMessageRuntime as We } from "../i18n/index.js
 import { i as Be, a as He } from "../Icon.vue_vue_type_script_lang-D7oC-d-S.js";
 import { i as Ve, b as Ge } from "../bottomDock-BZEiOPYZ.js";
 import { i as Je, p as ze } from "../chrome-nUcmVu8G.js";
-import { i as Qe, g as Ue } from "../platform-PZpUkkMS.js";
+import { i as Qe, g as Ue } from "../platform-Dl1fbScN.js";
 import { c as Xe, A as Ye, r as re } from "../access-DmAceEo5.js";
 import { c as Ze, _ as et } from "../NoAccess.vue_vue_type_script_setup_true_lang-DWxq-MTM.js";
-import { i as tt } from "../guards-BJZjc3FZ.js";
-import { b as st, c as ot, n as ae } from "../navigation-DpcDF0rX.js";
-import { c as rt, s as ne } from "../contributions-BVBZP5Jb.js";
-import { S as Pt } from "../contributions-BVBZP5Jb.js";
+import { i as tt } from "../guards-DRh4zmxO.js";
+import { b as st, c as ot, n as ae } from "../navigation-DuQwti76.js";
+import { c as rt, s as ne } from "../contributions-DVQPcjJz.js";
+import { S as Pt } from "../contributions-DVQPcjJz.js";
 import { a as ie } from "../environment-Dva-SG8D.js";
 import { u as Bt } from "../environment-Dva-SG8D.js";
-import { b as ce, c as le } from "../describeError-B-NMa--w.js";
+import { b as ce, c as le } from "../describeError-BqGAUZgX.js";
 import { _ as at } from "../Button.vue_vue_type_script_setup_true_lang-CL9Qh5yq.js";
 import { _ as nt } from "../EmptyState.vue_vue_type_script_setup_true_lang-50p-Mp8I.js";
 import { i as it } from "../feature-DdUAfyi4.js";

package/dist/client/index.js

@@ -1,13 +1,21 @@
-import { R as t, c as a } from "../client-k9euDWF4.js";
-import { A as s, i as p, a as f } from "../error-CD7x0Jrz.js";
-import { f as E } from "../transport-BnP7WC0Y.js";
-import { r as m } from "../route-goWMxDUN.js";
+import { R as p, c as o, f as u } from "../client-BHPFfBj3.js";
+import { A as n, a as f, i as l } from "../error-Bb_dr_Ay.js";
+function s(e, i, r = {}) {
+  return { method: e, path: i, permission: r.permission, public: r.public === !0, raw: !1 };
+}
+s.raw = (e, i, r = {}) => ({
+  method: e,
+  path: i,
+  permission: r.permission,
+  public: r.public === !0,
+  raw: !0
+});
 export {
-  s as ApiError,
-  t as REQUEST_ID_HEADER,
-  a as createHttpClient,
-  E as fetchTransport,
-  p as isAborted,
-  f as isApiError,
-  m as route
+  n as ApiError,
+  p as REQUEST_ID_HEADER,
+  o as createHttpClient,
+  u as fetchTransport,
+  f as isAborted,
+  l as isApiError,
+  s as route
 };

