@wssto2/vue-core 0.5.0 → 0.5.2

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog
 
+## 0.5.2 — 2026-10-13
+
+Access for service accounts, a working "turn on all", worded constraints, and this browser's push state for an app's own screens. Found by ARV's moves to the library's access and notifications.
+
+### Changed (no backward compatibility)
+- **Access takes the subject's kind.** `accessFeature({ subjects: { service: { base, bindable } } })` says where an application serves the routes of a kind other than `user` (`${base}/:id/{access,scopes,bindings,bindings/:binding_id}`, in go-core's wire). `PersonAccess` and *Add role* read and write there; a kind with no entry is refused with an error that names it, never sent to the user routes. `createAccessApi(http, subjects)` takes the entries, and its `bindable(subject, level, scopeId)` now takes the subject first.
+
+### New
+- **`usePushState()`** from `/notifications`: `ready`, `available`, `permission`, `subscribed`, `busy`, `enable()`, `disable()`, built on the settings page's own state. `subscribed` is true as soon as `ready` for a browser that already has push on. Type `PushState`.
+
+### Fixed
+- **Turn on all** granted only part of a module: it read "all on" inside its loop, and once the closures had granted everything the rest were revoked again.
+- **Constraints are worded.** A role's constraints on a person's roles (`BindingRow`) use the `roleConstraints` option labels ("Used only"); an attribute or value with no label stays `attribute: value`.
+
+### Docs
+- The access recipe gains subjects and constraint labels; the notifications recipe gains `usePushState` and loses the stale "devices and push permission are not in these screens".
+
+## 0.5.1 — 2026-10-13
+
+One renewal, sessions that do not renew, and the language before the first page. Found by ARV's move to the library's sign-in.
+
+### Changed (no backward compatibility)
+- **`session.renew()`: one renewal for everyone.** The timer, the client's 401 path and an app's own fetch wrapper all call it. Concurrent callers share one in-flight renewal, so go-core's rotating refresh token is presented once (before, a timer and a 401 firing together signed the person out). It resolves `true` when the session goes on and `false` when it ended: a refused or throwing renewal expires the session, `onSessionExpired` runs once.
+- **`createPlatform({ renewable })`**: `() => boolean`, asked each time; false for a session that cannot renew (an embed bearer token with no refresh token). Then `session.renew()` ends the session at once (a 401 does not call `renewSession`) and `keepSessionAlive` stays idle. `session.renewable` reads it. Without `renewSession` a session is not renewable. `identityPlatform({ renewable })` passes it through.
+- **`keepSessionAlive()` takes no `renew` option** and calls `platform.session.renew()`. `renewIdentityTokens` is removed: `identityPlatform()`'s `renewSession` does the refresh. The old "without a renew call it only reads the session again" is gone: a session that renews with a read gives `renewSession` that read (`async (session) => (await session.refresh()).status === "authenticated"`).
+- **The session user's language is applied before the first page.** When the session loads with a user whose `locale` is one the application offers and differs from the active one, `mount()` switches to it (loading its texts) before the first navigation. `LocaleSync` stays for later changes. Mapping the server's code to a locale code is the user parser's job.
+
 ## 0.5.0 — 2026-10-13
 
 The screens for go-core v1.8.0. Web push comes into the library (owner 2026-10-12: push belongs in go-core and vue-core). My profile and the notification settings move to the current grouped-rows look. Apps get their own sections on both pages and their own role settings.

package/dist/{AccessGate.vue_vue_type_script_setup_true_lang-Nw1IsB8N.js → AccessGate.vue_vue_type_script_setup_true_lang-DZ9GcLC1.js}

@@ -1,5 +1,5 @@
 import { defineComponent as t, computed as i, renderSlot as n } from "vue";
-import { u as l } from "./platform-Dl1fbScN.js";
+import { u as l } from "./platform-Dx6STiwY.js";
 const m = /* @__PURE__ */ t({
   __name: "AccessGate",
   props: {

package/dist/{Activity-CoGI2_GL.js → Activity-dpY2kIs2.js}

@@ -6,8 +6,8 @@ import { u as O } from "./format-D8X4zsx6.js";
 import { _ as U } from "./DateField.vue_vue_type_script_setup_true_lang-DRuWzSaX.js";
 import { _ as T } from "./FormGroup.vue_vue_type_script_setup_true_lang-BPchlRCl.js";
 import { g as z } from "./options-g8RwEhBk.js";
-import { P as G, c as H, i as J } from "./index-kqk7Mclb.js";
-import { u as K } from "./platform-Dl1fbScN.js";
+import { P as G, c as H, i as J } from "./index-auJqVMWC.js";
+import { u as K } from "./platform-Dx6STiwY.js";
 import { b as M } from "./routeResource-CcYA75T2.js";
 import { _ as Q } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
 import { _ as W } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";

