@wssto2/vue-core 0.5.1 → 0.5.2

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 0.5.2 — 2026-10-13
+
+Access for service accounts, a working "turn on all", worded constraints, and this browser's push state for an app's own screens. Found by ARV's moves to the library's access and notifications.
+
+### Changed (no backward compatibility)
+- **Access takes the subject's kind.** `accessFeature({ subjects: { service: { base, bindable } } })` says where an application serves the routes of a kind other than `user` (`${base}/:id/{access,scopes,bindings,bindings/:binding_id}`, in go-core's wire). `PersonAccess` and *Add role* read and write there; a kind with no entry is refused with an error that names it, never sent to the user routes. `createAccessApi(http, subjects)` takes the entries, and its `bindable(subject, level, scopeId)` now takes the subject first.
+
+### New
+- **`usePushState()`** from `/notifications`: `ready`, `available`, `permission`, `subscribed`, `busy`, `enable()`, `disable()`, built on the settings page's own state. `subscribed` is true as soon as `ready` for a browser that already has push on. Type `PushState`.
+
+### Fixed
+- **Turn on all** granted only part of a module: it read "all on" inside its loop, and once the closures had granted everything the rest were revoked again.
+- **Constraints are worded.** A role's constraints on a person's roles (`BindingRow`) use the `roleConstraints` option labels ("Used only"); an attribute or value with no label stays `attribute: value`.
+
+### Docs
+- The access recipe gains subjects and constraint labels; the notifications recipe gains `usePushState` and loses the stale "devices and push permission are not in these screens".
+
 ## 0.5.1 — 2026-10-13
 
 One renewal, sessions that do not renew, and the language before the first page. Found by ARV's move to the library's sign-in.

package/dist/{DeadLetters-BZLyL5lR.js → DeadLetters-DopyRRx0.js}

@@ -4,7 +4,7 @@ import { i as k } from "./error-Bb_dr_Ay.js";
 import { u as V, _ as N } from "./CollectionPage.vue_vue_type_script_setup_true_lang-l-e-6WeS.js";
 import { u as P } from "./describeError-BqGAUZgX.js";
 import { u as I } from "./format-D8X4zsx6.js";
-import { e as a, R as O } from "./index-BTRv8mcf.js";
+import { e as a, R as O } from "./index-BPwfLD7i.js";
 import { _ as W } from "./AlertDialog.vue_vue_type_script_setup_true_lang-whA4WLdl.js";
 import { t as i } from "./toast-CqSDTWRX.js";
 import { u as Y } from "./useLoad-W4tfxmm5.js";

package/dist/{NewRolePage-B2DItwvf.js → NewRolePage-sfr7tQs5.js}

@@ -4,8 +4,8 @@ import { useRoute as k, useRouter as R } from "vue-router";
 import { a as $ } from "./AdaptivePageShell.vue_vue_type_script_setup_true_lang-GUTIXuNd.js";
 import { _ as b } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
 import { u as g } from "./useLoad-W4tfxmm5.js";
-import { a as x, c as u } from "./index-VPzJJN6Z.js";
-import { _ as P } from "./RoleEditor.vue_vue_type_script_setup_true_lang-BqqilJGF.js";
+import { a as x, c as u } from "./index-BVlbcaKs.js";
+import { _ as P } from "./RoleEditor.vue_vue_type_script_setup_true_lang-BGtyOyWL.js";
 const V = /* @__PURE__ */ _({
   __name: "NewRolePage",
   setup(h) {

package/dist/{RoleEditor.vue_vue_type_script_setup_true_lang-BqqilJGF.js → RoleEditor.vue_vue_type_script_setup_true_lang-BGtyOyWL.js}

@@ -10,7 +10,7 @@ import { u as ne } from "./useSaveChrome-7huA3FzR.js";
 import { t as le } from "./toast-CqSDTWRX.js";
 import { _ as E } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
 import { _ as R } from "./Banner.vue_vue_type_script_setup_true_lang-DSStj_5z.js";
-import { d as W, u as G, p as re, o as T, r as K, g as M, s as ie, e as ce, a as ue, f as de, b as me, h as fe } from "./index-VPzJJN6Z.js";
+import { d as W, u as G, p as re, o as T, r as K, g as M, s as ie, e as ce, a as ue, f as de, b as me, h as fe } from "./index-BVlbcaKs.js";
 import { _ as pe } from "./Button.vue_vue_type_script_setup_true_lang-CL9Qh5yq.js";
 import { _ as _e } from "./Tabs.vue_vue_type_script_setup_true_lang-CcMcE38r.js";
 import { _ as ve } from "./SegmentedField.vue_vue_type_script_setup_true_lang-BwyMvkis.js";
@@ -50,9 +50,10 @@ const ke = {
       return { granted: s.filter((e) => e in c.grants).length, total: s.length };
     }, B = (a) => `${w(a).granted} / ${w(a).total}`, L = k(() => l.value.map((a) => ({ value: a.key, label: u.groupLabel(a.key), badge: B(a.key) }))), P = k(() => i.value !== void 0 && w(i.value.key).granted === w(i.value.key).total);
     function m() {
-      if (i.value)
-        for (const a of b(i.value.key))
-          P.value ? K(o, c.grants, a) : M(o, c.grants, a);
+      if (!i.value) return;
+      const a = P.value;
+      for (const s of b(i.value.key))
+        a ? K(o, c.grants, s) : M(o, c.grants, s);
     }
     const U = (a) => [...new Set(a.permissions.map((s) => s.ownable).filter((s) => s !== null))], N = k(() => ["own", "own_location", "all"].map((a) => ({ value: a, label: u.qualifierLabel(a) })));
     function $(a, s) {

