@hmcts/opal-frontend-common 0.0.77 → 0.0.79

package/fesm2022/{hmcts-opal-frontend-common-sign-in-stub.component-DBsFS4i2.mjs → hmcts-opal-frontend-common-sign-in-stub.component-DI08HYGy.mjs}

@@ -28,10 +28,10 @@ class SignInStubComponent {
     ngOnInit() {
         this.setupSignInForm();
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.13", ngImport: i0, type: SignInStubComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "21.2.13", type: SignInStubComponent, isStandalone: true, selector: "opal-lib-sign-in-stub", outputs: { signInFormSubmit: "signInFormSubmit" }, ngImport: i0, template: "<form (submit)=\"handleFormSubmit()\">\n  <div class=\"govuk-grid-column-two-thirds\">\n    <fieldset class=\"govuk-fieldset\">\n      <legend class=\"govuk-fieldset__legend govuk-fieldset__legend--m\">\n        <h1 class=\"govuk-fieldset__heading\">Sign in</h1>\n      </legend>\n\n      <div [formGroup]=\"signInForm\">\n        <opal-lib-govuk-text-input\n          labelText=\"Email\"\n          inputId=\"email\"\n          inputName=\"email\"\n          inputClasses=\"govuk-!-width-one-half\"\n          [control]=\"signInForm.controls['email']\"\n        ></opal-lib-govuk-text-input>\n      </div>\n    </fieldset>\n    <div class=\"govuk-grid-row\">\n      <div class=\"govuk-grid-column-one-third\">\n        <opal-lib-govuk-button buttonId=\"submitForm\" type=\"submit\"> Sign in</opal-lib-govuk-button>\n      </div>\n    </div>\n  </div>\n</form>\n", dependencies: [{ kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i1.ɵNgNoValidate, selector: "form:not([ngNoForm]):not([ngNativeValidate])" }, { kind: "directive", type: i1.NgControlStatusGroup, selector: "[formGroupName],[formArrayName],[ngModelGroup],[formGroup],[formArray],form:not([ngNoForm]),[ngForm]" }, { kind: "directive", type: i1.NgForm, selector: "form:not([ngNoForm]):not([formGroup]):not([formArray]),ng-form,[ngForm]", inputs: ["ngFormOptions"], outputs: ["ngSubmit"], exportAs: ["ngForm"] }, { kind: "ngmodule", type: ReactiveFormsModule }, { kind: "directive", type: i1.FormGroupDirective, selector: "[formGroup]", inputs: ["formGroup"], outputs: ["ngSubmit"], exportAs: ["ngForm"] }, { kind: "component", type: GovukTextInputComponent, selector: "opal-lib-govuk-text-input", inputs: ["labelText", "labelClasses", "inputId", "inputName", "inputClasses", "hintText", "hintHtml", "errors", "control"] }, { kind: "component", type: GovukButtonComponent, selector: "opal-lib-govuk-button", inputs: ["buttonId", "type", "buttonClasses"], outputs: ["buttonClickEvent"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.14", ngImport: i0, type: SignInStubComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "21.2.14", type: SignInStubComponent, isStandalone: true, selector: "opal-lib-sign-in-stub", outputs: { signInFormSubmit: "signInFormSubmit" }, ngImport: i0, template: "<form (submit)=\"handleFormSubmit()\">\n  <div class=\"govuk-grid-column-two-thirds\">\n    <fieldset class=\"govuk-fieldset\">\n      <legend class=\"govuk-fieldset__legend govuk-fieldset__legend--m\">\n        <h1 class=\"govuk-fieldset__heading\">Sign in</h1>\n      </legend>\n\n      <div [formGroup]=\"signInForm\">\n        <opal-lib-govuk-text-input\n          labelText=\"Email\"\n          inputId=\"email\"\n          inputName=\"email\"\n          inputClasses=\"govuk-!