@acorex-platform/module-auth-client 0.0.15

package/fesm2022/acorex-platform-module-auth-client-acorex-platform-module-auth-client-B7tIKOw6.mjs

@@ -0,0 +1,3174 @@
+import * as i1$4 from '@acorex-platform/framework-client/common';
+import { AXPFileStorageService, AXPSettingsService, AXPHomePageService, AXPDataProvider, AXPCommonSettings, AXP_PROTECTED_ROUTE_GUARDS, AXPCommonModule, AXP_MENU_PROVIDER, AXP_SETTING_DEFINITION_PROVIDER } from '@acorex-platform/framework-client/common';
+import { AXPSessionService, AXPUserProfileIdentityService, AXPUnauthorizedError, AXPUnauthenticatedError, AXPAuthStrategyRegistryService, AXPAuthGuard, AXPSessionStatus } from '@acorex-platform/framework-client/auth';
+import { AXPUserAvatarService, AXPUserAvatarComponent, AXP_PAGE_COMPONENT_PROVIDER } from '@acorex-platform/framework-client/layout/components';
+import { AXPFileStorageStatus, AXPWidgetsCatalog, coerceUnknownToTrimmedString, AXPPlatformScope, AXPKeyboardShortcutPriority, verifyPassword } from '@acorex-platform/framework-shared/core';
+import { RootConfig } from '@acorex-platform/module-person-core-client/contracts';
+import { RootConfig as RootConfig$1 } from '@acorex-platform/module-security-management-client/contracts';
+import { AXPEntityService, AXP_ENTITY_STORAGE_MIDDLEWARE } from '@acorex-platform/framework-client/layout/entity';
+import * as i0 from '@angular/core';
+import { inject, Injectable, isDevMode, InjectionToken, NgModule, input, output, viewChild, viewChildren, signal, computed, effect, ChangeDetectionStrategy, Component, DestroyRef, ViewEncapsulation, ViewChild, Injector, afterNextRender, provideAppInitializer } from '@angular/core';
+import { first, isEmpty, isNil, isString, orderBy, get, defaultTo } from 'lodash';
+import { AXDataSource } from '@acorex/cdk/common';
+import { AXMAuthDataSourceKeys, AXPAuthSettings, AXMAuthCommandKeys } from '@acorex-platform/module-auth-client/contracts';
+import { AXPLayoutThemeService, AXPMenuVerticalMode } from '@acorex-platform/framework-client/themes/shared';
+import { HttpErrorResponse } from '@angular/common/http';
+import * as i1$5 from '@angular/router';
+import { Router, RouterModule, ROUTES } from '@angular/router';
+import * as i1 from '@acorex/core/validation';
+import { AXValidationModule } from '@acorex/core/validation';
+import * as i1$3 from '@acorex-platform/framework-client/core';
+import { axpApplicationLogoKey, AXPEntityLogoRegistrationService, AXPLogoComponent, axpTenantLogoKey, AXPHookService, AXPKeyboardShortcutRegistry, chordToKbdItemKeys, getPrimaryKeyboardShortcutChord, normalizeKeyboardShortcuts, AXPDeviceService, AXPComponentSlotModule, AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER, provideLazyProvider, AXP_DATASOURCE_DEFINITION_PROVIDER, AXPComponentSlotDirective } from '@acorex-platform/framework-client/core';
+import { AXPCommandService, provideCommandSetups } from '@acorex-platform/framework-client/runtime';
+import { AXPRootLayoutComponent } from '@acorex-platform/framework-client/themes/default';
+import * as i4$1 from '@angular/common';
+import { CommonModule, AsyncPipe } from '@angular/common';
+import { first as first$1, firstValueFrom, filter, combineLatest, switchMap, from } from 'rxjs';
+import * as i1$1 from '@acorex/components/button';
+import { AXButtonModule } from '@acorex/components/button';
+import * as i3$1 from '@acorex/components/decorators';
+import { AXDecoratorModule } from '@acorex/components/decorators';
+import * as i2$2 from '@acorex/components/popover';
+import { AXPopoverModule } from '@acorex/components/popover';
+import { RootConfig as RootConfig$2 } from '@acorex-platform/module-application-management-client/contracts';
+import * as i5 from '@acorex/cdk/list-navigation';
+import { AXListNavigationDirective, AXListNavigationItemDirective, AXListNavigationModule } from '@acorex/cdk/list-navigation';
+import * as i4 from '@acorex/components/search-box';
+import { AXSearchBoxModule } from '@acorex/components/search-box';
+import * as i3 from '@acorex/components/select-box';
+import { AXSelectBoxModule } from '@acorex/components/select-box';
+import * as i2 from '@acorex/components/skeleton';
+import { AXSkeletonModule } from '@acorex/components/skeleton';
+import * as i2$1 from '@acorex/core/translation';
+import { AXTranslationModule, AXTranslationService } from '@acorex/core/translation';
+import { AXAvatarModule } from '@acorex/components/avatar';
+import { AXImageModule } from '@acorex/components/image';
+import { AXLoadingModule } from '@acorex/components/loading';
+import { toSignal, takeUntilDestroyed } from '@angular/core/rxjs-interop';
+import * as i1$2 from '@angular/forms';
+import { FormsModule } from '@angular/forms';
+import { AXToastService } from '@acorex/components/toast';
+import { AXMDeviceSessionsService } from '@acorex-platform/module-security-management-client';
+import { AXOverlayService } from '@acorex/cdk/overlay';
+import { AXPlatform } from '@acorex/core/platform';
+
+//#region ---- Hook keys ----
+const PROFILE_PAGE_GROUPS_HOOK = 'profile-page.groups';
+const PROFILE_PAGE_SECTIONS_HOOK = 'profile-page.sections';
+const PROFILE_PAGE_HEADER_META_HOOK = 'profile-page.header-meta';
+//#endregion
+//#region ---- Helpers ----
+/** Resolves section content; top-level `actions` imply card mode. */
+function resolveUserProfileSectionContent(section) {
+    if (section.content) {
+        return section.content;
+    }
+    return { mode: 'card', actions: section.actions ?? [] };
+}
+/** Whether the group renders a full-tab component instead of sections. */
+function isUserProfileGroupComponent(group) {
+    return group.content?.mode === 'component';
+}
+/** Visible actions on a section card. */
+function visibleUserProfileSectionActions(actions) {
+    return actions.filter((action) => action.visible !== false);
+}
+/** Default card action: explicit `default`, otherwise the first visible action. */
+function resolveDefaultUserProfileSectionAction(actions) {
+    const visibleActions = visibleUserProfileSectionActions(actions);
+    if (!visibleActions.length) {
+        return undefined;
+    }
+    return visibleActions.find((action) => action.default) ?? visibleActions[0];
+}
+//#endregion
+
+//#region ---- Avatar storage constants ----
+const AXP_PROFILE_PHOTO_REF_TYPE = 'PersonCore.Person';
+const AXP_PROFILE_PHOTO_USER_REF_TYPE = 'SecurityManagement.User';
+const AXP_PROFILE_PHOTO_CATEGORY = 'profile-photo';
+const FILE_STORAGE_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+//#endregion
+//#region ---- Avatar storage helpers ----
+function isFileStorageId(value) {
+    if (!value) {
+        return false;
+    }
+    return FILE_STORAGE_ID_PATTERN.test(value.trim());
+}
+function isExternalAvatarUrl(value) {
+    if (!value) {
+        return false;
+    }
+    return /^https?:\/\//i.test(value.trim());
+}
+function isDataImageUrl(value) {
+    if (!value) {
+        return false;
+    }
+    return value.trim().startsWith('data:image/');
+}
+function normalizeAvatarRef(value) {
+    if (value === null || value === undefined) {
+        return null;
+    }
+    if (typeof value !== 'string') {
+        return null;
+    }
+    const trimmed = value.trim();
+    if (!trimmed || trimmed === 'null') {
+        return null;
+    }
+    return trimmed;
+}
+function dataUrlToBlob(dataUrl) {
+    const [header, base64] = dataUrl.split(',');
+    const mimeMatch = /data:([^;]+)/.exec(header);
+    const mimeType = mimeMatch?.[1] ?? 'image/png';
+    const binary = atob(base64);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return new Blob([bytes], { type: mimeType });
+}
+//#endregion
+
+//#endregion
+//#region ---- User avatar sync service (client) ----
+/**
+ * Client-side profile photo operations for self-service flows.
+ * Bidirectional Person ↔ User sync runs on the server via HCM avatar middleware.
+ */
+class AXPUserAvatarSyncService {
+    constructor() {
+        //#region ---- Services & Dependencies ----
+        this.entityService = inject(AXPEntityService);
+        this.fileStorage = inject(AXPFileStorageService);
+        this.sessionService = inject(AXPSessionService);
+        this.identityService = inject(AXPUserProfileIdentityService);
+        this.userAvatarService = inject(AXPUserAvatarService);
+    }
+    //#endregion
+    //#region ---- Public API ----
+    async resolveStorageTarget(userId) {
+        const person = await this.findPersonByUserId(userId);
+        if (person?.id) {
+            return { kind: 'person', personId: person.id, userId };
+        }
+        return { kind: 'user', userId };
+    }
+    async getCurrentAvatarRef(userId) {
+        const sessionUser = this.sessionService.user;
+        if (sessionUser?.id === userId) {
+            const sessionRef = normalizeAvatarRef(sessionUser.avatar);
+            if (sessionRef) {
+                return sessionRef;
+            }
+        }
+        const target = await this.resolveStorageTarget(userId);
+        if (target.kind === 'person') {
+            const person = await this.personData().byKey(target.personId);
+            return normalizeAvatarRef(person?.image);
+        }
+        const user = await this.userData().byKey(userId);
+        return normalizeAvatarRef(user?.avatar);
+    }
+    async getCurrentAvatarBlob(userId) {
+        const ref = await this.getCurrentAvatarRef(userId);
+        if (!ref) {
+            return null;
+        }
+        if (isDataImageUrl(ref)) {
+            return dataUrlToBlob(ref);
+        }
+        if (isExternalAvatarUrl(ref)) {
+            const response = await fetch(ref);
+            return response.blob();
+        }
+        if (isFileStorageId(ref)) {
+            return this.fileStorage.download(ref);
+        }
+        return null;
+    }
+    async uploadAndSetAvatar(userId, file) {
+        const target = await this.resolveStorageTarget(userId);
+        const previousRef = await this.getCurrentAvatarRef(userId);
+        const refId = target.kind === 'person' ? target.personId : userId;
+        const refType = target.kind === 'person' ? AXP_PROFILE_PHOTO_REF_TYPE : AXP_PROFILE_PHOTO_USER_REF_TYPE;
+        const info = await this.fileStorage.save({
+            file,
+            name: file.name || 'profile-photo.png',
+            refId,
+            refType,
+            category: AXP_PROFILE_PHOTO_CATEGORY,
+            status: AXPFileStorageStatus.Temporary,
+        });
+        const fileId = info.fileId?.trim();
+        if (!fileId) {
+            throw new Error('File storage did not return a fileId.');
+        }
+        await this.fileStorage.commit(fileId);
+        if (target.kind === 'person') {
+            await this.personData().update(target.personId, { image: fileId });
+        }
+        else {
+            await this.userData().update(userId, { avatar: fileId });
+        }
+        await this.notifyAvatarChanged(userId, fileId);
+        if (previousRef && isFileStorageId(previousRef) && previousRef !== fileId) {
+            await this.safeRemoveFile(previousRef);
+        }
+        return fileId;
+    }
+    async removeAvatar(userId) {
+        const target = await this.resolveStorageTarget(userId);
+        const previousRef = await this.getCurrentAvatarRef(userId);
+        if (target.kind === 'person') {
+            await this.personData().update(target.personId, { image: undefined });
+        }
+        else {
+            await this.userData().update(userId, { avatar: null });
+        }
+        await this.notifyAvatarChanged(userId, null);
+        if (previousRef && isFileStorageId(previousRef)) {
+            await this.safeRemoveFile(previousRef);
+        }
+    }
+    /** Keeps session, avatar cache, and shell avatars in sync after any avatar change. */
+    async notifyAvatarChanged(userId, avatar) {
+        await this.refreshClientDisplay(userId, avatar);
+    }
+    //#endregion
+    //#region ---- Private helpers ----
+    async refreshClientDisplay(userId, avatar) {
+        const isCurrentUser = this.sessionService.user?.id === userId;
+        if (isCurrentUser) {
+            await this.identityService.applySessionPatch({
+                avatar: avatar === null ? '' : avatar,
+            });
+        }
+        this.userAvatarService.clearCache(userId);
+        await this.userAvatarService.refreshUserInfo(userId);
+    }
+    personData() {
+        return this.entityService
+            .withEntity(RootConfig.module.name, RootConfig.entities.person.name)
+            .data();
+    }
+    userData() {
+        return this.entityService
+            .withEntity(RootConfig$1.module.name, RootConfig$1.entities.users.name)
+            .data();
+    }
+    async findPersonByUserId(userId) {
+        const result = await this.personData().query({
+            filter: { field: 'userId', operator: { type: 'equal' }, value: userId },
+            take: 1,
+            skip: 0,
+        });
+        return first(result.items) ?? null;
+    }
+    async safeRemoveFile(fileId) {
+        try {
+            await this.fileStorage.remove(fileId);
+        }
+        catch {
+            try {
+                await this.fileStorage.markForDeletion(fileId);
+            }
+            catch {
+                /* ignore cleanup failures */
+            }
+        }
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPUserAvatarSyncService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPUserAvatarSyncService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPUserAvatarSyncService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }] });
+
+//#region ---- User activity data source types ----
+//#endregion
+
+//#region ---- User activity helpers ----
+//#region ---- Constants ----
+const AUTH_USER_ACTIVITY_DEFAULT_WEEKS = 53;
+const LEVEL_THRESHOLDS = [0, 3, 8, 15, 30];
+//#endregion
+//#region ---- Date range ----
+function resolveDefaultUserActivityDateRange(weeksToShow = AUTH_USER_ACTIVITY_DEFAULT_WEEKS, referenceDate = new Date()) {
+    const today = new Date(referenceDate);
+    today.setHours(0, 0, 0, 0);
+    const endSunday = new Date(today);
+    endSunday.setDate(today.getDate() + (6 - today.getDay()));
+    const startDate = new Date(endSunday);
+    startDate.setDate(endSunday.getDate() - weeksToShow * 7 + 1);
+    startDate.setHours(0, 0, 0, 0);
+    return { startDate, endDate: endSunday };
+}
+//#endregion
+//#region ---- Session aggregation ----
+function normalizeDateRange(startDate, endDate) {
+    const start = new Date(startDate);
+    const end = new Date(endDate);
+    start.setHours(0, 0, 0, 0);
+    end.setHours(0, 0, 0, 0);
+    return start <= end ? { rangeStart: start, rangeEnd: end } : { rangeStart: end, rangeEnd: start };
+}
+function toIsoDate(date) {
+    return date.toISOString().slice(0, 10);
+}
+function toDayKey(value) {
+    const date = new Date(value);
+    if (Number.isNaN(date.getTime())) {
+        return undefined;
+    }
+    date.setHours(0, 0, 0, 0);
+    return toIsoDate(date);
+}
+/** Counts sign-in events per calendar day from device session rows. */
+function aggregateDailySessionCounts(sessions, params) {
+    const { rangeStart, rangeEnd } = normalizeDateRange(params.startDate, params.endDate);
+    const counts = new Map();
+    for (const session of sessions) {
+        if (session.userId !== params.userId || session.lastLoginDate == null) {
+            continue;
+        }
+        const dayKey = toDayKey(session.lastLoginDate);
+        if (!dayKey) {
+            continue;
+        }
+        const day = new Date(dayKey);
+        if (day < rangeStart || day > rangeEnd) {
+            continue;
+        }
+        counts.set(dayKey, (counts.get(dayKey) ?? 0) + 1);
+    }
+    return counts;
+}
+//#endregion
+//#region ---- Week grid ----
+function countToActivityLevel(count) {
+    if (count <= LEVEL_THRESHOLDS[1]) {
+        return count === 0 ? 0 : 1;
+    }
+    if (count <= LEVEL_THRESHOLDS[2]) {
+        return 2;
+    }
+    if (count <= LEVEL_THRESHOLDS[3]) {
+        return 3;
+    }
+    return 4;
+}
+function startOfWeekSunday(date) {
+    const value = new Date(date);
+    value.setHours(0, 0, 0, 0);
+    value.setDate(value.getDate() - value.getDay());
+    return value;
+}
+function buildUserActivityWeeks(params, dailyCounts) {
+    const { rangeStart, rangeEnd } = normalizeDateRange(params.startDate, params.endDate);
+    const today = new Date();
+    today.setHours(0, 0, 0, 0);
+    const gridStart = startOfWeekSunday(rangeStart);
+    const gridEnd = startOfWeekSunday(rangeEnd);
+    gridEnd.setDate(gridEnd.getDate() + 6);
+    const weeks = [];
+    const cursor = new Date(gridStart);
+    while (cursor <= gridEnd) {
+        const days = [];
+        for (let dayIndex = 0; dayIndex < 7; dayIndex += 1) {
+            const date = new Date(cursor);
+            const inRange = date >= rangeStart && date <= rangeEnd;
+            const dayKey = toIsoDate(date);
+            const count = inRange && date <= today ? (dailyCounts.get(dayKey) ?? 0) : 0;
+            days.push({
+                date: dayKey,
+                count,
+                level: countToActivityLevel(count),
+            });
+            cursor.setDate(cursor.getDate() + 1);
+        }
+        weeks.push({ days });
+    }
+    return weeks;
+}
+function computeUserActivityStats(weeks) {
+    const days = weeks.flatMap((week) => week.days).filter((day) => day.count > 0);
+    const total = days.reduce((sum, day) => sum + day.count, 0);
+    const activeDayCount = days.length || 1;
+    let longestStreak = 0;
+    let currentStreak = 0;
+    for (const week of weeks) {
+        for (const day of week.days) {
+            if (day.count > 0) {
+                currentStreak += 1;
+                longestStreak = Math.max(longestStreak, currentStreak);
+            }
+            else {
+                currentStreak = 0;
+            }
+        }
+    }
+    const weekCount = weeks.length || 1;
+    return {
+        longestStreak,
+        avgPerDay: Math.round(total / activeDayCount),
+        avgPerWeek: Math.round(total / weekCount),
+        total,
+    };
+}
+function buildUserActivityDataSourceItem(params, sessions) {
+    const dailyCounts = aggregateDailySessionCounts(sessions, params);
+    const weeks = buildUserActivityWeeks(params, dailyCounts);
+    return {
+        id: `${params.userId}:${toIsoDate(params.startDate)}:${toIsoDate(params.endDate)}`,
+        userId: params.userId,
+        startDate: toIsoDate(params.startDate),
+        endDate: toIsoDate(params.endDate),
+        weeks,
+        stats: computeUserActivityStats(weeks),
+    };
+}
+function formatCompactActivityCount(value) {
+    if (value >= 1_000_000) {
+        return `${(value / 1_000_000).toFixed(2)}M`;
+    }
+    if (value >= 1_000) {
+        return `${Math.round(value / 1000)}K`;
+    }
+    return String(value);
+}
+//#endregion
+
+//#region ---- User activity filter helpers ----
+function isResolvedFilterScalar(value) {
+    if (value == null) {
+        return false;
+    }
+    if (value instanceof Date) {
+        return !Number.isNaN(value.getTime());
+    }
+    const text = String(value).trim();
+    return text.length > 0 && !text.includes('{{');
+}
+function parseFilterDate(value) {
+    if (!isResolvedFilterScalar(value)) {
+        return undefined;
+    }
+    if (value instanceof Date) {
+        return value;
+    }
+    const parsed = new Date(String(value));
+    return Number.isNaN(parsed.getTime()) ? undefined : parsed;
+}
+function extractFilterFieldValue(filter, field, operators) {
+    if (!filter) {
+        return undefined;
+    }
+    if (filter.filters?.length) {
+        for (const child of filter.filters) {
+            const value = extractFilterFieldValue(child, field, operators);
+            if (value !== undefined) {
+                return value;
+            }
+        }
+        return undefined;
+    }
+    const operator = String(filter.operator?.type ?? '');
+    if (filter.field === field && operators.includes(operator)) {
+        return isResolvedFilterScalar(filter.value) ? filter.value : undefined;
+    }
+    return undefined;
+}
+function extractUserActivityUserId(filter) {
+    const value = extractFilterFieldValue(filter, 'userId', ['equal', 'eq']);
+    if (value == null) {
+        return undefined;
+    }
+    const text = String(value).trim();
+    return text.length > 0 ? text : undefined;
+}
+function extractUserActivityStartDate(filter) {
+    const gte = parseFilterDate(extractFilterFieldValue(filter, 'startDate', ['gte', 'greaterThanOrEqual', 'equal', 'eq']));
+    if (gte) {
+        return gte;
+    }
+    return parseFilterDate(extractFilterFieldValue(filter, 'dateFrom', ['gte', 'greaterThanOrEqual', 'equal', 'eq']));
+}
+function extractUserActivityEndDate(filter) {
+    const lte = parseFilterDate(extractFilterFieldValue(filter, 'endDate', ['lte', 'lessThanOrEqual', 'equal', 'eq']));
+    if (lte) {
+        return lte;
+    }
+    return parseFilterDate(extractFilterFieldValue(filter, 'dateTo', ['lte', 'lessThanOrEqual', 'equal', 'eq']));
+}
+//#endregion
+
+//#region ---- User activity data source ----
+function resolveLoadParams(request) {
+    const userId = extractUserActivityUserId(request?.filter);
+    if (isEmpty(userId)) {
+        return null;
+    }
+    const defaultRange = resolveDefaultUserActivityDateRange();
+    const startDate = extractUserActivityStartDate(request?.filter) ?? defaultRange.startDate;
+    const endDate = extractUserActivityEndDate(request?.filter) ?? defaultRange.endDate;
+    return {
+        userId: userId,
+        startDate,
+        endDate,
+    };
+}
+/** Contribution-style user activity heatmap derived from device session sign-in dates. */
+class AXMUserActivityDataSourceDefinition {
+    constructor() {
+        //#region ---- Services & Dependencies ----
+        this.entityService = inject(AXPEntityService);
+        //#endregion
+    }
+    //#endregion
+    //#region ---- Public API ----
+    items() {
+        const sampleParams = resolveDefaultUserActivityDateRange();
+        const sampleItem = buildUserActivityDataSourceItem({ userId: 'sample-user', ...sampleParams }, []);
+        return Promise.resolve([
+            {
+                name: AXMAuthDataSourceKeys.UserActivity,
+                title: 'User Activity',
+                columns: [
+                    {
+                        name: 'id',
+                        title: 'ID',
+                        datatype: 'string',
+                        type: AXPWidgetsCatalog.text,
+                    },
+                    {
+                        name: 'userId',
+                        title: 'User ID',
+                        datatype: 'string',
+                        type: AXPWidgetsCatalog.text,
+                    },
+                    {
+                        name: 'startDate',
+                        title: 'Start Date',
+                        datatype: 'date',
+                        type: AXPWidgetsCatalog.dateTime,
+                    },
+                    {
+                        name: 'endDate',
+                        title: 'End Date',
+                        datatype: 'date',
+                        type: AXPWidgetsCatalog.dateTime,
+                    },
+                ],
+                filters: [
+                    {
+                        field: 'userId',
+                        title: 'User',
+                        operator: { type: 'equal' },
+                        widget: { type: AXPWidgetsCatalog.text },
+                        filterType: { advance: true, inline: true },
+                    },
+                    {
+                        field: 'startDate',
+                        title: 'Start Date',
+                        operator: { type: 'gte' },
+                        widget: { type: AXPWidgetsCatalog.dateTime, options: { format: 'date' } },
+                        filterType: { advance: true, inline: true },
+                    },
+                    {
+                        field: 'endDate',
+                        title: 'End Date',
+                        operator: { type: 'lte' },
+                        widget: { type: AXPWidgetsCatalog.dateTime, options: { format: 'date' } },
+                        filterType: { advance: true, inline: true },
+                    },
+                ],
+                textField: { name: 'id', title: 'ID' },
+                valueField: { name: 'id', title: 'ID' },
+                samples: [sampleItem],
+                source: () => new AXDataSource({
+                    key: 'id',
+                    pageSize: 1,
+                    load: async (request) => {
+                        const params = resolveLoadParams(request);
+                        if (!params) {
+                            return { items: [], total: 0 };
+                        }
+                        const sessions = await this.loadUserSessions(params.userId);
+                        const item = buildUserActivityDataSourceItem(params, sessions);
+                        return { items: [item], total: 1 };
+                    },
+                }),
+            },
+        ]);
+    }
+    //#endregion
+    //#region ---- Private Methods ----
+    async loadUserSessions(userId) {
+        const response = await this.entityService
+            .withEntity(RootConfig$1.module.name, RootConfig$1.entities.deviceSessions.name)
+            .data()
+            .query({
+            skip: 0,
+            take: 1000,
+            filter: {
+                field: 'userId',
+                operator: { type: 'equal' },
+                value: userId,
+            },
+        });
+        return response.items ?? [];
+    }
+}
+//#endregion
+
+//#region ---- Auth data source provider ----
+/**
+ * Registers auth module data source definitions.
