npm - @orechio/platform-angular - Versions diffs - 0.5.0 → 0.6.0 - Mend

@orechio/platform-angular 0.5.0 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (18) hide show

package/fesm2022/orechio-platform-angular.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"orechio-platform-angular.mjs","sources":["../../../projects/platform-angular/src/lib/config/platform-angular-config.ts","../../../projects/platform-angular/src/lib/session/session-store.ts","../../../projects/platform-angular/src/lib/auth/auth-client.ts","../../../projects/platform-angular/src/lib/auth/branch-selection.model.ts","../../../projects/platform-angular/src/lib/auth/branch-selector.ts","../../../projects/platform-angular/src/lib/auth/refresh-coordinator.ts","../../../projects/platform-angular/src/lib/http/provide-platform-angular-http.ts","../../../projects/platform-angular/src/lib/capabilities/capability.model.ts","../../../projects/platform-angular/src/lib/capabilities/capability.directive.ts","../../../projects/platform-angular/src/lib/problem-details/problem-details.model.ts","../../../projects/platform-angular/src/public-api.ts","../../../projects/platform-angular/src/orechio-platform-angular.ts"],"sourcesContent":["import { InjectionToken, Provider } from '@angular/core';\n\n/*\n BFF endpoint paths for the auth contract. All paths are relative to `apiBaseUrl`.\n * `me` is optional: some BFFs bootstrap the session via `refresh` alone (no dedicated\n * session-read endpoint) instead of a separate `me` call.\n /\nexport interface PlatformAngularAuthPaths {\n login: string;\n refresh: string;\n logout: string;\n me?: string;\n /\n Branch switch for an already-authenticated session. Optional: only BFFs that\n * expose an authenticated switch endpoint set it, and `AuthClient.selectBranch`\n * fails fast when it is absent rather than guessing a URL.\n /\n selectBranch?: string;\n /\n Unwraps the raw auth-endpoint response body into TUser. Defaults to the\n * identity function (response body IS the user object), matching Store's\n * proven wire format. Portal's BFF wraps the user in an envelope\n * (`{ user: UserInfo }`) — Portal supplies `(body) => body.user` here\n * rather than the package assuming either shape.\n /\n unwrapUser?: (body: unknown) => unknown;\n}\n\nexport interface PlatformAngularConfig {\n /* Same-origin API base path, e.g. '/api'. Never an absolute cross-origin URL — the\n * BFF/cookie-session pattern this library assumes requires same-origin requests. /\n apiBaseUrl: string;\n auth: PlatformAngularAuthPaths;\n /* XSRF cookie/header names. Defaults match Angular's own defaults and both proven\n * consumers (Portal, Store): cookie 'XSRF-TOKEN', header 'X-XSRF-TOKEN'. /\n xsrf?: {\n cookieName?: string;\n headerName?: string;\n };\n /* 401 handling strategy. 'redirect' clears the session and redirects immediately\n * (Store's proven behavior). 'refresh-then-redirect' attempts one silent refresh\n * before giving up (Portal's proven behavior). Defaults to 'redirect' — the simpler,\n * more conservative behavior — when omitted. /\n unauthorizedStrategy?: 'redirect' \| 'refresh-then-redirect';\n /* Route to navigate to after a session is cleared. Defaults to '/login'. /\n loginRoute?: string;\n}\n\nexport const PLATFORM_ANGULAR_CONFIG = new InjectionToken<PlatformAngularConfig>(\n 'PLATFORM_ANGULAR_CONFIG',\n);\n\nexport function providePlatformAngularConfig(config: PlatformAngularConfig): Provider {\n return { provide: PLATFORM_ANGULAR_CONFIG, useValue: config };\n}\n","import { Injectable, Signal, computed, signal } from '@angular/core';\nimport { SessionUser } from './session-user.model';\n\n/\n Generic signal-based session store. Mirrors the pattern already proven\n * independently by both consumers (Portal's AuthService.user, Store's\n * EstadoDaSessao) — deliberately NOT a richer state machine (unknown /\n * loading / error states): neither consumer needed one, and ADR-010 §2.2\n * (\"projete para extração, não extraia por antecipação\") argues against\n * building one speculatively.\n \n Parameterized over TUser so each product can extend SessionUser with its\n * own fields without needing a package release.\n /\n@Injectable({ providedIn: 'root' })\nexport class SessionStore<TUser extends SessionUser = SessionUser> {\n private readonly state = signal<TUser \| null>(null);\n\n readonly user: Signal<TUser \| null> = this.state.asReadonly();\n readonly isAuthenticated: Signal<boolean> = computed(() => this.state() !== null);\n\n set(user: TUser): void {\n this.state.set(user);\n }\n\n clear(): void {\n this.state.set(null);\n }\n}\n","import { HttpClient } from '@angular/common/http';\nimport { Injectable, inject } from '@angular/core';\nimport { Observable, finalize, map, tap, throwError } from 'rxjs';\nimport { PLATFORM_ANGULAR_CONFIG } from '../config/platform-angular-config';\nimport { SessionStore } from '../session/session-store';\nimport { SessionUser } from '../session/session-user.model';\n\n/\n Thin BFF client for the auth contract: login / refresh / logout, and an\n * optional session-read (\"me\") endpoint. Deliberately does NOT decode JWTs,\n * store bearer tokens, or treat itself as a security authority — per\n * ADR-010 §12 and this package's explicit non-goal (no JWT client SDK): the\n * BFF/backend is the only place tokens live, this class only reflects\n * whatever session-shaped JSON the BFF hands back.\n \n Endpoint paths are entirely config-driven (PLATFORM_ANGULAR_CONFIG) — this\n * class contains zero hardcoded URLs, so it works unmodified against\n * Portal's /api/auth/{login,me,refresh,logout} (envelope-wrapped\n * `{ user: UserInfo }` responses, unwrapped via config.auth.unwrapUser) and\n * Store's /api/auth/{login,refresh,logout} (no `me`, unwrapped responses)\n * alike.\n /\n@Injectable({ providedIn: 'root' })\nexport class AuthClient<TUser extends SessionUser = SessionUser> {\n private readonly http = inject(HttpClient);\n private readonly config = inject(PLATFORM_ANGULAR_CONFIG);\n private readonly session = inject(SessionStore) as SessionStore<TUser>;\n\n private url(path: string): string {\n return `${this.config.apiBaseUrl}${path}`;\n }\n\n private unwrap(body: unknown): TUser {\n const unwrapUser = this.config.auth.unwrapUser;\n return (unwrapUser ? unwrapUser(body) : body) as TUser;\n }\n\n login(credentials: unknown): Observable<TUser> {\n return this.http.post<unknown>(this.url(this.config.auth.login), credentials).pipe(\n map((body) => this.unwrap(body)),\n tap((user) => this.session.set(user)),\n );\n }\n\n /\n Reads the current session. Uses the configured `me` endpoint (GET) when\n * present (Portal); falls back to `refresh` (POST) when it isn't (Store,\n * which has no dedicated session-read endpoint and bootstraps via refresh).\n /\n initSession(): Observable<TUser> {\n if (this.config.auth.me) {\n return this.http.get<unknown>(this.url(this.config.auth.me)).pipe(\n map((body) => this.unwrap(body)),\n tap((user) => this.session.set(user)),\n );\n }\n return this.refresh();\n }\n\n /\n Asks the BFF to make `branchId` the current branch of the session that is\n * already authenticated. No credentials are involved and none are re-sent: the\n * browser proves nothing here beyond the session it already holds.\n \n `branchId` is a requested target, never an authorization. The BFF forwards\n * it to the Platform, which re-reads the user's grants and refuses what is not\n * granted — a rejection arrives as a failed request, and the session store is\n * left exactly as it was, still on the previous branch.\n \n The store is updated only from the session the server returns, never\n * optimistically from the requested id: the whole point of an explicit switch is\n * that the server, not the client, decides which branch the user ends up in.\n /\n selectBranch(branchId: string): Observable<TUser> {\n const path = this.config.auth.selectBranch;\n if (!path) {\n return throwError(\n () =>\n new Error(\n 'AuthClient.selectBranch requires config.auth.selectBranch. Configure the ' +\n 'BFF path that performs an authenticated branch switch.',\n ),\n );\n }\n\n return this.http.post<unknown>(this.url(path), { branchId }).pipe(\n map((body) => this.unwrap(body)),\n tap((user) => this.session.set(user)),\n );\n }\n\n refresh(): Observable<TUser> {\n return this.http.post<unknown>(this.url(this.config.auth.refresh), {}).pipe(\n map((body) => this.unwrap(body)),\n tap((user) => this.session.set(user)),\n );\n }\n\n /\n Clears the local session unconditionally — on success, on error, and on\n * unsubscribe (`finalize`, not `tap`) — matching the behavior both\n * consumers already converged on independently (Portal swallows the\n * error before clearing; Store clears via `finalize` while still letting\n * the error propagate). This does NOT swallow errors: callers that want\n * Portal's \"always succeed\" UX compose their own `catchError` on top.