@arsedizioni/ars-utils 22.5.11 → 22.5.13

package/README.md

@@ -48,7 +48,7 @@ di vita proprio vive nel suo entry point. Importare sempre dal path specifico.
 | L2 | `ui.tinymce` | `TinymceEditorDirective`, `TinymceLoaderService`, `TinymceUtils`, `TinyMceEditorComponent`, `langs/it.js` | `tinymce` (caricato a runtime) |
 | L2 | `ui.notifications` | `NotificationsBrowserComponent` (ex `support.ui`) | - |
 | L2 | `clipper.common` | `ClipperService`, documents, login, canali e contatori non letti, interceptor auth | solo il necessario a consultare i documenti |
-| L4 | `clipper.ui` | browser, document, references, search-* e `ClipperDocumentsUtils` | `clipper.scss` |
+| L4 | `clipper.ui` | browser, document, references, search-* e `ClipperDocumentUtilsService` | `clipper.scss` |
 
 I peer dependency opzionali (`@azure/msal-*`, `tinymce`) servono
 solo a chi importa rispettivamente `ui.oauth` e `ui.tinymce`: sono dichiarati in

package/clipper.common/README.md

@@ -3,16 +3,22 @@
 Effective unit-test suite for the `clipper.common` library: the 3 feature services,
 the shared `ClipperCoreService`, the `ClipperService` facade and `ClipperAuthInterceptor`.
 
+The suite follows the Clipper 7.5 API, which this entry point was aligned to on 2026-08-25:
+`/session/*` with an HttpOnly cookie, no bearer token and no replayable "remember me" credential.
+What the library offers is a deliberately reduced subset of the application's own surface — no
+passkeys, no `/session/otp`, no `/documents/notes/notify` — but every call it does make is the
+same call, with the same payload, that Clipper 7.5 makes.
+
 ## What is covered
 
 | Spec | Focus |
 | --- | --- |
-| `core.service.spec.ts` | state mutators (`ensureLoginInfo`, `setLoggedIn`, `updateContext`, `initializeChannels`, `reset`, `clear`), lazy `loginInfo` load, `initialize` (serviceUri/appUri/flags, client-id / embedded, F5 branch), broadcast handlers (`LOGIN_CHANGED`, `LOGOUT` logged-in/out), `ping` |
-| `login.service.spec.ts` | credential + OAuth login, MFA pending, failure, temporary context, `autoLogin`/`autoLogout`, `confirmIdentity`, `logout` (clears session on success **and** error), `newOTP` |
+| `core.service.spec.ts` | state mutators (`ensureLoginInfo`, `setLoggedIn`, `updateContext` per-half, `storeContext` guard, `initializeChannels`, `reset` incl. the stored context, `clear`), lazy `loginInfo` load, `initialize` (serviceUri/appUri/flags, client-id / embedded, and that a refresh announces NOTHING), `LOGOUT` handler logged-in/out, `ping` |
+| `login.service.spec.ts` | `/session/login` (+ code challenge pending, failure), `/session/confirm`, `/session/logout` (clears the session on success **and** error), `/session/me`, `initialize` (validate-then-announce, run-once, survives an unreachable API), `newOTP`, context helpers |
 | `documents.service.spec.ts` | every endpoint, `references`/`referencesFacets` mode routing + `null`, default taxonomy body, dashboard counters, bag parsing (`loadBag`/`addToBag`/`removeFromBag`/`clearBag`) |
 | `account.service.spec.ts` | `updateChannels` (enabled channels only) and `updateUnreadItems` (increment + broadcast); the service touches no endpoint, and `http.verify()` keeps it that way |
 | `clipper.service.spec.ts` | facade exposes/forwards feature services, re-exports core signals by identity, delegates `initialize`/`ping` |
-| `auth.interceptor.spec.ts` | header decoration, passthrough of non-Clipper URLs, error mapping (0/403/405/410/5xx), `NotifySystemErrors` flag, 5s debounce |
+| `auth.interceptor.spec.ts` | header decoration, passthrough of non-Clipper URLs, `ERROR_401` on a dead session (once, re-armed) vs a 401 from a sign-in attempt, retry + `ERROR_UNAVAILABLE` for an API that is not answering, envelope discrimination, message resolution and escaping, `NotifySystemErrors` flag, 5s debounce |
 
 ## File placement