+ */
+class AXMAuthDataSourceProvider {
+    constructor() {
+        this.userActivity = new AXMUserActivityDataSourceDefinition();
+    }
+    async items() {
+        return [...(await this.userActivity.items())];
+    }
+}
+//#endregion
+
+var datasource_provider = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    AXMAuthDataSourceProvider: AXMAuthDataSourceProvider
+});
+
+class AXMAuthErrorHandler {
+    constructor() {
+        this.router = inject(Router);
+        this.layoutService = inject(AXPLayoutThemeService);
+    }
+    handleError(error, next) {
+        if (error instanceof HttpErrorResponse) {
+            // if (error.status == 401) {
+            //     this.router.navigate(['/auth/login']);
+            // }
+            // else if (error.status == 404) {
+            //     this.router.navigate(['/404']);
+            // }
+        }
+        else if (error instanceof AXPUnauthorizedError) {
+            const redirectUrl = error.data?.redirectUrl;
+            console.error(error.message);
+            this.router.navigate(['/401'], { queryParams: redirectUrl ? { redirectUrl: redirectUrl } : null });
+        }
+        else if (error instanceof AXPUnauthenticatedError) {
+            console.error(error.message);
+            const redirectUrl = error.data?.redirectUrl;
+            this.router.navigate(['/auth/login'], { queryParams: redirectUrl ? { redirectUrl: redirectUrl } : null });
+        }
+        else {
+            if (isDevMode()) {
+                next(error); // Pass the error to the next handler
+            }
+            else {
+                next(error); // maybe we need a error page
+            }
+        }
+        this.layoutService.setNavigationLoading(false);
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthErrorHandler, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthErrorHandler }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthErrorHandler, decorators: [{
+            type: Injectable
+        }] });
+
+/**
+ * Guard for login page. Clears incomplete sessions so a prior OAuth attempt
+ * does not leak into the next username/password sign-in.
+ */
+const canActivateLogin = async (route, state) => {
+    const sessionService = inject(AXPSessionService);
+    const session = sessionService.getSessionData();
+    if (session?.user?.id && (!session.tenant?.id || !session.application?.id)) {
+        await sessionService.signout();
+    }
+    return true;
+};
+
+var AXMAuthenticationTypes;
+(function (AXMAuthenticationTypes) {
+    AXMAuthenticationTypes[AXMAuthenticationTypes["UsernamePassword"] = 0] = "UsernamePassword";
+    AXMAuthenticationTypes[AXMAuthenticationTypes["UsernameEmailPassword"] = 1] = "UsernameEmailPassword";
+    AXMAuthenticationTypes[AXMAuthenticationTypes["EmailPassword"] = 2] = "EmailPassword";
+    AXMAuthenticationTypes[AXMAuthenticationTypes["MobilePassword"] = 3] = "MobilePassword";
+    AXMAuthenticationTypes[AXMAuthenticationTypes["EmailCode"] = 4] = "EmailCode";
+    AXMAuthenticationTypes[AXMAuthenticationTypes["MobileCode"] = 5] = "MobileCode";
+})(AXMAuthenticationTypes || (AXMAuthenticationTypes = {}));
+const AXM_AUTH_CONFIG_TOKEN = new InjectionToken('app-module-auth-config', {
+    providedIn: 'root',
+    factory: () => {
+        return AXMDefaultAuthConfigs;
+    },
+});
+const AXMDefaultAuthConfigs = {
+    type: AXMAuthenticationTypes.UsernamePassword,
+    // defaultStrategyName:'oidc',
+    // حذف authConfig از اینجا چون از environment خوانده می‌شود
+    defaultStrategyName: 'user-pass',
+};
+function configAuthModule(config = AXMDefaultAuthConfigs) {
+    return { ...AXMDefaultAuthConfigs, ...config };
+}
+/**
+ * Injection token for login page guard.
+ * Apps can provide their own custom guard by providing this token.
+ * If not provided, the default guard (canActivateLogin) will be used.
+ */
+const AXM_LOGIN_GUARD_TOKEN = new InjectionToken('AXM_LOGIN_GUARD_TOKEN', {
+    providedIn: 'root',
+    factory: () => canActivateLogin,
+});
+//#endregion
+
+//#region ---- Types ----
+const AXPAuthPasswordComplexityLevels = {
+    Low: 'Low',
+    Medium: 'Medium',
+    High: 'High',
+};
+//#endregion
+//#region ---- Policy ----
+const PASSWORD_COMPLEXITY_POLICIES = {
+    [AXPAuthPasswordComplexityLevels.Low]: {
+        minLength: 6,
+        requireUppercase: false,
+        requireLowercase: false,
+        requireDigit: false,
+        requireSpecialCharacter: false,
+    },
+    [AXPAuthPasswordComplexityLevels.Medium]: {
+        minLength: 8,
+        requireUppercase: true,
+        requireLowercase: true,
+        requireDigit: true,
+        requireSpecialCharacter: false,
+    },
+    [AXPAuthPasswordComplexityLevels.High]: {
+        minLength: 12,
+        requireUppercase: true,
+        requireLowercase: true,
+        requireDigit: true,
+        requireSpecialCharacter: true,
+    },
+};
+const SPECIAL_CHARACTER_PATTERN = /[^a-zA-Z0-9]/;
+//#endregion
+//#region ---- Utility Methods ----
+/**
+ * Normalizes tenant password complexity setting values to a supported level.
+ */
+function normalizePasswordComplexityLevel(value) {
+    if (isNil(value)) {
+        return AXPAuthPasswordComplexityLevels.Medium;
+    }
+    const normalized = coerceUnknownToTrimmedString(value).toLowerCase();
+    if (normalized === 'low') {
+        return AXPAuthPasswordComplexityLevels.Low;
+    }
+    if (normalized === 'medium') {
+        return AXPAuthPasswordComplexityLevels.Medium;
+    }
+    if (normalized === 'high') {
+        return AXPAuthPasswordComplexityLevels.High;
+    }
+    return AXPAuthPasswordComplexityLevels.Medium;
+}
+/**
+ * Returns the validation policy for the given complexity level.
+ */
+function getPasswordComplexityPolicy(level) {
+    return PASSWORD_COMPLEXITY_POLICIES[level];
+}
+/**
+ * Validates a password against the configured complexity policy.
+ */
+function validatePasswordAgainstComplexity(password, level) {
+    const policy = getPasswordComplexityPolicy(level);
+    if (password.length < policy.minLength) {
+        return false;
+    }
+    if (policy.requireUppercase && !/[A-Z]/.test(password)) {
+        return false;
+    }
+    if (policy.requireLowercase && !/[a-z]/.test(password)) {
+        return false;
+    }
+    if (policy.requireDigit && !/\d/.test(password)) {
+        return false;
+    }
+    if (policy.requireSpecialCharacter && !SPECIAL_CHARACTER_PATTERN.test(password)) {
+        return false;
+    }
+    return true;
+}
+/**
+ * Resolves the i18n key for the password complexity hint shown under the new password field.
+ */
+function getPasswordComplexityHintKey(level) {
+    return `@auth:profile-page.commands.change-password.complexity.hint.${level.toLowerCase()}`;
+}
+/**
+ * Resolves the i18n key for the password complexity validation error message.
+ */
+function getPasswordComplexityValidationMessageKey(level) {
+    return `@auth:profile-page.commands.change-password.complexity.validation.${level.toLowerCase()}`;
+}
+//#endregion
+
+//#region ---- Password Complexity Service ----
+/**
+ * Resolves tenant password complexity policy for auth flows (change password, registration, etc.).
+ * Uses tenant scope explicitly so inherited user-scope snapshots do not override tenant policy.
+ */
+class AXPAuthPasswordComplexityService {
+    constructor() {
+        //#region ---- Services & Dependencies ----
+        this.settingsService = inject(AXPSettingsService);
+    }
+    //#endregion
+    //#region ---- Public Methods ----
+    async getLevel() {
+        const tenantValue = await this.settingsService
+            .scope(AXPPlatformScope.Tenant)
+            .get(AXPAuthSettings.PasswordComplexity);
+        if (tenantValue !== undefined && tenantValue !== null) {
+            return normalizePasswordComplexityLevel(tenantValue);
+        }
+        const effectiveValue = await this.settingsService.get(AXPAuthSettings.PasswordComplexity);
+        return normalizePasswordComplexityLevel(effectiveValue);
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPAuthPasswordComplexityService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPAuthPasswordComplexityService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPAuthPasswordComplexityService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }] });
+
+/**
+ * Validates passwords against tenant-configured complexity levels (Low, Medium, High).
+ */
+class PasswordComplexityValidationRule {
+    constructor() {
+        //#region ---- Services & Dependencies ----
+        this.passwordComplexityService = inject(AXPAuthPasswordComplexityService);
+    }
+    //#endregion
+    get name() {
+        return 'password-complexity';
+    }
+    async validate(value, options) {
+        const complexity = await this.resolveComplexity(options?.complexity);
+        const message = options?.message ?? '';
+        if (!isString(value) || value.length === 0) {
+            return {
+                rule: this.name,
+                result: false,
+                message,
+                value,
+            };
+        }
+        const isValid = validatePasswordAgainstComplexity(value, complexity);
+        return {
+            rule: this.name,
+            result: isValid,
+            message: isValid ? '' : message,
+            value,
+        };
+    }
+    //#endregion
+    //#region ---- Utility Methods ----
+    async resolveComplexity(override) {
+        if (override !== undefined && override !== null && String(override).trim() !== '') {
+            return normalizePasswordComplexityLevel(override);
+        }
+        return this.passwordComplexityService.getLevel();
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: PasswordComplexityValidationRule, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: PasswordComplexityValidationRule }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: PasswordComplexityValidationRule, decorators: [{
+            type: Injectable
+        }] });
+
+//#region ---- Auth Validation Rules Module ----
+class AXMAuthValidationRulesModule {
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthValidationRulesModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule }); }
+    static { this.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthValidationRulesModule, imports: [i1.AXValidationModule] }); }
+    static { this.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthValidationRulesModule, imports: [AXValidationModule.forChild({
+                rules: [PasswordComplexityValidationRule],
+            })] }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthValidationRulesModule, decorators: [{
+            type: NgModule,
+            args: [{
+                    imports: [
+                        AXValidationModule.forChild({
+                            rules: [PasswordComplexityValidationRule],
+                        }),
+                    ],
+                }]
+        }] });
+
+const routes = [
+    {
+        path: 'auth',
+        children: [
+            {
+                path: '',
+                pathMatch: 'full',
+                redirectTo: 'login',
+            },
+            {
+                path: '',
+                loadComponent: () => import('./acorex-platform-module-auth-client-master.layout-DpdD9kgk.mjs').then((c) => c.AXPAuthMasterLayoutComponent),
+                loadChildren: () => import('./acorex-platform-module-auth-client-login.module-DYtNYzF6.mjs').then((c) => c.AXPSignInModule),
+            },
+            {
+                path: '',
+                loadComponent: () => import('./acorex-platform-module-auth-client-master.layout-DpdD9kgk.mjs').then((c) => c.AXPAuthMasterLayoutComponent),
+                loadChildren: () => import('./acorex-platform-module-auth-client-two-factor.module-BJqdeuAz.mjs').then((c) => c.AXPTwoFactorModule),
+            },
+            {
+                path: '',
+                loadComponent: () => import('./acorex-platform-module-auth-client-master.layout-DpdD9kgk.mjs').then((c) => c.AXPAuthMasterLayoutComponent),
+                loadChildren: () => import('./acorex-platform-module-auth-client-routes-REjaWcqY.mjs').then((c) => c),
+            },
+            {
+                path: 'axp-oauth-callback',
+                loadComponent: () => import('./acorex-platform-module-auth-client-oauth-callback.component-BspBH4Ul.mjs').then((c) => c.AXPOAuthCallbackComponent),
+            },
+            {
+                path: 'account',
+                loadComponent: () => import('./acorex-platform-module-auth-client-blank.layout-BRGgntib.mjs').then((c) => c.AXPAuthBlankLayoutComponent),
+                loadChildren: () => Promise.resolve().then(function () { return account_module; }).then((c) => c.AXPAccountModule),
+            },
+            {
+                path: '',
+                loadComponent: () => import('./acorex-platform-module-auth-client-master.layout-DpdD9kgk.mjs').then((c) => c.AXPAuthMasterLayoutComponent),
+                loadChildren: () => import('./acorex-platform-module-auth-client-register.module-DXm6AQpo.mjs').then((c) => c.AXPRegisterModule),
+            },
+        ],
+    },
+];
+
+class AXPAppChooserListComponent {
+    //#endregion
+    //#region ---- Computed Properties ----
+    isApplicationSelected(application) {
+        return application.id === this.sessionService.application?.id;
+    }
+    applicationLogoKey(application) {
+        return axpApplicationLogoKey(application.id);
+    }
+    //#endregion
+    //#region ---- Constructor ----
+    constructor() {
+        this.entityService = inject(AXPEntityService);
+        //#region ---- Services & Dependencies ----
+        this.sessionService = inject(AXPSessionService);
+        this.homePageService = inject(AXPHomePageService);
+        this.authStrategyRegistry = inject(AXPAuthStrategyRegistryService);
+        this.logoRegistration = inject(AXPEntityLogoRegistrationService);
+        this.applicationService = this.entityService.withEntity(RootConfig$2.module.name, RootConfig$2.entities.application.name).data();
+        this.strategyName = this.sessionService.getSessionData()?.strategy;
+        this.strategy = this.authStrategyRegistry.get(this.strategyName);
+        //#endregion
+        //#region ---- Inputs & Outputs ----
+        this.simple = input(false, ...(ngDevMode ? [{ debugName: "simple" }] : /* istanbul ignore next */ []));
+        this.applicationChosen = output();
+        //#endregion
+        //#region ---- View References ----
+        this.listNav = viewChild(AXListNavigationDirective, ...(ngDevMode ? [{ debugName: "listNav" }] : /* istanbul ignore next */ []));
+        this.listItems = viewChildren(AXListNavigationItemDirective, ...(ngDevMode ? [{ debugName: "listItems" }] : /* istanbul ignore next */ []));
+        //#endregion
+        //#region ---- State ----
+        this.isLoading = signal(true, ...(ngDevMode ? [{ debugName: "isLoading" }] : /* istanbul ignore next */ []));
+        this.allApplications = signal([], ...(ngDevMode ? [{ debugName: "allApplications" }] : /* istanbul ignore next */ []));
+        this.useSelectBox = computed(() => this.allApplications().length > 3, ...(ngDevMode ? [{ debugName: "useSelectBox" }] : /* istanbul ignore next */ []));
+        this.selectedApplication = signal(null, ...(ngDevMode ? [{ debugName: "selectedApplication" }] : /* istanbul ignore next */ []));
+        this.isSelectBoxOpen = signal(false, ...(ngDevMode ? [{ debugName: "isSelectBoxOpen" }] : /* istanbul ignore next */ []));
+        this.canApply = computed(() => !!this.selectedApplication(), ...(ngDevMode ? [{ debugName: "canApply" }] : /* istanbul ignore next */ []));
+        this.skeletonItems = [1, 2, 3];
+        effect(() => {
+            if (!this.isLoading() && !this.useSelectBox() && this.allApplications().length > 0) {
+                queueMicrotask(() => this.focusFirstListItem());
+            }
+        });
+    }
+    //#endregion
+    //#region ---- Lifecycle Methods ----
+    ngOnInit() {
+        this.sessionService.applications$.pipe(first$1()).subscribe((applications) => {
+            this.logoRegistration.registerApplications(applications);
+            this.allApplications.set(applications);
+            if (applications.length > 0) {
+                this.selectedApplication.set(applications[0]);
+            }
+            this.isLoading.set(false);
+        });
+    }
+    //#endregion
+    //#region ---- UI Handlers ----
+    handleApplicationSelect(event) {
+        if (!event.isUserInteraction) {
+            return;
+        }
+        this.selectedApplication.set(event.component.selectedItems[0] ?? null);
+    }
+    handleListItemKeyDown(event, application) {
+        if (event.key === 'Enter' || event.key === ' ') {
+            event.preventDefault();
+            void this.chooseApplication(application);
+        }
+    }
+    handleSelectBoxKeyDown(event) {
+        if (!(event instanceof KeyboardEvent)) {
+            return;
+        }
+        if (event.key !== 'Enter' && event.key !== 'NumpadEnter') {
+            return;
+        }
+        if (this.isSelectBoxOpen()) {
+            return;
+        }
+        event.preventDefault();
+        event.stopPropagation();
+        if (this.canApply()) {
+            this.applySelection();
+        }
+    }
+    applySelection() {
+        const application = this.selectedApplication();
+        if (application) {
+            void this.chooseApplication(application);
+        }
+    }
+    async chooseApplication(item) {
+        const tenantId = this.sessionService.tenant?.id || '';
+        if (!tenantId) {
+            throw new Error('Tenant ID is missing. Cannot choose application.');
+        }
+        const fullApplication = await this.applicationService.byKey(item.id);
+        if (!fullApplication) {
+            throw new Error(`Application not found: ${item.id}`);
+        }
+        let selectedEdition = item.edition;
+        if (!selectedEdition && fullApplication.editions && fullApplication.editions.length > 0) {
+            selectedEdition = {
+                id: fullApplication.editions[0].id,
+                title: fullApplication.editions[0].title,
+                description: fullApplication.editions[0].description,
+            };
+        }
+        const applicationWithEdition = {
+            ...item,
+            version: fullApplication.version || item.version,
+            edition: selectedEdition,
+        };
+        if (this.strategy && typeof this.strategy.updateToken === 'function') {
+            const updateContext = {
+                application: applicationWithEdition,
+                user: this.sessionService.user,
+                tenant: this.sessionService.tenant,
+            };
+            await this.sessionService.updateToken(updateContext);
+        }
+        this.applicationChosen.emit();
+        await this.homePageService.navigateTo();
+    }
+    //#endregion
+    //#region ---- Utility Methods ----
+    focusFirstListItem() {
+        const nav = this.listNav();
+        const items = this.listItems();
+        const applications = this.allApplications();
+        const currentIndex = applications.findIndex((application) => this.isApplicationSelected(application));
+        if (nav && items.length > 0) {
+            nav.navigateTo(items[currentIndex >= 0 ? currentIndex : 0]);
+        }
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPAppChooserListComponent, deps: [], target: i0.ɵɵFactoryTarget.Component }); }