-width-one-half\"\n          [control]=\"signInForm.controls['email']\"\n        ></opal-lib-govuk-text-input>\n      </div>\n    </fieldset>\n    <div class=\"govuk-grid-row\">\n      <div class=\"govuk-grid-column-one-third\">\n        <opal-lib-govuk-button buttonId=\"submitForm\" type=\"submit\"> Sign in</opal-lib-govuk-button>\n      </div>\n    </div>\n  </div>\n</form>\n", dependencies: [{ kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i1.ɵNgNoValidate, selector: "form:not([ngNoForm]):not([ngNativeValidate])" }, { kind: "directive", type: i1.NgControlStatusGroup, selector: "[formGroupName],[formArrayName],[ngModelGroup],[formGroup],[formArray],form:not([ngNoForm]),[ngForm]" }, { kind: "directive", type: i1.NgForm, selector: "form:not([ngNoForm]):not([formGroup]):not([formArray]),ng-form,[ngForm]", inputs: ["ngFormOptions"], outputs: ["ngSubmit"], exportAs: ["ngForm"] }, { kind: "ngmodule", type: ReactiveFormsModule }, { kind: "directive", type: i1.FormGroupDirective, selector: "[formGroup]", inputs: ["formGroup"], outputs: ["ngSubmit"], exportAs: ["ngForm"] }, { kind: "component", type: GovukTextInputComponent, selector: "opal-lib-govuk-text-input", inputs: ["labelText", "labelClasses", "inputId", "inputName", "inputClasses", "hintText", "hintHtml", "errors", "control"] }, { kind: "component", type: GovukButtonComponent, selector: "opal-lib-govuk-button", inputs: ["buttonId", "type", "buttonClasses"], outputs: ["buttonClickEvent"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.13", ngImport: i0, type: SignInStubComponent, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.14", ngImport: i0, type: SignInStubComponent, decorators: [{
             type: Component,
             args: [{ selector: 'opal-lib-sign-in-stub', imports: [FormsModule, ReactiveFormsModule, GovukTextInputComponent, GovukButtonComponent], changeDetection: ChangeDetectionStrategy.OnPush, template: "<form (submit)=\"handleFormSubmit()\">\n  <div class=\"govuk-grid-column-two-thirds\">\n    <fieldset class=\"govuk-fieldset\">\n      <legend class=\"govuk-fieldset__legend govuk-fieldset__legend--m\">\n        <h1 class=\"govuk-fieldset__heading\">Sign in</h1>\n      </legend>\n\n      <div [formGroup]=\"signInForm\">\n        <opal-lib-govuk-text-input\n          labelText=\"Email\"\n          inputId=\"email\"\n          inputName=\"email\"\n          inputClasses=\"govuk-!-width-one-half\"\n          [control]=\"signInForm.controls['email']\"\n        ></opal-lib-govuk-text-input>\n      </div>\n    </fieldset>\n    <div class=\"govuk-grid-row\">\n      <div class=\"govuk-grid-column-one-third\">\n        <opal-lib-govuk-button buttonId=\"submitForm\" type=\"submit\"> Sign in</opal-lib-govuk-button>\n      </div>\n    </div>\n  </div>\n</form>\n" }]
         }], propDecorators: { signInFormSubmit: [{
@@ -39,4 +39,4 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.13", ngImpo
             }] } });
 