package/dist/{client-k9euDWF4.js → client-BHPFfBj3.js}

@@ -1,6 +1,5 @@
-import { A, k as I, a as S } from "./error-CD7x0Jrz.js";
-import { f as U } from "./transport-BnP7WC0Y.js";
-function D(t) {
+import { A, k as I, i as S } from "./error-Bb_dr_Ay.js";
+function U(t) {
   if (!t) return "";
   const e = new URLSearchParams();
   for (const [a, r] of Object.entries(t))
@@ -10,7 +9,7 @@ function D(t) {
   return e.toString();
 }
 const g = (t) => typeof Blob < "u" && t instanceof Blob;
-function z(t) {
+function D(t) {
   const e = new FormData();
   for (const [a, r] of Object.entries(t))
     if (r != null)
@@ -23,23 +22,23 @@ function z(t) {
 function E(t) {
   return g(t) ? t : t instanceof Date ? t.toISOString() : typeof t == "object" && t !== null ? JSON.stringify(t) : String(t);
 }
-function v(t) {
+function z(t) {
   if (t === void 0) return { body: void 0, contentType: null };
   if (typeof t == "string" || t instanceof FormData || t instanceof URLSearchParams || t instanceof ArrayBuffer || ArrayBuffer.isView(t) || g(t))
     return { body: t, contentType: null };
   if (typeof t == "object" && t !== null && !Array.isArray(t)) {
     const e = t;
     if (Object.values(e).some((a) => g(a) || Array.isArray(a) && a.some(g)))
-      return { body: z(e), contentType: null };
+      return { body: D(e), contentType: null };
   }
   return { body: JSON.stringify(t), contentType: "application/json" };
 }
-function B() {
+function v() {
   const t = new Uint8Array(16);
   return globalThis.crypto.getRandomValues(t), Array.from(t, (e) => e.toString(16).padStart(2, "0")).join("");
 }
 const b = "X-Request-ID", T = (t) => typeof t == "object" && t !== null && !Array.isArray(t), w = (t) => typeof t == "string" && t !== "" ? t : null;
-function O(t) {
+function B(t) {
   const e = t?.errors ?? t?.fields;
   if (!T(e)) return {};
   const a = {};
@@ -47,7 +46,7 @@ function O(t) {
     Array.isArray(i) ? a[r] = i.map(String) : i != null && (a[r] = [String(i)]);
   return a;
 }
-async function C(t) {
+async function O(t) {
   const e = await t.text();
   if (e.trim() === "") return { payload: null, readable: !0 };
   try {
@@ -56,10 +55,10 @@ async function C(t) {
     return { payload: null, readable: !1 };
   }
 }
-async function F(t, e) {
-  const a = t.headers.get(b) ?? e, { payload: r, readable: i } = await C(t), o = T(r) ? r : null;
+async function C(t, e) {
+  const a = t.headers.get(b) ?? e, { payload: r, readable: i } = await O(t), o = T(r) ? r : null;
   if (!t.ok) {
-    const m = O(o), n = o?.params;
+    const m = B(o), n = o?.params;
     throw new A({
       kind: I(t.status, Object.keys(m).length > 0),
       message: w(o?.error) ?? w(o?.message) ?? `Request failed with status ${t.status}`,
@@ -86,25 +85,25 @@ async function F(t, e) {
     requestId: a
   } : { data: r, meta: null, message: null, status: t.status, requestId: a };
 }
-const H = (t) => /^[a-z][a-z0-9+.-]*:\/\//i.test(t);
+const F = (t, e) => globalThis.fetch(t, e), H = (t) => /^[a-z][a-z0-9+.-]*:\/\//i.test(t);
 function P(t, e, a) {
   const r = H(e) || t === "" ? e : `${t.replace(/\/+$/, "")}/${e.replace(/^\/+/, "")}`;
   return a === "" ? r : `${r}${r.includes("?") ? "&" : "?"}${a}`;
 }
 const j = (t, e) => new A({ kind: "aborted", message: "The request was cancelled", requestId: t, cause: e });
-function J(t = {}) {
-  const { baseUrl: e = "", transport: a = U, credentials: r = "include" } = t;
+function x(t = {}) {
+  const { baseUrl: e = "", transport: a = F, credentials: r = "include" } = t;
   async function i(n, s, c, u) {
-    const { signal: f } = u, y = t.requestId === !1 ? null : (t.requestId ?? B)();
+    const { signal: f } = u, y = t.requestId === !1 ? null : (t.requestId ?? v)();
     if (f?.aborted) throw j(y, f.reason);
-    const p = v(c), l = new Headers({ Accept: "application/json" }), h = t.headers ? await t.headers() : void 0;
+    const p = z(c), l = new Headers({ Accept: "application/json" }), h = t.headers ? await t.headers() : void 0;
     for (const d of [h, u.headers])
       d && new Headers(d).forEach(($, q) => l.set(q, $));
     y !== null && !l.has(b) && l.set(b, y), p.contentType !== null && !l.has("Content-Type") && l.set("Content-Type", p.contentType);
-    const k = { method: n, headers: l, credentials: r, body: p.body, signal: f }, R = P(e, s, D(u.query));
+    const k = { method: n, headers: l, credentials: r, body: p.body, signal: f }, R = P(e, s, U(u.query));
     try {
       const d = await a(R, k);
-      return await F(d, y);
+      return await C(d, y);
     } catch (d) {
       throw S(d) ? d : f?.aborted || d instanceof Error && d.name === "AbortError" ? j(y, d) : new A({
         kind: "network",
@@ -143,5 +142,6 @@ function J(t = {}) {
 }
 export {
   b as R,
-  J as c
+  x as c,
+  F as f
 };