@wssto2/vue-core 0.5.4 → 0.6.0

package/dist/PersonAccess.vue_vue_type_script_setup_true_lang-ClmawvYm.js

@@ -0,0 +1,600 @@
+import { defineComponent as Y, ref as R, computed as j, watch as te, openBlock as i, createBlock as E, unref as e, withCtx as y, createElementVNode as A, createElementBlock as b, toDisplayString as w, createCommentVNode as D, createVNode as $, Fragment as B, renderList as G, createSlots as fe, renderSlot as ke, createTextVNode as M, useTemplateRef as le } from "vue";
+import { useI18n as ee } from "vue-i18n";
+import { _ as I } from "./Button.vue_vue_type_script_setup_true_lang-CL9Qh5yq.js";
+import { _ as K } from "./FormGroup.vue_vue_type_script_setup_true_lang-CNb2CK01.js";
+import { g as V } from "./options-e_CAfvDQ.js";
+import { _ as $e } from "./AlertDialog.vue_vue_type_script_setup_true_lang-whA4WLdl.js";
+import { t as Z } from "./toast-CqSDTWRX.js";
+import { _ as ne } from "./AccessGate.vue_vue_type_script_setup_true_lang-DZ9GcLC1.js";
+import { i as xe } from "./error-Bb_dr_Ay.js";
+import { _ as je } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
+import { _ as Le } from "./EmptyState.vue_vue_type_script_setup_true_lang-50p-Mp8I.js";
+import { u as qe } from "./useLoad-W4tfxmm5.js";
+import { _ as Ce, a as Ee } from "./SelectField.vue_vue_type_script_setup_true_lang-CBZhGNpm.js";
+import { _ as Ne } from "./SegmentedField.vue_vue_type_script_setup_true_lang-B_hBL5f4.js";
+import { u as Te, _ as Se } from "./useCommand-CfG727e8.js";
+import { route as C } from "./client/index.js";
+import { s as Ae } from "./routes-CVckt7Pj.js";
+import { u as Re } from "./platform-Dx6STiwY.js";
+import { u as J, g as pe, f as De, j as Ue, l as Be, S as ce, e as Oe, a as re } from "./refusals-COPr15XZ.js";
+import { _ as Pe } from "./IconTile.vue_vue_type_script_setup_true_lang-_FXvaj93.js";
+import { u as Ge } from "./mediaQuery-CygcXmFW.js";
+import { _ as Ve } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
+const U = {
+  rolesList: C("GET", "/v1/iam/roles", { permission: "iam.role:view" }),
+  rolesShow: C("GET", "/v1/iam/roles/:ref", { permission: "iam.role:view" }),
+  rolesHolders: C("GET", "/v1/iam/roles/:ref/holders", { permission: "iam.role:view" }),
+  rolesCompare: C("GET", "/v1/iam/roles/:ref/compare", { permission: "iam.role:view" }),
+  rolesCreate: C("POST", "/v1/iam/roles", { permission: "iam.role:manage" }),
+  rolesUpdate: C("PUT", "/v1/iam/roles/:ref", { permission: "iam.role:manage" }),
+  rolesDelete: C("DELETE", "/v1/iam/roles/:ref", { permission: "iam.role:delete" }),
+  rolesReplace: C("POST", "/v1/iam/roles/:ref/replace", { permission: "iam.role:manage" }),
+  bindable: C("GET", "/v1/iam/bindable-roles"),
+  subjectsAccess: C("GET", "/v1/iam/users/:id/access", { permission: "iam.user:view" }),
+  subjectsScopes: C("GET", "/v1/iam/users/:id/scopes", { permission: "iam.user:manage" }),
+  subjectsBind: C("POST", "/v1/iam/users/:id/bindings", { permission: "iam.user:manage" }),
+  subjectsUnbind: C("DELETE", "/v1/iam/users/:id/bindings/:binding_id", { permission: "iam.user:manage" }),
+  me: C.raw("GET", "/v1/me/access")
+};
+function F(l) {
+  if (l === "user") return U;
+  const { access: s, scopes: o, bind: f, unbind: t, bindableroles: a } = Ae;
+  return { bindable: a, subjectsAccess: s, subjectsScopes: o, subjectsBind: f, subjectsUnbind: t };
+}
+function Fe(l) {
+  return {
+    roles: async (s) => (await l.request(U.rolesList, void 0, s)).data.roles,
+    role: async (s, o) => (await l.request(U.rolesShow, { ref: s }, o)).data,
+    holders: async (s, o) => (await l.request(U.rolesHolders, { ref: s }, o)).data.holders,
+    compare: async (s, o, f) => (await l.request(U.rolesCompare, { ref: s, with: o }, f)).data,
+    create: async (s) => (await l.request(U.rolesCreate, s)).data,