\n /\n logout(): Observable<void> {\n return this.http\n .post<void>(this.url(this.config.auth.logout), {})\n .pipe(finalize(() => this.session.clear()));\n }\n}\n","import { HttpErrorResponse } from '@angular/common/http';\n\n/\n Control-flow code the Platform's auth contract returns (HTTP 409) when the\n * authenticated user has access to more than one branch and none was chosen.\n \n It is deliberately NOT a failure: no session is created, no cookie is set,\n * and the caller is expected to ask the user which branch to enter. Treating\n * it as a generic error is the bug this constant exists to prevent.\n /\nexport const BRANCH_SELECTION_REQUIRED_CODE = 'auth.branch_selection_required';\n\n/\n One selectable branch.\n \n `name` is optional because the current backend contract carries branch ids\n * only — see `readBranchSelectionRequired`. Modelling it as optional now means\n * the day the backend starts sending names, consumers get them without a\n * breaking change to this type.\n /\nexport interface BranchOption {\n readonly id: string;\n readonly name?: string \| null;\n}\n\n/* Payload of a branch-selection-required response, normalized. /\nexport interface BranchSelectionRequired {\n readonly branches: readonly BranchOption[];\n}\n\n/\n Recognizes a branch-selection-required response and normalizes its payload,\n * or returns `null` for anything else — so callers branch on a value instead of\n * re-deriving the contract from status codes and body shapes.\n \n Reads three wire shapes, in this order of preference:\n \n 1. `branchOptions: [{ id, name }]` — the display metadata the Platform sends\n * alongside the ids. Preferred when present, because it is the only shape\n * that lets an operator tell the branches apart.\n * 2. `branches: [\"<guid>\"]` — the original contract. Still authoritative for\n * selection, and still enough on its own.\n * 3. `branches: [{ id, name }]` — tolerated since 0.3.0.\n \n Reading all three is what makes the rollout order irrelevant: a frontend on\n * this version works against a backend that has the metadata and against one\n * that does not, and neither side has to ship first.\n \n Entries without a usable id are dropped rather than rendered as blanks: an\n * unselectable option in a selection list is worse than a shorter list.\n /\nexport function readBranchSelectionRequired(error: unknown): BranchSelectionRequired \| null {\n if (!(error instanceof HttpErrorResponse) \|\| error.status !== 409) return null;\n\n const body = error.error as\n \| { code?: unknown; branches?: unknown; branchOptions?: unknown }\n \| null;\n if (!body \|\| body.code !== BRANCH_SELECTION_REQUIRED_CODE) return null;\n\n // `branchOptions` só substitui os ids quando traz alguma opção utilizável —\n // uma lista vazia ou ilegível não pode apagar a lista de ids que funciona.\n const comMetadata = normalizeEntries(body.branchOptions);\n if (comMetadata.length > 0) return { branches: comMetadata };\n\n if (!Array.isArray(body.branches)) return null;\n return { branches: normalizeEntries(body.branches) };\n}\n\nfunction normalizeEntries(raw: unknown): BranchOption[] {\n if (!Array.isArray(raw)) return [];\n\n return raw\n .map((entry): BranchOption \| null => {\n if (typeof entry === 'string') return entry ? { id: entry } : null;\n if (entry && typeof entry === 'object') {\n const { id, name } = entry as { id?: unknown; name?: unknown };\n if (typeof id === 'string' && id) {\n return { id, name: typeof name === 'string' ? name : null };\n }\n }\n return null;\n })\n .filter((branch): branch is BranchOption => branch !== null);\n}\n","import { ChangeDetectionStrategy, Component, input, output } from '@angular/core';\nimport { BranchOption } from './branch-selection.model';\n\n/\n Explicit branch picker for the multi-branch login step.\n \n Deliberately narrow: it receives options, renders them, and emits the id the\n * user actually chose. It does not call any backend, hold credentials, read\n * tokens, touch storage, or know which product it is rendering inside — the\n * flow around it belongs to the consumer, and the copy around it belongs to the\n * consumer's login page.\n \n It never picks for the user. When the backend answers\n * `auth.branch_selection_required` it has already refused to choose (no session\n * is created); a selector that quietly defaulted to the first option would put\n * the arbitrary choice back one layer up, in the place hardest to notice.\n \n Rendered as a radio group so the browser gives keyboard navigation, focus\n * management, and screen-reader semantics for free — a list of buttons would\n * need all three re-implemented, worse.\n /\n@Component({\n selector: 'orechio-branch-selector',\n changeDetection: ChangeDetectionStrategy.OnPush,\n template: `\n @if (branches().length === 0) {\n <p class=\"orechio-branch-selector__empty\" role=\"status\">{{ emptyLabel() }}</p>\n } @else {\n <fieldset class=\"orechio-branch-selector\" [disabled]=\"busy()\">\n <legend>{{ legend() }}</legend>\n\n @for (branch of branches(); track branch.id; let index = $index) {\n <label class=\"orechio-branch-selector__option\">\n <input\n type=\"radio\"\n name=\"orechio-branch\"\n [value]=\"branch.id\"\n [checked]=\"chosen === branch.id\"\n (change)=\"choose(branch.id)\"\n />\n <span class=\"orechio-branch-selector__label\">{{ label(branch, index) }}</span>\n <span class=\"orechio-branch-selector__hint\">{{ fragment(branch) }}</span>\n </label>\n }\n\n <button\n type=\"button\"\n class=\"orechio-branch-selector__confirm\"\n [disabled]=\"!chosen \|\| busy()\"\n (click)=\"confirm()\"\n >\n {{ confirmLabel() }}\n </button>\n </fieldset>\n }\n `,\n})\nexport class BranchSelector {\n /* Options to choose from. An empty list renders the empty state, never a silent no-op. /\n readonly branches = input.required<readonly BranchOption[]>();\n\n /* Blocks input while the consumer is completing the sign-in round-trip. /\n readonly busy = input(false);\n\n // Copy is injectable because wording belongs to the product, not to the\n // platform package — the defaults exist so a consumer can drop the component\n // in and iterate on the words later.\n readonly legend = input('Selecione a filial');\n readonly confirmLabel = input('Continuar');\n readonly emptyLabel = input('Nenhuma filial disponível para este usuário.');\n\n /* Emits only in response to a user action. /\n readonly selected = output<string>();\n\n protected chosen: string \| null = null;\n\n protected choose(id: string): void {\n this.chosen = id;\n }\n\n protected confirm(): void {\n if (this.chosen) this.selected.emit(this.chosen);\n }\n\n /\n The name is the label whenever the contract carries one. The id fragment stays\n * as secondary text rather than disappearing: the domain allows two branches to\n * share a name, and when that happens the fragment is the only thing telling\n * them apart.\n \n Without a name — an older backend, or metadata the server could not compose —\n * the positional fallback keeps the list selectable. Two raw identifiers side by\n * side are technically a choice and practically a coin flip, which is exactly\n * why the name is preferred whenever it exists.\n /\n protected label(branch: BranchOption, index: number): string {\n return branch.name ? branch.name : `Filial ${index + 1}`;\n }\n\n /* Fragment of the id, shown beside the label to disambiguate repeated names. /\n protected fragment(branch: BranchOption): string {\n return branch.id.slice(0, 8);\n }\n}\n","import { inject, Injectable } from '@angular/core';\nimport { Router } from '@angular/router';\nimport { Observable, ReplaySubject, catchError, finalize, share, throwError } from 'rxjs';\nimport { PLATFORM_ANGULAR_CONFIG } from '../config/platform-angular-config';\nimport { SessionStore } from '../session/session-store';\nimport { SessionUser } from '../session/session-user.model';\nimport { AuthClient } from './auth-client';\n\n/\n INTERNAL. Not exported from public-api.ts — consumers never construct or configure this\n * directly; it exists purely to back `sessionExpiryInterceptor`'s `'refresh-then-redirect'`\n * strategy (WEB-0.2, ADR-016 §\"WEB-0.2 note\").