package/dist/{Changes-Cwfe6wbX.js → Changes-CL8F1w8q.js}

@@ -1,7 +1,7 @@
 import { defineComponent as k, computed as N, openBlock as n, createBlock as u, unref as a, withCtx as g, createElementBlock as p, Fragment as _, renderList as $, createElementVNode as i, toDisplayString as h, createCommentVNode as C, ref as x, watch as b, createVNode as y } from "vue";
 import { useI18n as E } from "vue-i18n";
-import { P as V, i as R } from "./index-kqk7Mclb.js";
-import { u as S } from "./platform-Dl1fbScN.js";
+import { P as V, i as R } from "./index-auJqVMWC.js";
+import { u as S } from "./platform-Dx6STiwY.js";
 import { b as B } from "./routeResource-CcYA75T2.js";
 import { _ as F } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
 import { u as L } from "./useLoad-W4tfxmm5.js";

package/dist/{CollectionPage.vue_vue_type_script_setup_true_lang-CtvHtFLy.js → CollectionPage.vue_vue_type_script_setup_true_lang-l-e-6WeS.js}

@@ -1,7 +1,7 @@
 import { hasInjectionContext as lt, inject as ot, shallowRef as xe, computed as k, watch as Ve, toValue as Se, ref as ie, getCurrentScope as nt, onScopeDispose as st, defineComponent as be, openBlock as u, createElementBlock as y, createVNode as O, unref as t, createElementVNode as i, toDisplayString as g, Fragment as ee, renderList as le, createCommentVNode as F, createBlock as W, mergeProps as ve, withCtx as q, createTextVNode as G, normalizeClass as ue, useTemplateRef as fe, withModifiers as Ke, withDirectives as Le, vModelText as Fe, nextTick as at, onBeforeUnmount as rt, onMounted as it, renderSlot as ge, useSlots as We, createSlots as Qe, normalizeProps as Xe, guardReactiveProps as Je } from "vue";
 import { routerKey as ct } from "vue-router";
 import { a as qe, i as ut } from "./error-Bb_dr_Ay.js";
-import { a as dt, d as Re, o as ft, L as Te, e as je, w as pt, b as vt } from "./http-D_pBg22D.js";
+import { a as dt, d as Re, o as ft, L as Te, e as je, w as pt, b as vt } from "./http-CdQowFlW.js";
 import { a as mt } from "./AdaptivePageShell.vue_vue_type_script_setup_true_lang-GUTIXuNd.js";
 import { useI18n as he } from "vue-i18n";
 import { _ as ce, u as Ne } from "./Button.vue_vue_type_script_setup_true_lang-CL9Qh5yq.js";

package/dist/{DeadLetters-DyA5Dqn0.js → DeadLetters-DopyRRx0.js}

@@ -1,15 +1,15 @@
 import { defineComponent as B, useTemplateRef as C, computed as y, ref as v, openBlock as D, createBlock as z, unref as r, withCtx as m, createVNode as F, createElementVNode as b, normalizeClass as $, toDisplayString as h } from "vue";
 import { useI18n as q } from "vue-i18n";
 import { i as k } from "./error-Bb_dr_Ay.js";
-import { u as V, _ as N } from "./CollectionPage.vue_vue_type_script_setup_true_lang-CtvHtFLy.js";
+import { u as V, _ as N } from "./CollectionPage.vue_vue_type_script_setup_true_lang-l-e-6WeS.js";
 import { u as P } from "./describeError-BqGAUZgX.js";
 import { u as I } from "./format-D8X4zsx6.js";
-import { e as a, R as O } from "./index-g-qbUeTk.js";
+import { e as a, R as O } from "./index-BPwfLD7i.js";
 import { _ as W } from "./AlertDialog.vue_vue_type_script_setup_true_lang-whA4WLdl.js";
 import { t as i } from "./toast-CqSDTWRX.js";
 import { u as Y } from "./useLoad-W4tfxmm5.js";
-import { u as j } from "./platform-Dl1fbScN.js";
-import { a as G, r as H } from "./http-D_pBg22D.js";
+import { u as j } from "./platform-Dx6STiwY.js";
+import { a as G, r as H } from "./http-CdQowFlW.js";
 function J(u) {
   return G({
     id: "events.deadletters",