+    update: async (s) => (await l.request(U.rolesUpdate, s)).data,
+    remove: async (s) => void await l.request(U.rolesDelete, { ref: s }),
+    replace: async (s, o) => (await l.request(U.rolesReplace, { ref: s, with: o })).data.rebound,
+    access: async (s, o) => (await l.request(F(s.kind).subjectsAccess, { id: s.id }, o)).data,
+    scopes: async (s, o) => (await l.request(F(s.kind).subjectsScopes, { id: s.id }, o)).data,
+    bindable: async (s, o, f, t) => (await l.request(F(s.kind).bindable, { level: o, scope_id: f ?? 0 }, t)).data.roles,
+    bind: async (s, o) => (await l.request(F(s.kind).subjectsBind, { id: s.id, ...o })).data,
+    unbind: async (s, o) => void await l.request(F(s.kind).subjectsUnbind, { id: s.id, binding_id: o })
+  };
+}
+const ve = () => Fe(Re().http);
+function Me(l) {
+  const s = /* @__PURE__ */ new Map();
+  for (const t of l.places) s.set(t.level, t.parent_level);
+  const o = (t) => {
+    const a = [t], u = new Set(a);
+    for (let v = s.get(t); v !== void 0 && v !== l.root_level && s.has(v) && !u.has(v); v = s.get(v))
+      a.unshift(v), u.add(v);
+    return a;
+  }, f = [...s.keys()].map((t) => ({ level: t, chain: o(t) })).sort((t, a) => a.chain.length - t.chain.length || t.level.localeCompare(a.level));
+  return l.root ? [...f, { level: l.root_level, chain: [] }] : f;
+}
+const Ke = (l) => l.filter((s) => s.chain.length > 0).sort((s, o) => s.chain.length - o.chain.length)[0] ?? l[0] ?? null;
+function ie(l, s, o, f) {
+  const t = s.chain[o], a = s.chain[o + 1];
+  return l.places.filter(
+    (u) => u.level === t && (o === 0 || u.parent_level === s.chain[o - 1] && u.parent_id === f[o - 1]) && (a === void 0 || l.places.some((v) => v.level === a && v.parent_id === u.id))
+  );
+}
+const ze = {
+  class: "flex min-w-0 flex-col gap-group-gap",
+  "data-test": "add-role-sheet"
+}, He = {
+  key: 0,
+  class: "px-row-inset text-body text-content-destructive",
+  role: "alert",
+  "data-test": "scopes-failed"
+}, We = {
+  key: 1,
+  class: "px-row-inset text-body text-content-muted",
+  "data-test": "no-places"
+}, Ie = {
+  key: 0,
+  class: "px-row-inset text-body text-content-muted",
+  "data-test": "roles-loading"
+}, Ye = {
+  key: 1,
+  class: "px-row-inset text-body text-content-destructive",
+  role: "alert",
+  "data-test": "roles-failed"
+}, Je = {
+  key: 2,
+  class: "px-row-inset text-body text-content-muted",
+  "data-test": "roles-none"
+}, Qe = {
+  key: 3,
+  "data-test": "bindable-roles"
+}, Xe = { class: "px-row-inset pb-1.5 text-footnote uppercase tracking-wide text-content-muted" }, Ze = {
+  key: 4,
+  "data-test": "chosen-role"
+}, es = /* @__PURE__ */ Y({
+  __name: "AddRoleDialog",
+  props: {
+    subject: {},
+    subjectLabel: {}
+  },
+  emits: ["added"],
+  setup(l, { expose: s, emit: o }) {
+    const f = l, t = o, { t: a } = ee(), u = J(), v = ve(), { catalogue: T, scopes: L } = pe(), x = Te({
+      defaults: () => ({ level: null, place: null, role: null }),
+      validator: {
+        safeParse(c) {
+          const d = c, r = [
+            ...d.level === null || d.level !== m.value?.root_level && d.place === null ? [{ path: ["level"], message: a("core.access.add.choose_place") }] : [],
+            ...d.role === null ? [{ path: ["role"], message: a("core.access.add.choose_role") }] : []
+          ];
+          return r.length === 0 ? { success: !0, data: { level: d.level, place: d.place, role: d.role } } : { success: !1, error: { issues: r } };
+        }
+      },
+      failureMessage: De(),
+      run: (c) => v.bind(f.subject, { role_ref: c.role, level: c.level, scope_id: c.place }),
+      done: (c) => {
+        Z.success(a("core.access.added")), t("added", c);
+      }