\n \n Deduplicates concurrent `AuthClient.refresh()` calls that originate from the SAME Angular\n * application context (one injector, i.e. one running app/tab). Before this existed, every\n * 401'd request independently called `authClient.refresh()`, and since that method returns a\n * cold Observable (`http.post(...)`, no multicasting), N simultaneous 401s produced N\n * independent `POST /refresh` calls — proven by the characterization test in\n * `provide-platform-angular-http.spec.ts`.\n \n This is defense-in-depth ONLY. The Platform already tolerates concurrent legitimate refresh\n * rotations correctly and safely (PLATFORM-REFRESH-1/1A/1B, ADR-016's retry leeway) — this class\n * exists to cut needless network traffic, cryptographic work, and rate-limit pressure on the\n * Platform, not to be the thing that makes concurrent refreshes safe. It does not, and does not\n * need to, coordinate across browser tabs/windows or other Angular application instances — see\n * the \"Multi-tab\" note on `sessionExpiryInterceptor` for why that's explicitly out of scope here\n * and handled server-side instead.\n /\n@Injectable({ providedIn: 'root' })\nexport class RefreshCoordinator {\n private readonly authClient = inject(AuthClient);\n private readonly session = inject(SessionStore);\n private readonly router = inject(Router);\n private readonly config = inject(PLATFORM_ANGULAR_CONFIG);\n\n private inFlight$: Observable<SessionUser> \| null = null;\n\n /\n Returns the single in-flight refresh operation if one is already running, or starts a new\n * one. Every caller — first or piggybacking — gets the SAME underlying HTTP call's outcome.\n \n Semantics (WEB-0.2):\n * - Single-flight, not a permanent cache: once the shared operation settles (success or\n * error), the reference is cleared (`finalize`, placed BEFORE `share()` so it fires exactly\n * once per underlying HTTP call, not once per subscriber — see the `share()` config note\n * below). The next call to `refresh()` after that always starts a genuinely new request.\n * - On failure, the session is cleared and the browser is navigated to the login route\n * exactly once, regardless of how many callers are waiting — not once per waiting caller.\n * Each caller still receives its own error notification (multicast by `share()`) and is\n * responsible for propagating whatever error IT needs to its own subscriber (see\n * `sessionExpiryInterceptor`, which re-throws the ORIGINAL 401 to the request that\n * triggered it, not this refresh failure).\n * - `resetOnRefCountZero: false` is load-bearing: if one waiting caller unsubscribes (e.g. a\n * cancelled navigation), the still-in-flight HTTP request for the OTHER callers must not be\n * aborted. Angular's `HttpClient` cancels the underlying network request when its Observable\n * loses its last subscriber — without this flag, one caller going away could silently\n * cancel the refresh everyone else is still waiting on.\n * - `resetOnError`/`resetOnComplete` are left `false` too: this class never reuses a settled\n * `inFlight$` reference across cycles (the field is always nulled and rebuilt from scratch\n * by `finalize`), so `share()` itself never needs to reset its own internal connector.\n /\n refresh(): Observable<SessionUser> {\n if (this.inFlight$) {\n return this.inFlight$;\n }\n\n this.inFlight$ = this.authClient.refresh().pipe(\n catchError((error: unknown) => {\n this.session.clear();\n void this.router.navigateByUrl(this.config.loginRoute ?? '/login');\n return throwError(() => error);\n }),\n finalize(() => {\n this.inFlight$ = null;\n }),\n share({\n connector: () => new ReplaySubject<SessionUser>(1),\n resetOnError: false,\n resetOnComplete: false,\n resetOnRefCountZero: false,\n }),\n );\n\n return this.inFlight$;\n }\n}\n","import {\n HttpErrorResponse,\n HttpInterceptorFn,\n provideHttpClient,\n withInterceptors,\n withXsrfConfiguration,\n HttpFeature,\n HttpFeatureKind,\n} from '@angular/common/http';\nimport { inject } from '@angular/core';\nimport { Router } from '@angular/router';\nimport { catchError, switchMap, throwError } from 'rxjs';\nimport { PLATFORM_ANGULAR_CONFIG, PlatformAngularAuthPaths } from '../config/platform-angular-config';\nimport { RefreshCoordinator } from '../auth/refresh-coordinator';\nimport { SessionStore } from '../session/session-store';\n\nfunction isApiRequest(url: string, apiBaseUrl: string): boolean {\n return url === apiBaseUrl \|\| url.startsWith(`${apiBaseUrl}/`);\n}\n\nfunction isAuthEndpoint(url: string, apiBaseUrl: string, auth: PlatformAngularAuthPaths): boolean {\n const authPaths = [auth.login, auth.refresh, auth.logout, auth.me].filter(\n (p): p is string => !!p,\n );\n return authPaths.some((p) => url === `${apiBaseUrl}${p}`);\n}\n\n/\n Forces `withCredentials: true` on same-origin API requests, so the BFF's\n * HttpOnly session cookie is sent. Proven identically in both consumers.\n * XSRF header injection is intentionally NOT duplicated here — Angular's\n * own `withXsrfConfiguration` (registered by `providePlatformAngularHttp`)\n * already does that. Portal's local interceptor previously re-implemented\n * XSRF header injection manually alongside `withXsrfConfiguration`; that\n * was redundant, not a pattern to preserve.\n /\nexport const credentialsInterceptor: HttpInterceptorFn = (req, next) => {\n const { apiBaseUrl } = inject(PLATFORM_ANGULAR_CONFIG);\n if (!isApiRequest(req.url, apiBaseUrl)) {\n return next(req);\n }\n return next(req.clone({ withCredentials: true }));\n};\n\n/\n On 401 from a non-auth API request: 'redirect' (default) clears the\n * session and navigates to the login route immediately (Store's proven\n * behavior). 'refresh-then-redirect' attempts one silent refresh first and\n * retries the original request on success, falling back to redirect\n * (Portal's proven behavior). Configured via\n * PlatformAngularConfig.unauthorizedStrategy.\n \n WEB-0.2: the 'refresh-then-redirect' path routes through `RefreshCoordinator`\n * instead of calling `AuthClient.refresh()` directly — every 401 handled by\n * the SAME running app shares one in-flight refresh instead of each request\n * triggering its own. The 'redirect' strategy is untouched: it never calls\n * refresh at all, so there is nothing to coordinate (see the config note on\n * `PlatformAngularConfig.unauthorizedStrategy`). On refresh failure, the\n * session-clear/navigate side effect now happens once inside the coordinator\n * (shared across every waiting caller) rather than once per waiting caller;\n * each caller still receives the ORIGINAL 401 error, not a refresh-specific\n * one, exactly as before. Multi-tab/multi-window coordination is explicitly\n * NOT handled here — see `RefreshCoordinator`'s doc comment — the Platform's\n * own server-side retry leeway (ADR-016) is what makes concurrent refreshes\n * from independent contexts safe.\n /\nexport const sessionExpiryInterceptor: HttpInterceptorFn = (req, next) => {\n const config = inject(PLATFORM_ANGULAR_CONFIG);\n const session = inject(SessionStore);\n const router = inject(Router);\n const refreshCoordinator = inject(RefreshCoordinator);\n\n if (\n !isApiRequest(req.url, config.apiBaseUrl) \|\|\n isAuthEndpoint(req.url, config.apiBaseUrl, config.auth)\n ) {\n return next(req);\n }\n\n return next(req).pipe(\n catchError((error: unknown) => {\n if (!(error instanceof HttpErrorResponse) \|\| error.status !== 401) {\n return throwError(() => error);\n }\n\n if (config.unauthorizedStrategy !== 'refresh-then-redirect') {\n session.clear();\n void router.navigateByUrl(config.loginRoute ?? '/login');\n return throwError(() => error);\n }\n\n return refreshCoordinator.refresh().pipe(\n switchMap(() => next(req)),\n // The coordinator already cleared the session and navigated once for\n // this shared failure (see RefreshCoordinator.refresh()) — this\n // request still needs to fail with its OWN original 401, not the\n // refresh's error, exactly as before WEB-0.2.