 export { SignInStubComponent };
-//# sourceMappingURL=hmcts-opal-frontend-common-sign-in-stub.component-DBsFS4i2.mjs.map
+//# sourceMappingURL=hmcts-opal-frontend-common-sign-in-stub.component-DI08HYGy.mjs.map

package/fesm2022/{hmcts-opal-frontend-common-sign-in.component-CT_zC3jZ.mjs → hmcts-opal-frontend-common-sign-in.component-Cs5OrpHh.mjs}

@@ -16,13 +16,13 @@ class SignInComponent {
     handleStubSignInFormSubmit(formData) {
         this.document.location.href = `${SSO_ENDPOINTS.login}?email=${formData.email}`;
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.13", ngImport: i0, type: SignInComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.13", type: SignInComponent, isStandalone: true, selector: "opal-lib-sign-in", ngImport: i0, template: "@defer (when !globalStore.ssoEnabled()) {\n  <opal-lib-sign-in-stub (signInFormSubmit)=\"handleStubSignInFormSubmit($event)\"></opal-lib-sign-in-stub>\n}\n", changeDetection: i0.ChangeDetectionStrategy.OnPush, deferBlockDependencies: [() => [import('./hmcts-opal-frontend-common-sign-in-stub.component-DBsFS4i2.mjs').then(m => m.SignInStubComponent)]] });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.14", ngImport: i0, type: SignInComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.14", type: SignInComponent, isStandalone: true, selector: "opal-lib-sign-in", ngImport: i0, template: "@defer (when !globalStore.ssoEnabled()) {\n  <opal-lib-sign-in-stub (signInFormSubmit)=\"handleStubSignInFormSubmit($event)\"></opal-lib-sign-in-stub>\n}\n", changeDetection: i0.ChangeDetectionStrategy.OnPush, deferBlockDependencies: [() => [import('./hmcts-opal-frontend-common-sign-in-stub.component-DI08HYGy.mjs').then(m => m.SignInStubComponent)]] });
 }
-i0.ɵɵngDeclareClassMetadataAsync({ minVersion: "18.0.0", version: "21.2.13", ngImport: i0, type: SignInComponent, resolveDeferredDeps: () => [import('./hmcts-opal-frontend-common-sign-in-stub.component-DBsFS4i2.mjs').then(m => m.SignInStubComponent)], resolveMetadata: SignInStubComponent => ({ decorators: [{
+i0.ɵɵngDeclareClassMetadataAsync({ minVersion: "18.0.0", version: "21.2.14", ngImport: i0, type: SignInComponent, resolveDeferredDeps: () => [import('./hmcts-opal-frontend-common-sign-in-stub.component-DI08HYGy.mjs').then(m => m.SignInStubComponent)], resolveMetadata: SignInStubComponent => ({ decorators: [{
                 type: Component,
                 args: [{ selector: 'opal-lib-sign-in', imports: [SignInStubComponent], changeDetection: ChangeDetectionStrategy.OnPush, template: "@defer (when !globalStore.ssoEnabled()) {\n  <opal-lib-sign-in-stub (signInFormSubmit)=\"handleStubSignInFormSubmit($event)\"></opal-lib-sign-in-stub>\n}\n" }]
             }], ctorParameters: null, propDecorators: null }) });
 
 export { SignInComponent };
-//# sourceMappingURL=hmcts-opal-frontend-common-sign-in.component-CT_zC3jZ.mjs.map
+//# sourceMappingURL=hmcts-opal-frontend-common-sign-in.component-Cs5OrpHh.mjs.map

package/fesm2022/hmcts-opal-frontend-common-stores-global.mjs

@@ -11,6 +11,7 @@ const GlobalStore = signalStore({ providedIn: 'root' }, withState(() => ({
     appInsightsConfig: {},
     tokenExpiry: {},
     userStateCacheExpirationMilliseconds: 1800000,
+    userStateDomain: undefined,
 })), withMethods((store) => ({
     setAuthenticated: (authenticated) => {
         patchState(store, { authenticated });
@@ -42,6 +43,9 @@ const GlobalStore = signalStore({ providedIn: 'root' }, withState(() => ({
     setUserStateCacheExpirationMilliseconds: (milliseconds) => {
         patchState(store, { userStateCacheExpirationMilliseconds: milliseconds });
     },
+    setUserStateDomain: (domain) => {
+        patchState(store, { userStateDomain: domain });
+    },
 })));
 
