@lenne.tech/ng-base 22.0.4 → 22.1.0

package/i18n/ui/de.json

@@ -2,10 +2,6 @@
   "lt": {
     "ui": {
       "close": "Schließen",
-      "colorMode": "Farbschema",
-      "colorModeDark": "Dunkel",
-      "colorModeLight": "Hell",
-      "colorModeSystem": "System",
       "hidePassword": "Passwort verbergen",
       "showPassword": "Passwort anzeigen",
       "breadcrumb": "Brotkrumennavigation",
@@ -15,7 +11,6 @@
       "noData": "Keine Einträge",
       "selectPlaceholder": "Bitte auswählen",
       "searchPlaceholder": "Suchen...",
-      "datePlaceholder": "Datum wählen",
       "time": "Uhrzeit",
       "confirm": "Bestätigen",
       "cancel": "Abbrechen",

package/i18n/ui/en.json

@@ -2,10 +2,6 @@
   "lt": {
     "ui": {
       "close": "Close",
-      "colorMode": "Color mode",
-      "colorModeDark": "Dark",
-      "colorModeLight": "Light",
-      "colorModeSystem": "System",
       "hidePassword": "Hide password",
       "showPassword": "Show password",
       "breadcrumb": "Breadcrumb",
@@ -15,7 +11,6 @@
       "noData": "No entries",
       "selectPlaceholder": "Please select",
       "searchPlaceholder": "Search...",
-      "datePlaceholder": "Pick a date",
       "time": "Time",
       "confirm": "Confirm",
       "cancel": "Cancel",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/ng-base",
-  "version": "22.0.4",
+  "version": "22.1.0",
   "description": "Angular library for lenne.Tech projects: nest-server integration (Better Auth, TUS upload, AI, offline sync), Spartan-based UI, SSR server helpers and Playwright helpers",
   "keywords": [
     "angular",
@@ -122,6 +122,7 @@
     "better-auth": ">=1.7.16 <1.8.0",
     "modern-screenshot": ">=4.6.0",
     "rxjs": "^7.8.0",
+    "tailwindcss": ">=4.0.0",
     "tus-js-client": ">=4.0.0"
   },
   "peerDependenciesMeta": {
@@ -137,6 +138,9 @@
     "modern-screenshot": {
       "optional": true
     },
+    "tailwindcss": {
+      "optional": true
+    },
     "tus-js-client": {
       "optional": true
     }

package/types/lenne.tech-ng-base-auth-provide.d.ts

@@ -189,9 +189,6 @@ interface LtAuthError {
 /** Result of `LtAuthService.authenticateWithPasskey()`. */
 interface LtPasskeyAuthResult {
   error?: string;
-  session?: {
-    token: string;
-  };
   success: boolean;
   user?: LtUser;
 }
@@ -307,6 +304,8 @@ export declare class LtAuthStateService {
   static ɵfac: i0.ɵɵFactoryDeclaration<LtAuthStateService, never>;
   static ɵprov: i0.ɵɵInjectableDeclaration<any>;
 }
+/** Whether `value` looks like a JWT (`eyJ…`, three segments), the same test nest-server applies (`isJwtShaped`). */
+export declare function isLtJwtShaped(value: unknown): value is string;
 /**
  * Hooks around `signOut()`. `provideLtSync()` registers one that flushes the offline outbox before the session ends and
  * deletes the IndexedDB afterwards; projects can add their own (multi provider).

package/types/lenne.tech-ng-base-auth.d.ts

@@ -254,7 +254,10 @@ export declare class LtAuthService {
     list: () => Promise<LtAuthResponse<LtPasskey[]>>;
     update: (id: string, name: string) => Promise<LtAuthResponse>;
   };
-  /** Two-factor methods (passwords hashed). `verifyTotp` / `verifyBackupCode` set the user on success (fix vs. Nuxt). */
+  /**
+   * Two-factor methods (passwords hashed). `verifyTotp` / `verifyBackupCode` set the user on success and return the answer
+   * without Better Auth's opaque session token (a JWT of `cookies: false` stays).
+   */
   readonly twoFactor: {
     disable: <T extends {
       password: string;

package/types/lenne.tech-ng-base-files.d.ts

@@ -151,7 +151,8 @@ export declare class LtFileService implements LtFileState {
   getFileInfo(id: string | undefined): Promise<LtFileInfo | null | string>;
   /**
    * `<api>/files/id/:id` — nest-server's `GET files/id/:id` (CoreFileController), which streams the file (or redirects
-   * to a presigned S3 URL) after the rights check (`file.downloadRoles`, default admin).
+   * to a presigned S3 URL) after the rights check (`file.downloadRoles`, default admin). The URL the browser uses, also
+   * during SSR (`NG_PUBLIC_API_URL` or `/api`): it ends up in `href`/`src`, so the server-only `NG_API_URL` never does.
    */
   getFileUrl(id: string): string;
   /**
@@ -167,7 +168,10 @@ export declare class LtFileService implements LtFileState {
   /** `/^[a-f\d]{24}$/i`. */
   isValidMongoID(id: string): boolean;
   /** `<api><filesBasePath>` without a trailing slash; an absolute `filesBasePath` is used as is. */
+  /** Base for requests this service sends itself (`NG_API_URL` during SSR). */
   private baseUrl;
+  /** Base for links the browser follows (see {@link getFileUrl}). */
+  private linkBaseUrl;
   static ɵfac: i0.ɵɵFactoryDeclaration<LtFileService, never>;
   static ɵprov: i0.ɵɵInjectableDeclaration<any>;
 }

package/types/lenne.tech-ng-base.d.ts

@@ -53,6 +53,13 @@ export declare class LtApiUrlService {
   baseUrl(): string;
   /** Build a full API URL for a path such as `/iam/sign-in/email`. Absolute URLs are returned unchanged. */
   buildUrl(path: string): string;
+  /**
+   * Build the URL the browser uses for `path`, also during SSR: `NG_PUBLIC_API_URL` (or `/api` behind the dev proxy),
+   * never the server-only `NG_API_URL`. For links that end up in the HTML (`href`, `src`), which the browser follows
+   * itself: an internal API host would be unreachable there and must not leak into the page. Absolute URLs are returned
+   * unchanged.
+   */
+  buildBrowserUrl(path: string): string;
   /** Whether browser requests go through the dev-server proxy under `/api`. Always `false` on the server. */
   isProxy(): boolean;
   /** Report a missing API URL (`dev`: warning, production: error), at most once per scope. Used by the config check. */
@@ -492,7 +499,7 @@ export declare class LtToastService {
  */
 export declare function tw(strings: TemplateStringsArray | string, ...values: unknown[]): string;
 /** Version of `@lenne.tech/ng-base`; kept in sync with `package.json` by `scripts/sync-version.mjs`. */
-export declare const LT_NG_BASE_VERSION = "22.0.4";
+export declare const LT_NG_BASE_VERSION = "22.1.0";
 /**
  * Log `message` the first time `key` is seen; ignore later calls. The conditions behind these messages (missing API
  * URL, implicit dev proxy) are constant for the process, so repeating them only drowns other output.