\n catchError(() => throwError(() => error)),\n );\n }),\n );\n};\n\n/\n Bundles provideHttpClient with the XSRF configuration and interceptors\n * proven necessary by both consumers. Cookie/header names default to\n * 'XSRF-TOKEN'/'X-XSRF-TOKEN' (identical in both consumers today) but\n * remain overridable via config. Consumers add their own extra\n * provideHttpClient features (e.g. Portal's withXhr()) by calling\n * provideHttpClient(...) separately — this function only owns the concerns\n * proven common to both.\n /\nexport function providePlatformAngularHttp(...extraFeatures: HttpFeature<HttpFeatureKind>[]) {\n return provideHttpClient(\n withXsrfConfiguration({\n cookieName: 'XSRF-TOKEN',\n headerName: 'X-XSRF-TOKEN',\n }),\n withInterceptors([credentialsInterceptor, sessionExpiryInterceptor]),\n ...extraFeatures,\n );\n}\n","/\n Generic capability map: a flat set of boolean feature flags fetched once\n * from the BFF (Portal's proven pattern — GET .../capabilities returning a\n * flat boolean-keyed object). Deliberately a generic `Record<string,\n * boolean>` rather than a typed interface enumerating every field: Portal's\n * capability set already has 17 product-specific fields and Store will\n * grow its own, unrelated set. A typed interface would require a package\n * release for every new product capability (see ADR-010 §18 — evolution\n * cadence mismatch is a real argument against sharing). Each product\n * defines its own capability keys locally and reads them through this map.\n \n UX ONLY. This does not replace server-side authorization. Every consumer\n * MUST continue to handle 403 from the actual mutating/reading endpoint —\n * capability checks here are a consultive pre-check, exactly as already\n * documented in Portal's application.service.ts before this extraction.\n /\nexport type CapabilityMap = Readonly<Record<string, boolean>>;\n\nexport function hasCapability(capabilities: CapabilityMap \| null \| undefined, key: string): boolean {\n return capabilities?.[key] === true;\n}\n","import { Directive, Input, TemplateRef, ViewContainerRef, inject } from '@angular/core';\nimport { CapabilityMap, hasCapability } from './capability.model';\n\n/\n Structural directive gating template content on a capability key from a\n * consumer-supplied CapabilityMap. Net-new (neither consumer had factored\n * their proven inline `@if (capabilities()?.x)` pattern into a directive),\n * but grounded in Portal's validated usage — see capability.model.ts.\n \n UX ONLY — see capability.model.ts. Hiding an element here does not\n * authorize anything; the backend re-validates on every mutating call.\n \n Usage: `<button orxCapability=\"capabilities(); has: 'manageTenants'\">`\n /\n@Directive({\n selector: '[orxCapability]',\n standalone: true,\n})\nexport class CapabilityDirective {\n private readonly templateRef = inject(TemplateRef<unknown>);\n private readonly viewContainer = inject(ViewContainerRef);\n\n private map: CapabilityMap \| null \| undefined;\n private key: string \| undefined;\n private hasView = false;\n\n @Input()\n set orxCapability(map: CapabilityMap \| null \| undefined) {\n this.map = map;\n this.render();\n }\n\n @Input('orxCapabilityHas')\n set has(key: string) {\n this.key = key;\n this.render();\n }\n\n private render(): void {\n const shouldShow = !!this.key && hasCapability(this.map, this.key);\n if (shouldShow && !this.hasView) {\n this.viewContainer.createEmbeddedView(this.templateRef);\n this.hasView = true;\n } else if (!shouldShow && this.hasView) {\n this.viewContainer.clear();\n this.hasView = false;\n }\n }\n}\n","import { HttpErrorResponse } from '@angular/common/http';\n\n/*\n Canonical error shape, generalized from Store's already-proven\n * ErroApresentavel/normalizarErroApi (the more mature of the two consumers'\n * error handling — Portal had no typed contract at all, just five\n * duplicated `error.error.code` reads). `message` is optional: Portal never\n * received a server-supplied message field, only `code`, and resolves\n * user-facing text locally — so this contract cannot require it.\n \n `correlation_id` (API-1, ADR-017 §3.3): added after confirming directly\n * from Orechio.Platform's `ProblemResponses.cs` that it IS present in the\n * JSON body of every error response the Platform host produces (not just\n * the `X-Correlation-ID` response header), and that Portal's BFF relays\n * that body byte-for-byte, unreshaped, for every typed endpoint. The\n * earlier NG-1-era absence was accurate for what it tested at the time but\n * incomplete relative to Platform's actual wire contract. Optional: not\n * every error path in every consumer emits this field today (Store's own\n * narrower auth/CSRF error shapes don't) — its absence must not be treated\n * as a parse failure.\n \n Domain-specific error codes (e.g. 'access.platform_only',\n * 'tenant.not_found', 'csrf.invalid') are NOT enumerated here — `code`\n * stays a plain string so any code survives normalization unmodified and\n * remains identifiable by callers, per Passo 28.\n /\nexport interface ProblemDetails {\n code: string;\n message?: string;\n status: number;\n required?: string;\n correlationId?: string;\n}\n\n/\n Normalizes an HttpErrorResponse into ProblemDetails. Mirrors Store's\n * normalizarErroApi exactly, generalized to make `message` optional and to\n * accept an HttpErrorResponse without any consumer-specific fallback\n * message map (each product keeps its own code→message copy locally —\n * that's product-specific text, not shared infrastructure).\n /\nexport function normalizeProblemDetails(error: HttpErrorResponse): ProblemDetails {\n const body = error.error as Record<string, unknown> \| null \| undefined;\n const code = typeof body?.['code'] === 'string' ? (body['code'] as string) : `http.${error.status \|\| 0}`;\n const message = typeof body?.['message'] === 'string' ? (body['message'] as string) : undefined;\n const required = typeof body?.['required'] === 'string' ? (body['required'] as string) : undefined;\n // Wire field is `correlation_id` (snake_case, ADR-017 §3) — kept as-is on the wire,\n // exposed as `correlationId` here per TS/Angular convention (same server-side pattern:\n // OrechioProblemDetails.CorrelationId is [JsonPropertyName(\"correlation_id\")]).\n const correlationId =\n typeof body?.['correlation_id'] === 'string' ? (body['correlation_id'] as string) : undefined;\n\n return {\n code,\n message,\n status: error.status,\n ...(required ? { required } : {}),\n ...(correlationId ? { correlationId } : {}),\n };\n}\n","/\n * Public API Surface of @orechio/platform-angular\n /\n\nexport type { PlatformAngularConfig, PlatformAngularAuthPaths } from './lib/config/platform-angular-config';\nexport { PLATFORM_ANGULAR_CONFIG, providePlatformAngularConfig } from './lib/config/platform-angular-config';\n\nexport type { SessionUser } from './lib/session/session-user.model';\nexport { SessionStore } from './lib/session/session-store';\n\nexport { AuthClient } from './lib/auth/auth-client';\n\nexport type { BranchOption, BranchSelectionRequired } from './lib/auth/branch-selection.model';\nexport {\n BRANCH_SELECTION_REQUIRED_CODE,\n readBranchSelectionRequired,\n} from './lib/auth/branch-selection.model';\nexport { BranchSelector } from './lib/auth/branch-selector';\n\nexport { credentialsInterceptor, sessionExpiryInterceptor, providePlatformAngularHttp } from './lib/http/provide-platform-angular-http';\n\nexport type { CapabilityMap } from './lib/capabilities/capability.model';\nexport { hasCapability } from './lib/capabilities/capability.model';\nexport { CapabilityDirective } from './lib/capabilities/capability.directive';\n\nexport type { ProblemDetails } from './lib/problem-details/problem-details.model';\nexport { normalizeProblemDetails } from './lib/problem-details/problem-details.model';\n\nexport type { PagedResult } from './lib/pagination/paged-result.model';\n","/\n Generated bundle index. Do not edit.