 /**

package/fesm2022/hmcts-opal-frontend-common.mjs

@@ -35,39 +35,39 @@ const routing = [
     { path: '', redirectTo: 'dashboard', pathMatch: 'full' },
     {
         path: PAGES_ROUTING_PATHS.children.accessDenied,
-        loadComponent: () => import('./hmcts-opal-frontend-common-access-denied.component-CChd8kzZ.mjs').then((c) => c.AccessDeniedComponent),
+        loadComponent: () => import('./hmcts-opal-frontend-common-access-denied.component-D10u8Yxn.mjs').then((c) => c.AccessDeniedComponent),
         canActivate: [authGuard, accountGuard],
         data: { title: PAGES_ROUTING_TITLES.children.accessDenied },
         resolve: { title: TitleResolver },
     },
     {
         path: PAGES_ROUTING_PATHS.children.concurrencyFailure,
-        loadComponent: () => import('./hmcts-opal-frontend-common-concurrency-failure.component-DhifLL93.mjs').then((c) => c.ConcurrencyFailureComponent),
+        loadComponent: () => import('./hmcts-opal-frontend-common-concurrency-failure.component-BTFiOH79.mjs').then((c) => c.ConcurrencyFailureComponent),
         data: { title: PAGES_ROUTING_TITLES.children.concurrencyFailure },
         resolve: { title: TitleResolver },
     },
     {
         path: PAGES_ROUTING_PATHS.children.permissionDenied,
-        loadComponent: () => import('./hmcts-opal-frontend-common-permission-denied.component-fpUG1mFg.mjs').then((c) => c.PermissionDeniedComponent),
+        loadComponent: () => import('./hmcts-opal-frontend-common-permission-denied.component-BmHHWIe-.mjs').then((c) => c.PermissionDeniedComponent),
         data: { title: PAGES_ROUTING_TITLES.children.permissionDenied },
         resolve: { title: TitleResolver },
     },
     {
         path: PAGES_ROUTING_PATHS.children.internalServerError,
-        loadComponent: () => import('./hmcts-opal-frontend-common-internal-server-error.component-BuniqC-e.mjs').then((c) => c.InternalServerErrorComponent),
+        loadComponent: () => import('./hmcts-opal-frontend-common-internal-server-error.component-QMKEdjwU.mjs').then((c) => c.InternalServerErrorComponent),
         data: { title: PAGES_ROUTING_TITLES.children.internalServerError },
         resolve: { title: TitleResolver },
     },
     {
         path: PAGES_ROUTING_PATHS.children.signIn,
-        loadComponent: () => import('./hmcts-opal-frontend-common-sign-in.component-CT_zC3jZ.mjs').then((c) => c.SignInComponent),
+        loadComponent: () => import('./hmcts-opal-frontend-common-sign-in.component-Cs5OrpHh.mjs').then((c) => c.SignInComponent),
         canActivate: [signedInGuard],
         data: { title: PAGES_ROUTING_TITLES.children.signIn },
         resolve: { title: TitleResolver },
     },
     {
         path: PAGES_ROUTING_PATHS.children.accountCreated,
-        loadComponent: () => import('./hmcts-opal-frontend-common-account-created.component-DN2aTb9f.mjs').then((c) => c.AccountCreated),
+        loadComponent: () => import('./hmcts-opal-frontend-common-account-created.component-DQU0jga1.mjs').then((c) => c.AccountCreated),
         canActivate: [authGuard],
         data: { title: PAGES_ROUTING_TITLES.children.accountCreated },
         resolve: { title: TitleResolver },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hmcts/opal-frontend-common",
-  "version": "0.0.77",
+  "version": "0.0.79",
   "license": "MIT",
   "repository": {
     "type": "git",

package/types/hmcts-opal-frontend-common-components-abstract-abstract-account-summary-base.d.ts

@@ -31,6 +31,7 @@ declare abstract class AbstractAccountSummaryBaseComponent<THeader, TTab extends
         appInsightsConfig: _ngrx_signals.DeepSignal<_hmcts_opal_frontend_common_services_transfer_state_service_interfaces.ITransferStateAppInsightsConfig>;
         tokenExpiry: _ngrx_signals.DeepSignal<_hmcts_opal_frontend_common_services_session_service_interfaces.ISessionTokenExpiry>;
         userStateCacheExpirationMilliseconds: _angular_core.Signal<number>;
+        userStateDomain: _angular_core.Signal<string | undefined>;
         setAuthenticated: (authenticated: boolean) => void;
         setBannerError: (error: _hmcts_opal_frontend_common_stores_global_interfaces.IGlobalErrorState) => void;
         resetBannerError: () => void;
@@ -41,6 +42,7 @@ declare abstract class AbstractAccountSummaryBaseComponent<THeader, TTab extends
         setAppInsightsConfig: (config: _hmcts_opal_frontend_common_services_transfer_state_service_interfaces.ITransferStateAppInsightsConfig) => void;
         setTokenExpiry: (tokenExpiry: _hmcts_opal_frontend_common_services_session_service_interfaces.ISessionTokenExpiry) => void;
         setUserStateCacheExpirationMilliseconds: (milliseconds: number) => void;
+        setUserStateDomain: (domain: string) => void;
     } & _ngrx_signals.StateSource<{
         authenticated: boolean;
         bannerError: {
@@ -56,6 +58,7 @@ declare abstract class AbstractAccountSummaryBaseComponent<THeader, TTab extends
         appInsightsConfig: _hmcts_opal_frontend_common_services_transfer_state_service_interfaces.ITransferStateAppInsightsConfig;
         tokenExpiry: _hmcts_opal_frontend_common_services_session_service_interfaces.ISessionTokenExpiry;
         userStateCacheExpirationMilliseconds: number;
+        userStateDomain: string | undefined;
     }>;
     protected readonly userState: _hmcts_opal_frontend_common_services_opal_user_service_interfaces.IOpalUserState;
     accountData: THeader;

package/types/hmcts-opal-frontend-common-guards-feature-flag.d.ts

@@ -1,5 +1,15 @@
-import { CanActivateFn } from '@angular/router';
+import { CanActivateFn, ActivatedRouteSnapshot, RouterStateSnapshot } from '@angular/router';
 