+    }), n = x.form.values, m = R(null), h = R(!1), _ = R([]), p = R([]), N = R(!1), k = R(!1), q = j(() => m.value ? Me(m.value) : []), g = j(() => q.value.find((c) => c.level === n.level) ?? null), O = j(() => q.value.length > 1), se = j(() => {
+      const c = m.value, d = g.value;
+      return c && d ? d.chain.map((r, P) => ({ name: r, places: ie(c, d, P, _.value) })) : [];
+    }), _e = j(() => {
+      const c = g.value?.chain.length ?? 0, d = c ? _.value[c - 1] : null;
+      return m.value?.places.find((r) => r.level === g.value?.level && r.id === d)?.name ?? null;
+    }), Q = j(() => g.value !== null && g.value.chain.every((c, d) => _.value[d] != null));
+    function ae(c) {
+      n.level = c, _.value = [], n.place = null;
+    }
+    function oe(c, d) {
+      const r = _.value.slice(0, c);
+      r[c] = d, _.value = r;
+    }
+    te([() => n.level, _, m], () => {
+      const c = m.value, d = g.value;
+      if (!(!c || !d)) {
+        for (let r = 0; r < d.chain.length; r++) {
+          if (_.value[r] != null) continue;
+          const P = ie(c, d, r, _.value);
+          P.length === 1 && P[0] && oe(r, P[0].id);
+          break;
+        }
+        n.place = d.chain.length === 0 ? null : _.value[d.chain.length - 1] ?? null;
+      }
+    }, { deep: !0 });
+    async function be() {
+      if (n.role = null, p.value = [], k.value = !1, !g.value || !Q.value) return;
+      N.value = !0;
+      const c = `${n.level}:${n.place}`;
+      try {
+        const d = await v.bindable(f.subject, g.value.level, n.place);
+        c === `${n.level}:${n.place}` && (p.value = d);
+      } catch {
+        c === `${n.level}:${n.place}` && (k.value = !0);
+      } finally {
+        N.value = !1;
+      }
+    }
+    te([() => n.level, () => n.place, Q], () => void be());
+    const ge = j(() => p.value.map((c) => ({ value: c.ref, label: u.roleName(c), description: u.roleKind(c) }))), z = j(() => p.value.find((c) => c.ref === n.role) ?? null), he = j(() => {
+      const c = /* @__PURE__ */ new Map();
+      for (const d of z.value?.grants ?? []) {
+        const r = T[d.permission]?.ownable;
+        r && (!c.has(r) || d.permission.endsWith(":view")) && c.set(r, d.qualifier);
+      }
+      return [...c].map(([d, r]) => ({ ownable: d, qualifier: r }));
+    }), ye = j(() => u.scopeLabel({ level: n.level ?? m.value?.root_level ?? "", name: _e.value }));
+    async function we() {
+      m.value = null, h.value = !1, _.value = [], p.value = [], x.present();
+      try {
+        m.value = L ? await L(f.subject, new AbortController().signal) : await v.scopes(f.subject);
+      } catch {
+        h.value = !0;
+        return;
+      }
+      const c = Ke(q.value);
+      c && ae(c.level);
+    }
+    return s({ present: we }), (c, d) => (i(), E(e(Se), {
+      command: e(x),
+      title: e(a)("core.access.add_role"),
+      subtitle: f.subjectLabel,
+      size: "lg",
+      "confirm-label": e(a)("core.access.add.confirm")
+    }, {
+      default: y(() => [
+        A("div", ze, [
+          h.value ? (i(), b("p", He, w(e(a)("core.access.add.scopes_failed")), 1)) : m.value && q.value.length === 0 ? (i(), b("p", We, w(e(a)("core.access.add.no_places")), 1)) : D("", !0),
+          O.value ? (i(), E(e(K), {
+            key: 2,
+            header: e(a)("core.access.add.scope_header")
+          }, {
+            default: y(() => [
+              $(e(Ne), {
+                "model-value": e(n).level,
+                label: e(a)("core.access.add.scope_level"),
+                options: q.value.map((r) => ({ value: r.level, label: e(u).levelLabel(r.level) })),
+                "onUpdate:modelValue": d[0] || (d[0] = (r) => ae(r))
+              }, null, 8, ["model-value", "label", "options"]),
+              (i(!0), b(B, null, G(se.value, (r, P) => (i(), E(e(Ce), {