+    static { this.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.9", type: AXPAppChooserListComponent, isStandalone: true, selector: "axp-app-chooser-list", inputs: { simple: { classPropertyName: "simple", publicName: "simple", isSignal: true, isRequired: false, transformFunction: null } }, outputs: { applicationChosen: "applicationChosen" }, viewQueries: [{ propertyName: "listNav", first: true, predicate: AXListNavigationDirective, descendants: true, isSignal: true }, { propertyName: "listItems", predicate: AXListNavigationItemDirective, descendants: true, isSignal: true }], ngImport: i0, template: "@if (isLoading()) {\n  <div class=\"w-full flex flex-col gap-3\">\n    @for (item of skeletonItems; track item) {\n      <div class=\"flex gap-2 items-center p-2\">\n        <ax-skeleton [animated]=\"true\" class=\"w-12 h-12 rounded-full shrink-0\"></ax-skeleton>\n        <ax-skeleton [animated]=\"true\" class=\"flex-1 h-6 rounded-md\"></ax-skeleton>\n      </div>\n    }\n  </div>\n} @else if (useSelectBox()) {\n  <div class=\"w-full flex flex-col gap-4\" (keydown.capture)=\"handleSelectBoxKeyDown($event)\">\n    <ax-select-box\n      class=\"w-full\"\n      [dataSource]=\"allApplications()\"\n      textField=\"title\"\n      valueField=\"id\"\n      [itemHeight]=\"56\"\n      [value]=\"selectedApplication()\"\n      [placeholder]=\"('@auth:application-chooser.select-placeholder' | translate | async) ?? ''\"\n      [itemTemplate]=\"applicationItemTemplate\"\n      (onOpened)=\"isSelectBoxOpen.set(true)\"\n      (onClosed)=\"isSelectBoxOpen.set(false)\"\n      (onValueChanged)=\"handleApplicationSelect($event)\"\n    >\n      <ax-search-box look=\"fill\"></ax-search-box>\n    </ax-select-box>\n    <ax-button\n      class=\"w-full\"\n      color=\"primary\"\n      [disabled]=\"!canApply()\"\n      [text]=\"('@general:actions.apply.title' | translate | async) ?? ''\"\n      (onClick)=\"applySelection()\"\n    ></ax-button>\n  </div>\n} @else {\n  <div\n    axListNavigation\n    #listNav=\"axListNavigation\"\n    class=\"w-full overflow-auto max-h-[300px] flex flex-col gap-1\"\n    role=\"listbox\"\n  >\n    @for (application of allApplications(); track application.id) {\n      <div\n        axListNavigationItem\n        #navItem=\"axListNavigationItem\"\n        tabindex=\"0\"\n        role=\"option\"\n        [attr.aria-selected]=\"isApplicationSelected(application)\"\n        class=\"flex gap-2 items-center p-2 cursor-pointer rounded-md transition-colors outline-none hover:bg-primary-lightest hover:dark:bg-primary-dark\"\n        [class.bg-primary-lighter]=\"isApplicationSelected(application)\"\n        [class.dark:bg-primary-darker]=\"isApplicationSelected(application)\"\n        [class.text-primary-on-lighter]=\"isApplicationSelected(application)\"\n        [class.dark:text-primary-on-darker]=\"isApplicationSelected(application)\"\n        [class.ring-2]=\"navItem.isActive()\"\n        [class.ring-primary]=\"navItem.isActive()\"\n        (click)=\"chooseApplication(application)\"\n        (keydown)=\"handleListItemKeyDown($event, application)\"\n      >\n        <div class=\"flex flex-1 gap-2 items-center min-w-0\">\n          <div\n            class=\"shrink-0 flex justify-center items-center rounded-full bg-neutral-100\"\n            [class.w-10]=\"simple()\"\n            [class.h-10]=\"simple()\"\n            [class.w-12]=\"!simple()\"\n            [class.h-12]=\"!simple()\"\n          >\n            <axp-logo\n              [logoKey]=\"applicationLogoKey(application)\"\n              appearance=\"colored\"\n              [size]=\"40\"\n              [attr.alt]=\"application.title\"\n              class=\"flex! items-center justify-center text-sm! bg-neutral-200 dark:bg-neutral-800 rounded-full\"\n              [class.w-8]=\"simple()\"\n              [class.h-8]=\"simple()\"\n              [class.w-10]=\"!simple()\"\n              [class.h-10]=\"!simple()\"\n            ></axp-logo>\n          </div>\n          <span class=\"flex-1 truncate text-start md:text-base text-sm\">{{ application.title }}</span>\n          @if (application.edition?.title) {\n            <span class=\"text-muted text-xs shrink-0\">{{ application.edition?.title }}</span>\n          }\n        </div>\n      </div>\n    }\n  </div>\n}\n\n<ng-template #applicationItemTemplate let-item>\n  <div class=\"flex gap-2 items-center p-2\">\n    <div\n      class=\"w-10 h-10 flex justify-center items-center rounded-full bg-neutral-100 shrink-0\"\n    >\n      <axp-logo\n        [logoKey]=\"applicationLogoKey(item.data)\"\n        appearance=\"colored\"\n        [size]=\"32\"\n        [attr.alt]=\"item.data.title\"\n        class=\"flex! items-center justify-center text-sm! w-8 h-8 bg-neutral-200 rounded-full\"\n      ></axp-logo>\n    </div>\n    <span class=\"flex-1 text-start md:text-base text-sm\">{{ item.data.title }}</span>\n    @if (item.data.edition?.title) {\n      <span class=\"text-muted text-xs\">{{ item.data.edition.title }}</span>\n    }\n  </div>\n</ng-template>\n", dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: AXButtonModule }, { kind: "component", type: i1$1.AXButtonComponent, selector: "ax-button", inputs: ["disabled", "size", "tabIndex", "color", "look", "text", "toggleable", "selected", "iconOnly", "type", "loadingText"], outputs: ["onBlur", "onFocus", "onClick", "selectedChange", "toggleableChange", "lookChange", "colorChange", "disabledChange", "loadingTextChange"] }, { kind: "ngmodule", type: AXDecoratorModule }, { kind: "ngmodule", type: AXSkeletonModule }, { kind: "component", type: i2.AXSkeletonComponent, selector: "ax-skeleton", inputs: ["animated"] }, { kind: "ngmodule", type: AXSelectBoxModule }, { kind: "component", type: i3.AXSelectBoxComponent, selector: "ax-select-box", inputs: ["disabled", "readonly", "tabIndex", "placeholder", "minValue", "maxValue", "value", "state", "name", "id", "type", "look", "multiple", "valueField", "textField", "disabledField", "textTemplate", "selectedItems", "isItemTruncated", "showItemTooltip", "itemHeight", "maxVisibleItems", "dataSource", "minRecordsForSearch", "caption", "itemTemplate", "selectedTemplate", "emptyTemplate", "loadingTemplate", "dropdownWidth", "searchBoxAutoFocus"], outputs: ["valueChange", "stateChange", "onValueChanged", "onBlur", "onFocus", "readonlyChange", "disabledChange", "onOpened", "onClosed", "onItemSelected", "onItemClick"] }, { kind: "ngmodule", type: AXSearchBoxModule }, { kind: "component", type: i4.AXSearchBoxComponent, selector: "ax-search-box", inputs: ["disabled", "readonly", "tabIndex", "placeholder", "value", "state", "name", "id", "look", "class", "delayTime", "type", "autoSearch"], outputs: ["valueChange", "stateChange", "onValueChanged", "onBlur", "onFocus", "readonlyChange", "disabledChange", "onKeyDown", "onKeyUp", "onKeyPress"] }, { kind: "ngmodule", type: AXListNavigationModule }, { kind: "directive", type: i5.AXListNavigationDirective, selector: "[axListNavigation]", inputs: ["orientation"], outputs: ["onNavigationChanged", "onKeypress"], exportAs: ["axListNavigation"] }, { kind: "directive", type: i5.AXListNavigationItemDirective, selector: "[axListNavigationItem]", outputs: ["onKeypress"], exportAs: ["axListNavigationItem"] }, { kind: "ngmodule", type: AXTranslationModule }, { kind: "component", type: AXPLogoComponent, selector: "axp-logo", inputs: ["logoKey", "appearance", "size", "format"] }, { kind: "pipe", type: i4$1.AsyncPipe, name: "async" }, { kind: "pipe", type: i2$1.AXTranslatorPipe, name: "translate" }], changeDetection: i0.ChangeDetectionStrategy.OnPush }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPAppChooserListComponent, decorators: [{
+            type: Component,
+            args: [{ selector: 'axp-app-chooser-list', changeDetection: ChangeDetectionStrategy.OnPush, imports: [
+                        CommonModule,
+                        AXButtonModule,
+                        AXDecoratorModule,
+                        AXSkeletonModule,
+                        AXSelectBoxModule,
+                        AXSearchBoxModule,
+                        AXListNavigationModule,
+                        AXTranslationModule,
+                        AXPLogoComponent,
+                    ], template: "@if (isLoading()) {\n  <div class=\"w-full flex flex-col gap-3\">\n    @for (item of skeletonItems; track item) {\n      <div class=\"flex gap-2 items-center p-2\">\n        <ax-skeleton [animated]=\"true\" class=\"w-12 h-12 rounded-full shrink-0\"></ax-skeleton>\n        <ax-skeleton [animated]=\"true\" class=\"flex-1 h-6 rounded-md\"></ax-skeleton>\n      </div>\n    }\n  </div>\n} @else if (useSelectBox()) {\n  <div class=\"w-full flex flex-col gap-4\" (keydown.capture)=\"handleSelectBoxKeyDown($event)\">\n    <ax-select-box\n      class=\"w-full\"\n      [dataSource]=\"allApplications()\"\n      textField=\"title\"\n      valueField=\"id\"\n      [itemHeight]=\"56\"\n      [value]=\"selectedApplication()\"\n      [placeholder]=\"('@auth:application-chooser.select-placeholder' | translate | async) ?? ''\"\n      [itemTemplate]=\"applicationItemTemplate\"\n      (onOpened)=\"isSelectBoxOpen.set(true)\"\n      (onClosed)=\"isSelectBoxOpen.set(false)\"\n      (onValueChanged)=\"handleApplicationSelect($event)\"\n    >\n      <ax-search-box look=\"fill\"></ax-search-box>\n    </ax-select-box>\n    <ax-button\n      class=\"w-full\"\n      color=\"primary\"\n      [disabled]=\"!canApply()\"\n      [text]=\"('@general:actions.apply.title' | translate | async) ?? ''\"\n      (onClick)=\"applySelection()\"\n    ></ax-button>\n  </div>\n} @else {\n  <div\n    axListNavigation\n    #listNav=\"axListNavigation\"\n    class=\"w-full overflow-auto max-h-[300px] flex flex-col gap-1\"\n    role=\"listbox\"\n  >\n    @for (application of allApplications(); track application.id) {\n      <div\n        axListNavigationItem\n        #navItem=\"axListNavigationItem\"\n        tabindex=\"0\"\n        role=\"option\"\n        [attr.aria-selected]=\"isApplicationSelected(application)\"\n        class=\"flex gap-2 items-center p-2 cursor-pointer rounded-md transition-colors outline-none hover:bg-primary-lightest hover:dark:bg-primary-dark\"\n        [class.bg-primary-lighter]=\"isApplicationSelected(application)\"\n        [class.dark:bg-primary-darker]=\"isApplicationSelected(application)\"\n        [class.text-primary-on-lighter]=\"isApplicationSelected(application)\"\n        [class.dark:text-primary-on-darker]=\"isApplicationSelected(application)\"\n        [class.ring-2]=\"navItem.isActive()\"\n        [class.ring-primary]=\"navItem.isActive()\"\n        (click)=\"chooseApplication(application)\"\n        (keydown)=\"handleListItemKeyDown($event, application)\"\n      >\n        <div class=\"flex flex-1 gap-2 items-center min-w-0\">\n          <div\n            class=\"shrink-0 flex justify-center items-center rounded-full bg-neutral-100\"\n            [class.w-10]=\"simple()\"\n            [class.h-10]=\"simple()\"\n            [class.w-12]=\"!simple()\"\n            [class.h-12]=\"!simple()\"\n          >\n            <axp-logo\n              [logoKey]=\"applicationLogoKey(application)\"\n              appearance=\"colored\"\n              [size]=\"40\"\n              [attr.alt]=\"application.title\"\n              class=\"flex! items-center justify-center text-sm! bg-neutral-200 dark:bg-neutral-800 rounded-full\"\n              [class.w-8]=\"simple()\"\n              [class.h-8]=\"simple()\"\n              [class.w-10]=\"!simple()\"\n              [class.h-10]=\"!simple()\"\n            ></axp-logo>\n          </div>\n          <span class=\"flex-1 truncate text-start md:text-base text-sm\">{{ application.title }}</span>\n          @if (application.edition?.title) {\n            <span class=\"text-muted text-xs shrink-0\">{{ application.edition?.title }}</span>\n          }\n        </div>\n      </div>\n    }\n  </div>\n}\n\n<ng-template #applicationItemTemplate let-item>\n  <div class=\"flex gap-2 items-center p-2\">\n    <div\n      class=\"w-10 h-10 flex justify-center items-center rounded-full bg-neutral-100 shrink-0\"\n    >\n      <axp-logo\n        [logoKey]=\"applicationLogoKey(item.data)\"\n        appearance=\"colored\"\n        [size]=\"32\"\n        [attr.alt]=\"item.data.title\"\n        class=\"flex! items-center justify-center text-sm! w-8 h-8 bg-neutral-200 rounded-full\"\n      ></axp-logo>\n    </div>\n    <span class=\"flex-1 text-start md:text-base text-sm\">{{ item.data.title }}</span>\n    @if (item.data.edition?.title) {\n      <span class=\"text-muted text-xs\">{{ item.data.edition.title }}</span>\n    }\n  </div>\n</ng-template>\n" }]
+        }], ctorParameters: () => [], propDecorators: { simple: [{ type: i0.Input, args: [{ isSignal: true, alias: "simple", required: false }] }], applicationChosen: [{ type: i0.Output, args: ["applicationChosen"] }], listNav: [{ type: i0.ViewChild, args: [i0.forwardRef(() => AXListNavigationDirective), { isSignal: true }] }], listItems: [{ type: i0.ViewChildren, args: [i0.forwardRef(() => AXListNavigationItemDirective), { isSignal: true }] }] } });
+
+class AXMAppChooserSlotComponent {
+    constructor() {
+        this.sessionService = inject(AXPSessionService);
+        this.applications$ = this.sessionService.applications$;
+        this.appPopover = viewChild('appPopover', ...(ngDevMode ? [{ debugName: "appPopover" }] : /* istanbul ignore next */ []));
+    }
+    closePopover() {
+        this.appPopover()?.close();
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAppChooserSlotComponent, deps: [], target: i0.ɵɵFactoryTarget.Component }); }
+    static { this.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.9", type: AXMAppChooserSlotComponent, isStandalone: true, selector: "ng-component", viewQueries: [{ propertyName: "appPopover", first: true, predicate: ["appPopover"], descendants: true, isSignal: true }], ngImport: i0, template: "@if (((applications$ | async)?.length ?? 0) > 1) {\n  <ax-button color=\"primary\" #appChooser>\n    <ax-icon class=\"fa-regular fa-grid-2\"> </ax-icon>\n  </ax-button>\n  <ax-popover [target]=\"appChooser\" [openOn]=\"'toggle'\" [closeOn]=\"'clickOut'\" #appPopover>\n    <div class=\"bg-lightest border overflow-hidden rounded-md shadow-md w-full min-w-64 p-1\">\n      <axp-app-chooser-list [simple]=\"true\" (applicationChosen)=\"closePopover()\"></axp-app-chooser-list>\n    </div>\n  </ax-popover>\n}\n", dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: AXButtonModule }, { kind: "component", type: i1$1.AXButtonComponent, selector: "ax-button", inputs: ["disabled", "size", "tabIndex", "color", "look", "text", "toggleable", "selected", "iconOnly", "type", "loadingText"], outputs: ["onBlur", "onFocus", "onClick", "selectedChange", "toggleableChange", "lookChange", "colorChange", "disabledChange", "loadingTextChange"] }, { kind: "ngmodule", type: AXPopoverModule }, { kind: "component", type: i2$2.AXPopoverComponent, selector: "ax-popover", inputs: ["width", "disablePanelClass", "disabled", "offsetX", "offsetY", "target", "placement", "content", "openOn", "closeOn", "hasBackdrop", "openAfter", "closeAfter", "closeOnScroll", "backdropClass", "panelClass", "adaptivityEnabled"], outputs: ["onOpened", "onClosed"] }, { kind: "ngmodule", type: AXDecoratorModule }, { kind: "component", type: i3$1.AXDecoratorIconComponent, selector: "ax-icon", inputs: ["icon"] }, { kind: "component", type: AXPAppChooserListComponent, selector: "axp-app-chooser-list", inputs: ["simple"], outputs: ["applicationChosen"] }, { kind: "pipe", type: i4$1.AsyncPipe, name: "async" }] }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAppChooserSlotComponent, decorators: [{
+            type: Component,
+            args: [{ imports: [CommonModule, AXButtonModule, AXPopoverModule, AXDecoratorModule, AXPAppChooserListComponent], template: "@if (((applications$ | async)?.length ?? 0) > 1) {\n  <ax-button color=\"primary\" #appChooser>\n    <ax-icon class=\"fa-regular fa-grid-2\"> </ax-icon>\n  </ax-button>\n  <ax-popover [target]=\"appChooser\" [openOn]=\"'toggle'\" [closeOn]=\"'clickOut'\" #appPopover>\n    <div class=\"bg-lightest border overflow-hidden rounded-md shadow-md w-full min-w-64 p-1\">\n      <axp-app-chooser-list [simple]=\"true\" (applicationChosen)=\"closePopover()\"></axp-app-chooser-list>\n    </div>\n  </ax-popover>\n}\n" }]
+        }], propDecorators: { appPopover: [{ type: i0.ViewChild, args: ['appPopover', { isSignal: true }] }] } });
+
+class AXPTenantChooserListComponent {
+    tenantLogoKey(tenant) {
+        return axpTenantLogoKey(tenant.id);
+    }
+    //#endregion
+    //#region ---- Computed Properties ----
+    isTenantSelected(tenant) {
+        return tenant.id === this.sessionService.tenant?.id;
+    }
+    //#endregion
+    //#region ---- Constructor ----
+    constructor() {
+        //#region ---- Services & Dependencies ----
+        this.sessionService = inject(AXPSessionService);
+        this.authStrategyRegistry = inject(AXPAuthStrategyRegistryService);
+        this.logoRegistration = inject(AXPEntityLogoRegistrationService);
+        this.router = inject(Router);
+        this.strategyName = this.sessionService.getSessionData()?.strategy;
+        this.strategy = this.authStrategyRegistry.get(this.strategyName);
+        //#endregion
+        //#region ---- Inputs & Outputs ----
+        this.simple = input(false, ...(ngDevMode ? [{ debugName: "simple" }] : /* istanbul ignore next */ []));
+        this.tenantChosen = output();
+        //#endregion
+        //#region ---- View References ----
+        this.listNav = viewChild(AXListNavigationDirective, ...(ngDevMode ? [{ debugName: "listNav" }] : /* istanbul ignore next */ []));
+        this.listItems = viewChildren(AXListNavigationItemDirective, ...(ngDevMode ? [{ debugName: "listItems" }] : /* istanbul ignore next */ []));
+        //#endregion
+        //#region ---- State ----
+        this.isLoading = signal(true, ...(ngDevMode ? [{ debugName: "isLoading" }] : /* istanbul ignore next */ []));
+        this.allTenants = signal([], ...(ngDevMode ? [{ debugName: "allTenants" }] : /* istanbul ignore next */ []));
+        this.searchValue = signal('', ...(ngDevMode ? [{ debugName: "searchValue" }] : /* istanbul ignore next */ []));
+        this.showAll = signal(false, ...(ngDevMode ? [{ debugName: "showAll" }] : /* istanbul ignore next */ []));
+        this.useSelectBox = computed(() => this.allTenants().length > 3, ...(ngDevMode ? [{ debugName: "useSelectBox" }] : /* istanbul ignore next */ []));
+        this.selectedTenant = signal(null, ...(ngDevMode ? [{ debugName: "selectedTenant" }] : /* istanbul ignore next */ []));
+        this.isSelectBoxOpen = signal(false, ...(ngDevMode ? [{ debugName: "isSelectBoxOpen" }] : /* istanbul ignore next */ []));
+        this.canApply = computed(() => !!this.selectedTenant(), ...(ngDevMode ? [{ debugName: "canApply" }] : /* istanbul ignore next */ []));
+        this.skeletonItems = [1, 2, 3];
+        /** Tenants shown in the list (respects search and view-all toggle). */
+        this.displayedTenants = computed(() => {
+            const tenants = this.filterTenants(this.allTenants());
+            if (this.showAll() || tenants.length <= 4) {
+                return tenants;
+            }
+            return tenants.slice(0, 4);
+        }, ...(ngDevMode ? [{ debugName: "displayedTenants" }] : /* istanbul ignore next */ []));
+        this.showSearchAndViewAll = computed(() => this.allTenants().length > 4, ...(ngDevMode ? [{ debugName: "showSearchAndViewAll" }] : /* istanbul ignore next */ []));
+        effect(() => {
+            if (!this.isLoading() && !this.useSelectBox() && !this.simple() && this.allTenants().length > 0) {
+                queueMicrotask(() => this.focusFirstListItem());
+            }
+        });
+    }
+    //#endregion
+    //#region ---- Lifecycle Methods ----
+    ngOnInit() {
+        this.sessionService.tenants$.pipe(first$1()).subscribe((tenants) => {
+            this.logoRegistration.registerTenants(tenants);
+            this.allTenants.set(tenants);
+            if (tenants.length > 0) {
+                this.selectedTenant.set(tenants[0]);
+            }
+            this.isLoading.set(false);
+        });
+    }
+    //#endregion
+    //#region ---- UI Handlers ----
+    filterTenants(tenants) {
+        const query = this.searchValue().toLowerCase();
+        return tenants.filter((tenant) => tenant.title.toLowerCase().includes(query));
+    }
+    handleSearch(event) {
+        if (event !== undefined) {
+            this.searchValue.set(event);
+        }
+    }
+    showAllTenants() {
+        this.showAll.update((value) => !value);
+    }
+    handleTenantSelect(event) {
+        if (!event.isUserInteraction) {
+            return;
+        }
+        this.selectedTenant.set(event.component.selectedItems[0] ?? null);
+    }
+    handleListItemKeyDown(event, tenant) {
+        if (event.key === 'Enter' || event.key === ' ') {
+            event.preventDefault();
+            void this.chooseTenant(tenant);
+        }
+    }
+    handleSelectBoxKeyDown(event) {
+        if (!(event instanceof KeyboardEvent)) {
+            return;
+        }
+        if (event.key !== 'Enter' && event.key !== 'NumpadEnter') {
+            return;
+        }
+        if (this.isSelectBoxOpen()) {
+            return;
+        }
+        event.preventDefault();
+        event.stopPropagation();
+        if (this.canApply()) {
+            this.applySelection();
+        }
+    }
+    applySelection() {
+        const tenant = this.selectedTenant();
+        if (tenant) {
+            void this.chooseTenant(tenant);
+        }
+    }
+    async chooseTenant(item) {
+        if (this.strategy) {
+            const updateContext = {
+                tenant: item,