package/dist/{General-DTEfxWls.js → General-mrVzi-5R.js}

@@ -8,9 +8,9 @@ import { _ as F } from "./FormView.vue_vue_type_script_setup_true_lang-CPSYV7iQ.
 import { _ as L } from "./SelectField.vue_vue_type_script_setup_true_lang-BzQC1qDQ.js";
 import { _ as f } from "./TextField.vue_vue_type_script_setup_true_lang-DTAQPbW0.js";
 import { u as A } from "./useSaveChrome-7huA3FzR.js";
-import { P as D, b as G, i as I } from "./index-kqk7Mclb.js";
+import { P as D, b as G, i as I } from "./index-auJqVMWC.js";
 import { t as M } from "./toast-CqSDTWRX.js";
-import { u as O } from "./platform-Dl1fbScN.js";
+import { u as O } from "./platform-Dx6STiwY.js";
 import { b as U } from "./routeResource-CcYA75T2.js";
 import { u as j } from "./fieldMessages-DTXpWnBd.js";
 import { _ as $ } from "./ActionRow.vue_vue_type_script_setup_true_lang-BCgKzUvG.js";

package/dist/{NewRolePage-CRZoUajV.js → NewRolePage-sfr7tQs5.js}

@@ -4,8 +4,8 @@ import { useRoute as k, useRouter as R } from "vue-router";
 import { a as $ } from "./AdaptivePageShell.vue_vue_type_script_setup_true_lang-GUTIXuNd.js";
 import { _ as b } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
 import { u as g } from "./useLoad-W4tfxmm5.js";
-import { a as x, c as u } from "./index-WkbzC_ee.js";
-import { _ as P } from "./RoleEditor.vue_vue_type_script_setup_true_lang-gXbxXG2R.js";
+import { a as x, c as u } from "./index-BVlbcaKs.js";
+import { _ as P } from "./RoleEditor.vue_vue_type_script_setup_true_lang-BGtyOyWL.js";
 const V = /* @__PURE__ */ _({
   __name: "NewRolePage",
   setup(h) {

package/dist/{ProfilePage-DLY81mvN.js → ProfilePage-EiTIYzZ5.js}

@@ -1,10 +1,10 @@
 import { defineComponent as P, openBlock as f, createBlock as E, unref as e, withCtx as m, createVNode as i, mergeProps as N, createElementVNode as A, toDisplayString as $, watch as Q, createElementBlock as b, Fragment as V, useModel as ge, useId as ye, useTemplateRef as Y, ref as x, onMounted as be, onBeforeUnmount as we, computed as L, withModifiers as he, createCommentVNode as z, createTextVNode as U, mergeModels as re, createSlots as xe, renderList as de, renderSlot as $e, resolveDynamicComponent as ne } from "vue";
 import { useI18n as I } from "vue-i18n";
 import { a as ke } from "./AdaptivePageShell.vue_vue_type_script_setup_true_lang-GUTIXuNd.js";
-import { u as G } from "./platform-Dl1fbScN.js";
+import { u as G } from "./platform-Dx6STiwY.js";
 import { _ as ee } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
 import { u as te } from "./useLoad-W4tfxmm5.js";
-import { i as S, d as T, c as qe } from "./index-kqk7Mclb.js";
+import { i as S, d as T, c as qe } from "./index-auJqVMWC.js";
 import { u as ce } from "./FormErrors.vue_vue_type_script_setup_true_lang-D7edzNTL.js";
 import { _ as ue } from "./FormView.vue_vue_type_script_setup_true_lang-CPSYV7iQ.js";
 import { u as Ce, _ as Se, a as Ee, b as Ve } from "./useGroupSheet-ATvc0IiM.js";

package/dist/{RoleEditor.vue_vue_type_script_setup_true_lang-gXbxXG2R.js → RoleEditor.vue_vue_type_script_setup_true_lang-BGtyOyWL.js}