+                key: r.name,
+                "model-value": _.value[P] ?? null,
+                label: e(u).levelLabel(r.name),
+                options: r.places.map((H) => ({ value: H.id, label: H.name })),
+                "onUpdate:modelValue": (H) => oe(P, H)
+              }, null, 8, ["model-value", "label", "options", "onUpdate:modelValue"]))), 128))
+            ]),
+            _: 1
+          }, 8, ["header"])) : D("", !0),
+          Q.value ? (i(), b(B, { key: 3 }, [
+            N.value ? (i(), b("p", Ie, w(e(a)("core.access.add.roles_loading")), 1)) : k.value ? (i(), b("p", Ye, w(e(a)("core.access.add.roles_failed")), 1)) : p.value.length === 0 ? (i(), b("p", Je, w(e(a)("core.access.add.no_roles")), 1)) : (i(), b("div", Qe, [
+              A("p", Xe, w(e(a)("core.access.add.role")), 1),
+              $(e(Ee), {
+                options: ge.value,
+                "model-value": e(n).role,
+                onSelect: d[1] || (d[1] = (r) => e(n).role = r)
+              }, null, 8, ["options", "model-value"])
+            ]))
+          ], 64)) : D("", !0),
+          z.value ? (i(), b("div", Ze, [
+            $(e(K), {
+              header: e(a)("core.access.add.role_gives"),
+              footer: e(a)("core.access.add.role_gives_footer")
+            }, {
+              default: y(() => [
+                $(e(V), {
+                  layout: "setting",
+                  label: e(u).roleName(z.value),
+                  sub: z.value.description
+                }, null, 8, ["label", "sub"]),
+                (i(!0), b(B, null, G(he.value, (r) => (i(), E(e(V), {
+                  key: r.ownable,
+                  layout: "setting",
+                  label: e(u).ownableLabel(r.ownable),
+                  value: `${e(u).qualifierNoun(r.qualifier)} · ${ye.value}`
+                }, null, 8, ["label", "value"]))), 128))
+              ]),
+              _: 1
+            }, 8, ["header", "footer"])
+          ])) : D("", !0)
+        ])
+      ]),
+      _: 1
+    }, 8, ["command", "title", "subtitle", "confirm-label"]));
+  }
+}), ss = {
+  class: "text-right text-footnote text-content-muted compact:text-left",
+  "data-test": "binding-scope"
+}, as = /* @__PURE__ */ Y({
+  __name: "BindingRow",
+  props: {
+    binding: {}
+  },
+  setup(l) {
+    const s = l, o = J(), f = j(() => [o.roleKind(s.binding.role), ...s.binding.role.attrs.map(o.constraintLabel)].join(" · "));
+    return (t, a) => (i(), E(e(V), {
+      layout: "setting",
+      "stack-on-compact": "",
+      label: e(o).roleName(s.binding.role),
+      sub: f.value
+    }, fe({
+      leading: y(() => [
+        $(e(Pe), {
+          tone: s.binding.role.predefined ? "anchor" : "brand",
+          icon: "shieldStarFill"
+        }, null, 8, ["tone"])
+      ]),
+      default: y(() => [
+        A("span", ss, w(e(o).scopeLabel(s.binding.scope)), 1)
+      ]),
+      _: 2
+    }, [
+      t.$slots.trailing ? {
+        name: "trailing",
+        fn: y(() => [
+          ke(t.$slots, "trailing")
+        ]),
+        key: "0"
+      } : void 0
+    ]), 1032, ["label", "sub"]));
+  }
+}), ue = { own: 0, own_location: 1, all: 2 }, de = (l, s) => ue[s] > ue[l] ? s : l, W = (l) => `${l.level}:${l.id ?? ""}`, X = ["view", "create", "update", "manage", "delete"], me = (l) => X.includes(l) ? X.indexOf(l) : X.length;
+function os(l, s) {
+  const o = /* @__PURE__ */ new Map();
+  for (const t of s) {
+    if (t.grants.length === 0) continue;
+    const a = l[t.permission], [u = t.permission, v = ""] = t.permission.split(":"), T = a ? Ue(a) : u.split(".")[0] ?? u, L = a ? Be(a) : u.replace(/\./g, "_"), S = a?.ownable != null, x = o.get(T) ?? /* @__PURE__ */ new Map(), n = x.get(L) ?? { key: L, actions: [], sources: [], qualifier: null, scopes: [], ownable: !1, allUnavailable: !0 };