+/**
+ * Resolves a feature flag route guard to a boolean result.
+ *
+ * @param flagKey - The key of the feature flag to check
+ * @param route - The activated route snapshot passed to the guard
+ * @param state - The router state snapshot passed to the guard
+ * @returns A boolean that is true only when the feature flag guard allows access
+ *
+ */
+declare const resolveFeatureFlagGuard: (flagKey: string, route: ActivatedRouteSnapshot, state: RouterStateSnapshot) => Promise<boolean>;
 /**
  * Creates a route guard that checks if a specific feature flag is enabled before allowing access.
  *
@@ -8,5 +18,14 @@ import { CanActivateFn } from '@angular/router';
  *
  */
 declare function featureFlagGuard(flagKey: string): CanActivateFn;
+/**
+ * Creates a route guard that redirects when a specific feature flag is not enabled.
+ *
+ * @param flagKey - The key of the feature flag to check
+ * @param redirectPath - The path to redirect to when the feature flag is not enabled
+ * @returns A CanActivateFn that returns true if the feature flag is enabled, otherwise a UrlTree
+ *
+ */
+declare function featureFlagRedirectGuard(flagKey: string, redirectPath?: string): CanActivateFn;
 
-export { featureFlagGuard };
+export { featureFlagGuard, featureFlagRedirectGuard, resolveFeatureFlagGuard };

package/types/hmcts-opal-frontend-common-guards-helpers.d.ts

@@ -1,4 +1,4 @@
-import { CanActivateFn } from '@angular/router';
+import { CanActivateFn, MaybeAsync, GuardResult } from '@angular/router';
 import { Observable } from 'rxjs';
 import { GuardReturnType } from '@hmcts/opal-frontend-common/guards/types';
 
@@ -19,6 +19,11 @@ declare function getGuardWithDummyUrl(guard: CanActivateFn, urlPath: string): ()
  */
 declare function handleObservableResult(result: Observable<GuardReturnType>): Promise<GuardReturnType>;
 
+/**
+ * Converts any valid Angular guard result into a promise so callers can await the final value consistently.
+ */
+declare const resolveGuardResult: (result: MaybeAsync<GuardResult>) => Promise<GuardResult>;
+
 /**
  * Runs an authentication guard function within the injection context of TestBed.
  *
@@ -29,4 +34,4 @@ declare function runAuthGuardWithContext(authGuard: () => GuardReturnType | Prom
 
 declare function runHasFlowStateGuardWithContext(hasFlowStateGuard: () => GuardReturnType | Promise<GuardReturnType> | Observable<GuardReturnType>): Promise<GuardReturnType>;
 
-export { getGuardWithDummyUrl, handleObservableResult, runAuthGuardWithContext, runHasFlowStateGuardWithContext };
+export { getGuardWithDummyUrl, handleObservableResult, resolveGuardResult, runAuthGuardWithContext, runHasFlowStateGuardWithContext };