\n /\n\nexport from './public-api';\n"],"names":[],"mappings":";;;;;;MAgDa,uBAAuB,GAAG,IAAI,cAAc,CACvD,yBAAyB;AAGrB,SAAU,4BAA4B,CAAC,MAA6B,EAAA;IACxE,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,EAAE;AAC/D;;ACnDA;;;;;;;;;;AAUG;MAEU,YAAY,CAAA;IACN,KAAK,GAAG,MAAM,CAAe,IAAI;8EAAC;AAE1C,IAAA,IAAI,GAAyB,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE;IACpD,eAAe,GAAoB,QAAQ,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI;wFAAC;AAEjF,IAAA,GAAG,CAAC,IAAW,EAAA;AACb,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IACtB;IAEA,KAAK,GAAA;AACH,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IACtB;uGAZW,YAAY,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAZ,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,YAAY,cADC,MAAM,EAAA,CAAA;;2FACnB,YAAY,EAAA,UAAA,EAAA,CAAA;kBADxB,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACPlC;;;;;;;;;;;;;;AAcG;MAEU,UAAU,CAAA;AACJ,IAAA,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;AACzB,IAAA,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;AACxC,IAAA,OAAO,GAAG,MAAM,CAAC,YAAY,CAAwB;AAE9D,IAAA,GAAG,CAAC,IAAY,EAAA;QACtB,OAAO,CAAA,EAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAA,EAAG,IAAI,CAAA,CAAE;IAC3C;AAEQ,IAAA,MAAM,CAAC,IAAa,EAAA;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU;AAC9C,QAAA,QAAQ,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI;IAC9C;AAEA,IAAA,KAAK,CAAC,WAAoB,EAAA;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAChF,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;IACH;AAEA;;;;AAIG;IACH,WAAW,GAAA;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;YACvB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAC/D,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;QACH;AACA,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE;IACvB;AAEA;;;;;;;;;;;;;AAaG;AACH,IAAA,YAAY,CAAC,QAAgB,EAAA;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;QAC1C,IAAI,CAAC,IAAI,EAAE;YACT,OAAO,UAAU,CACf,MACE,IAAI,KAAK,CACP,2EAA2E;gBACzE,wDAAwD,CAC3D,CACJ;QACH;QAEA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAC/D,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;IACH;IAEA,OAAO,GAAA;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CACzE,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;IACH;AAEA;;;;;;;AAOG;IACH,MAAM,GAAA;QACJ,OAAO,IAAI,CAAC;AACT,aAAA,IAAI,CAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;AAChD,aAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C;uGAvFW,UAAU,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAV,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,UAAU,cADG,MAAM,EAAA,CAAA;;2FACnB,UAAU,EAAA,UAAA,EAAA,CAAA;kBADtB,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACpBlC;;;;;;;AAOG;AACI,MAAM,8BAA8B,GAAG;AAoB9C;;;;;;;;;;;;;;;;;;;;AAoBG;AACG,SAAU,2BAA2B,CAAC,KAAc,EAAA;IACxD,IAAI,EAAE,KAAK,YAAY,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;AAAE,QAAA,OAAO,IAAI;AAE9E,IAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAEX;AACR,IAAA,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,8BAA8B;AAAE,QAAA,OAAO,IAAI;;;IAItE,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;AACxD,IAAA,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;AAAE,QAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;IAE5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;AAAE,QAAA,OAAO,IAAI;IAC9C,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;AACtD;AAEA,SAAS,gBAAgB,CAAC,GAAY,EAAA;AACpC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;AAAE,QAAA,OAAO,EAAE;AAElC,IAAA,OAAO;AACJ,SAAA,GAAG,CAAC,CAAC,KAAK,KAAyB;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;AAAE,YAAA,OAAO,KAAK,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI;AAClE,QAAA,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AACtC,YAAA,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAyC;AAC9D,YAAA,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,EAAE;AAChC,gBAAA,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,GAAG,IAAI,EAAE;YAC7D;QACF;AACA,QAAA,OAAO,IAAI;AACb,IAAA,CAAC;SACA,MAAM,CAAC,CAAC,MAAM,KAA6B,MAAM,KAAK,IAAI,CAAC;AAChE;;AChFA;;;;;;;;;;;;;;;;;AAiBG;MAqCU,cAAc,CAAA;;IAEhB,QAAQ,GAAG,KAAK,CAAC,QAAQ;iFAA2B;;IAGpD,IAAI,GAAG,KAAK,CAAC,KAAK;6EAAC;;;;IAKnB,MAAM,GAAG,KAAK,CAAC,oBAAoB;+EAAC;IACpC,YAAY,GAAG,KAAK,CAAC,WAAW;qFAAC;IACjC,UAAU,GAAG,KAAK,CAAC,8CAA8C;mFAAC;;IAGlE,QAAQ,GAAG,MAAM,EAAU;IAE1B,MAAM,GAAkB,IAAI;AAE5B,IAAA,MAAM,CAAC,EAAU,EAAA;AACzB,QAAA,IAAI,CAAC,MAAM,GAAG,EAAE;IAClB;IAEU,OAAO,GAAA;QACf,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAClD;AAEA;;;;;;;;;;AAUG;IACO,KAAK,CAAC,MAAoB,EAAE,KAAa,EAAA;AACjD,QAAA,OAAO,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAA,OAAA,EAAU,KAAK,GAAG,CAAC,EAAE;IAC1D;;AAGU,IAAA,QAAQ,CAAC,MAAoB,EAAA;QACrC,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9B;uGA7CW,cAAc,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAAd,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,cAAc,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,yBAAA,EAAA,MAAA,EAAA,EAAA,QAAA,EAAA,EAAA,iBAAA,EAAA,UAAA,EAAA,UAAA,EAAA,UAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,IAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,IAAA,EAAA,EAAA,iBAAA,EAAA,MAAA,EAAA,UAAA,EAAA,MAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,MAAA,EAAA,EAAA,iBAAA,EAAA,QAAA,EAAA,UAAA,EAAA,QAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,YAAA,EAAA,EAAA,iBAAA,EAAA,cAAA,EAAA,UAAA,EAAA,cAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,UAAA,EAAA,EAAA,iBAAA,EAAA,YAAA,EAAA,UAAA,EAAA,YAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,EAAA,OAAA,EAAA,EAAA,QAAA,EAAA,UAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,QAAA,EAjCf;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BT,EAAA,CAAA,EAAA,QAAA,EAAA,IAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,MAAA,EAAA,CAAA;;2FAEU,cAAc,EAAA,UAAA,EAAA,CAAA;kBApC1B,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,yBAAyB;oBACnC,eAAe,EAAE,uBAAuB,CAAC,MAAM;AAC/C,oBAAA,QAAQ,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BT,EAAA,CAAA;AACF,iBAAA;;;AChDD;;;;;;;;;;;;;;;;;;;AAmBG;MAEU,kBAAkB,CAAA;AACZ,IAAA,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;AAC/B,IAAA,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC;AAC9B,IAAA,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AACvB,IAAA,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;IAEjD,SAAS,GAAmC,IAAI;AAExD;;;;;;;;;;;;;;;;;;;;;;;AAuBG;IACH,OAAO,GAAA;AACL,QAAA,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,IAAI,CAAC,SAAS;QACvB;AAEA,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,IAAI,CAC7C,UAAU,CAAC,CAAC,KAAc,KAAI;AAC5B,YAAA,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;AACpB,YAAA,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC;AAClE,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;AAChC,QAAA,CAAC,CAAC,EACF,QAAQ,CAAC,MAAK;AACZ,YAAA,IAAI,CAAC,SAAS,GAAG,IAAI;QACvB,CAAC,CAAC,EACF,KAAK,CAAC;YACJ,SAAS,EAAE,MAAM,IAAI,aAAa,CAAc,CAAC,CAAC;AAClD,YAAA,YAAY,EAAE,KAAK;AACnB,YAAA,eAAe,EAAE,KAAK;AACtB,YAAA,mBAAmB,EAAE,KAAK;AAC3B,SAAA,CAAC,CACH;QAED,OAAO,IAAI,CAAC,SAAS;IACvB;uGAvDW,kBAAkB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAlB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,kBAAkB,cADL,MAAM,EAAA,CAAA;;2FACnB,kBAAkB,EAAA,UAAA,EAAA,CAAA;kBAD9B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACZlC,SAAS,YAAY,CAAC,GAAW,EAAE,UAAkB,EAAA;AACnD,IAAA,OAAO,GAAG,KAAK,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA,EAAG,UAAU,CAAA,CAAA,CAAG,CAAC;AAC/D;AAEA,SAAS,cAAc,CAAC,GAAW,EAAE,UAAkB,EAAE,IAA8B,EAAA;AACrF,IAAA,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CACvE,CAAC,CAAC,KAAkB,CAAC,CAAC,CAAC,CACxB;AACD,IAAA,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAA,EAAG,UAAU,GAAG,CAAC,CAAA,CAAE,CAAC;AAC3D;AAEA;;;;;;;;AAQG;MACU,sBAAsB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;IACrE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,uBAAuB,CAAC;IACtD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE;AACtC,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB;AACA,IAAA,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD;AAEA;;;;;;;;;;;;;;;;;;;;;AAqBG;MACU,wBAAwB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;AACvE,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;AAC9C,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC;AACpC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AAC7B,IAAA,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC;IAErD,IACE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;AACzC,QAAA,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EACvD;AACA,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB;AAEA,IAAA,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CACnB,UAAU,CAAC,CAAC,KAAc,KAAI;AAC5B,QAAA,IAAI,EAAE,KAAK,YAAY,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE;AACjE,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC;AAEA,QAAA,IAAI,MAAM,CAAC,oBAAoB,KAAK,uBAAuB,EAAE;YAC3D,OAAO,CAAC,KAAK,EAAE;YACf,KAAK,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC;AACxD,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC;AAEA,QAAA,OAAO,kBAAkB,CAAC,OAAO,EAAE,CAAC,IAAI,CACtC,SAAS,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;;;;;AAK1B,QAAA,UAAU,CAAC,MAAM,