@@ -10,12 +10,12 @@ import { u as ne } from "./useSaveChrome-7huA3FzR.js";
 import { t as le } from "./toast-CqSDTWRX.js";
 import { _ as E } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
 import { _ as R } from "./Banner.vue_vue_type_script_setup_true_lang-DSStj_5z.js";
-import { d as W, u as G, p as re, o as T, r as K, g as M, s as ie, e as ce, a as ue, f as de, b as me, h as fe } from "./index-WkbzC_ee.js";
+import { d as W, u as G, p as re, o as T, r as K, g as M, s as ie, e as ce, a as ue, f as de, b as me, h as fe } from "./index-BVlbcaKs.js";
 import { _ as pe } from "./Button.vue_vue_type_script_setup_true_lang-CL9Qh5yq.js";
 import { _ as _e } from "./Tabs.vue_vue_type_script_setup_true_lang-CcMcE38r.js";
 import { _ as ve } from "./SegmentedField.vue_vue_type_script_setup_true_lang-BwyMvkis.js";
 import { _ as be } from "./SwitchField.vue_vue_type_script_setup_true_lang-D_-HACqT.js";
-import { u as ge } from "./platform-Dl1fbScN.js";
+import { u as ge } from "./platform-Dx6STiwY.js";
 function ye(y, c) {
   return Object.fromEntries(
     y.map(({ attribute: d, options: o }) => {
@@ -50,9 +50,10 @@ const ke = {
       return { granted: s.filter((e) => e in c.grants).length, total: s.length };
     }, B = (a) => `${w(a).granted} / ${w(a).total}`, L = k(() => l.value.map((a) => ({ value: a.key, label: u.groupLabel(a.key), badge: B(a.key) }))), P = k(() => i.value !== void 0 && w(i.value.key).granted === w(i.value.key).total);
     function m() {
-      if (i.value)
-        for (const a of b(i.value.key))
-          P.value ? K(o, c.grants, a) : M(o, c.grants, a);
+      if (!i.value) return;
+      const a = P.value;
+      for (const s of b(i.value.key))
+        a ? K(o, c.grants, s) : M(o, c.grants, s);
     }
     const U = (a) => [...new Set(a.permissions.map((s) => s.ownable).filter((s) => s !== null))], N = k(() => ["own", "own_location", "all"].map((a) => ({ value: a, label: u.qualifierLabel(a) })));
     function $(a, s) {

package/dist/{RolePage-B9t586Q8.js → RolePage-ByUr3v_H.js}

@@ -7,16 +7,16 @@ import { g as z } from "./options-g8RwEhBk.js";
 import { _ as oe } from "./AlertDialog.vue_vue_type_script_setup_true_lang-whA4WLdl.js";
 import { t as E } from "./toast-CqSDTWRX.js";
 import { _ as te } from "./RecordHeader.vue_vue_type_script_setup_true_lang-fmx0f8xi.js";
-import { u as ae } from "./platform-Dl1fbScN.js";
+import { u as ae } from "./platform-Dx6STiwY.js";
 import { a as le, u as se } from "./routeResource-CcYA75T2.js";
 import { a as re } from "./ResourcePage.vue_vue_type_script_setup_true_lang-BFBGvevP.js";
 import { _ as ce } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
 import { _ as H } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
-import { u as O, a as U, f as ne, i as ie, d as ue, b as M, c as T } from "./index-WkbzC_ee.js";
+import { u as O, a as U, f as ne, i as ie, d as ue, b as M, c as T } from "./index-BVlbcaKs.js";
 import { _ as J } from "./SelectField.vue_vue_type_script_setup_true_lang-BzQC1qDQ.js";
 import { u as me, _ as pe } from "./useCommand-CtqheKUv.js";
 import { _ as de } from "./Modal.vue_vue_type_script_setup_true_lang-DpBb8ans.js";
-import { _ as fe } from "./RoleEditor.vue_vue_type_script_setup_true_lang-gXbxXG2R.js";
+import { _ as fe } from "./RoleEditor.vue_vue_type_script_setup_true_lang-BGtyOyWL.js";
 const _e = { "data-test": "role-replace" }, ve = /* @__PURE__ */ I({
   __name: "ReplaceRoleDialog",
   props: {

package/dist/{RolesPage-BRdG-OSL.js → RolesPage-CvHrY9ZC.js}

@@ -7,11 +7,11 @@ import { _ as U } from "./FormGroup.vue_vue_type_script_setup_true_lang-BPchlRCl
 import { g as j } from "./options-g8RwEhBk.js";
 import { _ as D } from "./TextField.vue_vue_type_script_setup_true_lang-DTAQPbW0.js";
 import { a as I } from "./AdaptivePageShell.vue_vue_type_script_setup_true_lang-GUTIXuNd.js";
-import { u as K } from "./platform-Dl1fbScN.js";
+import { u as K } from "./platform-Dx6STiwY.js";
 import { _ as T } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
 import { _ as q } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
 import { u as z } from "./useLoad-W4tfxmm5.js";
-import { u as G, a as H, b as J, c as x } from "./index-WkbzC_ee.js";
+import { u as G, a as H, b as J, c as x } from "./index-BVlbcaKs.js";
 const M = {
   class: "flex min-w-0 flex-col gap-group-gap",
   "data-test": "roles-index"

package/dist/{SectionNavigator.vue_vue_type_script_setup_true_lang-Cy9Oi0ts.js → SectionNavigator.vue_vue_type_script_setup_true_lang-Ci04hApd.js}