+                user: this.sessionService.user,
+            };
+            await this.sessionService.updateToken(updateContext);
+        }
+        this.tenantChosen.emit();
+        return this.router.navigate(['/auth/account/app-chooser']);
+    }
+    //#endregion
+    //#region ---- Utility Methods ----
+    focusFirstListItem() {
+        const nav = this.listNav();
+        const items = this.listItems();
+        const tenants = this.allTenants();
+        const currentIndex = tenants.findIndex((tenant) => this.isTenantSelected(tenant));
+        if (nav && items.length > 0) {
+            nav.navigateTo(items[currentIndex >= 0 ? currentIndex : 0]);
+        }
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPTenantChooserListComponent, deps: [], target: i0.ɵɵFactoryTarget.Component }); }
+    static { this.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.9", type: AXPTenantChooserListComponent, isStandalone: true, selector: "axp-tenant-chooser-list", inputs: { simple: { classPropertyName: "simple", publicName: "simple", isSignal: true, isRequired: false, transformFunction: null } }, outputs: { tenantChosen: "tenantChosen" }, viewQueries: [{ propertyName: "listNav", first: true, predicate: AXListNavigationDirective, descendants: true, isSignal: true }, { propertyName: "listItems", predicate: AXListNavigationItemDirective, descendants: true, isSignal: true }], ngImport: i0, template: "@if (isLoading()) {\n  <div class=\"w-full flex flex-col gap-3\">\n    @for (item of skeletonItems; track item) {\n      <div class=\"flex gap-2 items-center p-2\">\n        <ax-skeleton [animated]=\"true\" class=\"w-12 h-12 rounded-full shrink-0\"></ax-skeleton>\n        <ax-skeleton [animated]=\"true\" class=\"flex-1 h-6 rounded-md\"></ax-skeleton>\n      </div>\n    }\n  </div>\n} @else if (simple()) {\n  <div class=\"w-full overflow-auto max-h-[300px] pe-2\">\n    @for (tenant of allTenants(); track tenant.id) {\n      <div\n        class=\"flex gap-2 justify-between border-b last:border-b-0 py-3 items-start cursor-pointer\"\n        (click)=\"chooseTenant(tenant)\"\n      >\n        <div class=\"flex flex-1 gap-2 items-center font-medium\">\n          <div\n            class=\"w-12 h-12 flex justify-center items-center rounded-full bg-neutral-100 m-auto\"\n          >\n            <axp-logo\n              [logoKey]=\"tenantLogoKey(tenant)\"\n              appearance=\"colored\"\n              [size]=\"40\"\n              [attr.alt]=\"tenant.title\"\n              class=\"flex! items-center justify-center text-sm! mx-auto w-10 h-10 bg-neutral-200 rounded-full\"\n            ></axp-logo>\n          </div>\n          <span class=\"flex-1 text-start md:text-base text-sm\">{{ tenant.title }}</span>\n        </div>\n      </div>\n    }\n  </div>\n} @else if (useSelectBox()) {\n  <div class=\"w-full flex flex-col gap-4\" (keydown.capture)=\"handleSelectBoxKeyDown($event)\">\n    <ax-select-box\n      class=\"w-full\"\n      [dataSource]=\"allTenants()\"\n      textField=\"title\"\n      valueField=\"id\"\n      [value]=\"selectedTenant()\"\n      [itemHeight]=\"56\"\n      [placeholder]=\"('@auth:tenant-chooser.select-placeholder' | translate | async) ?? ''\"\n      [itemTemplate]=\"tenantItemTemplate\"\n      (onOpened)=\"isSelectBoxOpen.set(true)\"\n      (onClosed)=\"isSelectBoxOpen.set(false)\"\n      (onValueChanged)=\"handleTenantSelect($event)\"\n    >\n      <ax-search-box look=\"fill\"></ax-search-box>\n    </ax-select-box>\n    <ax-button\n      class=\"w-full\"\n      color=\"primary\"\n      [disabled]=\"!canApply()\"\n      [text]=\"('@general:actions.apply.title' | translate | async) ?? ''\"\n      (onClick)=\"applySelection()\"\n    ></ax-button>\n  </div>\n} @else {\n  @if (showSearchAndViewAll()) {\n    <ax-search-box\n      [placeholder]=\"'@general:search.title' | translate | async\"\n      [ngModel]=\"searchValue()\"\n      (ngModelChange)=\"handleSearch($event)\"\n      class=\"w-full\"\n    >\n      <ax-clear-button></ax-clear-button>\n    </ax-search-box>\n  }\n  <div\n    axListNavigation\n    #listNav=\"axListNavigation\"\n    class=\"w-full overflow-auto max-h-[300px] flex flex-col gap-1\"\n    role=\"listbox\"\n  >\n    @for (tenant of displayedTenants(); track tenant.id) {\n      <div\n        axListNavigationItem\n        #navItem=\"axListNavigationItem\"\n        tabindex=\"0\"\n        role=\"option\"\n        [attr.aria-selected]=\"isTenantSelected(tenant)\"\n        class=\"flex gap-2 items-center p-2 cursor-pointer rounded-md transition-colors outline-none hover:bg-primary-lightest hover:dark:bg-primary-dark\"\n        [class.bg-primary-lighter]=\"isTenantSelected(tenant)\"\n        [class.dark:bg-primary-darker]=\"isTenantSelected(tenant)\"\n        [class.text-primary-on-lighter]=\"isTenantSelected(tenant)\"\n        [class.dark:text-primary-on-darker]=\"isTenantSelected(tenant)\"\n        [class.ring-2]=\"navItem.isActive()\"\n        [class.ring-primary]=\"navItem.isActive()\"\n        (click)=\"chooseTenant(tenant)\"\n        (keydown)=\"handleListItemKeyDown($event, tenant)\"\n      >\n        <div class=\"flex flex-1 gap-2 items-center min-w-0\">\n          <div\n            class=\"shrink-0 flex justify-center items-center rounded-full bg-neutral-100\"\n            [class.w-10]=\"simple()\"\n            [class.h-10]=\"simple()\"\n            [class.w-12]=\"!simple()\"\n            [class.h-12]=\"!simple()\"\n          >\n            <axp-logo\n              [logoKey]=\"tenantLogoKey(tenant)\"\n              appearance=\"colored\"\n              [size]=\"40\"\n              [attr.alt]=\"tenant.title\"\n              class=\"flex! items-center justify-center text-sm! bg-neutral-200 dark:bg-neutral-800 rounded-full\"\n              [class.w-8]=\"simple()\"\n              [class.h-8]=\"simple()\"\n              [class.w-10]=\"!simple()\"\n              [class.h-10]=\"!simple()\"\n            ></axp-logo>\n          </div>\n          <span class=\"flex-1 truncate text-start md:text-base text-sm\">{{ tenant.title }}</span>\n        </div>\n      </div>\n    }\n  </div>\n  @if (showSearchAndViewAll()) {\n    <div class=\"mt-6 w-full flex justify-center\">\n      <ax-button\n        (onClick)=\"showAllTenants()\"\n        class=\"w-full\"\n        look=\"outline\"\n        [text]=\"\n          showAll()\n            ? ('@general:actions.view-less.title' | translate | async)\n            : ('@general:actions.view-all.title' | translate | async)\n        \"\n      ></ax-button>\n    </div>\n  }\n}\n\n<ng-template #tenantItemTemplate let-item>\n  <div class=\"flex gap-2 items-center p-2\">\n    <div\n      class=\"w-10 h-10 flex justify-center items-center rounded-full bg-neutral-100 shrink-0\"\n    >\n      <axp-logo\n        [logoKey]=\"tenantLogoKey(item.data)\"\n        appearance=\"colored\"\n        [size]=\"32\"\n        [attr.alt]=\"item.data.title\"\n        class=\"flex! items-center justify-center text-sm! w-8 h-8 bg-neutral-200 rounded-full\"\n      ></axp-logo>\n    </div>\n    <span class=\"text-start md:text-base text-sm\">{{ item.data.title }}</span>\n  </div>\n</ng-template>\n", dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i1$2.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i1$2.NgModel, selector: "[ngModel]:not([formControlName]):not([formControl])", inputs: ["name", "disabled", "ngModel", "ngModelOptions"], outputs: ["ngModelChange"], exportAs: ["ngModel"] }, { kind: "ngmodule", type: AXTranslationModule }, { kind: "ngmodule", type: AXButtonModule }, { kind: "component", type: i1$1.AXButtonComponent, selector: "ax-button", inputs: ["disabled", "size", "tabIndex", "color", "look", "text", "toggleable", "selected", "iconOnly", "type", "loadingText"], outputs: ["onBlur", "onFocus", "onClick", "selectedChange", "toggleableChange", "lookChange", "colorChange", "disabledChange", "loadingTextChange"] }, { kind: "ngmodule", type: AXDecoratorModule }, { kind: "component", type: i3$1.AXDecoratorClearButtonComponent, selector: "ax-clear-button", inputs: ["icon"] }, { kind: "ngmodule", type: AXSkeletonModule }, { kind: "component", type: i2.AXSkeletonComponent, selector: "ax-skeleton", inputs: ["animated"] }, { kind: "ngmodule", type: AXSelectBoxModule }, { kind: "component", type: i3.AXSelectBoxComponent, selector: "ax-select-box", inputs: ["disabled", "readonly", "tabIndex", "placeholder", "minValue", "maxValue", "value", "state", "name", "id", "type", "look", "multiple", "valueField", "textField", "disabledField", "textTemplate", "selectedItems", "isItemTruncated", "showItemTooltip", "itemHeight", "maxVisibleItems", "dataSource", "minRecordsForSearch", "caption", "itemTemplate", "selectedTemplate", "emptyTemplate", "loadingTemplate", "dropdownWidth", "searchBoxAutoFocus"], outputs: ["valueChange", "stateChange", "onValueChanged", "onBlur", "onFocus", "readonlyChange", "disabledChange", "onOpened", "onClosed", "onItemSelected", "onItemClick"] }, { kind: "ngmodule", type: AXSearchBoxModule }, { kind: "component", type: i4.AXSearchBoxComponent, selector: "ax-search-box", inputs: ["disabled", "readonly", "tabIndex", "placeholder", "value", "state", "name", "id", "look", "class", "delayTime", "type", "autoSearch"], outputs: ["valueChange", "stateChange", "onValueChanged", "onBlur", "onFocus", "readonlyChange", "disabledChange", "onKeyDown", "onKeyUp", "onKeyPress"] }, { kind: "ngmodule", type: AXListNavigationModule }, { kind: "directive", type: i5.AXListNavigationDirective, selector: "[axListNavigation]", inputs: ["orientation"], outputs: ["onNavigationChanged", "onKeypress"], exportAs: ["axListNavigation"] }, { kind: "directive", type: i5.AXListNavigationItemDirective, selector: "[axListNavigationItem]", outputs: ["onKeypress"], exportAs: ["axListNavigationItem"] }, { kind: "component", type: AXPLogoComponent, selector: "axp-logo", inputs: ["logoKey", "appearance", "size", "format"] }, { kind: "pipe", type: i4$1.AsyncPipe, name: "async" }, { kind: "pipe", type: i2$1.AXTranslatorPipe, name: "translate" }], changeDetection: i0.ChangeDetectionStrategy.OnPush }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPTenantChooserListComponent, decorators: [{
+            type: Component,
+            args: [{ selector: 'axp-tenant-chooser-list', changeDetection: ChangeDetectionStrategy.OnPush, imports: [
+                        CommonModule,
+                        FormsModule,
+                        AXTranslationModule,
+                        AXButtonModule,
+                        AXDecoratorModule,
+                        AXSkeletonModule,
+                        AXSelectBoxModule,
+                        AXSearchBoxModule,
+                        AXListNavigationModule,
+                        AXPLogoComponent,
+                    ], template: "@if (isLoading()) {\n  <div class=\"w-full flex flex-col gap-3\">\n    @for (item of skeletonItems; track item) {\n      <div class=\"flex gap-2 items-center p-2\">\n        <ax-skeleton [animated]=\"true\" class=\"w-12 h-12 rounded-full shrink-0\"></ax-skeleton>\n        <ax-skeleton [animated]=\"true\" class=\"flex-1 h-6 rounded-md\"></ax-skeleton>\n      </div>\n    }\n  </div>\n} @else if (simple()) {\n  <div class=\"w-full overflow-auto max-h-[300px] pe-2\">\n    @for (tenant of allTenants(); track tenant.id) {\n      <div\n        class=\"flex gap-2 justify-between border-b last:border-b-0 py-3 items-start cursor-pointer\"\n        (click)=\"chooseTenant(tenant)\"\n      >\n        <div class=\"flex flex-1 gap-2 items-center font-medium\">\n          <div\n            class=\"w-12 h-12 flex justify-center items-center rounded-full bg-neutral-100 m-auto\"\n          >\n            <axp-logo\n              [logoKey]=\"tenantLogoKey(tenant)\"\n              appearance=\"colored\"\n              [size]=\"40\"\n              [attr.alt]=\"tenant.title\"\n              class=\"flex! items-center justify-center text-sm! mx-auto w-10 h-10 bg-neutral-200 rounded-full\"\n            ></axp-logo>\n          </div>\n          <span class=\"flex-1 text-start md:text-base text-sm\">{{ tenant.title }}</span>\n        </div>\n      </div>\n    }\n  </div>\n} @else if (useSelectBox()) {\n  <div class=\"w-full flex flex-col gap-4\" (keydown.capture)=\"handleSelectBoxKeyDown($event)\">\n    <ax-select-box\n      class=\"w-full\"\n      [dataSource]=\"allTenants()\"\n      textField=\"title\"\n      valueField=\"id\"\n      [value]=\"selectedTenant()\"\n      [itemHeight]=\"56\"\n      [placeholder]=\"('@auth:tenant-chooser.select-placeholder' | translate | async) ?? ''\"\n      [itemTemplate]=\"tenantItemTemplate\"\n      (onOpened)=\"isSelectBoxOpen.set(true)\"\n      (onClosed)=\"isSelectBoxOpen.set(false)\"\n      (onValueChanged)=\"handleTenantSelect($event)\"\n    >\n      <ax-search-box look=\"fill\"></ax-search-box>\n    </ax-select-box>\n    <ax-button\n      class=\"w-full\"\n      color=\"primary\"\n      [disabled]=\"!canApply()\"\n      [text]=\"('@general:actions.apply.title' | translate | async) ?? ''\"\n      (onClick)=\"applySelection()\"\n    ></ax-button>\n  </div>\n} @else {\n  @if (showSearchAndViewAll()) {\n    <ax-search-box\n      [placeholder]=\"'@general:search.title' | translate | async\"\n      [ngModel]=\"searchValue()\"\n      (ngModelChange)=\"handleSearch($event)\"\n      class=\"w-full\"\n    >\n      <ax-clear-button></ax-clear-button>\n    </ax-search-box>\n  }\n  <div\n    axListNavigation\n    #listNav=\"axListNavigation\"\n    class=\"w-full overflow-auto max-h-[300px] flex flex-col gap-1\"\n    role=\"listbox\"\n  >\n    @for (tenant of displayedTenants(); track tenant.id) {\n      <div\n        axListNavigationItem\n        #navItem=\"axListNavigationItem\"\n        tabindex=\"0\"\n        role=\"option\"\n        [attr.aria-selected]=\"isTenantSelected(tenant)\"\n        class=\"flex gap-2 items-center p-2 cursor-pointer rounded-md transition-colors outline-none hover:bg-primary-lightest hover:dark:bg-primary-dark\"\n        [class.bg-primary-lighter]=\"isTenantSelected(tenant)\"\n        [class.dark:bg-primary-darker]=\"isTenantSelected(tenant)\"\n        [class.text-primary-on-lighter]=\"isTenantSelected(tenant)\"\n        [class.dark:text-primary-on-darker]=\"isTenantSelected(tenant)\"\n        [class.ring-2]=\"navItem.isActive()\"\n        [class.ring-primary]=\"navItem.isActive()\"\n        (click)=\"chooseTenant(tenant)\"\n        (keydown)=\"handleListItemKeyDown($event, tenant)\"\n      >\n        <div class=\"flex flex-1 gap-2 items-center min-w-0\">\n          <div\n            class=\"shrink-0 flex justify-center items-center rounded-full bg-neutral-100\"\n            [class.w-10]=\"simple()\"\n            [class.h-10]=\"simple()\"\n            [class.w-12]=\"!simple()\"\n            [class.h-12]=\"!simple()\"\n          >\n            <axp-logo\n              [logoKey]=\"tenantLogoKey(tenant)\"\n              appearance=\"colored\"\n              [size]=\"40\"\n              [attr.alt]=\"tenant.title\"\n              class=\"flex! items-center justify-center text-sm! bg-neutral-200 dark:bg-neutral-800 rounded-full\"\n              [class.w-8]=\"simple()\"\n              [class.h-8]=\"simple()\"\n              [class.w-10]=\"!simple()\"\n              [class.h-10]=\"!simple()\"\n            ></axp-logo>\n          </div>\n          <span class=\"flex-1 truncate text-start md:text-base text-sm\">{{ tenant.title }}</span>\n        </div>\n      </div>\n    }\n  </div>\n  @if (showSearchAndViewAll()) {\n    <div class=\"mt-6 w-full flex justify-center\">\n      <ax-button\n        (onClick)=\"showAllTenants()\"\n        class=\"w-full\"\n        look=\"outline\"\n        [text]=\"\n          showAll()\n            ? ('@general:actions.view-less.title' | translate | async)\n            : ('@general:actions.view-all.title' | translate | async)\n        \"\n      ></ax-button>\n    </div>\n  }\n}\n\n<ng-template #tenantItemTemplate let-item>\n  <div class=\"flex gap-2 items-center p-2\">\n    <div\n      class=\"w-10 h-10 flex justify-center items-center rounded-full bg-neutral-100 shrink-0\"\n    >\n      <axp-logo\n        [logoKey]=\"tenantLogoKey(item.data)\"\n        appearance=\"colored\"\n        [size]=\"32\"\n        [attr.alt]=\"item.data.title\"\n        class=\"flex! items-center justify-center text-sm! w-8 h-8 bg-neutral-200 rounded-full\"\n      ></axp-logo>\n    </div>\n    <span class=\"text-start md:text-base text-sm\">{{ item.data.title }}</span>\n  </div>\n</ng-template>\n" }]
+        }], ctorParameters: () => [], propDecorators: { simple: [{ type: i0.Input, args: [{ isSignal: true, alias: "simple", required: false }] }], tenantChosen: [{ type: i0.Output, args: ["tenantChosen"] }], listNav: [{ type: i0.ViewChild, args: [i0.forwardRef(() => AXListNavigationDirective), { isSignal: true }] }], listItems: [{ type: i0.ViewChildren, args: [i0.forwardRef(() => AXListNavigationItemDirective), { isSignal: true }] }] } });
+
+class AXPTenantChooserDropdownComponent {
+    constructor() {
+        this.sessionService = inject(AXPSessionService);
+        this.tenants$ = this.sessionService.tenants$;
+        this.tenant = this.sessionService.tenant;
+        this.tenantPopover = viewChild('tenantPopover', ...(ngDevMode ? [{ debugName: "tenantPopover" }] : /* istanbul ignore next */ []));
+    }
+    closePopover() {
+        this.tenantPopover()?.close();
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPTenantChooserDropdownComponent, deps: [], target: i0.ɵɵFactoryTarget.Component }); }
+    static { this.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.9", type: AXPTenantChooserDropdownComponent, isStandalone: true, selector: "axp-tenant-chooser-dropdown", viewQueries: [{ propertyName: "tenantPopover", first: true, predicate: ["tenantPopover"], descendants: true, isSignal: true }], ngImport: i0, template: "@if (tenants$ | async; as tenants) {\n  @if (tenants.length > 1) {\n    <ax-button\n      [text]=\"tenant?.title ?? ''\"\n      class=\"ax-sm\"\n      look=\"blank\"\n      #tenantChooser\n    >\n      <ax-suffix>\n        <ax-icon class=\"fa-solid fa-caret-down\"></ax-icon>\n      </ax-suffix>\n    </ax-button>\n    <ax-popover\n      [target]=\"tenantChooser\"\n      [openOn]=\"'toggle'\"\n      [closeOn]=\"'clickOut'\"\n      [adaptivityEnabled]=\"true\"\n      #tenantPopover\n    >\n      <div\n        class=\"bg-lightest border overflow-hidden rounded-md shadow-md w-full min-w-64 p-1\"\n      >\n        <axp-tenant-chooser-list\n          [simple]=\"true\"\n          (tenantChosen)=\"closePopover()\"\n        ></axp-tenant-chooser-list>\n      </div>\n    </ax-popover>\n  } @else {\n    <ax-button\n      [text]=\"tenant?.title ?? ''\"\n      class=\"ax-sm\"\n      look=\"blank\"\n    ></ax-button>\n  }\n}\n", dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: AXButtonModule }, { kind: "component", type: i1$1.AXButtonComponent, selector: "ax-button", inputs: ["disabled", "size", "tabIndex", "color", "look", "text", "toggleable", "selected", "iconOnly", "type", "loadingText"], outputs: ["onBlur", "onFocus", "onClick", "selectedChange", "toggleableChange", "lookChange", "colorChange", "disabledChange", "loadingTextChange"] }, { kind: "ngmodule", type: AXPopoverModule }, { kind: "component", type: i2$2.AXPopoverComponent, selector: "ax-popover", inputs: ["width", "disablePanelClass", "disabled", "offsetX", "offsetY", "target", "placement", "content", "openOn", "closeOn", "hasBackdrop", "openAfter", "closeAfter", "closeOnScroll", "backdropClass", "panelClass", "adaptivityEnabled"], outputs: ["onOpened", "onClosed"] }, { kind: "ngmodule", type: AXDecoratorModule }, { kind: "component", type: i3$1.AXDecoratorIconComponent, selector: "ax-icon", inputs: ["icon"] }, { kind: "component", type: i3$1.AXDecoratorGenericComponent, selector: "ax-footer, ax-header, ax-content, ax-divider, ax-form-hint, ax-prefix, ax-suffix, ax-text, ax-title, ax-subtitle, ax-placeholder, ax-overlay" }, { kind: "component", type: AXPTenantChooserListComponent, selector: "axp-tenant-chooser-list", inputs: ["simple"], outputs: ["tenantChosen"] }, { kind: "pipe", type: i4$1.AsyncPipe, name: "async" }] }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPTenantChooserDropdownComponent, decorators: [{
+            type: Component,