package/types/hmcts-opal-frontend-common-pages-dashboard-page.d.ts

@@ -45,6 +45,7 @@ declare class DashboardPage {
         appInsightsConfig: _ngrx_signals.DeepSignal<_hmcts_opal_frontend_common_services_transfer_state_service_interfaces.ITransferStateAppInsightsConfig>;
         tokenExpiry: _ngrx_signals.DeepSignal<_hmcts_opal_frontend_common_services_session_service_interfaces.ISessionTokenExpiry>;
         userStateCacheExpirationMilliseconds: _angular_core.Signal<number>;
+        userStateDomain: _angular_core.Signal<string | undefined>;
         setAuthenticated: (authenticated: boolean) => void;
         setBannerError: (error: _hmcts_opal_frontend_common_stores_global_interfaces.IGlobalErrorState) => void;
         resetBannerError: () => void;
@@ -55,6 +56,7 @@ declare class DashboardPage {
         setAppInsightsConfig: (config: _hmcts_opal_frontend_common_services_transfer_state_service_interfaces.ITransferStateAppInsightsConfig) => void;
         setTokenExpiry: (tokenExpiry: _hmcts_opal_frontend_common_services_session_service_interfaces.ISessionTokenExpiry) => void;
         setUserStateCacheExpirationMilliseconds: (milliseconds: number) => void;
+        setUserStateDomain: (domain: string) => void;
     } & _ngrx_signals.StateSource<{
         authenticated: boolean;
         bannerError: {
@@ -70,6 +72,7 @@ declare class DashboardPage {
         appInsightsConfig: _hmcts_opal_frontend_common_services_transfer_state_service_interfaces.ITransferStateAppInsightsConfig;
         tokenExpiry: _hmcts_opal_frontend_common_services_session_service_interfaces.ISessionTokenExpiry;
         userStateCacheExpirationMilliseconds: number;
+        userStateDomain: string | undefined;
     }>;
     dashboardConfig: IDashboardPageConfiguration;
     /**

package/types/hmcts-opal-frontend-common-services-app-initializer-service.d.ts

@@ -20,6 +20,10 @@ declare class AppInitializerService {
      * Initializes the user state cache expiration milliseconds.
      */
     private initializeUserStateCacheExpirationMilliseconds;
+    /**
+     * Initializes the user-state domain used for permission lookup.
+     */
+    private initializeUserStateDomain;
     /**
      * Initializes the application.
      * This method calls the necessary initialization functions.

package/types/hmcts-opal-frontend-common-services-opal-user-service-interfaces.d.ts

@@ -9,17 +9,34 @@ interface IOpalUserBusinessUnitUser {
     permissions: IOpalUserPermissions[];
 }
 
+type OpalUserStateStatus = 'active' | 'created' | 'suspended' | 'deactivated';
+
 interface IOpalUserState {
     user_id: number;
     username: string;
     name: string;
-    status: string | null;
+    status: OpalUserStateStatus | null;
     version: number | null;
     business_unit_users: IOpalUserBusinessUnitUser[];
 }
 
+type OpalUserStateResponseStatus = 'ACTIVE' | 'PENDING' | 'SUSPENDED' | 'DEACTIVATED';
+
+interface IOpalUserStateResponseDomain {
+    business_unit_users: IOpalUserBusinessUnitUser[];
+}
+interface IOpalUserStateResponse {
+    user_id: number;
+    username: string;
+    name: string;
+    status: OpalUserStateResponseStatus | null;
+    version: number | null;
+    cache_name: string | null;
+    domains: Record<string, IOpalUserStateResponseDomain | undefined>;
+}
+
 interface IOpalUserPaths {
     loggedInUserState: string;
 }
 
-export type { IOpalUserBusinessUnitUser, IOpalUserPaths, IOpalUserPermissions, IOpalUserState };
+export type { IOpalUserBusinessUnitUser, IOpalUserPaths, IOpalUserPermissions, IOpalUserState, IOpalUserStateResponse, OpalUserStateResponseStatus, OpalUserStateStatus };

package/types/hmcts-opal-frontend-common-services-opal-user-service.d.ts

@@ -12,11 +12,13 @@ interface IOpalUserBusinessUnitUser {
     permissions: IOpalUserPermissions[];
 }
 