@@ -5,7 +5,7 @@ import { _ as q } from "./IconTile.vue_vue_type_script_setup_true_lang-_FXvaj93.
 import { _ as G } from "./Icon.vue_vue_type_script_lang-D7oC-d-S.js";
 import { a as re } from "./mediaQuery-CygcXmFW.js";
 import { u as ie } from "./access-DmAceEo5.js";
-import { u as ce, a as ue } from "./sections-D5rgQ4YB.js";
+import { u as ce, a as ue } from "./sections-B0HxIOC2.js";
 import { p as de } from "./AdaptivePageShell.vue_vue_type_script_setup_true_lang-GUTIXuNd.js";
 import { p as me } from "./sectionIndex-BS0ic5W7.js";
 import { _ as K, a as pe } from "./SectionList.vue_vue_type_script_setup_true_lang-wyW7n3Uq.js";

package/dist/{Sessions-vGyUOnPG.js → Sessions-CHLokZ9e.js}

@@ -2,10 +2,10 @@ import { defineComponent as x, useTemplateRef as v, computed as w, ref as $, ope
 import { useI18n as N } from "vue-i18n";
 import { _ as q } from "./Button.vue_vue_type_script_setup_true_lang-CL9Qh5yq.js";
 import { u as A } from "./describeError-BqGAUZgX.js";
-import { P as D, b as L, e as O, i as g, d as T } from "./index-kqk7Mclb.js";
+import { P as D, b as L, e as O, i as g, d as T } from "./index-auJqVMWC.js";
 import { _ as k } from "./AlertDialog.vue_vue_type_script_setup_true_lang-whA4WLdl.js";
 import { t as b } from "./toast-CqSDTWRX.js";
-import { u as V } from "./platform-Dl1fbScN.js";
+import { u as V } from "./platform-Dx6STiwY.js";
 import { b as I } from "./routeResource-CcYA75T2.js";
 import { _ as j } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
 import { _ as z } from "./SectionIntro.vue_vue_type_script_setup_true_lang-CZtPrmXD.js";

package/dist/{SettingsPage-V8WeADZZ.js → SettingsPage-DvOGJz9L.js}

@@ -5,7 +5,7 @@ import { a as oe } from "./AdaptivePageShell.vue_vue_type_script_setup_true_lang
 import { t as C } from "./toast-CqSDTWRX.js";
 import { u as U } from "./fieldMessages-DTXpWnBd.js";
 import { _ as W } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
-import { n as T, u as le, a as re } from "./index-g-qbUeTk.js";
+import { n as T, u as le, a as re } from "./index-BPwfLD7i.js";
 import { _ as H } from "./SectionIntro.vue_vue_type_script_setup_true_lang-CZtPrmXD.js";
 import { _ as j } from "./Button.vue_vue_type_script_setup_true_lang-CL9Qh5yq.js";
 import { _ as ce } from "./IconTile.vue_vue_type_script_setup_true_lang-_FXvaj93.js";
@@ -18,7 +18,7 @@ import { _ as me } from "./Menu.vue_vue_type_script_setup_true_lang-DsFOeCVe.js"
 import { _ as pe } from "./MenuButton.vue_vue_type_script_setup_true_lang-AGbN9r5q.js";
 import { _ as E } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
 import { _ as I } from "./ActionRow.vue_vue_type_script_setup_true_lang-BCgKzUvG.js";
-import { u as X } from "./platform-Dl1fbScN.js";
+import { u as X } from "./platform-Dx6STiwY.js";
 import { u as Y } from "./useLoad-W4tfxmm5.js";
 import { _ as ee } from "./SwitchField.vue_vue_type_script_setup_true_lang-D_-HACqT.js";
 import { _ as _e } from "./Icon.vue_vue_type_script_lang-D7oC-d-S.js";