+            args: [{ selector: 'axp-tenant-chooser-dropdown', imports: [CommonModule, AXButtonModule, AXPopoverModule, AXDecoratorModule, AXPTenantChooserListComponent], template: "@if (tenants$ | async; as tenants) {\n  @if (tenants.length > 1) {\n    <ax-button\n      [text]=\"tenant?.title ?? ''\"\n      class=\"ax-sm\"\n      look=\"blank\"\n      #tenantChooser\n    >\n      <ax-suffix>\n        <ax-icon class=\"fa-solid fa-caret-down\"></ax-icon>\n      </ax-suffix>\n    </ax-button>\n    <ax-popover\n      [target]=\"tenantChooser\"\n      [openOn]=\"'toggle'\"\n      [closeOn]=\"'clickOut'\"\n      [adaptivityEnabled]=\"true\"\n      #tenantPopover\n    >\n      <div\n        class=\"bg-lightest border overflow-hidden rounded-md shadow-md w-full min-w-64 p-1\"\n      >\n        <axp-tenant-chooser-list\n          [simple]=\"true\"\n          (tenantChosen)=\"closePopover()\"\n        ></axp-tenant-chooser-list>\n      </div>\n    </ax-popover>\n  } @else {\n    <ax-button\n      [text]=\"tenant?.title ?? ''\"\n      class=\"ax-sm\"\n      look=\"blank\"\n    ></ax-button>\n  }\n}\n" }]
+        }], propDecorators: { tenantPopover: [{ type: i0.ViewChild, args: ['tenantPopover', { isSignal: true }] }] } });
+
+//#region ---- Profile slot menu hook ----
+const PROFILE_SLOT_MENU_ITEMS_HOOK = 'profile-slot.menu-items';
+function hasProfileSlotMenuBreakBefore(breakOptions) {
+    return breakOptions?.before === true;
+}
+function hasProfileSlotMenuBreakAfter(breakOptions) {
+    return breakOptions?.after === true;
+}
+//#endregion
+
+class AXMAuthProfileSlotComponent {
+    constructor() {
+        //#region ---- Services & Dependencies ----
+        this.router = inject(Router);
+        this.sessionService = inject(AXPSessionService);
+        this.themeService = inject(AXPLayoutThemeService);
+        this.hooks = inject(AXPHookService);
+        this.commandService = inject(AXPCommandService);
+        this.shortcutRegistry = inject(AXPKeyboardShortcutRegistry);
+        this.settingsService = inject(AXPSettingsService);
+        this.destroyRef = inject(DestroyRef);
+        //#endregion
+        //#region ---- State ----
+        this.isDarkMode = this.themeService.isDarkMode;
+        this.user$ = this.sessionService.user$;
+        this.tenant$ = this.sessionService.tenant$;
+        this.isAuthenticated$ = this.sessionService.isAuthenticated$;
+        this.isAuthenticated = toSignal(this.sessionService.isAuthenticated$, { initialValue: false });
+        this.menuItems = signal([], ...(ngDevMode ? [{ debugName: "menuItems" }] : /* istanbul ignore next */ []));
+        //#endregion
+        //#region ---- UI Handlers ----
+        this.appName = () => this.sessionService.application?.name;
+        this.hasProfileSlotMenuBreakBefore = hasProfileSlotMenuBreakBefore;
+        this.hasProfileSlotMenuBreakAfter = hasProfileSlotMenuBreakAfter;
+    }
+    //#endregion
+    //#region ---- Lifecycle Methods ----
+    async ngOnInit() {
+        await this.loadMenuItems();
+        this.bindLockMenuSettingsReload();
+    }
+    menuItemClass(item) {
+        return {
+            'text-danger-500': item.color === 'danger',
+        };
+    }
+    shortcutKeys(chord) {
+        return chordToKbdItemKeys(chord);
+    }
+    primaryShortcut(item) {
+        return getPrimaryKeyboardShortcutChord(item.shortcuts);
+    }
+    async handleMenuItemClick(item, popover) {
+        popover.close();
+        if (item.command) {
+            await this.executeCommand(item.command);
+        }
+    }
+    handleSignIn() {
+        this.router.navigate(['/auth/login']);
+    }
+    //#endregion
+    //#region ---- Private Methods ----
+    bindLockMenuSettingsReload() {
+        this.settingsService.onChanged.pipe(takeUntilDestroyed(this.destroyRef)).subscribe((event) => {
+            if (!event.keys.includes(AXPAuthSettings.LockWhenIdleEnabled)) {
+                return;
+            }
+            void this.loadMenuItems();
+        });
+        this.settingsService.onLoaded.pipe(takeUntilDestroyed(this.destroyRef)).subscribe(() => {
+            void this.loadMenuItems();
+        });
+    }
+    async loadMenuItems() {
+        const payload = await this.hooks.runAsync(PROFILE_SLOT_MENU_ITEMS_HOOK, {
+            items: [],
+        });
+        const items = payload.items ?? [];
+        this.menuItems.set(items);
+        this.registerMenuShortcuts(items);
+    }
+    registerMenuShortcuts(items) {
+        const shortcuts = [];
+        for (const item of items) {
+            if (item.visible === false || !item.command || !item.shortcuts?.length) {
+                continue;
+            }
+            const command = item.command;
+            for (const shortcut of normalizeKeyboardShortcuts(item.shortcuts)) {
+                for (const chord of shortcut.keys) {
+                    shortcuts.push({
+                        keys: [chord],
+                        title: item.title,
+                        group: '@general:keyboard-shortcuts.groups.global',
+                        allowInEditableFields: shortcut.allowInEditableFields,
+                        directionBehavior: shortcut.directionBehavior,
+                        when: () => this.isAuthenticated() && (shortcut.when?.() ?? true),
+                        handler: () => {
+                            void this.executeCommand(command);
+                        },
+                    });
+                }
+            }
+        }
+        if (shortcuts.length === 0) {
+            return;
+        }
+        this.shortcutRegistry.register({
+            owner: this.destroyRef,
+            id: 'profile-slot-menu',
+            priority: AXPKeyboardShortcutPriority.Global,
+            group: '@general:keyboard-shortcuts.groups.global',
+            when: () => this.isAuthenticated(),
+            shortcuts,
+        });
+    }
+    async executeCommand(command) {
+        if (this.commandService.exists(command.name)) {
+            await this.commandService.execute(command.name, command.options ?? {});
+        }
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthProfileSlotComponent, deps: [], target: i0.ɵɵFactoryTarget.Component }); }
+    static { this.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.9", type: AXMAuthProfileSlotComponent, isStandalone: true, selector: "ng-component", ngImport: i0, template: "@if (isAuthenticated$ | async) {\n  <div class=\"size-fit\">\n    <div #avatar>\n      <axp-user-avatar\n        [size]=\"36\"\n        [userId]=\"(user$ | async)?.id!\"\n      ></axp-user-avatar>\n    </div>\n\n    <ax-popover [target]=\"avatar\" [openOn]=\"'toggle'\" [closeOn]=\"'clickOut'\" #p>\n      <div\n        class=\"bg-lightest border border-lightest rounded-md shadow-md w-full min-w-64\"\n      >\n        <div class=\"flex flex-col items-center p-4 border-b\">\n          <axp-user-avatar\n            [size]=\"64\"\n            [userId]=\"(user$ | async)?.id!\"\n          ></axp-user-avatar>\n\n          <div class=\"flex flex-col items-center justify-center mt-2\">\n            <div class=\"text-base font-bold\">{{ (user$ | async)?.title }}</div>\n            <axp-tenant-chooser-dropdown></axp-tenant-chooser-dropdown>\n          </div>\n        </div>\n        <div class=\"axp-profile-slot-menus\">\n          <ul>\n            @for (item of menuItems(); track item.name ?? item.title) {\n              @if (item.visible != false) {\n                @if (hasProfileSlotMenuBreakBefore(item.break)) {\n                  <li class=\"axp-profile-slot-menu-break\" role=\"separator\"></li>\n                }\n                <li [class]=\"menuItemClass(item)\">\n                  <a (click)=\"handleMenuItemClick(item, p)\">\n                    <i [class]=\"item.icon\"></i>\n                    <span class=\"flex-1\">{{\n                      item.title | translate | async\n                    }}</span>\n                  </a>\n                </li>\n                @if (hasProfileSlotMenuBreakAfter(item.break)) {\n                  <li class=\"axp-profile-slot-menu-break\" role=\"separator\"></li>\n                }\n              }\n            }\n          </ul>\n        </div>\n      </div>\n    </ax-popover>\n  </div>\n} @else {\n  <ax-button\n    color=\"default\"\n    look=\"blank\"\n    text=\"Sign Up / Sign In\"\n    (click)=\"handleSignIn()\"\n  >\n    <ax-icon>\n      <i class=\"fa-solid fa-user text-slate-400 dark:text-slate-200\"></i>\n    </ax-icon>\n  </ax-button>\n}\n", styles: ["@layer properties;.axp-profile-slot-menus ul{margin-top:calc(var(--spacing, .25rem) * 2);border-bottom-style:var(--tw-border-style);border-bottom-width:1px;border-color:var(--color-border-default);padding-inline:calc(var(--spacing, .25rem) * 2)}.axp-profile-slot-menus ul:last-child{border-style:var(--tw-border-style);border-width:0px}.axp-profile-slot-menus ul li{display:flex;cursor:pointer;border-radius:var(--radius-md, .375rem)}.axp-profile-slot-menus ul li:last-child{margin-bottom:calc(var(--spacing, .25rem) * 2)}.axp-profile-slot-menus ul li:hover{background-color:rgba(var(--ax-sys-color-dark-surface))}.axp-profile-slot-menus ul li.axp-profile-slot-menu-break{pointer-events:none;margin-inline:calc(var(--spacing, .25rem) * 2);margin-block:var(--spacing, .25rem);height:0;min-height:0;cursor:default;border-bottom-style:var(--tw-border-style);border-bottom-width:1px;border-color:var(--color-border-default);padding:0}.axp-profile-slot-menus ul li.axp-profile-slot-menu-break:hover{background-color:transparent}.axp-profile-slot-menus ul li i{margin-inline-end:calc(var(--spacing, .25rem) * 3);display:grid;height:calc(var(--spacing, .25rem) * 6);width:calc(var(--spacing, .25rem) * 6);place-items:center;font-size:var(--text-xl, 1.25rem);line-height:var(--tw-leading, var(--text-xl--line-height, calc(1.75 / 1.25)))}.axp-profile-slot-menus ul li a{display:flex;height:100%;width:100%;align-items:center;gap:calc(var(--spacing, .25rem) * 2);padding:calc(var(--spacing, .25rem) * 2)}@property --tw-border-style{syntax: \"*\"; inherits: false; initial-value: solid;}@layer properties{@supports ((-webkit-hyphens: none) and (not (margin-trim: inline))) or ((-moz-orient: inline) and (not (color:rgb(from red r g b)))){*,:before,:after,::backdrop{--tw-border-style: solid}}}\n/*! tailwindcss v4.3.2 | MIT License | https://tailwindcss.com */\n"], dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: RouterModule }, { kind: "ngmodule", type: 
+                //
+                AXImageModule }, { kind: "ngmodule", type: AXAvatarModule }, { kind: "ngmodule", type: AXPopoverModule }, { kind: "component", type: i2$2.AXPopoverComponent, selector: "ax-popover", inputs: ["width", "disablePanelClass", "disabled", "offsetX", "offsetY", "target", "placement", "content", "openOn", "closeOn", "hasBackdrop", "openAfter", "closeAfter", "closeOnScroll", "backdropClass", "panelClass", "adaptivityEnabled"], outputs: ["onOpened", "onClosed"] }, { kind: "ngmodule", type: AXButtonModule }, { kind: "component", type: i1$1.AXButtonComponent, selector: "ax-button", inputs: ["disabled", "size", "tabIndex", "color", "look", "text", "toggleable", "selected", "iconOnly", "type", "loadingText"], outputs: ["onBlur", "onFocus", "onClick", "selectedChange", "toggleableChange", "lookChange", "colorChange", "disabledChange", "loadingTextChange"] }, { kind: "ngmodule", type: AXDecoratorModule }, { kind: "component", type: i3$1.AXDecoratorIconComponent, selector: "ax-icon", inputs: ["icon"] }, { kind: "ngmodule", type: 
+                // AXKBDComponent,
+                // AXKBDItemComponent,
+                AXLoadingModule }, { kind: "ngmodule", type: AXTranslationModule }, { kind: "component", type: AXPUserAvatarComponent, selector: "axp-user-avatar", inputs: ["size", "userId"] }, { kind: "component", type: 
+                //
+                AXPTenantChooserDropdownComponent, selector: "axp-tenant-chooser-dropdown" }, { kind: "pipe", type: i4$1.AsyncPipe, name: "async" }, { kind: "pipe", type: i2$1.AXTranslatorPipe, name: "translate" }], changeDetection: i0.ChangeDetectionStrategy.OnPush, encapsulation: i0.ViewEncapsulation.None }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthProfileSlotComponent, decorators: [{
+            type: Component,
+            args: [{ imports: [
+                        CommonModule,
+                        RouterModule,
+                        //
+                        AXImageModule,
+                        AXAvatarModule,
+                        AXPopoverModule,
+                        AXButtonModule,
+                        AXDecoratorModule,
+                        // AXKBDComponent,
+                        // AXKBDItemComponent,
+                        AXLoadingModule,
+                        AXTranslationModule,
+                        AXPUserAvatarComponent,
+                        //
+                        AXPTenantChooserDropdownComponent,
+                    ], changeDetection: ChangeDetectionStrategy.OnPush, encapsulation: ViewEncapsulation.None, template: "@if (isAuthenticated$ | async) {\n  <div class=\"size-fit\">\n    <div #avatar>\n      <axp-user-avatar\n        [size]=\"36\"\n        [userId]=\"(user$ | async)?.id!\"\n      ></axp-user-avatar>\n    </div>\n\n    <ax-popover [target]=\"avatar\" [openOn]=\"'toggle'\" [closeOn]=\"'clickOut'\" #p>\n      <div\n        class=\"bg-lightest border border-lightest rounded-md shadow-md w-full min-w-64\"\n      >\n        <div class=\"flex flex-col items-center p-4 border-b\">\n          <axp-user-avatar\n            [size]=\"64\"\n            [userId]=\"(user$ | async)?.id!\"\n          ></axp-user-avatar>\n\n          <div class=\"flex flex-col items-center justify-center mt-2\">\n            <div class=\"text-base font-bold\">{{ (user$ | async)?.title }}</div>\n            <axp-tenant-chooser-dropdown></axp-tenant-chooser-dropdown>\n          </div>\n        </div>\n        <div class=\"axp-profile-slot-menus\">\n          <ul>\n            @for (item of menuItems(); track item.name ?? item.title) {\n              @if (item.visible != false) {\n                @if (hasProfileSlotMenuBreakBefore(item.break)) {\n                  <li class=\"axp-profile-slot-menu-break\" role=\"separator\"></li>\n                }\n                <li [class]=\"menuItemClass(item)\">\n                  <a (click)=\"handleMenuItemClick(item, p)\">\n                    <i [class]=\"item.icon\"></i>\n                    <span class=\"flex-1\">{{\n                      item.title | translate | async\n                    }}</span>\n                  </a>\n                </li>\n                @if (hasProfileSlotMenuBreakAfter(item.break)) {\n                  <li class=\"axp-profile-slot-menu-break\" role=\"separator\"></li>\n                }\n              }\n            }\n          </ul>\n        </div>\n      </div>\n    </ax-popover>\n  </div>\n} @else {\n  <ax-button\n    color=\"default\"\n    look=\"blank\"\n    text=\"Sign Up / Sign In\"\n    (click)=\"handleSignIn()\"\n  >\n    <ax-icon>\n      <i class=\"fa-solid fa-user text-slate-400 dark:text-slate-200\"></i>\n    </ax-icon>\n  </ax-button>\n}\n", styles: ["@layer properties;.axp-profile-slot-menus ul{margin-top:calc(var(--spacing, .25rem) * 2);border-bottom-style:var(--tw-border-style);border-bottom-width:1px;border-color:var(--color-border-default);padding-inline:calc(var(--spacing, .25rem) * 2)}.axp-profile-slot-menus ul:last-child{border-style:var(--tw-border-style);border-width:0px}.axp-profile-slot-menus ul li{display:flex;cursor:pointer;border-radius:var(--radius-md, .375rem)}.axp-profile-slot-menus ul li:last-child{margin-bottom:calc(var(--spacing, .25rem) * 2)}.axp-profile-slot-menus ul li:hover{background-color:rgba(var(--ax-sys-color-dark-surface))}.axp-profile-slot-menus ul li.axp-profile-slot-menu-break{pointer-events:none;margin-inline:calc(var(--spacing, .25rem) * 2);margin-block:var(--spacing, .25rem);height:0;min-height:0;cursor:default;border-bottom-style:var(--tw-border-style);border-bottom-width:1px;border-color:var(--color-border-default);padding:0}.axp-profile-slot-menus ul li.axp-profile-slot-menu-break:hover{background-color:transparent}.axp-profile-slot-menus ul li i{margin-inline-end:calc(var(--spacing, .25rem) * 3);display:grid;height:calc(var(--spacing, .25rem) * 6);width:calc(var(--spacing, .25rem) * 6);place-items:center;font-size:var(--text-xl, 1.25rem);line-height:var(--tw-leading, var(--text-xl--line-height, calc(1.75 / 1.25)))}.axp-profile-slot-menus ul li a{display:flex;height:100%;width:100%;align-items:center;gap:calc(var(--spacing, .25rem) * 2);padding:calc(var(--spacing, .25rem) * 2)}@property --tw-border-style{syntax: \"*\"; inherits: false; initial-value: solid;}@layer properties{@supports ((-webkit-hyphens: none) and (not (margin-trim: inline))) or ((-moz-orient: inline) and (not (color:rgb(from red r g b)))){*,:before,:after,::backdrop{--tw-border-style: solid}}}\n/*! tailwindcss v4.3.2 | MIT License | https://tailwindcss.com */\n"] }]
+        }] });
+
+class AXMUserProfileCardSlotComponent {
+    constructor() {
+        this.router = inject(Router);
+        this.sessionService = inject(AXPSessionService);
+        this.dataService = inject(AXPDataProvider, { optional: true });
+        this.themeStore = inject(AXPLayoutThemeService);
+        this.deviceService = inject(AXPDeviceService);
+        this.isCompactMode = computed(() => {
+            this.deviceService.screenSize();
+            return this.themeStore.effectiveMenuVerticalMode() === AXPMenuVerticalMode.Compact;
+        }, ...(ngDevMode ? [{ debugName: "isCompactMode" }] : /* istanbul ignore next */ []));
+        this.hasPicture = signal(true, ...(ngDevMode ? [{ debugName: "hasPicture" }] : /* istanbul ignore next */ []));
+        this.avatarText = signal('', ...(ngDevMode ? [{ debugName: "avatarText" }] : /* istanbul ignore next */ []));
+        this.user$ = this.sessionService.user$;
+        this.tenant$ = this.sessionService.tenant$;
+        this.isAuthenticated$ = this.sessionService.isAuthenticated$;
+        this.appName = () => this.sessionService.application?.name;
+        this.getAvatarText = () => {
+            this.user$.pipe(first$1()).subscribe((user) => {
+                const names = user?.title.split(' ');
+                if (names?.length && names?.length > 1) {
+                    this.avatarText.set(`${names[0][0].toUpperCase()}${names[names.length - 1][0].toUpperCase()}`);
+                }
+                else
+                    return this.avatarText.set('AC');
+            });
+        };
+        this.loadImage();
+        this.getAvatarText();
+    }
+    editProfile() {
+        this.router.navigate([`/${this.appName()}/m/securityManagement/e/profile/0/view`]);
+    }
+    async logOut() {
+        await this.sessionService.signout();
+    }
+    toggleProfileMenu() {
+        this.profilePopover.open();
+    }
+    handleSignIn() {
+        this.router.navigate(['/auth/login']);
+    }
+    onImageError(event) {
+        this.hasPicture.set(false);
+    }
+    async loadImage() {
+        try {
+            const url = this.sessionService.user?.avatar;
+            if (url?.toLowerCase().startsWith('http')) {
+                this.src = url;
+            }
+            else if (this.sessionService.user?.avatar != 'null' && this.dataService) {
+                const blob = await this.dataService.viewFile(url, '');
+                this.src = URL.createObjectURL(blob);
+            }
+            else {
+                //this.src = this.mockerService.avatar();
+            }
+        }
+        catch (error) {
+            this.hasPicture.set(false);
+            console.error('Failed to load image by ID:', error);
+            this.src = '';
+        }
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMUserProfileCardSlotComponent, deps: [], target: i0.ɵɵFactoryTarget.Component }); }
+    static { this.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.9", type: AXMUserProfileCardSlotComponent, isStandalone: true, selector: "ng-component", viewQueries: [{ propertyName: "profilePopover", first: true, predicate: ["profilePopover"], descendants: true }], ngImport: i0, template: "@if((isAuthenticated$ | async)) {\n<div class=\"p-3 flex items-center gap-1 border-b border-lighter\" [class.justify-center]=\"isCompactMode()\">\n  <div #avatar>\n    <axp-user-avatar [size]=\"48\" [userId]=\"(user$ | async)?.id!\"></axp-user-avatar>\n  </div>\n  @if (!isCompactMode()) {\n  <div class=\"flex flex-col\">\n    <ax-title class=\"text-sm font-medium px-3\">{{ (user$ | async)?.title }}</ax-title>\n    <axp-tenant-chooser-dropdown />\n  </div>\n  }\n</div>\n}\n", dependencies: [{ kind: "ngmodule", type: RouterModule }, { kind: "ngmodule", type: 
+                //