+    n.actions.push({ permission: t.permission, verb: a?.verb ?? v, unavailable: t.unavailable, grants: t.grants }), n.ownable || (n.ownable = S), n.allUnavailable && (n.allUnavailable = t.unavailable);
+    for (const m of t.grants) {
+      const h = S ? m.qualifier : "all";
+      n.scopes.some((p) => W(p) === W(m.scope)) || n.scopes.push(m.scope), S && (n.qualifier = n.qualifier ? de(n.qualifier, h) : h);
+      const _ = n.sources.find((p) => p.roleName === m.role_name && W(p.scope) === W(m.scope));
+      _ ? S && (n.sources[n.sources.indexOf(_)] = { ..._, qualifier: de(_.qualifier, h) }) : n.sources.push({ roleKey: m.role_key, roleName: m.role_name, qualifier: h, scope: m.scope });
+    }
+    x.set(L, n), o.set(T, x);
+  }
+  return [...o.keys()].sort((t, a) => +(t === ce) - +(a === ce) || t.localeCompare(a)).map((t) => ({
+    key: t,
+    screens: [...o.get(t)?.values() ?? []].map((a) => ({
+      ...a,
+      actions: [...a.actions].sort((u, v) => me(u.verb) - me(v.verb) || u.verb.localeCompare(v.verb)),
+      // the root (the place without an id) first: what applies everywhere is what a reader looks for
+      scopes: [...a.scopes].sort((u, v) => +(v.id === null) - +(u.id === null))
+    })).sort((a, u) => a.key.localeCompare(u.key))
+  }));
+}
+const ts = {
+  class: "flex min-w-0 flex-col gap-group-gap",
+  "data-test": "effective-access"
+}, ls = { class: "px-row-inset text-title3 font-semibold text-content-strong" }, ns = {
+  class: "block",
+  "data-test": "effective-actions"
+}, cs = {
+  class: "block",
+  "data-test": "effective-sources"
+}, rs = {
+  key: 0,
+  class: "mt-2 flex flex-col gap-1.5 border-l border-border-separator pl-3",
+  "data-test": "effective-why"
+}, is = ["data-permission"], us = { class: "text-content" }, ds = {
+  key: 0,
+  class: "ml-2 text-content-muted"
+}, ms = {
+  key: 0,
+  class: "contents",
+  "data-test": "effective-unavailable"
+}, fs = {
+  class: "text-right text-footnote text-content-muted compact:text-left",
+  "data-test": "effective-reach"
+}, ps = ["data-test"], vs = {
+  key: 0,
+  class: "contents",
+  "data-test": "effective-show-all"
+}, _s = /* @__PURE__ */ Y({
+  __name: "EffectiveAccess",
+  props: {
+    effective: {},
+    name: {}
+  },
+  setup(l) {
+    const s = l, { t: o } = ee(), { catalogue: f } = pe(), t = J(), a = Ge(), u = j(() => os(f, s.effective)), v = R(!1), T = j(() => a.value && !v.value ? u.value.slice(0, 3) : u.value), L = R({}), S = (m) => m.actions.map((h) => t.permissionLabel(h.permission)).join(" · "), x = (m) => m.sources.map((h) => {
+      const _ = t.roleName({ key: h.roleKey, name: h.roleName });
+      return m.ownable ? `${_} (${t.qualifierNoun(h.qualifier).toLowerCase()})` : _;
+    }).join(", "), n = (m) => [m.qualifier ? t.qualifierNoun(m.qualifier) : "", m.scopes.map((h) => t.scopeLabel(h)).join(", ")].filter(Boolean).join(" · ");
+    return (m, h) => (i(), b("section", ts, [
+      A("h2", ls, w(e(o)("core.access.effective.title", { name: s.name })), 1),
+      u.value.length === 0 ? (i(), E(e(K), {
+        key: 0,
+        footer: e(o)("core.access.effective.footer")
+      }, {
+        default: y(() => [
+          $(e(V), {
+            layout: "setting",
+            label: e(o)("core.access.effective.empty")
+          }, null, 8, ["label"])
+        ]),
+        _: 1
+      }, 8, ["footer"])) : (i(), b(B, { key: 1 }, [
+        (i(!0), b(B, null, G(T.value, (_) => (i(), E(e(K), {
+          key: _.key,
+          header: e(t).groupLabel(_.key),
+          footer: _ === T.value[T.value.length - 1] ? e(o)("core.access.effective.footer") : void 0
+        }, {
+          default: y(() => [
+            (i(!0), b(B, null, G(_.screens, (p) => (i(), E(e(V), {