package/dist/{RolePage-jMHAt9y8.js → RolePage-ByUr3v_H.js}

@@ -12,11 +12,11 @@ import { a as le, u as se } from "./routeResource-CcYA75T2.js";
 import { a as re } from "./ResourcePage.vue_vue_type_script_setup_true_lang-BFBGvevP.js";
 import { _ as ce } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
 import { _ as H } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
-import { u as O, a as U, f as ne, i as ie, d as ue, b as M, c as T } from "./index-VPzJJN6Z.js";
+import { u as O, a as U, f as ne, i as ie, d as ue, b as M, c as T } from "./index-BVlbcaKs.js";
 import { _ as J } from "./SelectField.vue_vue_type_script_setup_true_lang-BzQC1qDQ.js";
 import { u as me, _ as pe } from "./useCommand-CtqheKUv.js";
 import { _ as de } from "./Modal.vue_vue_type_script_setup_true_lang-DpBb8ans.js";
-import { _ as fe } from "./RoleEditor.vue_vue_type_script_setup_true_lang-BqqilJGF.js";
+import { _ as fe } from "./RoleEditor.vue_vue_type_script_setup_true_lang-BGtyOyWL.js";
 const _e = { "data-test": "role-replace" }, ve = /* @__PURE__ */ I({
   __name: "ReplaceRoleDialog",
   props: {

package/dist/{RolesPage-B9GaVQBx.js → RolesPage-CvHrY9ZC.js}

@@ -11,7 +11,7 @@ import { u as K } from "./platform-Dx6STiwY.js";
 import { _ as T } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
 import { _ as q } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
 import { u as z } from "./useLoad-W4tfxmm5.js";
-import { u as G, a as H, b as J, c as x } from "./index-VPzJJN6Z.js";
+import { u as G, a as H, b as J, c as x } from "./index-BVlbcaKs.js";
 const M = {
   class: "flex min-w-0 flex-col gap-group-gap",
   "data-test": "roles-index"

package/dist/{SettingsPage-CudoKdXm.js → SettingsPage-DvOGJz9L.js}

@@ -5,7 +5,7 @@ import { a as oe } from "./AdaptivePageShell.vue_vue_type_script_setup_true_lang
 import { t as C } from "./toast-CqSDTWRX.js";
 import { u as U } from "./fieldMessages-DTXpWnBd.js";
 import { _ as W } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
-import { n as T, u as le, a as re } from "./index-BTRv8mcf.js";
+import { n as T, u as le, a as re } from "./index-BPwfLD7i.js";
 import { _ as H } from "./SectionIntro.vue_vue_type_script_setup_true_lang-CZtPrmXD.js";
 import { _ as j } from "./Button.vue_vue_type_script_setup_true_lang-CL9Qh5yq.js";
 import { _ as ce } from "./IconTile.vue_vue_type_script_setup_true_lang-_FXvaj93.js";

package/dist/access/api.d.ts

@@ -1,11 +1,12 @@
 import type { HttpClient } from "../client";
 import type { BindInput, CreateRoleInput, UpdateRoleInput } from "../modules/access/schemas";
-import type { SubjectRef } from "../modules/access/entities";
+import type { Binding, ScopeOptions, SubjectAccess, SubjectRef } from "../modules/access/entities";
+import type { AccessSubjects } from "./context";
 type Options = {
     readonly signal?: AbortSignal;
 };
-/** go-core's access routes as calls; `data` of each answer already read. */
-export declare function createAccessApi(http: HttpClient): {
+/** go-core's access routes as calls; `data` of each answer already read. A subject of another kind than `user` goes to `subjects[kind]`. */
+export declare function createAccessApi(http: HttpClient, subjects?: AccessSubjects): {
     roles: (options?: Options) => Promise<import(".").RoleSummary[]>;
     role: (ref: string, options?: Options) => Promise<import(".").Role>;
     holders: (ref: string, options?: Options) => Promise<import(".").RoleHolder[]>;
@@ -14,10 +15,10 @@ export declare function createAccessApi(http: HttpClient): {
     update: (input: UpdateRoleInput) => Promise<import(".").Role>;
     remove: (ref: string) => Promise<undefined>;
     replace: (ref: string, other: string) => Promise<number>;
-    access: (subject: SubjectRef, options?: Options) => Promise<import(".").SubjectAccess>;
-    scopes: (subject: SubjectRef, options?: Options) => Promise<import(".").ScopeOptions>;
-    bindable: (level: string, scopeId: number | null, options?: Options) => Promise<import(".").Role[]>;
-    bind: (subject: SubjectRef, input: Omit<BindInput, "id">) => Promise<import(".").Binding>;
+    access: (subject: SubjectRef, options?: Options) => Promise<SubjectAccess>;
+    scopes: (subject: SubjectRef, options?: Options) => Promise<ScopeOptions>;
+    bindable: (subject: SubjectRef, level: string, scopeId: number | null, options?: Options) => Promise<import(".").Role[]>;
+    bind: (subject: SubjectRef, input: Omit<BindInput, "id">) => Promise<Binding>;
     unbind: (subject: SubjectRef, bindingId: number) => Promise<undefined>;
 };
 export type AccessApi = ReturnType<typeof createAccessApi>;