+                AXImageModule }, { kind: "ngmodule", type: AXAvatarModule }, { kind: "ngmodule", type: AXPopoverModule }, { kind: "ngmodule", type: AXButtonModule }, { kind: "ngmodule", type: AXDecoratorModule }, { kind: "component", type: i3$1.AXDecoratorGenericComponent, selector: "ax-footer, ax-header, ax-content, ax-divider, ax-form-hint, ax-prefix, ax-suffix, ax-text, ax-title, ax-subtitle, ax-placeholder, ax-overlay" }, { kind: "ngmodule", type: AXLoadingModule }, { kind: "ngmodule", type: AXTranslationModule }, { kind: "component", type: 
+                //
+                AXPTenantChooserDropdownComponent, selector: "axp-tenant-chooser-dropdown" }, { kind: "component", type: AXPUserAvatarComponent, selector: "axp-user-avatar", inputs: ["size", "userId"] }, { kind: "pipe", type: AsyncPipe, name: "async" }] }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMUserProfileCardSlotComponent, decorators: [{
+            type: Component,
+            args: [{ imports: [
+                        RouterModule,
+                        //
+                        AXImageModule,
+                        AXAvatarModule,
+                        AXPopoverModule,
+                        AXButtonModule,
+                        AXDecoratorModule,
+                        AXLoadingModule,
+                        AXTranslationModule,
+                        //
+                        AXPTenantChooserDropdownComponent,
+                        AsyncPipe,
+                        AXPUserAvatarComponent,
+                    ], template: "@if((isAuthenticated$ | async)) {\n<div class=\"p-3 flex items-center gap-1 border-b border-lighter\" [class.justify-center]=\"isCompactMode()\">\n  <div #avatar>\n    <axp-user-avatar [size]=\"48\" [userId]=\"(user$ | async)?.id!\"></axp-user-avatar>\n  </div>\n  @if (!isCompactMode()) {\n  <div class=\"flex flex-col\">\n    <ax-title class=\"text-sm font-medium px-3\">{{ (user$ | async)?.title }}</ax-title>\n    <axp-tenant-chooser-dropdown />\n  </div>\n  }\n</div>\n}\n" }]
+        }], ctorParameters: () => [], propDecorators: { profilePopover: [{
+                type: ViewChild,
+                args: ['profilePopover']
+            }] } });
+
+class AXMUserDeviceSessionsService {
+}
+class AXMUserDeviceSessionsServiceImp extends AXMUserDeviceSessionsService {
+    constructor() {
+        super(...arguments);
+        //#region ---- Services & Dependencies ----
+        this.sessionService = inject(AXPSessionService);
+        this.entityService = inject(AXPEntityService);
+        this.deviceSessionsDataAccessor = this.entityService
+            .withEntity(RootConfig$1.module.name, RootConfig$1.entities.deviceSessions.name)
+            .data();
+        this.deviceSessionsService = inject(AXMDeviceSessionsService);
+        this.settingsService = inject(AXPSettingsService);
+        this.toastService = inject(AXToastService);
+        this.translationService = inject(AXTranslationService);
+    }
+    //#endregion
+    async getSessions() {
+        const userId = this.sessionService.user?.id;
+        if (!userId) {
+            return [];
+        }
+        const response = await this.deviceSessionsDataAccessor.query();
+        return response.items.filter((item) => item.userId === userId &&
+            String(item.status).toLowerCase() === 'active' &&
+            !item.isActiveSession);
+    }
+    async getCurrentActiveSessions() {
+        const userId = this.sessionService.user?.id;
+        if (!userId) {
+            throw new Error('No user found in session');
+        }
+        const response = await this.deviceSessionsDataAccessor.query();
+        const userSessions = response.items.filter((item) => item.userId === userId && String(item.status).toLowerCase() === 'active');
+        const activeSession = userSessions.find((item) => item.isActiveSession);
+        if (activeSession) {
+            return activeSession;
+        }
+        const mostRecentSession = orderBy(userSessions, [(session) => new Date(session.lastLoginDate).getTime()], ['desc'])[0];
+        if (!mostRecentSession) {
+            throw new Error('No active session found for current user');
+        }
+        return mostRecentSession;
+    }
+    async terminateSession(sessionId) {
+        await this.deviceSessionsDataAccessor.update(sessionId, { status: 'revoked' });
+        await this.showTerminateSuccessToast();
+    }
+    async terminateAllSession() {
+        await this.deviceSessionsService.terminateAllCurrentUserSessions();
+        await this.showTerminateSuccessToast();
+    }
+    async setInactiveSessionTermination(value) {
+        await this.settingsService
+            .scope(AXPPlatformScope.User)
+            .set(AXPAuthSettings.InactiveSessionTermination, value);
+    }
+    async showTerminateSuccessToast() {
+        const showResult = await this.settingsService.get(AXPCommonSettings.EnableOperationToasts);
+        if (!showResult) {
+            return;
+        }
+        this.toastService.show({
+            color: 'success',
+            title: await this.translationService.translateAsync('workflow.session-terminated'),
+            content: await this.translationService.translateAsync('workflow.session-terminated-body'),
+            closeButton: true,
+            timeOut: 3000,
+            timeOutProgress: true,
+        });
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMUserDeviceSessionsServiceImp, deps: null, target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMUserDeviceSessionsServiceImp }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMUserDeviceSessionsServiceImp, decorators: [{
+            type: Injectable
+        }] });
+
+const canActivateTenantChooser = async (route, state) => {
+    const sessionService = inject(AXPSessionService);
+    const authStrategyRegistry = inject(AXPAuthStrategyRegistryService);
+    const router = inject(Router);
+    const strategyName = sessionService.getSessionData()?.strategy;
+    const strategy = authStrategyRegistry.get(strategyName);
+    if (!sessionService.user?.id) {
+        return router.createUrlTree(['/auth/login']);
+    }
+    const tenants = await firstValueFrom(sessionService.tenants$);
+    if (tenants.length === 0) {
+        await sessionService.signout();
+        window.alert('You do not have any tenant assigned to your account and cannot use the site. Please contact your administrator.');
+        return router.createUrlTree(['/auth/login']);
+    }
+    if (tenants.length === 1) {
+        if (strategy && typeof strategy.updateToken === 'function') {
+            const updateContext = {
+                user: sessionService.user,
+                tenant: tenants[0],
+            };
+            await sessionService.updateToken(updateContext);
+            return router.createUrlTree(['/auth/account/app-chooser']);
+        }
+        return false;
+    }
+    return true;
+};
+
+const canActivateAppChooser = async (route, state) => {
+    const sessionService = inject(AXPSessionService);
+    const authStrategyRegistry = inject(AXPAuthStrategyRegistryService);
+    const homePageService = inject(AXPHomePageService);
+    const router = inject(Router);
+    const strategyName = sessionService.getSessionData()?.strategy;
+    const strategy = authStrategyRegistry.get(strategyName);
+    const apps = await firstValueFrom(sessionService.applications$);
+    if (apps.length === 0) {
+        await router.navigate(['/auth/login']);
+        return false;
+    }
+    if (apps.length === 1) {
+        const tenantId = sessionService.tenant?.id;
+        if (!tenantId) {
+            throw new Error('Tenant ID is missing. Please contact support.');
+        }
+        if (strategy && typeof strategy.updateToken === 'function') {
+            const updateContext = {
+                user: sessionService.user,
+                tenant: sessionService.tenant,
+                application: apps[0],
+            };
+            await sessionService.updateToken(updateContext);
+            return router.createUrlTree([homePageService.getCurrent().path]);
+        }
+        return false;
+    }
+    return true;
+};
+
+function routesFacory() {
+    let routes = [];
+    routes = [
+        {
+            path: 'tenant-chooser',
+            loadComponent: () => import('./acorex-platform-module-auth-client-tenant-chooser.component-ihsqCJKN.mjs').then((c) => c.AXPAuthTenantChooserComponent),
+            canActivate: [AXPAuthGuard, canActivateTenantChooser],
+        },
+        {
+            path: 'app-chooser',
+            loadComponent: () => import('./acorex-platform-module-auth-client-app-chooser.component-Cm2ZagaI.mjs').then((c) => c.AXPAuthAppChooserComponent),
+            canActivate: [AXPAuthGuard, canActivateAppChooser],
+        },
+    ];
+    return routes;
+}
+class AXPAccountModule {
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPAccountModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule }); }
+    static { this.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "21.2.9", ngImport: i0, type: AXPAccountModule, imports: [RouterModule, i1$3.AXPComponentSlotModule] }); }
+    static { this.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPAccountModule, providers: [
+            {
+                provide: ROUTES,
+                multi: true,
+                useFactory: routesFacory,
+            },
+            {
+                provide: AXMUserDeviceSessionsService,
+                useClass: AXMUserDeviceSessionsServiceImp,
+            },
+        ], imports: [RouterModule,
+            //
+            AXPComponentSlotModule.forChild({
+                'root-side-menu-header': [
+                    {
+                        priority: 1,
+                        name: 'user-card',
+                        component: AXMUserProfileCardSlotComponent,
+                    },
+                ],
+                'root-header-end': [
+                    {
+                        priority: 98,
+                        name: 'app-choser',
+                        component: AXMAppChooserSlotComponent,
+                    },
+                    {
+                        priority: 99,
+                        name: 'profile',
+                        component: AXMAuthProfileSlotComponent,
+                    },
+                ],
+            })] }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPAccountModule, decorators: [{
+            type: NgModule,
+            args: [{
+                    declarations: [],
+                    imports: [
+                        RouterModule,
+                        //
+                        AXPComponentSlotModule.forChild({
+                            'root-side-menu-header': [
+                                {
+                                    priority: 1,
+                                    name: 'user-card',
+                                    component: AXMUserProfileCardSlotComponent,
+                                },
+                            ],
+                            'root-header-end': [
+                                {
+                                    priority: 98,
+                                    name: 'app-choser',
+                                    component: AXMAppChooserSlotComponent,
+                                },
+                                {
+                                    priority: 99,
+                                    name: 'profile',
+                                    component: AXMAuthProfileSlotComponent,
+                                },
+                            ],
+                        }),
+                    ],
+                    exports: [],
+                    providers: [
+                        {
+                            provide: ROUTES,
+                            multi: true,
+                            useFactory: routesFacory,
+                        },
+                        {
+                            provide: AXMUserDeviceSessionsService,
+                            useClass: AXMUserDeviceSessionsServiceImp,
+                        },
+                    ],
+                }]
+        }] });
+
+var account_module = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    AXPAccountModule: AXPAccountModule
+});
+
+//#region ---- Idle lock service ----
+const IDLE_CHECK_INTERVAL_MS = 1_000;
+const MOUSE_MOVE_THROTTLE_MS = 1_000;
+const DEFAULT_LOCK_WHEN_IDLE_MINUTES = 15;
+const SECURITY_MANAGEMENT_MODULE = 'SecurityManagement';
+const SECURITY_MANAGEMENT_USER_ENTITY = 'User';
+const LOCK_WHEN_IDLE_SETTING_KEYS = [AXPAuthSettings.LockWhenIdleEnabled, AXPAuthSettings.LockWhenIdleMinutes];
+/**
+ * Tracks user inactivity and locks the session overlay when idle threshold is exceeded.
+ * Requires the Lock When Idle setting to be enabled; unlock uses PIN when configured, otherwise password.
+ * Locked state is stored on {@link AXPSessionService.SESSION_KEY} and survives page refresh and browser restart.
+ */
+class AXPIdleLockService {
+    //#endregion
+    //#region ---- Constructor ----
+    constructor() {
+        //#region ---- State ----
+        this.locked = signal(false, ...(ngDevMode ? [{ debugName: "locked" }] : /* istanbul ignore next */ []));
+        this.idleTimeoutMs = signal(DEFAULT_LOCK_WHEN_IDLE_MINUTES * 60_000, ...(ngDevMode ? [{ debugName: "idleTimeoutMs" }] : /* istanbul ignore next */ []));
+        this.enabled = signal(false, ...(ngDevMode ? [{ debugName: "enabled" }] : /* istanbul ignore next */ []));
+        /** Whether manual or idle lock is available (Lock When Idle setting is enabled). */
+        this.canLock = this.enabled.asReadonly();
+        this.storedPinCode = signal('', ...(ngDevMode ? [{ debugName: "storedPinCode" }] : /* istanbul ignore next */ []));
+        this.lastActivityAt = Date.now();
+        this.lastMouseMoveAt = 0;
+        this.idleCheckTimerId = null;
+        this.overlayRef = null;
+        this.overlayOpening = false;
+        this.enableTask = Promise.resolve();
+        //#endregion
+        //#region ---- Services & Dependencies ----
+        this.sessionService = inject(AXPSessionService);
+        this.settingsService = inject(AXPSettingsService);
+        this.entityService = inject(AXPEntityService);
+        this.overlayService = inject(AXOverlayService);
+        this.platform = inject(AXPlatform);
+        this.destroyRef = inject(DestroyRef);
+        this.injector = inject(Injector);
+        //#region ---- Activity listeners ----
+        this.onActivity = () => {
+            this.recordActivity();
+        };
+        this.onMouseMove = () => {
+            const now = Date.now();
+            if (now - this.lastMouseMoveAt < MOUSE_MOVE_THROTTLE_MS) {
+                return;
+            }
+            this.lastMouseMoveAt = now;
+            this.recordActivity();
+        };
+        this.sessionService.status$
+            .pipe(filter((status) => status === AXPSessionStatus.Authenticated ||
+            status === AXPSessionStatus.Authorized ||
+            status === AXPSessionStatus.SignedOut ||
+            status === AXPSessionStatus.Expired), takeUntilDestroyed(this.destroyRef))
+            .subscribe((status) => {
+            const isActiveSession = status === AXPSessionStatus.Authenticated || status === AXPSessionStatus.Authorized;
+            if (isActiveSession) {
+                void this.scheduleEnable();
+                return;
+            }
+            void this.handleInactiveSession(status);
+        });
+        afterNextRender(() => {
+            if (this.sessionService.isLocked()) {
+                void this.scheduleEnable();
+            }
+        }, { injector: this.injector });
+        this.settingsService.onChanged.pipe(takeUntilDestroyed(this.destroyRef)).subscribe((event) => {
+            if (!LOCK_WHEN_IDLE_SETTING_KEYS.some((key) => event.keys.includes(key))) {
+                return;
+            }
+            void this.applyLockWhenIdleSettingChange();
+        });
+    }
+    //#endregion
+    //#region ---- Public Methods ----
+    hasPinCode() {
+        return !isEmpty(this.storedPinCode());
+    }
+    verifyPin(pin) {
+        const expected = this.storedPinCode();
+        return !isEmpty(expected) && pin === expected;
+    }
+    async verifyPassword(password) {
+        const userId = this.sessionService.user?.id;
+        if (isNil(userId) || isEmpty(password)) {
+            return false;
+        }
+        try {
+            const user = await this.entityService
+                .withEntity(SECURITY_MANAGEMENT_MODULE, SECURITY_MANAGEMENT_USER_ENTITY)
+                .data()
+                .byKey(userId);
+            return await verifyPassword(password, get(user, 'password'));
+        }
+        catch (error) {
+            console.error('Failed to verify password for session unlock', error);
+            return false;
+        }
+    }
+    unlock() {
+        this.locked.set(false);
+        this.sessionService.setLocked(false);
+        this.closeLockOverlay();
+        this.lastActivityAt = Date.now();
+    }
+    /** Locks the session overlay when Lock When Idle is enabled. */
+    lockScreen() {
+        this.lock();
+    }
+    async refreshPinState() {
+        if (!this.isOperational()) {
+            this.storedPinCode.set('');
+            return;
+        }
+        const userId = this.sessionService.user?.id;
+        if (isNil(userId)) {
+            this.storedPinCode.set('');
+            return;
+        }
+        try {
+            const user = await this.entityService
+                .withEntity(SECURITY_MANAGEMENT_MODULE, SECURITY_MANAGEMENT_USER_ENTITY)
+                .data()
+                .byKey(userId);
+            const pinCode = defaultTo(get(user, 'pinCode'), '');
+            this.storedPinCode.set(pinCode);
+        }
+        catch (error) {
+            console.error('Failed to load security PIN for idle lock', error);
+            this.storedPinCode.set('');
+        }
+    }
+    /** Refreshes lock settings and PIN state for menu/commands. */
+    async refreshLockState() {
+        await this.refreshConfiguration();
+        if (!this.isOperational()) {
+            return;
+        }
+        await this.refreshPinState();
+    }
+    /** Restores the lock overlay when the persisted session is locked. */
+    restoreFromPersistedSession() {
+        if (!this.sessionService.isLocked()) {
+            return Promise.resolve();
+        }
+        return this.scheduleEnable();
+    }
+    /** Re-evaluates idle lock after the user sets or changes their security PIN. */
+    async notifyPinChanged() {
+        await this.refreshConfiguration();
+        if (!this.isOperational()) {
+            return;
+        }
+        const status = await firstValueFrom(this.sessionService.status$);
+        const isActiveSession = status === AXPSessionStatus.Authenticated || status === AXPSessionStatus.Authorized;
+        if (isActiveSession) {
+            await this.scheduleEnable();
+        }
+    }
+    //#endregion
+    //#region ---- Private Methods ----
+    scheduleEnable() {
+        this.enableTask = this.enableTask.then(() => this.runEnable());
+        return this.enableTask;
+    }
+    async runEnable() {
+        await this.refreshConfiguration();
+        if (this.sessionService.isLocked()) {
+            await this.refreshPinState();
+            this.restoreLockedSession();
+            return;
+        }
+        if (!this.enabled()) {
+            this.disable(false);
+            return;
+        }
+        await this.refreshPinState();
+        this.resetUnlockedRuntimeState();
+        this.attachActivityListeners();
+        this.startIdleCheck();
+    }
+    /** Idle lock is active when enabled, or when a persisted lock must be restored/unlocked. */
+    isOperational() {
+        return this.enabled() || this.sessionService.isLocked();
+    }
+    restoreLockedSession() {
+        this.locked.set(true);
+        if (!this.overlayRef && !this.overlayOpening) {
+            void this.openLockOverlay();
+        }
+        if (this.enabled()) {
+            this.attachActivityListeners();
+            this.startIdleCheck();
+        }
+    }
+    async handleInactiveSession(status) {
+        if (status !== AXPSessionStatus.SignedOut && status !== AXPSessionStatus.Expired) {
+            return;
+        }
+        const isLoading = await firstValueFrom(this.sessionService.isLoading$);
+        if (isLoading) {
+            return;
+        }
+        this.disable(true);
+    }
+    disable(clearPersistedLock = false) {
+        const preserveLockedSession = this.sessionService.isLocked() && !clearPersistedLock;
+        this.enabled.set(false);
+        if (!preserveLockedSession) {
+            this.locked.set(false);
+            this.closeLockOverlay();
+        }
+        if (clearPersistedLock) {