+type OpalUserStateStatus = 'active' | 'created' | 'suspended' | 'deactivated';
+
 interface IOpalUserState {
     user_id: number;
     username: string;
     name: string;
-    status: string | null;
+    status: OpalUserStateStatus | null;
     version: number | null;
     business_unit_users: IOpalUserBusinessUnitUser[];
 }
@@ -24,40 +26,28 @@ interface IOpalUserState {
 declare class OpalUserService {
     private readonly http;
     private readonly globalStore;
-    private readonly dateService;
-    private userStateCache;
-    /**
-     * Checks if the cached user state has expired.
-     *
-     * @returns True if the cache has expired, false otherwise.
-     */
-    private isCacheExpired;
-    /**
-     * Clears the cached user state.
-     */
-    private clearCache;
+    private toOpalUserStatus;
+    private getUserStateDomain;
     /**
-     * Returns cached user state when present, unexpired, and matching the store identity; otherwise null.
+     * Maps the Redis-backed user state response into the existing domain-specific user state shape.
      */
-    private getCachedUserIfValid;
+    private toOpalUserState;
     /**
      * Retrieves the logged-in user's state as an observable.
      *
-     * This method first checks if the user state is cached and the cache is still valid.
-     * If so, it returns the cached user state. Otherwise, it fetches the user state
-     * from the server, updates the cache, and sets the user state in the global store.
+     * The frontend user-state endpoint is backed by Redis, so this service does not maintain its own cache.
      *
      * @returns {Observable<IOpalUserState>} An observable that emits the logged-in user's state.
      */
     getLoggedInUserState(): Observable<IOpalUserState>;
     /**
-     * Clears cached user state and resets the global store user to an empty object.
+     * Resets the global store user to an empty object.
      *
      * Useful for logout/identity switches to avoid reusing stale state.
      */
     clearUserStateCache(): void;
     /**
-     * Forces a fresh fetch of user state, bypassing the cache.
+     * Fetches the latest user state from the Redis-backed frontend endpoint.
      *
      * @returns An Observable that emits the current {@link IOpalUserState}.
      */

package/types/hmcts-opal-frontend-common-services-permissions-service.d.ts

@@ -2,10 +2,8 @@ import { IOpalUserState, IOpalUserBusinessUnitUser } from '@hmcts/opal-frontend-
 import * as i0 from '@angular/core';
 
 declare class PermissionsService {
-    private storedUniquePermissionIds;
     /**
      * Retrieves the unique permission IDs associated with the user.
-     * If the unique permission IDs have not been stored yet, it calculates them based on the user's roles and permissions.
      * @returns An array of unique permission IDs.
      */
     getUniquePermissions(userState: IOpalUserState | null): number[];

package/types/hmcts-opal-frontend-common-services-transfer-state-service-interfaces.d.ts

@@ -15,6 +15,7 @@ interface ITransferStateServerState {
     ssoEnabled: boolean;
     appInsightsConfig: ITransferStateAppInsightsConfig;
     userStateCacheExpirationMilliseconds: number;
+    userStateDomain: string;
 }
 
 export type { ITransferStateAppInsightsConfig, ITransferStateLaunchDarklyConfig, ITransferStateServerState };

package/types/hmcts-opal-frontend-common-services-transfer-state-service.d.ts

@@ -32,6 +32,10 @@ declare class TransferStateService {
      * calling this method to avoid setting an undefined value.
      */
     initializeUserStateCacheExpirationMilliseconds(): void;
+    /**
+     * Initializes the user-state domain used to select permissions from the domain-scoped user-state response.
+     */
+    initializeUserStateDomain(): void;
     static ɵfac: i0.ɵɵFactoryDeclaration<TransferStateService, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<TransferStateService>;
 }

package/types/hmcts-opal-frontend-common-stores-global.d.ts

@@ -21,6 +21,7 @@ declare const GlobalStore: _angular_core.Type<{
     appInsightsConfig: _ngrx_signals.DeepSignal<ITransferStateAppInsightsConfig>;
     tokenExpiry: _ngrx_signals.DeepSignal<ISessionTokenExpiry>;
     userStateCacheExpirationMilliseconds: _angular_core.Signal<number>;
+    userStateDomain: _angular_core.Signal<string | undefined>;
     setAuthenticated: (authenticated: boolean) => void;
     setBannerError: (error: IGlobalErrorState) => void;
     resetBannerError: () => void;
@@ -31,6 +32,7 @@ declare const GlobalStore: _angular_core.Type<{
     setAppInsightsConfig: (config: ITransferStateAppInsightsConfig) => void;
     setTokenExpiry: (tokenExpiry: ISessionTokenExpiry) => void;
     setUserStateCacheExpirationMilliseconds: (milliseconds: number) => void;
+    setUserStateDomain: (domain: string) => void;
 } & _ngrx_signals.StateSource<{
     authenticated: boolean;
     bannerError: {
@@ -46,6 +48,7 @@ declare const GlobalStore: _angular_core.Type<{
     appInsightsConfig: ITransferStateAppInsightsConfig;
     tokenExpiry: ISessionTokenExpiry;
     userStateCacheExpirationMilliseconds: number;
+    userStateDomain: string | undefined;
 }>>;
 
 export { GlobalStore };