package/dist/access/context.d.ts

@@ -2,6 +2,12 @@ import type { RouteLocationRaw } from "vue-router";
 import type { ScopeOptions, SubjectRef } from "../modules/access/entities";
 import type { PermissionCatalogue } from "./catalogue";
 import type { RoleConstraint } from "./constraints";
+/** Where an application serves the access routes of a subject kind other than `user`: `${base}/:id/{access,scopes,bindings,bindings/:binding_id}`, and the roles it may be given. */
+export interface SubjectRoutes {
+    readonly base: string;
+    readonly bindable: string;
+}
+export type AccessSubjects = Readonly<Partial<Record<Exclude<SubjectRef["kind"], "user">, SubjectRoutes>>>;
 /** What the access screens need from the feature that installed them. */
 export interface AccessContext {
     readonly catalogue: PermissionCatalogue;
@@ -12,6 +18,7 @@ export interface AccessContext {
     readonly constraints: readonly RoleConstraint[];
     /** The i18n key of the sentence for each of the application's own role-problem codes (`authz.invalid`). */
     readonly problems: Readonly<Record<string, string>>;
+    readonly subjects: AccessSubjects;
     readonly scopes: ((subject: SubjectRef, signal: AbortSignal) => Promise<ScopeOptions>) | null;
 }
 export declare const accessContextKey: import("vue").InjectionKey<AccessContext>, useAccessContext: () => AccessContext;

package/dist/access/feature.d.ts

@@ -4,6 +4,7 @@ import type { ScopeOptions, SubjectRef } from "../modules/access/entities";
 import type { Destination } from "../router";
 import type { PermissionCatalogue } from "./catalogue";
 import type { RoleConstraint } from "./constraints";
+import { type AccessSubjects } from "./context";
 export interface AccessFeatureOptions {
     /**
      * The application's permissions: the `permissions` object go-core's `authzts` writes (`frontend/generated/permissions.ts`).
@@ -30,6 +31,13 @@ export interface AccessFeatureOptions {
      *   accessFeature({ catalogue, problems: { vehicle_kind_conflict: "roles.problems.vehicle_kind_conflict" } })
      */
     problems?: Readonly<Record<string, string>>;
+    /**
+     * Where the routes of a subject kind other than `user` are (go-core leaves them to the application); the paths answer in go-core's own wire.
+     * `PersonAccess` and the add dialog with such a subject read and write there. Without an entry the subject is refused, never sent to the user routes.
+     *
+     *   accessFeature({ catalogue, subjects: { service: { base: "/v1/iam/service-accounts", bindable: "/v1/iam/service-accounts/bindable-roles" } } })
+     */
+    subjects?: AccessSubjects;
     /** The backend's navigation destination that opens the roles list. Without it the application links to `accessPages.roles` itself. */
     destination?: Destination;
 }

package/dist/access/index.js

@@ -1,4 +1,4 @@
-import { _ as a, j as c, k as r, c as o, b as u, l as i, m as n, p as l, n as t, q as m, t as p, u as R, i as b, f as d } from "../index-VPzJJN6Z.js";
+import { _ as a, j as c, k as r, c as o, b as u, l as i, m as n, p as l, n as t, q as m, t as p, u as R, i as b, f as d } from "../index-BVlbcaKs.js";
 export {
   a as BindingRow,
   c as PersonAccess,

package/dist/access/labels.d.ts

@@ -28,6 +28,11 @@ export declare function useAccessLabels(): {
     levelLabel: (level: string) => string;
     /** A place: the level and its name (`Dealer · Auto Zagreb`); the root, which has no name, by its level. */
     scopeLabel: (scope: ScopeName) => string;
+    /** A role's constraint as the application worded it (`Used only`); an attribute or value it gave no text for stays as `attribute: value`. */
+    constraintLabel: (attr: {
+        attribute: string;
+        values: readonly string[];
+    }) => string;
     roleKind: (role: {
         predefined: boolean;
         computed: boolean;