+            this.sessionService.setLocked(false);
+        }
+        this.detachActivityListeners();
+        this.stopIdleCheck();
+    }
+    async refreshConfiguration() {
+        const lockWhenIdleEnabled = await this.settingsService.get(AXPAuthSettings.LockWhenIdleEnabled);
+        const minutes = await this.settingsService.get(AXPAuthSettings.LockWhenIdleMinutes);
+        const resolvedMinutes = typeof minutes === 'number' && minutes > 0 ? minutes : DEFAULT_LOCK_WHEN_IDLE_MINUTES;
+        this.enabled.set(lockWhenIdleEnabled === true);
+        this.idleTimeoutMs.set(resolvedMinutes * 60_000);
+    }
+    async applyLockWhenIdleSettingChange() {
+        const status = await firstValueFrom(this.sessionService.status$);
+        const isActiveSession = status === AXPSessionStatus.Authenticated || status === AXPSessionStatus.Authorized;
+        if (!isActiveSession) {
+            return;
+        }
+        await this.scheduleEnable();
+    }
+    recordActivity() {
+        if (!this.enabled() || this.locked()) {
+            return;
+        }
+        this.lastActivityAt = Date.now();
+    }
+    lock() {
+        if (!this.enabled() || this.locked()) {
+            return;
+        }
+        this.locked.set(true);
+        this.sessionService.setLocked(true);
+        void this.openLockOverlay();
+    }
+    openLockOverlay() {
+        if (this.overlayRef || this.overlayOpening || !this.shouldShowLockOverlay()) {
+            return;
+        }
+        afterNextRender(() => {
+            void this.createLockOverlay();
+        }, { injector: this.injector });
+    }
+    shouldShowLockOverlay() {
+        return this.locked() || this.sessionService.isLocked();
+    }
+    async createLockOverlay() {
+        if (this.overlayRef || this.overlayOpening || !this.shouldShowLockOverlay()) {
+            return;
+        }
+        this.overlayOpening = true;
+        this.locked.set(true);
+        try {
+            const { AXMSessionLockOverlayComponent: overlayComponent } = await import('./acorex-platform-module-auth-client-session-lock-overlay.component-DqXGuIgN.mjs');
+            const panelClasses = ['axm-session-lock-overlay-shell'];
+            if (this.platform.isDark()) {
+                panelClasses.push('ax-dark');
+            }
+            const ref = await this.overlayService.create(overlayComponent, {
+                centered: false,
+                width: '100%',
+                panelClass: panelClasses,
+                backdrop: {
+                    enabled: false,
+                    background: false,
+                    closeOnClick: false,
+                },
+                onDispose: () => {
+                    this.overlayRef = null;
+                },
+            });
+            if (!this.shouldShowLockOverlay()) {
+                ref.dispose();
+                return;
+            }
+            this.locked.set(true);
+            this.overlayRef = ref;
+        }
+        catch (error) {
+            console.error('Failed to open session lock overlay', error);
+            if (this.shouldShowLockOverlay()) {
+                window.setTimeout(() => this.openLockOverlay(), 250);
+            }
+        }
+        finally {
+            this.overlayOpening = false;
+        }
+    }
+    closeLockOverlay() {
+        if (this.overlayRef) {
+            this.overlayRef.dispose();
+            this.overlayRef = null;
+        }
+    }
+    startIdleCheck() {
+        this.stopIdleCheck();
+        this.idleCheckTimerId = setInterval(() => {
+            if (!this.enabled() || this.locked()) {
+                return;
+            }
+            if (Date.now() - this.lastActivityAt >= this.idleTimeoutMs()) {
+                this.lock();
+            }
+        }, IDLE_CHECK_INTERVAL_MS);
+    }
+    stopIdleCheck() {
+        if (!isNil(this.idleCheckTimerId)) {
+            clearInterval(this.idleCheckTimerId);
+            this.idleCheckTimerId = null;
+        }
+    }
+    resetUnlockedRuntimeState() {
+        this.locked.set(false);
+        this.closeLockOverlay();
+        this.lastActivityAt = Date.now();
+    }
+    attachActivityListeners() {
+        this.detachActivityListeners();
+        const events = ['mousedown', 'keydown', 'wheel', 'touchstart', 'scroll', 'click'];
+        events.forEach((eventName) => document.addEventListener(eventName, this.onActivity, true));
+        document.addEventListener('mousemove', this.onMouseMove, true);
+    }
+    detachActivityListeners() {
+        const events = ['mousedown', 'keydown', 'wheel', 'touchstart', 'scroll', 'click'];
+        events.forEach((eventName) => document.removeEventListener(eventName, this.onActivity, true));
+        document.removeEventListener('mousemove', this.onMouseMove, true);
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPIdleLockService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPIdleLockService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPIdleLockService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }], ctorParameters: () => [] });
+
+//#region ---- Entity logo sync ----
+/** Registers tenant/application logo providers when the session is authorized. */
+class AXPLogoEntitySyncService {
+    constructor() {
+        this.session = inject(AXPSessionService);
+        this.logoRegistration = inject(AXPEntityLogoRegistrationService);
+        combineLatest([this.session.isAuthorized$, this.session.tenant$])
+            .pipe(filter(([authorized]) => authorized), switchMap(() => from(this.syncEntityLogos())))
+            .subscribe();
+    }
+    async syncEntityLogos() {
+        const tenants = await firstValueFrom(this.session.tenants$);
+        this.logoRegistration.registerTenants(tenants.map((tenant) => ({
+            id: tenant.id,
+            title: tenant.title,
+            logo: tenant.logo,
+        })));
+        if (!this.session.tenant?.id) {
+            return;
+        }
+        const applications = await firstValueFrom(this.session.applications$);
+        this.logoRegistration.registerApplications(applications.map((application) => ({
+            id: application.id,
+            title: application.title,
+            logoUrl: application.logoUrl,
+        })));
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPLogoEntitySyncService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPLogoEntitySyncService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPLogoEntitySyncService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }], ctorParameters: () => [] });
+
+//#region ---- Profile page component keys ----
+/** Full-tab activity heatmap on the profile Activity group. */
+const PROFILE_ACTIVITY_CHART_COMPONENT_KEY = 'auth.profile-activity-chart';
+/** Danger-zone block for the delete-account profile section. */
+const PROFILE_DELETE_ACCOUNT_DANGER_ZONE_COMPONENT_KEY = 'auth.profile-delete-account-danger-zone';
+//#endregion
+
+//#region ---- Helpers ----
+const comingSoon = (messageKey) => ({
+    name: AXMAuthCommandKeys.Profile.ComingSoon,
+    options: { messageKey },
+});
+//#endregion
+//#region ---- Core profile groups ----
+/** Registers built-in profile page tab groups. */
+const CoreProfileGroupsHookProvider = {
+    key: PROFILE_PAGE_GROUPS_HOOK,
+    priority: 0,
+    execute: (payload) => ({
+        ...payload,
+        groups: [
+            ...payload.groups,
+            {
+                id: 'account',
+                title: '@auth:profile-page.groups.account.title',
+                icon: 'far fa-user',
+                priority: 10,
+            },
+            {
+                id: 'security',
+                title: '@auth:profile-page.groups.security.title',
+                icon: 'far fa-shield-halved',
+                priority: 20,
+            },
+            {
+                id: 'requests',
+                title: '@auth:profile-page.groups.requests.title',
+                icon: 'far fa-inbox',
+                priority: 30,
+            },
+            {
+                id: 'activity',
+                title: '@auth:profile-page.groups.activity.title',
+                icon: 'far fa-clock-rotate-left',
+                priority: 40,
+                content: {
+                    mode: 'component',
+                    componentKey: PROFILE_ACTIVITY_CHART_COMPONENT_KEY,
+                },
+            },
+        ],
+    }),
+};
+//#endregion
+//#region ---- Core profile sections ----
+/** Registers built-in profile hub section cards and actions. */
+const CoreProfileSectionsHookProvider = {
+    key: PROFILE_PAGE_SECTIONS_HOOK,
+    priority: 0,
+    execute: (payload) => ({
+        ...payload,
+        sections: [
+            ...payload.sections,
+            {
+                id: 'basic-info',
+                groupId: 'account',
+                title: '@auth:profile-page.sections.basic-info.title',
+                description: '@auth:profile-page.sections.basic-info.description',
+                icon: 'far fa-address-card',
+                priority: 10,
+                layout: { colSpan: 6 },
+                actions: [
+                    {
+                        name: 'edit-basic-info',
+                        title: '@auth:profile-page.sections.basic-info.actions.edit',
+                        icon: 'far fa-pen',
+                        command: { name: AXMAuthCommandKeys.Profile.EditAccountInfo },
+                    },
+                ],
+            },
+            {
+                id: 'profile-photo',
+                groupId: 'account',
+                title: '@auth:profile-page.sections.profile-photo.title',
+                description: '@auth:profile-page.sections.profile-photo.description',
+                icon: 'far fa-camera',
+                priority: 15,
+                layout: { colSpan: 6 },
+                actions: [
+                    {
+                        name: 'change-profile-photo',
+                        title: '@auth:profile-page.sections.profile-photo.actions.manage',
+                        icon: 'far fa-pen',
+                        command: { name: AXMAuthCommandKeys.Profile.ChangePhoto, options: { mode: 'manage' } },
+                    },
+                ],
+            },
+            {
+                id: 'change-password',
+                groupId: 'security',
+                title: '@auth:profile-page.sections.change-password.title',
+                description: '@auth:profile-page.sections.change-password.description',
+                icon: 'far fa-key',
+                priority: 10,
+                layout: { colSpan: 6 },
+                actions: [
+                    {
+                        name: 'change-password',
+                        title: '@auth:profile-page.sections.change-password.actions.manage',
+                        icon: 'far fa-pen',
+                        command: { name: AXMAuthCommandKeys.Security.ChangePassword },
+                    },
+                ],
+            },
+            {
+                id: 'security-pin',
+                groupId: 'security',
+                title: '@auth:profile-page.sections.security-pin.title',
+                description: '@auth:profile-page.sections.security-pin.description',
+                icon: 'far fa-lock',
+                priority: 15,
+                layout: { colSpan: 6 },
+            },
+            {
+                id: 'active-sessions',
+                groupId: 'security',
+                title: '@auth:profile-page.sections.active-sessions.title',
+                description: '@auth:profile-page.sections.active-sessions.description',
+                icon: 'far fa-laptop-mobile',
+                priority: 20,
+                layout: { colSpan: 6 },
+                actions: [
+                    {
+                        name: 'active-sessions',
+                        title: '@auth:profile-page.sections.active-sessions.actions.manage',
+                        icon: 'far fa-arrow-right',
+                        command: { name: AXMAuthCommandKeys.Session.OpenSessions },
+                    },
+                ],
+            },
+            {
+                id: 'two-factor',
+                groupId: 'security',
+                title: '@auth:profile-page.sections.two-factor.title',
+                description: '@auth:profile-page.sections.two-factor.description',
+                icon: 'far fa-shield-keyhole',
+                priority: 30,
+                layout: { colSpan: 6 },
+                actions: [
+                    {
+                        name: 'manage-two-factor',
+                        title: '@auth:profile-page.sections.two-factor.actions.manage',
+                        icon: 'far fa-pen',
+                        command: comingSoon('@auth:profile-page.commands.manage-two-factor.coming-soon'),
+                    },
+                ],
+            },
+            {
+                id: 'login-history',
+                groupId: 'security',
+                title: '@auth:profile-page.sections.login-history.title',
+                description: '@auth:profile-page.sections.login-history.description',
+                icon: 'far fa-right-to-bracket',
+                priority: 40,
+                layout: { colSpan: 6 },
+                actions: [
+                    {
+                        name: 'view-login-history',
+                        title: '@auth:profile-page.sections.login-history.actions.manage',
+                        icon: 'far fa-arrow-right',
+                        command: { name: AXMAuthCommandKeys.Security.ViewLoginHistory },
+                    },
+                ],
+            },
+            {
+                id: 'delete-account',
+                groupId: 'account',
+                priority: 100,
+                content: {
+                    mode: 'component',
+                    componentKey: PROFILE_DELETE_ACCOUNT_DANGER_ZONE_COMPONENT_KEY,
+                },
+                layout: { colSpan: 12 },
+            },
+        ],
+    }),
+};
+//#endregion
+
+//#region ---- Security PIN section hook ----
+const SECURITY_PIN_SECTION_ID = 'security-pin';
+/** Enriches the security PIN section with change/remove actions when a PIN exists. */
+const SecurityPinSectionHookProvider = {
+    key: PROFILE_PAGE_SECTIONS_HOOK,
+    priority: 10,
+    execute: async (payload) => {
+        const hasPinCode = await loadHasPinCode();
+        return {
+            ...payload,
+            sections: payload.sections.map((section) => {
+                if (section.id !== SECURITY_PIN_SECTION_ID) {
+                    return section;
+                }
+                return {
+                    ...section,
+                    actions: [
+                        {
+                            name: 'set-pin-code',
+                            title: hasPinCode
+                                ? '@auth:profile-page.sections.security-pin.actions.change'
+                                : '@auth:profile-page.sections.security-pin.actions.manage',
+                            icon: 'far fa-pen',
+                            default: true,
+                            command: { name: AXMAuthCommandKeys.Security.SetPinCode },
+                        },
+                        ...(hasPinCode
+                            ? [
+                                {
+                                    name: 'remove-pin-code',
+                                    title: '@auth:profile-page.sections.security-pin.actions.remove',
+                                    icon: 'far fa-trash-can',
+                                    color: 'danger',
+                                    command: { name: AXMAuthCommandKeys.Security.RemovePinCode },
+                                },
+                            ]
+                            : []),
+                    ],
+                };
+            }),
+        };
+    },
+};
+async function loadHasPinCode() {
+    const sessionService = inject(AXPSessionService);
+    const entityService = inject(AXPEntityService);
+    const userId = sessionService.user?.id;
+    if (isNil(userId)) {
+        return false;
+    }
+    try {
+        const user = await entityService
+            .withEntity(RootConfig$1.module.name, RootConfig$1.entities.users.name)
+            .data()
+            .byKey(userId);
+        return !isEmpty(defaultTo(get(user, 'pinCode'), ''));
+    }
+    catch (error) {
+        console.error('Failed to load security PIN for profile section', error);
+        return false;
+    }
+}
+//#endregion
+
+//#region ---- Password change tracking service ----
+const STORAGE_KEY_PREFIX = 'axp-auth:last-password-change-at:';
+/** Persists the last self-service password change timestamp per user (client-side). */
+class AXPAuthPasswordChangeTrackingService {
+    constructor() {
+        //#region ---- Services & Dependencies ----
+        this.sessionService = inject(AXPSessionService);
+    }
+    //#endregion
+    //#region ---- Public API ----
+    getLastChangedAt(userId) {
+        const id = userId ?? this.sessionService.user?.id;
+        if (isNil(id)) {
+            return undefined;
+        }
+        const raw = localStorage.getItem(this.buildStorageKey(id));
+        if (!raw) {
+            return undefined;
+        }
+        const parsed = new Date(raw);
+        return Number.isNaN(parsed.getTime()) ? undefined : parsed;
+    }
+    recordChange(userId, changedAt = new Date()) {
+        const id = userId ?? this.sessionService.user?.id;
+        if (isNil(id)) {
+            return;
+        }
+        localStorage.setItem(this.buildStorageKey(id), changedAt.toISOString());
+    }
+    //#endregion
+    //#region ---- Private Methods ----
+    buildStorageKey(userId) {
+        return `${STORAGE_KEY_PREFIX}${userId}`;
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPAuthPasswordChangeTrackingService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPAuthPasswordChangeTrackingService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPAuthPasswordChangeTrackingService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }] });
+
+//#region ---- Section ids ----
+const CHANGE_PASSWORD_SECTION_ID = 'change-password';
+const ACTIVE_SESSIONS_SECTION_ID = 'active-sessions';
+const LOGIN_HISTORY_SECTION_ID = 'login-history';
+//#endregion
+//#region ---- Profile page security insights service ----
+/** Loads contextual security insights for profile section cards. */
+class AXPUserProfileSecurityInsightsService {
+    constructor() {
+        //#region ---- Services & Dependencies ----
+        this.sessionService = inject(AXPSessionService);
+        this.entityService = inject(AXPEntityService);
+        this.translateService = inject(AXTranslationService);
+        this.passwordChangeTrackingService = inject(AXPAuthPasswordChangeTrackingService);
+    }
+    //#endregion
+    //#region ---- Public API ----
+    async loadBySectionId() {
+        const userId = this.sessionService.user?.id;
+        if (!userId) {
+            return {};
+        }
+        const sessions = await this.loadUserSessions(userId);
+        const insightsBySectionId = {};
+        const passwordInsights = this.buildPasswordInsights(userId);
+        if (!isEmpty(passwordInsights)) {
+            insightsBySectionId[CHANGE_PASSWORD_SECTION_ID] = passwordInsights;
+        }
+        const activeSessionInsights = await this.buildActiveSessionInsights(sessions);
+        if (!isEmpty(activeSessionInsights)) {
+            insightsBySectionId[ACTIVE_SESSIONS_SECTION_ID] = activeSessionInsights;
+        }
+        const loginHistoryInsights = this.buildLoginHistoryInsights(sessions);
+        if (!isEmpty(loginHistoryInsights)) {
+            insightsBySectionId[LOGIN_HISTORY_SECTION_ID] = loginHistoryInsights;
+        }
+        return insightsBySectionId;
+    }
+    //#endregion
+    //#region ---- Insight builders ----
+    buildPasswordInsights(userId) {
+        const lastChangedAt = this.passwordChangeTrackingService.getLastChangedAt(userId);
+        if (isNil(lastChangedAt)) {
+            return [];
+        }
+        return [
+            {
+                id: 'last-password-change',
+                icon: 'fa-light fa-fw fa-clock',
+                date: lastChangedAt,
+                datePrefix: '@auth:profile-page.sections.change-password.insights.last-changed',
+            },
+        ];
+    }
+    async buildActiveSessionInsights(sessions) {
+        const activeSessions = sessions.filter((session) => String(session.status).toLowerCase() === 'active');
+        const currentSession = activeSessions.find((session) => session.isActiveSession) ??