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAC1C;IACH,CAAC,CAAC,CACH;AACH;AAEA;;;;;;;;AAQG;AACG,SAAU,0BAA0B,CAAC,GAAG,aAA6C,EAAA;IACzF,OAAO,iBAAiB,CACtB,qBAAqB,CAAC;AACpB,QAAA,UAAU,EAAE,YAAY;AACxB,QAAA,UAAU,EAAE,cAAc;AAC3B,KAAA,CAAC,EACF,gBAAgB,CAAC,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC,EACpE,GAAG,aAAa,CACjB;AACH;;ACvGM,SAAU,aAAa,CAAC,YAA8C,EAAE,GAAW,EAAA;AACvF,IAAA,OAAO,YAAY,GAAG,GAAG,CAAC,KAAK,IAAI;AACrC;;ACjBA;;;;;;;;;;AAUG;MAKU,mBAAmB,CAAA;AACb,IAAA,WAAW,GAAG,MAAM,EAAC,WAAoB,EAAC;AAC1C,IAAA,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAEjD,IAAA,GAAG;AACH,IAAA,GAAG;IACH,OAAO,GAAG,KAAK;IAEvB,IACI,aAAa,CAAC,GAAqC,EAAA;AACrD,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;QACd,IAAI,CAAC,MAAM,EAAE;IACf;IAEA,IACI,GAAG,CAAC,GAAW,EAAA;AACjB,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;QACd,IAAI,CAAC,MAAM,EAAE;IACf;IAEQ,MAAM,GAAA;AACZ,QAAA,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AAClE,QAAA,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAC/B,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;AACvD,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI;QACrB;AAAO,aAAA,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE;AACtC,YAAA,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE;AAC1B,YAAA,IAAI,CAAC,OAAO,GAAG,KAAK;QACtB;IACF;uGA7BW,mBAAmB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;2FAAnB,mBAAmB,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,iBAAA,EAAA,MAAA,EAAA,EAAA,aAAA,EAAA,eAAA,EAAA,GAAA,EAAA,CAAA,kBAAA,EAAA,KAAA,CAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,CAAA;;2FAAnB,mBAAmB,EAAA,UAAA,EAAA,CAAA;kBAJ/B,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,iBAAiB;AAC3B,oBAAA,UAAU,EAAE,IAAI;AACjB,iBAAA;;sBASE;;sBAMA,KAAK;uBAAC,kBAAkB;;;ACE3B;;;;;;AAMG;AACG,SAAU,uBAAuB,CAAC,KAAwB,EAAA;AAC9D,IAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAAmD;IACtE,MAAM,IAAI,GAAG,OAAO,IAAI,GAAG,MAAM,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,MAAM,CAAY,GAAG,CAAA,KAAA,EAAQ,KAAK,CAAC,MAAM,IAAI,CAAC,CAAA,CAAE;IACxG,MAAM,OAAO,GAAG,OAAO,IAAI,GAAG,SAAS,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,SAAS,CAAY,GAAG,SAAS;IAC/F,MAAM,QAAQ,GAAG,OAAO,IAAI,GAAG,UAAU,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,UAAU,CAAY,GAAG,SAAS;;;;IAIlG,MAAM,aAAa,GACjB,OAAO,IAAI,GAAG,gBAAgB,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,gBAAgB,CAAY,GAAG,SAAS;IAE/F,OAAO;QACL,IAAI;QACJ,OAAO;QACP,MAAM,EAAE,KAAK,CAAC,MAAM;AACpB,QAAA,IAAI,QAAQ,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AACjC,QAAA,IAAI,aAAa,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;KAC5C;AACH;;AC3DA;;AAEG;;ACFH;;AAEG;;;;"}
1	+ {"version":3,"file":"orechio-platform-angular.mjs","sources":["../../../projects/platform-angular/src/lib/config/platform-angular-config.ts","../../../projects/platform-angular/src/lib/session/session-store.ts","../../../projects/platform-angular/src/lib/auth/auth-client.ts","../../../projects/platform-angular/src/lib/auth/branch-selection.model.ts","../../../projects/platform-angular/src/lib/auth/branch-selector.ts","../../../projects/platform-angular/src/lib/auth/refresh-coordinator.ts","../../../projects/platform-angular/src/lib/http/provide-platform-angular-http.ts","../../../projects/platform-angular/src/lib/capabilities/capability.model.ts","../../../projects/platform-angular/src/lib/capabilities/capability.directive.ts","../../../projects/platform-angular/src/lib/problem-details/problem-details.model.ts","../../../projects/platform-angular/src/public-api.ts","../../../projects/platform-angular/src/orechio-platform-angular.ts"],"sourcesContent":["import { InjectionToken, Provider } from '@angular/core';\r\n\r\n/*\r\n BFF endpoint paths for the auth contract. All paths are relative to `apiBaseUrl`.\r\n * `me` is optional: some BFFs bootstrap the session via `refresh` alone (no dedicated\r\n * session-read endpoint) instead of a separate `me` call.\r\n /\r\nexport interface PlatformAngularAuthPaths {\r\n login: string;\r\n refresh: string;\r\n logout: string;\r\n me?: string;\r\n /\r\n Branch switch for an already-authenticated session. Optional: only BFFs that\r\n * expose an authenticated switch endpoint set it, and `AuthClient.selectBranch`\r\n * fails fast when it is absent rather than guessing a URL.\r\n /\r\n selectBranch?: string;\r\n /\r\n Unwraps the raw auth-endpoint response body into TUser. Defaults to the\r\n * identity function (response body IS the user object), matching Store's\r\n * proven wire format. Portal's BFF wraps the user in an envelope\r\n * (`{ user: UserInfo }`) — Portal supplies `(body) => body.user` here\r\n * rather than the package assuming either shape.\r\n /\r\n unwrapUser?: (body: unknown) => unknown;\r\n}\r\n\r\nexport interface PlatformAngularConfig {\r\n /* Same-origin API base path, e.g. '/api'. Never an absolute cross-origin URL — the\r\n * BFF/cookie-session pattern this library assumes requires same-origin requests. /\r\n apiBaseUrl: string;\r\n auth: PlatformAngularAuthPaths;\r\n /* XSRF cookie/header names. Defaults match Angular's own defaults and both proven\r\n * consumers (Portal, Store): cookie 'XSRF-TOKEN', header 'X-XSRF-TOKEN'. /\r\n xsrf?: {\r\n cookieName?: string;\r\n headerName?: string;\r\n };\r\n /* 401 handling strategy. 'redirect' clears the session and redirects immediately\r\n * (Store's proven behavior). 'refresh-then-redirect' attempts one silent refresh\r\n * before giving up (Portal's proven behavior). Defaults to 'redirect' — the simpler,\r\n * more conservative behavior — when omitted. /\r\n unauthorizedStrategy?: 'redirect' \| 'refresh-then-redirect';\r\n /* Route to navigate to after a session is cleared. Defaults to '/login'. /\r\n loginRoute?: string;\r\n}\r\n\r\nexport const PLATFORM_ANGULAR_CONFIG = new InjectionToken<PlatformAngularConfig>(\r\n 'PLATFORM_ANGULAR_CONFIG',\r\n);\r\n\r\nexport function providePlatformAngularConfig(config: PlatformAngularConfig): Provider {\r\n return { provide: PLATFORM_ANGULAR_CONFIG, useValue: config };\r\n}\r\n","import { Injectable, Signal, computed, signal } from '@angular/core';\nimport { SessionUser } from './session-user.model';\n\n/\n Generic signal-based session store. Mirrors the pattern already proven\n * independently by both consumers (Portal's AuthService.user, Store's\n * EstadoDaSessao) — deliberately NOT a richer state machine (unknown /\n * loading / error states): neither consumer needed one, and ADR-010 §2.2\n * (\"projete para extração, não extraia por antecipação\") argues against\n * building one speculatively.\n \n Parameterized over TUser so each product can extend SessionUser with its\n * own fields without needing a package release.\n /\n@Injectable({ providedIn: 'root' })\nexport class SessionStore<TUser extends SessionUser = SessionUser> {\n private readonly state = signal<TUser \| null>(null);\n\n readonly user: Signal<TUser \| null> = this.state.asReadonly();\n readonly isAuthenticated: Signal<boolean> = computed(() => this.state() !== null);\n\n set(user: TUser): void {\n this.state.set(user);\n }\n\n clear(): void {\n this.state.set(null);\n }\n}\n","import { HttpClient } from '@angular/common/http';\r\nimport { Injectable, inject } from '@angular/core';\r\nimport { Observable, finalize, map, tap, throwError } from 'rxjs';\r\nimport { PLATFORM_ANGULAR_CONFIG } from '../config/platform-angular-config';\r\nimport { SessionStore } from '../session/session-store';\r\nimport { SessionUser } from '../session/session-user.model';\r\n\r\n/\r\n Thin BFF client for the auth contract: login / refresh / logout, and an\r\n * optional session-read (\"me\") endpoint. Deliberately does NOT decode JWTs,\r\n * store bearer tokens, or treat itself as a security authority — per\r\n * ADR-010 §12 and this package's explicit non-goal (no JWT client SDK): the\r\n * BFF/backend is the only place tokens live, this class only reflects\r\n * whatever session-shaped JSON the BFF hands back.\r\n \r\n Endpoint paths are entirely config-driven (PLATFORM_ANGULAR_CONFIG) — this\r\n * class contains zero hardcoded URLs, so it works unmodified against\r\n * Portal's /api/auth/{login,me,refresh,logout} (envelope-wrapped\r\n * `{ user: UserInfo }` responses, unwrapped via config.auth.unwrapUser) and\r\n * Store's /api/auth/{login,refresh,logout} (no `me`, unwrapped responses)\r\n * alike.