package/dist/{SignIn-C-3i8RG6.js → SignIn-ypRvdmjg.js}

@@ -6,9 +6,9 @@ import { u as D } from "./format-D8X4zsx6.js";
 import { _ as p } from "./FormGroup.vue_vue_type_script_setup_true_lang-BPchlRCl.js";
 import { g as b } from "./options-g8RwEhBk.js";
 import { u as U } from "./describeError-BqGAUZgX.js";
-import { c as q, P as z, b as F, _ as L, i as O, d as T } from "./index-kqk7Mclb.js";
+import { c as q, P as z, b as F, _ as L, i as O, d as T } from "./index-auJqVMWC.js";
 import { t as h } from "./toast-CqSDTWRX.js";
-import { u as j, h as G } from "./platform-Dl1fbScN.js";
+import { u as j, h as G } from "./platform-Dx6STiwY.js";
 import { b as H } from "./routeResource-CcYA75T2.js";
 import { _ as J } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
 import { _ as K } from "./ActionRow.vue_vue_type_script_setup_true_lang-BCgKzUvG.js";

package/dist/{SignInPage-D2NA3VKU.js → SignInPage-CbPeKlAo.js}

@@ -5,8 +5,8 @@ import { _ as I } from "./Button.vue_vue_type_script_setup_true_lang-CL9Qh5yq.js
 import { _ as N } from "./Panel.vue_vue_type_script_setup_true_lang-BA0u_DtS.js";
 import { _ as S } from "./FormView.vue_vue_type_script_setup_true_lang-CPSYV7iQ.js";
 import { _ as a } from "./TextField.vue_vue_type_script_setup_true_lang-DTAQPbW0.js";
-import { r as $ } from "./guards-DRh4zmxO.js";
-import { u as C, a as E } from "./index-kqk7Mclb.js";
+import { r as $ } from "./guards-D4mXf_2X.js";
+import { u as C, a as E } from "./index-auJqVMWC.js";
 const V = { class: "flex flex-1 flex-col items-center justify-center gap-8" }, k = { class: "text-xl font-semibold text-content-strong" }, H = /* @__PURE__ */ d({
   __name: "SignInPage",
   setup(q) {

package/dist/{SignIns-eoYPB6kB.js → SignIns-BApzbGq-.js}

@@ -1,7 +1,7 @@
 import { defineComponent as y, computed as k, openBlock as _, createElementBlock as b, createVNode as r, unref as t, withCtx as l, createElementVNode as u, toDisplayString as d, createTextVNode as $, ref as v, watch as w, createBlock as I, createCommentVNode as S } from "vue";
 import { useI18n as h } from "vue-i18n";
-import { P as V, i as N } from "./index-kqk7Mclb.js";
-import { u as B } from "./platform-Dl1fbScN.js";
+import { P as V, i as N } from "./index-auJqVMWC.js";
+import { u as B } from "./platform-Dx6STiwY.js";
 import { b as E } from "./routeResource-CcYA75T2.js";
 import { _ as R } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
 import { u as C } from "./useLoad-W4tfxmm5.js";

package/dist/{UserRecord-BaQl2zzQ.js → UserRecord-BCTaBajE.js}

@@ -1,13 +1,13 @@
 import { defineComponent as R, openBlock as q, createBlock as P, unref as e, withCtx as u, createVNode as t, mergeProps as L, provide as N, computed as g, useTemplateRef as $, createElementVNode as x, toDisplayString as C, createTextVNode as j } from "vue";
 import { useI18n as A } from "vue-i18n";
-import { a as F } from "./neighbors-IMRQ4rkm.js";
+import { a as F } from "./neighbors-Bv6vnWlW.js";
 import { _ as H } from "./Avatar.vue_vue_type_script_setup_true_lang-BPj_fkJR.js";
 import { u as J } from "./describeError-BqGAUZgX.js";
-import { i as w, P as Q, p as W, f as X, M as Y, g as Z, d as ee } from "./index-kqk7Mclb.js";
+import { i as w, P as Q, p as W, f as X, M as Y, g as Z, d as ee } from "./index-auJqVMWC.js";
 import { _ as se } from "./AlertDialog.vue_vue_type_script_setup_true_lang-whA4WLdl.js";
 import { t as k } from "./toast-CqSDTWRX.js";
-import { _ as ae } from "./SectionNavigator.vue_vue_type_script_setup_true_lang-Cy9Oi0ts.js";
-import { u as E } from "./platform-Dl1fbScN.js";
+import { _ as ae } from "./SectionNavigator.vue_vue_type_script_setup_true_lang-Ci04hApd.js";
+import { u as E } from "./platform-Dx6STiwY.js";
 import { a as te } from "./routeResource-CcYA75T2.js";
 import { a as oe } from "./ResourcePage.vue_vue_type_script_setup_true_lang-BFBGvevP.js";
 import { A as re } from "./access-DmAceEo5.js";
@@ -18,7 +18,7 @@ import { _ as T } from "./FormGroup.vue_vue_type_script_setup_true_lang-BPchlRCl
 import { g as B } from "./options-g8RwEhBk.js";
 import { u as z, _ as K } from "./useCommand-CtqheKUv.js";
 import { u as U } from "./fieldMessages-DTXpWnBd.js";
-import { u as ce, s as le } from "./status-C2gHqkj6.js";
+import { u as ce, s as le } from "./status-BUFELJz2.js";
 import { _ as M } from "./TextField.vue_vue_type_script_setup_true_lang-DTAQPbW0.js";
 const ue = /* @__PURE__ */ R({
   __name: "DeactivateDialog",