+            orderBy(activeSessions, [(session) => this.parseValidDate(session.lastLoginDate)?.getTime() ?? 0], ['desc'])[0];
+        if (isNil(currentSession)) {
+            return [];
+        }
+        const deviceSummary = this.formatSessionSummary(currentSession);
+        if (isEmpty(deviceSummary)) {
+            return [];
+        }
+        const otherActiveCount = activeSessions.filter((session) => session.id !== currentSession.id).length;
+        const insights = [
+            {
+                id: 'current-session',
+                icon: 'fa-light fa-fw fa-laptop',
+                text: deviceSummary,
+            },
+        ];
+        if (otherActiveCount > 0) {
+            insights.push({
+                id: 'other-sessions',
+                icon: 'fa-light fa-fw fa-mobile-screen',
+                text: await this.translateService.translateAsync('@auth:profile-page.sections.active-sessions.insights.other-devices-value', { params: { count: otherActiveCount } }),
+            });
+        }
+        return insights;
+    }
+    buildLoginHistoryInsights(sessions) {
+        const latestSession = orderBy(sessions, [(session) => this.parseValidDate(session.lastLoginDate)?.getTime() ?? 0], ['desc'])[0];
+        if (isNil(latestSession)) {
+            return [];
+        }
+        const insights = [];
+        const lastLoginDate = this.parseValidDate(latestSession.lastLoginDate);
+        if (lastLoginDate) {
+            insights.push({
+                id: 'last-login',
+                icon: 'fa-light fa-fw fa-clock-rotate-left',
+                date: lastLoginDate,
+                datePrefix: '@auth:profile-page.sections.login-history.insights.last-sign-in',
+            });
+        }
+        const location = this.formatLoginLocation(latestSession);
+        if (!isEmpty(location)) {
+            insights.push({
+                id: 'last-login-location',
+                icon: 'fa-light fa-fw fa-location-dot',
+                text: location,
+            });
+        }
+        return insights;
+    }
+    //#endregion
+    //#region ---- Data loading ----
+    async loadUserSessions(userId) {
+        const response = await this.entityService
+            .withEntity(RootConfig$1.module.name, RootConfig$1.entities.deviceSessions.name)
+            .data()
+            .query({ skip: 0, take: 1000 });
+        return (response.items ?? []).filter((item) => item.userId === userId);
+    }
+    //#endregion
+    //#region ---- Formatting ----
+    parseValidDate(value) {
+        if (value instanceof Date) {
+            return Number.isNaN(value.getTime()) ? undefined : value;
+        }
+        if (typeof value === 'string' || typeof value === 'number') {
+            const parsed = new Date(value);
+            return Number.isNaN(parsed.getTime()) ? undefined : parsed;
+        }
+        return undefined;
+    }
+    formatSessionSummary(session) {
+        const parts = [session.deviceName, session.browser, session.location]
+            .map((part) => defaultTo(part, '').trim())
+            .filter(Boolean);
+        return parts.join(' · ');
+    }
+    formatLoginLocation(session) {
+        const parts = [session.location, session.ipAddress]
+            .map((part) => defaultTo(part, '').trim())
+            .filter(Boolean);
+        return parts.join(' · ');
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPUserProfileSecurityInsightsService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPUserProfileSecurityInsightsService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPUserProfileSecurityInsightsService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }] });
+
+//#region ---- Security sections insights hook ----
+/** Adds live security context (sessions, login, password) to profile section cards. */
+const SecuritySectionsInsightsHookProvider = {
+    key: PROFILE_PAGE_SECTIONS_HOOK,
+    priority: 15,
+    execute: async (payload) => {
+        const insightsService = inject(AXPUserProfileSecurityInsightsService);
+        const insightsBySectionId = await insightsService.loadBySectionId();
+        return {
+            ...payload,
+            sections: payload.sections.map((section) => {
+                const insights = insightsBySectionId[section.id];
+                if (isEmpty(insights)) {
+                    return section;
+                }
+                return {
+                    ...section,
+                    insights,
+                };
+            }),
+        };
+    },
+};
+//#endregion
+
+//#region ---- Profile slot logout menu hook ----
+/** Registers the sign-out entry in the profile dropdown. */
+const ProfileSlotLogoutMenuHookProvider = {
+    key: PROFILE_SLOT_MENU_ITEMS_HOOK,
+    priority: 100,
+    execute: (payload) => ({
+        ...payload,
+        items: [
+            ...payload.items,
+            {
+                name: 'logout',
+                title: '@auth:profile.logout',
+                icon: 'fa-light fa-arrow-right-from-bracket',
+                color: 'danger',
+                shortcuts: [{ keys: 'ctrl+shift+q', allowInEditableFields: true }],
+                command: { name: AXMAuthCommandKeys.Session.Signout },
+            },
+        ],
+    }),
+};
+//#endregion
+
+//#region ---- Profile slot my profile menu hook ----
+/** Registers the My Profile entry in the profile dropdown. */
+const ProfileSlotMyProfileMenuHookProvider = {
+    key: PROFILE_SLOT_MENU_ITEMS_HOOK,
+    priority: -10,
+    execute: (payload) => {
+        const sessionService = inject(AXPSessionService);
+        const appName = sessionService.application?.name;
+        if (!appName) {
+            return payload;
+        }
+        return {
+            ...payload,
+            items: [
+                ...payload.items,
+                {
+                    name: 'my-profile',
+                    title: '@auth:profile-page.profile-slot.my-profile',
+                    icon: 'fa-light fa-user',
+                    shortcuts: [{ keys: 'ctrl+shift+p', allowInEditableFields: true }],
+                    command: {
+                        name: 'navigate',
+                        options: {
+                            path: `/${appName}/profile/account`,
+                        },
+                    },
+                },
+            ],
+        };
+    },
+};
+//#endregion
+
+//#region ---- Profile slot lock menu hook ----
+/** Registers the manual lock entry when Lock When Idle is enabled. Profile menu reloads on {@link AXPAuthSettings.LockWhenIdleEnabled} changes. */
+const ProfileSlotLockMenuHookProvider = {
+    key: PROFILE_SLOT_MENU_ITEMS_HOOK,
+    priority: 50,
+    execute: async (payload) => {
+        const idleLockService = inject(AXPIdleLockService);
+        await idleLockService.refreshLockState();
+        if (!idleLockService.canLock()) {
+            return payload;
+        }
+        return {
+            ...payload,
+            items: [
+                ...payload.items,
+                {
+                    name: 'lock-screen',
+                    title: '@auth:profile.lock',
+                    icon: 'fa-light fa-lock',
+                    break: { before: true },
+                    shortcuts: [{ keys: 'ctrl+alt+l', allowInEditableFields: true }],
+                    command: { name: AXMAuthCommandKeys.Session.LockScreen },
+                },
+            ],
+        };
+    },
+};
+//#endregion
+
+//#region ---- User avatar client middleware ----
+const USER_ENTITY = `${RootConfig$1.module.name}.${RootConfig$1.entities.users.name}`;
+const PERSON_ENTITY = `${RootConfig.module.name}.${RootConfig.entities.person.name}`;
+function collectUserRows(result) {
+    if (Array.isArray(result)) {
+        return result;
+    }
+    if (result && typeof result === 'object' && Array.isArray(result.items)) {
+        return result.items ?? [];
+    }
+    if (result && typeof result === 'object') {
+        return [result];
+    }
+    return [];
+}
+async function loadPersonImagesByUserIds(ctx, userIds) {
+    const imageByUserId = new Map();
+    if (!userIds.length) {
+        return imageByUserId;
+    }
+    try {
+        const response = await ctx.backend.query(PERSON_ENTITY, {
+            skip: 0,
+            take: userIds.length,
+            filter: { field: 'userId', operator: { type: 'in' }, value: userIds },
+        });
+        for (const item of response?.items ?? []) {
+            const person = item;
+            const userId = get(person, 'userId');
+            const image = normalizeAvatarRef(person['image']);
+            if (userId != null && image) {
+                imageByUserId.set(String(userId), image);
+            }
+        }
+    }
+    catch {
+        /* ignore hydration failures */
+    }
+    return imageByUserId;
+}
+/** Hydrates User.avatar from linked Person.image on read. */
+const userAvatarHydrateMiddleware = {
+    target: { ops: ['getOne', 'getAll', 'query'], order: 13 },
+    execute: async (ctx, next) => {
+        await next();
+        if (ctx.entityName !== USER_ENTITY) {
+            return;
+        }
+        const rows = collectUserRows(ctx.result);
+        const userIds = Array.from(new Set(rows.map((row) => get(row, 'id')).filter((id) => id != null).map(String)));
+        const imageByUserId = await loadPersonImagesByUserIds(ctx, userIds);
+        for (const row of rows) {
+            const userId = get(row, 'id');
+            if (userId == null) {
+                continue;
+            }
+            const personImage = imageByUserId.get(String(userId));
+            if (personImage) {
+                row['avatar'] = personImage;
+            }
+        }
+    },
+};
+/** Refreshes avatar cache/session after user detail saves avatar. */
+const userAvatarCacheRefreshMiddleware = {
+    target: { ops: ['update'], order: 95 },
+    execute: async (ctx, next) => {
+        const avatarSync = inject(AXPUserAvatarSyncService);
+        if (ctx.entityName !== USER_ENTITY) {
+            await next();
+            return;
+        }
+        const data = (ctx.data ?? {});
+        const avatarTouched = Object.prototype.hasOwnProperty.call(data, 'avatar');
+        await next();
+        if (!avatarTouched) {
+            return;
+        }
+        const userId = (ctx.id ?? get(ctx.result, 'id'));
+        if (!userId) {
+            return;
+        }
+        const avatar = normalizeAvatarRef(get(ctx.result, 'avatar') ?? data['avatar']);
+        await avatarSync.notifyAvatarChanged(userId, avatar);
+    },
+};
+//#endregion
+
+function profileRoutesFactory() {
+    return [
+        {
+            path: ':app/profile',
+            canActivate: [...AXP_PROTECTED_ROUTE_GUARDS],
+            data: { tab: true, rootLayout: true },
+            loadComponent: () => AXPRootLayoutComponent,
+            children: [
+                {
+                    path: '',
+                    redirectTo: 'account',
+                    pathMatch: 'full',
+                },
+                {
+                    path: ':groupId',
+                    loadComponent: () => import('./acorex-platform-module-auth-client-profile-page.component-tbhf7K0V.mjs').then((c) => c.AXMUserProfilePageComponent),
+                    data: { reuse: true },
+                },
+            ],
+        },
+    ];
+}
+class AXMAuthModule {
+    constructor() {
+        inject(AXPIdleLockService);
+        inject(AXPLogoEntitySyncService);
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule }); }
+    static { this.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthModule, imports: [CommonModule, i1$4.AXPCommonModule, i1$5.RouterModule, AXPAccountModule,
+            AXMAuthValidationRulesModule] }); }
+    static { this.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthModule, providers: [
+            provideAppInitializer(() => {
+                const sessionService = inject(AXPSessionService);
+                const idleLockService = inject(AXPIdleLockService);
+                return (async () => {
+                    await firstValueFrom(sessionService.isLoading$.pipe(filter((loading) => !loading)));
+                    if (sessionService.isLocked()) {
+                        await idleLockService.restoreFromPersistedSession();
+                    }
+                })();
+            }),
+            AXMAuthErrorHandler,
+            provideLazyProvider(AXP_MENU_PROVIDER, () => import('./acorex-platform-module-auth-client-menu.provider-Bz-kRip4.mjs').then(m => m.AXMSecurityManagementModuleMenuProvider)),
+            provideLazyProvider(AXP_SETTING_DEFINITION_PROVIDER, () => import('./acorex-platform-module-auth-client-settings.provider-n1qbs6e1.mjs').then(m => m.AXMSettingProvider)),
+            provideLazyProvider(AXP_PAGE_COMPONENT_PROVIDER, () => import('./acorex-platform-module-auth-client-profile-page-component.provider-B-Qtd4_j.mjs').then((module) => module.AXMProfilePageComponentProvider)),
+            provideLazyProvider(AXP_DATASOURCE_DEFINITION_PROVIDER, () => Promise.resolve().then(function () { return datasource_provider; }).then((m) => m.AXMAuthDataSourceProvider)),
+            {
+                provide: ROUTES,
+                multi: true,
+                useFactory: profileRoutesFactory,
+            },
+            {
+                provide: AXP_ENTITY_STORAGE_MIDDLEWARE,
+                multi: true,
+                useValue: userAvatarHydrateMiddleware,
+            },
+            {
+                provide: AXP_ENTITY_STORAGE_MIDDLEWARE,
+                multi: true,
+                useValue: userAvatarCacheRefreshMiddleware,
+            },
+            provideCommandSetups([
+                {
+                    key: AXMAuthCommandKeys.Profile.Show,
+                    command: () => import('./acorex-platform-module-auth-client-show-profile-command-CxMz1yy-.mjs').then((c) => c.AXPShowProfileCommand),
+                },
+                {
+                    key: AXMAuthCommandKeys.Session.Signout,
+                    command: () => import('./acorex-platform-module-auth-client-signout-command-DqqrP5pk.mjs').then((c) => c.AXPSignoutCommand),
+                },
+                {
+                    key: AXMAuthCommandKeys.Session.OpenSessions,
+                    command: () => import('./acorex-platform-module-auth-client-open-sessions.command-CXSGuqYp.mjs').then((c) => c.AXPOpenSessionsCommand),
+                },
+                {
+                    key: AXMAuthCommandKeys.Session.LockScreen,
+                    command: () => import('./acorex-platform-module-auth-client-lock-screen.command-41QnG1TQ.mjs').then((c) => c.AXPLockScreenCommand),
+                },
+                {
+                    key: AXMAuthCommandKeys.Profile.ChangePhoto,
+                    command: () => import('./acorex-platform-module-auth-client-change-photo.command-BC8lw--F.mjs').then((c) => c.AXPChangePhotoCommand),
+                },
+                {
+                    key: AXMAuthCommandKeys.Profile.EditAccountInfo,
+                    command: () => import('./acorex-platform-module-auth-client-edit-account-info.command-B-mVlXxg.mjs').then((c) => c.AXPEditAccountInfoCommand),
+                },
+                {
+                    key: AXMAuthCommandKeys.Security.ChangePassword,
+                    command: () => import('./acorex-platform-module-auth-client-change-password.command-ZyXAjUKw.mjs').then((c) => c.AXPChangePasswordCommand),
+                },
+                {
+                    key: AXMAuthCommandKeys.Security.SetPinCode,
+                    command: () => import('./acorex-platform-module-auth-client-set-pin-code.command-DXTVbrS0.mjs').then((c) => c.AXPSetPinCodeCommand),
+                },
+                {
+                    key: AXMAuthCommandKeys.Security.RemovePinCode,
+                    command: () => import('./acorex-platform-module-auth-client-remove-pin-code.command-zUZooOtv.mjs').then((c) => c.AXPRemovePinCodeCommand),
+                },
+                {
+                    key: AXMAuthCommandKeys.Security.ViewLoginHistory,
+                    command: () => import('./acorex-platform-module-auth-client-view-login-history.command-Dl0os5lD.mjs').then((c) => c.AXPViewLoginHistoryCommand),
+                },
+                {
+                    key: AXMAuthCommandKeys.Security.EditSignature,
+                    command: () => import('./acorex-platform-module-auth-client-edit-signature.command-CcTJJwAX.mjs').then((c) => c.AXPEditSignatureCommand),
+                },
+                {
+                    key: AXMAuthCommandKeys.Profile.ComingSoon,
+                    command: () => import('./acorex-platform-module-auth-client-profile-coming-soon.command-DBbFbzAx.mjs').then((c) => c.AXPProfileComingSoonCommand),
+                },
+            ]),
+            {
+                provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                useValue: ProfileSlotLogoutMenuHookProvider,
+                multi: true,
+            },
+            {
+                provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                useValue: ProfileSlotMyProfileMenuHookProvider,
+                multi: true,
+            },
+            {
+                provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                useValue: ProfileSlotLockMenuHookProvider,
+                multi: true,
+            },
+            {
+                provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                useValue: CoreProfileGroupsHookProvider,
+                multi: true,
+            },
+            {
+                provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                useValue: CoreProfileSectionsHookProvider,
+                multi: true,
+            },
+            {
+                provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                useValue: SecurityPinSectionHookProvider,
+                multi: true,
+            },
+            {
+                provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                useValue: SecuritySectionsInsightsHookProvider,
+                multi: true,
+            },
+        ], imports: [CommonModule,
+            AXPCommonModule.forChild({ errorHandlers: [AXMAuthErrorHandler] }),
+            RouterModule.forChild(routes),
+            AXPAccountModule,
+            AXMAuthValidationRulesModule] }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXMAuthModule, decorators: [{
+            type: NgModule,
+            args: [{
+                    imports: [
+                        CommonModule,
+                        AXPCommonModule.forChild({ errorHandlers: [AXMAuthErrorHandler] }),
+                        RouterModule.forChild(routes),
+                        AXPAccountModule,
+                        AXMAuthValidationRulesModule,
+                    ],
+                    providers: [
+                        provideAppInitializer(() => {
+                            const sessionService = inject(AXPSessionService);
+                            const idleLockService = inject(AXPIdleLockService);
+                            return (async () => {
+                                await firstValueFrom(sessionService.isLoading$.pipe(filter((loading) => !loading)));
+                                if (sessionService.isLocked()) {
+                                    await idleLockService.restoreFromPersistedSession();
+                                }
+                            })();
+                        }),
+                        AXMAuthErrorHandler,
+                        provideLazyProvider(AXP_MENU_PROVIDER, () => import('./acorex-platform-module-auth-client-menu.provider-Bz-kRip4.mjs').then(m => m.AXMSecurityManagementModuleMenuProvider)),
+                        provideLazyProvider(AXP_SETTING_DEFINITION_PROVIDER, () => import('./acorex-platform-module-auth-client-settings.provider-n1qbs6e1.mjs').then(m => m.AXMSettingProvider)),
+                        provideLazyProvider(AXP_PAGE_COMPONENT_PROVIDER, () => import('./acorex-platform-module-auth-client-profile-page-component.provider-B-Qtd4_j.mjs').then((module) => module.AXMProfilePageComponentProvider)),
+                        provideLazyProvider(AXP_DATASOURCE_DEFINITION_PROVIDER, () => Promise.resolve().then(function () { return datasource_provider; }).then((m) => m.AXMAuthDataSourceProvider)),
+                        {
+                            provide: ROUTES,
+                            multi: true,
+                            useFactory: profileRoutesFactory,
+                        },
+                        {
+                            provide: AXP_ENTITY_STORAGE_MIDDLEWARE,
+                            multi: true,
+                            useValue: userAvatarHydrateMiddleware,
+                        },
+                        {
+                            provide: AXP_ENTITY_STORAGE_MIDDLEWARE,
+                            multi: true,
+                            useValue: userAvatarCacheRefreshMiddleware,
+                        },
+                        provideCommandSetups([
+                            {
+                                key: AXMAuthCommandKeys.Profile.Show,
+                                command: () => import('./acorex-platform-module-auth-client-show-profile-command-CxMz1yy-.mjs').then((c) => c.AXPShowProfileCommand),
+                            },
+                            {
+                                key: AXMAuthCommandKeys.Session.Signout,
+                                command: () => import('./acorex-platform-module-auth-client-signout-command-DqqrP5pk.mjs').then((c) => c.AXPSignoutCommand),
+                            },
+                            {
+                                key: AXMAuthCommandKeys.Session.OpenSessions,
+                                command: () => import('./acorex-platform-module-auth-client-open-sessions.command-CXSGuqYp.mjs').then((c) => c.AXPOpenSessionsCommand),
+                            },
+                            {
+                                key: AXMAuthCommandKeys.Session.LockScreen,
+                                command: () => import('./acorex-platform-module-auth-client-lock-screen.command-41QnG1TQ.mjs').then((c) => c.AXPLockScreenCommand),
+                            },
+                            {
+                                key: AXMAuthCommandKeys.Profile.ChangePhoto,
+                                command: () => import('./acorex-platform-module-auth-client-change-photo.command-BC8lw--F.mjs').then((c) => c.AXPChangePhotoCommand),
+                            },
+                            {
+                                key: AXMAuthCommandKeys.Profile.EditAccountInfo,
+                                command: () => import('./acorex-platform-module-auth-client-edit-account-info.command-B-mVlXxg.mjs').then((c) => c.AXPEditAccountInfoCommand),
+                            },
+                            {
+                                key: AXMAuthCommandKeys.Security.ChangePassword,
+                                command: () => import('./acorex-platform-module-auth-client-change-password.command-ZyXAjUKw.mjs').then((c) => c.AXPChangePasswordCommand),
+                            },
+                            {
+                                key: AXMAuthCommandKeys.Security.SetPinCode,
+                                command: () => import('./acorex-platform-module-auth-client-set-pin-code.command-DXTVbrS0.mjs').then((c) => c.AXPSetPinCodeCommand),
+                            },
+                            {
+                                key: AXMAuthCommandKeys.Security.RemovePinCode,
+                                command: () => import('./acorex-platform-module-auth-client-remove-pin-code.command-zUZooOtv.mjs').then((c) => c.AXPRemovePinCodeCommand),
+                            },
+                            {
+                                key: AXMAuthCommandKeys.Security.ViewLoginHistory,
+                                command: () => import('./acorex-platform-module-auth-client-view-login-history.command-Dl0os5lD.mjs').then((c) => c.AXPViewLoginHistoryCommand),
+                            },
+                            {
+                                key: AXMAuthCommandKeys.Security.EditSignature,
+                                command: () => import('./acorex-platform-module-auth-client-edit-signature.command-CcTJJwAX.mjs').then((c) => c.AXPEditSignatureCommand),
+                            },
+                            {
+                                key: AXMAuthCommandKeys.Profile.ComingSoon,
+                                command: () => import('./acorex-platform-module-auth-client-profile-coming-soon.command-DBbFbzAx.mjs').then((c) => c.AXPProfileComingSoonCommand),
+                            },
+                        ]),
+                        {
+                            provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                            useValue: ProfileSlotLogoutMenuHookProvider,
+                            multi: true,
+                        },
+                        {
+                            provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                            useValue: ProfileSlotMyProfileMenuHookProvider,
+                            multi: true,
+                        },
+                        {
+                            provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                            useValue: ProfileSlotLockMenuHookProvider,
+                            multi: true,
+                        },
+                        {
+                            provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                            useValue: CoreProfileGroupsHookProvider,
+                            multi: true,
+                        },
+                        {
+                            provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                            useValue: CoreProfileSectionsHookProvider,
+                            multi: true,
+                        },
+                        {
+                            provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                            useValue: SecurityPinSectionHookProvider,
+                            multi: true,
+                        },
+                        {
+                            provide: AXP_DISTRIBUTED_EVENT_LISTENER_PROVIDER,
+                            useValue: SecuritySectionsInsightsHookProvider,
+                            multi: true,
+                        },
+                    ],
+                }]
+        }], ctorParameters: () => [] });
+
+//#region ---- Login external provider slot ----
+/** Slot name for optional extension-provided login buttons (e.g. Google platform login). */
+const AUTH_LOGIN_EXTERNAL_PROVIDERS_SLOT = 'auth-login-external-providers';
+//#endregion
+
+class AXPLoginExternalProvidersComponent {
+    constructor() {
+        this.slotName = AUTH_LOGIN_EXTERNAL_PROVIDERS_SLOT;
+        this.slot = viewChild(AXPComponentSlotDirective, ...(ngDevMode ? [{ debugName: "slot" }] : /* istanbul ignore next */ []));
+    }
+    hasContent() {
+        const slot = this.slot();
+        return !!slot && !slot.isEmpty();
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPLoginExternalProvidersComponent, deps: [], target: i0.ɵɵFactoryTarget.Component }); }
+    static { this.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.2.0", version: "21.2.9", type: AXPLoginExternalProvidersComponent, isStandalone: true, selector: "axm-login-external-providers", viewQueries: [{ propertyName: "slot", first: true, predicate: AXPComponentSlotDirective, descendants: true, isSignal: true }], ngImport: i0, template: "<axp-component-slot\n  class=\"flex flex-col gap-2 w-full mt-6\"\n  #slot=\"slot\"\n  [name]=\"slotName\"\n  [host]=\"this\"\n></axp-component-slot>\n", dependencies: [{ kind: "ngmodule", type: AXPComponentSlotModule }, { kind: "directive", type: i1$3.AXPComponentSlotDirective, selector: "axp-component-slot", inputs: ["name", "host", "context"], exportAs: ["slot"] }] }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPLoginExternalProvidersComponent, decorators: [{
+            type: Component,
+            args: [{ selector: 'axm-login-external-providers', imports: [AXPComponentSlotModule], template: "<axp-component-slot\n  class=\"flex flex-col gap-2 w-full mt-6\"\n  #slot=\"slot\"\n  [name]=\"slotName\"\n  [host]=\"this\"\n></axp-component-slot>\n" }]
+        }], propDecorators: { slot: [{ type: i0.ViewChild, args: [i0.forwardRef(() => AXPComponentSlotDirective), { isSignal: true }] }] } });
+
+//#endregion
+//#region ---- Login history service ----
+/** Loads sign-in records for the current user from device session storage. */
+class AXPLoginHistoryService {
+    constructor() {
+        //#region ---- Services & Dependencies ----
+        this.sessionService = inject(AXPSessionService);
+        this.entityService = inject(AXPEntityService);
+    }
+    //#endregion
+    //#region ---- Public API ----
+    async getEntries() {
+        const userId = this.sessionService.user?.id;
+        if (!userId) {
+            return [];
+        }
+        const response = await this.entityService
+            .withEntity(RootConfig$1.module.name, RootConfig$1.entities.deviceSessions.name)
+            .data()
+            .query({ skip: 0, take: 1000 });
+        const items = response.items ?? [];
+        return orderBy(items
+            .filter((item) => item.userId === userId)
+            .map((item) => ({
+            id: item.id,
+            device: item.deviceName ?? item.operatingSystem ?? '—',
+            location: item.location ?? '—',
+            ipAddress: item.ipAddress ?? '—',
+            browser: item.browser ?? '—',
+            status: String(item.status ?? 'unknown').toLowerCase(),
+            lastLoginDate: item.lastLoginDate,
+        })), [(entry) => new Date(entry.lastLoginDate).getTime()], ['desc']);
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPLoginHistoryService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPLoginHistoryService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.9", ngImport: i0, type: AXPLoginHistoryService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }] });
+
+/**
+ * Generated bundle index. Do not edit.
+ */
+
+export { AXMUserDeviceSessionsService as A, AXMAuthDataSourceProvider as B, AXMAuthErrorHandler as C, AXMAuthModule as D, AXMDefaultAuthConfigs as E, AXMUserActivityDataSourceDefinition as F, aggregateDailySessionCounts as G, buildUserActivityDataSourceItem as H, buildUserActivityWeeks as I, canActivateLogin as J, computeUserActivityStats as K, configAuthModule as L, countToActivityLevel as M, extractUserActivityEndDate as N, extractUserActivityStartDate as O, PROFILE_PAGE_GROUPS_HOOK as P, extractUserActivityUserId as Q, isUserProfileGroupComponent as R, PROFILE_PAGE_SECTIONS_HOOK as a, PROFILE_PAGE_HEADER_META_HOOK as b, resolveUserProfileSectionContent as c, PROFILE_ACTIVITY_CHART_COMPONENT_KEY as d, PROFILE_DELETE_ACCOUNT_DANGER_ZONE_COMPONENT_KEY as e, AXPIdleLockService as f, AXPUserAvatarSyncService as g, AXPAuthPasswordComplexityService as h, AXPAuthPasswordChangeTrackingService as i, getPasswordComplexityHintKey as j, getPasswordComplexityValidationMessageKey as k, validatePasswordAgainstComplexity as l, AXPLoginHistoryService as m, AXM_AUTH_CONFIG_TOKEN as n, AXM_LOGIN_GUARD_TOKEN as o, AXMAuthenticationTypes as p, AXPTenantChooserListComponent as q, resolveDefaultUserProfileSectionAction as r, AXPTenantChooserDropdownComponent as s, AXPAppChooserListComponent as t, resolveDefaultUserActivityDateRange as u, visibleUserProfileSectionActions as v, formatCompactActivityCount as w, AXPLoginExternalProvidersComponent as x, AUTH_LOGIN_EXTERNAL_PROVIDERS_SLOT as y, AUTH_USER_ACTIVITY_DEFAULT_WEEKS as z };
+//# sourceMappingURL=acorex-platform-module-auth-client-acorex-platform-module-auth-client-B7tIKOw6.mjs.map