+              key: p.key,
+              layout: "setting",
+              "stack-on-compact": "",
+              label: e(t).screenLabel(p.key)
+            }, {
+              sub: y(() => [
+                A("span", ns, w(S(p)), 1),
+                A("span", cs, w(e(o)("core.access.effective.from_roles", { roles: x(p) })), 1),
+                L.value[p.key] ? (i(), b("ul", rs, [
+                  (i(!0), b(B, null, G(p.actions, (N) => (i(), b("li", {
+                    key: N.permission,
+                    "data-permission": N.permission
+                  }, [
+                    A("span", us, w(e(t).permissionLabel(N.permission)), 1),
+                    N.unavailable ? (i(), b("span", ds, w(e(o)("core.access.effective.unavailable")), 1)) : D("", !0),
+                    (i(!0), b(B, null, G(N.grants, (k) => (i(), b("span", {
+                      key: `${k.binding_id}-${k.scope.level}-${k.scope.id ?? 0}`,
+                      class: "block text-content-muted"
+                    }, w(e(o)("core.access.effective.why_row", {
+                      role: e(t).roleName({ key: k.role_key, name: k.role_name }),
+                      whose: e(t).qualifierNoun(p.ownable ? k.qualifier : "all"),
+                      scope: e(t).scopeLabel(k.scope)
+                    })), 1))), 128))
+                  ], 8, is))), 128))
+                ])) : D("", !0)
+              ]),
+              default: y(() => [
+                p.allUnavailable ? (i(), b("span", ms, [
+                  $(e(Ve), { tone: "warning" }, {
+                    default: y(() => [
+                      M(w(e(o)("core.access.effective.unavailable")), 1)
+                    ]),
+                    _: 1
+                  })
+                ])) : D("", !0),
+                A("span", fs, w(n(p)), 1),
+                A("span", {
+                  class: "contents",
+                  "data-test": `why-${p.key}`
+                }, [
+                  $(e(I), {
+                    prominence: "secondary",
+                    size: "sm",
+                    onClick: (N) => L.value[p.key] = !L.value[p.key]
+                  }, {
+                    default: y(() => [
+                      M(w(L.value[p.key] ? e(o)("core.access.effective.hide_why") : e(o)("core.access.effective.show_why")), 1)
+                    ]),
+                    _: 2
+                  }, 1032, ["onClick"])
+                ], 8, ps)
+              ]),
+              _: 2
+            }, 1032, ["label"]))), 128))
+          ]),
+          _: 2
+        }, 1032, ["header", "footer"]))), 128)),
+        e(a) && u.value.length > 3 ? (i(), b("span", vs, [
+          $(e(I), {
+            prominence: "secondary",
+            class: "self-center",
+            onClick: h[0] || (h[0] = (_) => v.value = !v.value)
+          }, {
+            default: y(() => [
+              M(w(v.value ? e(o)("core.access.effective.fewer_modules") : e(o)("core.access.effective.all_modules", { count: u.value.length })), 1)
+            ]),
+            _: 1
+          })
+        ])) : D("", !0)
+      ], 64))
+    ]));
+  }
+}), bs = {
+  class: "flex min-w-0 flex-col gap-group-gap",
+  "data-test": "access-panel"
+}, gs = ["data-test"], hs = {
+  class: "contents",
+  "data-test": "add-role"
+}, Fs = /* @__PURE__ */ Y({
+  __name: "PersonAccess",
+  props: {
+    subject: {},
+    name: {},
+    subjectLabel: {}
+  },
+  emits: ["loaded"],
+  setup(l, { expose: s, emit: o }) {
+    const f = l, t = o, { t: a } = ee(), u = J(), v = Oe(), T = ve(), L = j(() => f.subject.kind === "service" ? re.manageServiceBindings : re.manageBindings), S = R(!1), x = qe(async ({ signal: k, abandon: q }) => {
+      S.value = !1;
+      try {
+        const g = await T.access(f.subject, { signal: k });