package/dist/{UsersList-BfXWgH5K.js → UsersList-CqSK3cQL.js}

@@ -1,13 +1,13 @@
 import { defineComponent as U, openBlock as p, createBlock as C, unref as e, withCtx as c, createVNode as r, mergeProps as i, useTemplateRef as V, computed as q, createTextVNode as z, toDisplayString as $, createCommentVNode as A, createElementBlock as S, normalizeClass as N } from "vue";
 import { useI18n as B } from "vue-i18n";
 import { useRouter as M } from "vue-router";
-import { u as P, _ as D } from "./CollectionPage.vue_vue_type_script_setup_true_lang-CtvHtFLy.js";
+import { u as P, _ as D } from "./CollectionPage.vue_vue_type_script_setup_true_lang-l-e-6WeS.js";
 import { _ as I } from "./Avatar.vue_vue_type_script_setup_true_lang-BPj_fkJR.js";
 import { u as F } from "./format-D8X4zsx6.js";
-import { u as L } from "./platform-Dl1fbScN.js";
+import { u as L } from "./platform-Dx6STiwY.js";
 import { _ as G } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
-import { i as K, f as E, M as W } from "./index-kqk7Mclb.js";
-import { U as j, u as H, s as J } from "./status-C2gHqkj6.js";
+import { i as K, f as E, M as W } from "./index-auJqVMWC.js";
+import { U as j, u as H, s as J } from "./status-BUFELJz2.js";
 import { u as O } from "./environment-Dva-SG8D.js";
 import { u as Q } from "./languages-BShG9LpE.js";
 import { _ as X } from "./FormGroup.vue_vue_type_script_setup_true_lang-BPchlRCl.js";

package/dist/access/api.d.ts

@@ -1,11 +1,12 @@
 import type { HttpClient } from "../client";
 import type { BindInput, CreateRoleInput, UpdateRoleInput } from "../modules/access/schemas";
-import type { SubjectRef } from "../modules/access/entities";
+import type { Binding, ScopeOptions, SubjectAccess, SubjectRef } from "../modules/access/entities";
+import type { AccessSubjects } from "./context";
 type Options = {
     readonly signal?: AbortSignal;
 };
-/** go-core's access routes as calls; `data` of each answer already read. */
-export declare function createAccessApi(http: HttpClient): {
+/** go-core's access routes as calls; `data` of each answer already read. A subject of another kind than `user` goes to `subjects[kind]`. */
+export declare function createAccessApi(http: HttpClient, subjects?: AccessSubjects): {
     roles: (options?: Options) => Promise<import(".").RoleSummary[]>;
     role: (ref: string, options?: Options) => Promise<import(".").Role>;
     holders: (ref: string, options?: Options) => Promise<import(".").RoleHolder[]>;
@@ -14,10 +15,10 @@ export declare function createAccessApi(http: HttpClient): {
     update: (input: UpdateRoleInput) => Promise<import(".").Role>;
     remove: (ref: string) => Promise<undefined>;
     replace: (ref: string, other: string) => Promise<number>;
-    access: (subject: SubjectRef, options?: Options) => Promise<import(".").SubjectAccess>;
-    scopes: (subject: SubjectRef, options?: Options) => Promise<import(".").ScopeOptions>;
-    bindable: (level: string, scopeId: number | null, options?: Options) => Promise<import(".").Role[]>;
-    bind: (subject: SubjectRef, input: Omit<BindInput, "id">) => Promise<import(".").Binding>;
+    access: (subject: SubjectRef, options?: Options) => Promise<SubjectAccess>;
+    scopes: (subject: SubjectRef, options?: Options) => Promise<ScopeOptions>;
+    bindable: (subject: SubjectRef, level: string, scopeId: number | null, options?: Options) => Promise<import(".").Role[]>;
+    bind: (subject: SubjectRef, input: Omit<BindInput, "id">) => Promise<Binding>;
     unbind: (subject: SubjectRef, bindingId: number) => Promise<undefined>;
 };
 export type AccessApi = ReturnType<typeof createAccessApi>;