\r\n /\r\n@Injectable({ providedIn: 'root' })\r\nexport class AuthClient<TUser extends SessionUser = SessionUser> {\r\n private readonly http = inject(HttpClient);\r\n private readonly config = inject(PLATFORM_ANGULAR_CONFIG);\r\n private readonly session = inject(SessionStore) as SessionStore<TUser>;\r\n\r\n private url(path: string): string {\r\n return `${this.config.apiBaseUrl}${path}`;\r\n }\r\n\r\n private unwrap(body: unknown): TUser {\r\n const unwrapUser = this.config.auth.unwrapUser;\r\n return (unwrapUser ? unwrapUser(body) : body) as TUser;\r\n }\r\n\r\n login(credentials: unknown): Observable<TUser> {\r\n return this.http.post<unknown>(this.url(this.config.auth.login), credentials).pipe(\r\n map((body) => this.unwrap(body)),\r\n tap((user) => this.session.set(user)),\r\n );\r\n }\r\n\r\n /\r\n Reads the current session. Uses the configured `me` endpoint (GET) when\r\n * present (Portal); falls back to `refresh` (POST) when it isn't (Store,\r\n * which has no dedicated session-read endpoint and bootstraps via refresh).\r\n /\r\n initSession(): Observable<TUser> {\r\n if (this.config.auth.me) {\r\n return this.http.get<unknown>(this.url(this.config.auth.me)).pipe(\r\n map((body) => this.unwrap(body)),\r\n tap((user) => this.session.set(user)),\r\n );\r\n }\r\n return this.refresh();\r\n }\r\n\r\n /\r\n Asks the BFF to make `branchId` the current branch of the session that is\r\n * already authenticated. No credentials are involved and none are re-sent: the\r\n * browser proves nothing here beyond the session it already holds.\r\n \r\n `branchId` is a requested target, never an authorization. The BFF forwards\r\n * it to the Platform, which re-reads the user's grants and refuses what is not\r\n * granted — a rejection arrives as a failed request, and the session store is\r\n * left exactly as it was, still on the previous branch.\r\n \r\n The store is updated only from the session the server returns, never\r\n * optimistically from the requested id: the whole point of an explicit switch is\r\n * that the server, not the client, decides which branch the user ends up in.\r\n /\r\n selectBranch(branchId: string): Observable<TUser> {\r\n const path = this.config.auth.selectBranch;\r\n if (!path) {\r\n return throwError(\r\n () =>\r\n new Error(\r\n 'AuthClient.selectBranch requires config.auth.selectBranch. Configure the ' +\r\n 'BFF path that performs an authenticated branch switch.',\r\n ),\r\n );\r\n }\r\n\r\n return this.http.post<unknown>(this.url(path), { branchId }).pipe(\r\n map((body) => this.unwrap(body)),\r\n tap((user) => this.session.set(user)),\r\n );\r\n }\r\n\r\n refresh(): Observable<TUser> {\r\n return this.http.post<unknown>(this.url(this.config.auth.refresh), {}).pipe(\r\n map((body) => this.unwrap(body)),\r\n tap((user) => this.session.set(user)),\r\n );\r\n }\r\n\r\n /\r\n Clears the local session unconditionally — on success, on error, and on\r\n * unsubscribe (`finalize`, not `tap`) — matching the behavior both\r\n * consumers already converged on independently (Portal swallows the\r\n * error before clearing; Store clears via `finalize` while still letting\r\n * the error propagate). This does NOT swallow errors: callers that want\r\n * Portal's \"always succeed\" UX compose their own `catchError` on top.\r\n /\r\n logout(): Observable<void> {\r\n return this.http\r\n .post<void>(this.url(this.config.auth.logout), {})\r\n .pipe(finalize(() => this.session.clear()));\r\n }\r\n}\r\n","import { HttpErrorResponse } from '@angular/common/http';\r\n\r\n/\r\n Control-flow code the Platform's auth contract returns (HTTP 409) when the\r\n * authenticated user has access to more than one branch and none was chosen.\r\n \r\n It is deliberately NOT a failure: no session is created, no cookie is set,\r\n * and the caller is expected to ask the user which branch to enter. Treating\r\n * it as a generic error is the bug this constant exists to prevent.\r\n /\r\nexport const BRANCH_SELECTION_REQUIRED_CODE = 'auth.branch_selection_required';\r\n\r\n/\r\n One selectable branch.\r\n \r\n `name` is optional because the current backend contract carries branch ids\r\n * only — see `readBranchSelectionRequired`. Modelling it as optional now means\r\n * the day the backend starts sending names, consumers get them without a\r\n * breaking change to this type.\r\n /\r\nexport interface BranchOption {\r\n readonly id: string;\r\n readonly name?: string \| null;\r\n}\r\n\r\n/* Payload of a branch-selection-required response, normalized. /\r\nexport interface BranchSelectionRequired {\r\n readonly branches: readonly BranchOption[];\r\n}\r\n\r\n/\r\n Recognizes a branch-selection-required response and normalizes its payload,\r\n * or returns `null` for anything else — so callers branch on a value instead of\r\n * re-deriving the contract from status codes and body shapes.\r\n \r\n Reads three wire shapes, in this order of preference:\r\n \r\n 1. `branchOptions: [{ id, name }]` — the display metadata the Platform sends\r\n * alongside the ids. Preferred when present, because it is the only shape\r\n * that lets an operator tell the branches apart.\r\n * 2. `branches: [\"<guid>\"]` — the original contract. Still authoritative for\r\n * selection, and still enough on its own.\r\n * 3. `branches: [{ id, name }]` — tolerated since 0.3.0.\r\n \r\n Reading all three is what makes the rollout order irrelevant: a frontend on\r\n * this version works against a backend that has the metadata and against one\r\n * that does not, and neither side has to ship first.\r\n \r\n Entries without a usable id are dropped rather than rendered as blanks: an\r\n * unselectable option in a selection list is worse than a shorter list.\r\n /\r\nexport function readBranchSelectionRequired(error: unknown): BranchSelectionRequired \| null {\r\n if (!(error instanceof HttpErrorResponse) \|\| error.status !== 409) return null;\r\n\r\n const body = error.error as\r\n \| { code?: unknown; branches?: unknown; branchOptions?: unknown }\r\n \| null;\r\n if (!body \|\| body.code !== BRANCH_SELECTION_REQUIRED_CODE) return null;\r\n\r\n // `branchOptions` só substitui os ids quando traz alguma opção utilizável —\r\n // uma lista vazia ou ilegível não pode apagar a lista de ids que funciona.\r\n const comMetadata = normalizeEntries(body.branchOptions);\r\n if (comMetadata.length > 0) return { branches: comMetadata };\r\n\r\n if (!Array.isArray(body.branches)) return null;\r\n return { branches: normalizeEntries(body.branches) };\r\n}\r\n\r\nfunction normalizeEntries(raw: unknown): BranchOption[] {\r\n if (!Array.isArray(raw)) return [];\r\n\r\n return raw\r\n .map((entry): BranchOption \| null => {\r\n if (typeof entry === 'string') return entry ? { id: entry } : null;\r\n if (entry && typeof entry === 'object') {\r\n const { id, name } = entry as { id?: unknown; name?: unknown };\r\n if (typeof id === 'string' && id) {\r\n return { id, name: typeof name === 'string' ? name : null };\r\n }\r\n }\r\n return null;\r\n })\r\n .filter((branch): branch is BranchOption => branch !== null);\r\n}\r\n","import { ChangeDetectionStrategy, Component, input, output } from '@angular/core';\r\nimport { BranchOption } from './branch-selection.model';\r\n\r\n/\r\n Explicit branch picker for the multi-branch login step.\r\n \r\n Deliberately narrow: it receives options, renders them, and emits the id the\r\n * user actually chose. It does not call any backend, hold credentials, read\r\n * tokens, touch storage, or know which product it is rendering inside — the\r\n * flow around it belongs to the consumer, and the copy around it belongs to the\r\n * consumer's login page.\r\n \r\n It never picks for the user. When the backend answers\r\n * `auth.branch_selection_required` it has already refused to choose (no session\r\n * is created); a selector that quietly defaulted to the first option would put\r\n * the arbitrary choice back one layer up, in the place hardest to notice.\r\n \r\n Rendered as a radio group so the browser gives keyboard navigation, focus\r\n * management, and screen-reader semantics for free — a list of buttons would\r\n * need all three re-implemented, worse.