+        return t("loaded", g.bindings.length), g;
+      } catch (g) {
+        if (!xe(g) || g.kind !== "notFound") throw g;
+        return S.value = !0, q();
+      }
+    }, { watch: () => f.subject.id }), n = le("addDialog"), m = le("removeDialog");
+    async function h(k) {
+      await T.unbind(f.subject, k.id), Z.success(a("core.access.removed")), await x.reload();
+    }
+    const _ = (k) => Z.error(v(k, { fallback: a("core.access.remove_failed") })), p = R(null), N = j(() => p.value ? a("core.access.remove_body", { name: f.name, role: u.roleName(p.value.role), scope: u.scopeLabel(p.value.scope) }) : "");
+    return s({ reload: x.reload }), (k, q) => (i(), b("div", bs, [
+      S.value ? (i(), E(e(Le), {
+        key: 0,
+        title: e(a)("core.resource.not_found.title"),
+        description: e(a)("core.resource.not_found.body"),
+        icon: "errorWarningLine",
+        "data-test": "access-not-found"
+      }, null, 8, ["title", "description"])) : (i(), E(e(je), {
+        key: 1,
+        state: e(x).state.value,
+        "skeleton-rows": 6,
+        "is-empty": () => !1,
+        onRetry: q[1] || (q[1] = (g) => e(x).reload())
+      }, {
+        default: y(({ value: g }) => [
+          $(e(K), {
+            header: e(a)("core.access.person_roles"),
+            footer: e(a)("core.access.roles_footer")
+          }, {
+            default: y(() => [
+              g.bindings.length === 0 ? (i(), E(e(V), {
+                key: 0,
+                layout: "setting",
+                label: e(a)("core.access.no_roles_title"),
+                sub: e(a)("core.access.no_roles_description")
+              }, null, 8, ["label", "sub"])) : D("", !0),
+              (i(!0), b(B, null, G(g.bindings, (O) => (i(), E(as, {
+                key: O.id,
+                binding: O
+              }, fe({ _: 2 }, [
+                g.can_manage ? {
+                  name: "trailing",
+                  fn: y(() => [
+                    $(e(ne), { permission: L.value }, {
+                      default: y(() => [
+                        A("span", {
+                          class: "contents",
+                          "data-test": `remove-binding-${O.id}`
+                        }, [
+                          $(e(I), {
+                            tone: "critical",
+                            prominence: "secondary",
+                            size: "sm",
+                            onClick: (se) => (p.value = O, m.value?.present(O))
+                          }, {
+                            default: y(() => [
+                              M(w(e(a)("core.access.remove")), 1)
+                            ]),
+                            _: 1
+                          }, 8, ["onClick"])
+                        ], 8, gs)
+                      ]),
+                      _: 2
+                    }, 1032, ["permission"])
+                  ]),
+                  key: "0"
+                } : void 0
+              ]), 1032, ["binding"]))), 128)),
+              g.can_manage ? (i(), E(e(ne), {
+                key: 1,
+                permission: L.value
+              }, {
+                default: y(() => [
+                  $(e(V), { layout: "stacked" }, {
+                    default: y(() => [
+                      A("span", hs, [
+                        $(e(I), {
+                          prominence: "secondary",
+                          icon: "addLine",
+                          onClick: q[0] || (q[0] = (O) => n.value?.present())
+                        }, {
+                          default: y(() => [
+                            M(w(e(a)("core.access.add_role")), 1)
+                          ]),
+                          _: 1
+                        })