package/dist/access/context.d.ts

@@ -2,6 +2,12 @@ import type { RouteLocationRaw } from "vue-router";
 import type { ScopeOptions, SubjectRef } from "../modules/access/entities";
 import type { PermissionCatalogue } from "./catalogue";
 import type { RoleConstraint } from "./constraints";
+/** Where an application serves the access routes of a subject kind other than `user`: `${base}/:id/{access,scopes,bindings,bindings/:binding_id}`, and the roles it may be given. */
+export interface SubjectRoutes {
+    readonly base: string;
+    readonly bindable: string;
+}
+export type AccessSubjects = Readonly<Partial<Record<Exclude<SubjectRef["kind"], "user">, SubjectRoutes>>>;
 /** What the access screens need from the feature that installed them. */
 export interface AccessContext {
     readonly catalogue: PermissionCatalogue;
@@ -12,6 +18,7 @@ export interface AccessContext {
     readonly constraints: readonly RoleConstraint[];
     /** The i18n key of the sentence for each of the application's own role-problem codes (`authz.invalid`). */
     readonly problems: Readonly<Record<string, string>>;
+    readonly subjects: AccessSubjects;
     readonly scopes: ((subject: SubjectRef, signal: AbortSignal) => Promise<ScopeOptions>) | null;
 }
 export declare const accessContextKey: import("vue").InjectionKey<AccessContext>, useAccessContext: () => AccessContext;

package/dist/access/feature.d.ts

@@ -4,6 +4,7 @@ import type { ScopeOptions, SubjectRef } from "../modules/access/entities";
 import type { Destination } from "../router";
 import type { PermissionCatalogue } from "./catalogue";
 import type { RoleConstraint } from "./constraints";
+import { type AccessSubjects } from "./context";
 export interface AccessFeatureOptions {
     /**
      * The application's permissions: the `permissions` object go-core's `authzts` writes (`frontend/generated/permissions.ts`).
@@ -30,6 +31,13 @@ export interface AccessFeatureOptions {
      *   accessFeature({ catalogue, problems: { vehicle_kind_conflict: "roles.problems.vehicle_kind_conflict" } })
      */
     problems?: Readonly<Record<string, string>>;
+    /**
+     * Where the routes of a subject kind other than `user` are (go-core leaves them to the application); the paths answer in go-core's own wire.
+     * `PersonAccess` and the add dialog with such a subject read and write there. Without an entry the subject is refused, never sent to the user routes.
+     *
+     *   accessFeature({ catalogue, subjects: { service: { base: "/v1/iam/service-accounts", bindable: "/v1/iam/service-accounts/bindable-roles" } } })
+     */
+    subjects?: AccessSubjects;
     /** The backend's navigation destination that opens the roles list. Without it the application links to `accessPages.roles` itself. */
     destination?: Destination;
 }

package/dist/access/index.js

@@ -1,4 +1,4 @@
-import { _ as a, j as c, k as r, c as o, b as u, l as i, m as n, p as l, n as t, q as m, t as p, u as R, i as b, f as d } from "../index-WkbzC_ee.js";
+import { _ as a, j as c, k as r, c as o, b as u, l as i, m as n, p as l, n as t, q as m, t as p, u as R, i as b, f as d } from "../index-BVlbcaKs.js";
 export {
   a as BindingRow,
   c as PersonAccess,

package/dist/access/labels.d.ts

@@ -28,6 +28,11 @@ export declare function useAccessLabels(): {
     levelLabel: (level: string) => string;
     /** A place: the level and its name (`Dealer · Auto Zagreb`); the root, which has no name, by its level. */
     scopeLabel: (scope: ScopeName) => string;
+    /** A role's constraint as the application worded it (`Used only`); an attribute or value it gave no text for stays as `attribute: value`. */
+    constraintLabel: (attr: {
+        attribute: string;
+        values: readonly string[];
+    }) => string;
     roleKind: (role: {
         predefined: boolean;
         computed: boolean;