+                      ])
+                    ]),
+                    _: 1
+                  })
+                ]),
+                _: 1
+              }, 8, ["permission"])) : D("", !0)
+            ]),
+            _: 2
+          }, 1032, ["header", "footer"]),
+          $(_s, {
+            effective: g.effective,
+            name: f.name
+          }, null, 8, ["effective", "name"])
+        ]),
+        _: 1
+      }, 8, ["state"])),
+      $(es, {
+        ref_key: "addDialog",
+        ref: n,
+        subject: f.subject,
+        "subject-label": f.subjectLabel ?? f.name,
+        onAdded: q[2] || (q[2] = (g) => e(x).reload())
+      }, null, 8, ["subject", "subject-label"]),
+      $(e($e), {
+        ref_key: "removeDialog",
+        ref: m,
+        tone: "critical",
+        title: e(a)("core.access.remove_title"),
+        message: N.value,
+        "confirm-label": e(a)("core.access.remove"),
+        action: h,
+        onFailed: _
+      }, null, 8, ["title", "message", "confirm-label"])
+    ]));
+  }
+});
+export {
+  as as _,
+  Fs as a,
+  U as b,
+  ve as u
+};

package/dist/{ProfilePage-Bf7dFzGd.js → ProfilePage-CoZyG11N.js}

@@ -4,25 +4,25 @@ import { a as ke } from "./AdaptivePageShell.vue_vue_type_script_setup_true_lang
 import { u as G } from "./platform-Dx6STiwY.js";
 import { _ as ee } from "./AsyncSection.vue_vue_type_script_setup_true_lang-B0NfvG3B.js";
 import { u as te } from "./useLoad-W4tfxmm5.js";
-import { i as S, d as T, c as qe } from "./index-Ok29ucE3.js";
+import { i as S, d as T, c as qe } from "./index-Cmj9iZmT.js";
 import { u as ce } from "./FormErrors.vue_vue_type_script_setup_true_lang-D7edzNTL.js";
-import { _ as ue } from "./FormView.vue_vue_type_script_setup_true_lang-D31Hk3pJ.js";
-import { u as Ce, _ as Se, a as Ee, b as Ve } from "./useGroupSheet-C2NyqWRp.js";
-import { _ as H, p as Pe } from "./FormGroup.vue_vue_type_script_setup_true_lang-CSgT4ITL.js";
+import { _ as ue } from "./FormView.vue_vue_type_script_setup_true_lang-nyz8EkzM.js";
+import { u as Ce, _ as Se, a as Ee, b as Ve } from "./useGroupSheet-BVcNDWbP.js";
+import { _ as H, p as Pe } from "./FormGroup.vue_vue_type_script_setup_true_lang-CNb2CK01.js";
 import { t as C } from "./toast-CqSDTWRX.js";
 import { u as W } from "./fieldMessages-DTXpWnBd.js";
-import { g as K } from "./options-Bu0XbEpN.js";
-import { _ as F } from "./TextField.vue_vue_type_script_setup_true_lang-BwfNNQEz.js";
+import { g as K } from "./options-e_CAfvDQ.js";
+import { _ as F } from "./TextField.vue_vue_type_script_setup_true_lang-CX3LdZLK.js";
 import { _ as pe } from "./IconTile.vue_vue_type_script_setup_true_lang-_FXvaj93.js";
 import { u as ae } from "./format-D8X4zsx6.js";
-import { _ as X } from "./ActionRow.vue_vue_type_script_setup_true_lang-Bv-APkGf.js";
+import { _ as X } from "./ActionRow.vue_vue_type_script_setup_true_lang-D8NCXX4p.js";
 import { i as Z } from "./error-Bb_dr_Ay.js";
 import { a as Ie } from "./leaveGuard-Cc8yeLxM.js";
 import { _ as Ne } from "./Modal.vue_vue_type_script_setup_true_lang-DpBb8ans.js";
 import { _ as J } from "./Button.vue_vue_type_script_setup_true_lang-CL9Qh5yq.js";
-import { u as Ae, _ as Me } from "./useCommand-DyuPTosF.js";
+import { u as Ae, _ as Me } from "./useCommand-CfG727e8.js";
 import { _ as Re } from "./AlertDialog.vue_vue_type_script_setup_true_lang-whA4WLdl.js";
-import { _ as De } from "./SessionList.vue_vue_type_script_setup_true_lang-PuWIK-Wa.js";
+import { _ as De } from "./SessionList.vue_vue_type_script_setup_true_lang-VvBB2EZz.js";
 import { _ as Le } from "./PageBar.vue_vue_type_script_setup_true_lang-B7qdEeej.js";
 import { _ as Ue } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
 import { d as Fe, s as Ge, a as Be } from "./signInEvents-DWShrJox.js";