\r\n /\r\n@Component({\r\n selector: 'orechio-branch-selector',\r\n changeDetection: ChangeDetectionStrategy.OnPush,\r\n template: `\r\n @if (branches().length === 0) {\r\n <p class=\"orechio-branch-selector__empty\" role=\"status\">{{ emptyLabel() }}</p>\r\n } @else {\r\n <fieldset class=\"orechio-branch-selector\" [disabled]=\"busy()\">\r\n <legend>{{ legend() }}</legend>\r\n\r\n @for (branch of branches(); track branch.id; let index = $index) {\r\n <label class=\"orechio-branch-selector__option\">\r\n <input\r\n type=\"radio\"\r\n name=\"orechio-branch\"\r\n [value]=\"branch.id\"\r\n [checked]=\"chosen === branch.id\"\r\n (change)=\"choose(branch.id)\"\r\n />\r\n <span class=\"orechio-branch-selector__label\">{{ label(branch, index) }}</span>\r\n <span class=\"orechio-branch-selector__hint\">{{ fragment(branch) }}</span>\r\n </label>\r\n }\r\n\r\n <button\r\n type=\"button\"\r\n class=\"orechio-branch-selector__confirm\"\r\n [disabled]=\"!chosen \|\| busy()\"\r\n (click)=\"confirm()\"\r\n >\r\n {{ confirmLabel() }}\r\n </button>\r\n </fieldset>\r\n }\r\n `,\r\n})\r\nexport class BranchSelector {\r\n /* Options to choose from. An empty list renders the empty state, never a silent no-op. /\r\n readonly branches = input.required<readonly BranchOption[]>();\r\n\r\n /* Blocks input while the consumer is completing the sign-in round-trip. /\r\n readonly busy = input(false);\r\n\r\n // Copy is injectable because wording belongs to the product, not to the\r\n // platform package — the defaults exist so a consumer can drop the component\r\n // in and iterate on the words later.\r\n readonly legend = input('Selecione a filial');\r\n readonly confirmLabel = input('Continuar');\r\n readonly emptyLabel = input('Nenhuma filial disponível para este usuário.');\r\n\r\n /* Emits only in response to a user action. /\r\n readonly selected = output<string>();\r\n\r\n protected chosen: string \| null = null;\r\n\r\n protected choose(id: string): void {\r\n this.chosen = id;\r\n }\r\n\r\n protected confirm(): void {\r\n if (this.chosen) this.selected.emit(this.chosen);\r\n }\r\n\r\n /\r\n The name is the label whenever the contract carries one. The id fragment stays\r\n * as secondary text rather than disappearing: the domain allows two branches to\r\n * share a name, and when that happens the fragment is the only thing telling\r\n * them apart.\r\n \r\n Without a name — an older backend, or metadata the server could not compose —\r\n * the positional fallback keeps the list selectable. Two raw identifiers side by\r\n * side are technically a choice and practically a coin flip, which is exactly\r\n * why the name is preferred whenever it exists.\r\n /\r\n protected label(branch: BranchOption, index: number): string {\r\n return branch.name ? branch.name : `Filial ${index + 1}`;\r\n }\r\n\r\n /* Fragment of the id, shown beside the label to disambiguate repeated names. /\r\n protected fragment(branch: BranchOption): string {\r\n return branch.id.slice(0, 8);\r\n }\r\n}\r\n","import { inject, Injectable } from '@angular/core';\r\nimport { Router } from '@angular/router';\r\nimport { Observable, ReplaySubject, catchError, finalize, share, throwError } from 'rxjs';\r\nimport { PLATFORM_ANGULAR_CONFIG } from '../config/platform-angular-config';\r\nimport { SessionStore } from '../session/session-store';\r\nimport { SessionUser } from '../session/session-user.model';\r\nimport { AuthClient } from './auth-client';\r\n\r\n/\r\n INTERNAL. Not exported from public-api.ts — consumers never construct or configure this\r\n * directly; it exists purely to back `sessionExpiryInterceptor`'s `'refresh-then-redirect'`\r\n * strategy (WEB-0.2, ADR-016 §\"WEB-0.2 note\").\r\n \r\n Deduplicates concurrent `AuthClient.refresh()` calls that originate from the SAME Angular\r\n * application context (one injector, i.e. one running app/tab). Before this existed, every\r\n * 401'd request independently called `authClient.refresh()`, and since that method returns a\r\n * cold Observable (`http.post(...)`, no multicasting), N simultaneous 401s produced N\r\n * independent `POST /refresh` calls — proven by the characterization test in\r\n * `provide-platform-angular-http.spec.ts`.\r\n \r\n This is defense-in-depth ONLY. The Platform already tolerates concurrent legitimate refresh\r\n * rotations correctly and safely (PLATFORM-REFRESH-1/1A/1B, ADR-016's retry leeway) — this class\r\n * exists to cut needless network traffic, cryptographic work, and rate-limit pressure on the\r\n * Platform, not to be the thing that makes concurrent refreshes safe. It does not, and does not\r\n * need to, coordinate across browser tabs/windows or other Angular application instances — see\r\n * the \"Multi-tab\" note on `sessionExpiryInterceptor` for why that's explicitly out of scope here\r\n * and handled server-side instead.\r\n /\r\n@Injectable({ providedIn: 'root' })\r\nexport class RefreshCoordinator {\r\n private readonly authClient = inject(AuthClient);\r\n private readonly session = inject(SessionStore);\r\n private readonly router = inject(Router);\r\n private readonly config = inject(PLATFORM_ANGULAR_CONFIG);\r\n\r\n private inFlight$: Observable<SessionUser> \| null = null;\r\n\r\n /\r\n Returns the single in-flight refresh operation if one is already running, or starts a new\r\n * one. Every caller — first or piggybacking — gets the SAME underlying HTTP call's outcome.\r\n \r\n Semantics (WEB-0.2):\r\n * - Single-flight, not a permanent cache: once the shared operation settles (success or\r\n * error), the reference is cleared (`finalize`, placed BEFORE `share()` so it fires exactly\r\n * once per underlying HTTP call, not once per subscriber — see the `share()` config note\r\n * below). The next call to `refresh()` after that always starts a genuinely new request.\r\n * - On failure, the session is cleared and the browser is navigated to the login route\r\n * exactly once, regardless of how many callers are waiting — not once per waiting caller.\r\n * Each caller still receives its own error notification (multicast by `share()`) and is\r\n * responsible for propagating whatever error IT needs to its own subscriber (see\r\n * `sessionExpiryInterceptor`, which re-throws the ORIGINAL 401 to the request that\r\n * triggered it, not this refresh failure).\r\n * - `resetOnRefCountZero: false` is load-bearing: if one waiting caller unsubscribes (e.g. a\r\n * cancelled navigation), the still-in-flight HTTP request for the OTHER callers must not be\r\n * aborted. Angular's `HttpClient` cancels the underlying network request when its Observable\r\n * loses its last subscriber — without this flag, one caller going away could silently\r\n * cancel the refresh everyone else is still waiting on.\r\n * - `resetOnError`/`resetOnComplete` are left `false` too: this class never reuses a settled\r\n * `inFlight$` reference across cycles (the field is always nulled and rebuilt from scratch\r\n * by `finalize`), so `share()` itself never needs to reset its own internal connector.\r\n /\r\n refresh(): Observable<SessionUser> {\r\n if (this.inFlight$) {\r\n return this.inFlight$;\r\n }\r\n\r\n this.inFlight$ = this.authClient.refresh().pipe(\r\n catchError((error: unknown) => {\r\n this.session.clear();\r\n void this.router.navigateByUrl(this.config.loginRoute ?? '/login');\r\n return throwError(() => error);\r\n }),\r\n finalize(() => {\r\n this.inFlight$ = null;\r\n }),\r\n share({\r\n connector: () => new ReplaySubject<SessionUser>(1),\r\n resetOnError: false,\r\n resetOnComplete: false,\r\n resetOnRefCountZero: false,\r\n }),\r\n );\r\n\r\n return this.inFlight$;\r\n }\r\n}\r\n","import {\r\n HttpErrorResponse,\r\n HttpInterceptorFn,\r\n provideHttpClient,\r\n withInterceptors,\r\n withXsrfConfiguration,\r\n HttpFeature,\r\n HttpFeatureKind,\r\n} from '@angular/common/http';\r\nimport { inject } from '@angular/core';\r\nimport { Router } from '@angular/router';\r\nimport { catchError, switchMap, throwError } from 'rxjs';\r\nimport { PLATFORM_ANGULAR_CONFIG, PlatformAngularAuthPaths } from '../config/platform-angular-config';\r\nimport { RefreshCoordinator } from '../auth/refresh-coordinator';\r\nimport { SessionStore } from '../session/session-store';\r\n\r\nfunction isApiRequest(url: string, apiBaseUrl: string): boolean {\r\n return url === apiBaseUrl \|\| url.startsWith(`${apiBaseUrl}/`);\r\n}\r\n\r\nfunction isAuthEndpoint(url: string, apiBaseUrl: string, auth: PlatformAngularAuthPaths): boolean {\r\n const authPaths = [auth.login, auth.refresh, auth.logout, auth.me].filter(\r\n (p): p is string => !!p,\r\n );\r\n return authPaths.some((p) => url === `${apiBaseUrl}${p}`);\r\n}\r\n\r\n/\r\n Forces `withCredentials: true` on same-origin API requests, so the BFF's\r\n * HttpOnly session cookie is sent. Proven identically in both consumers.\r\n * XSRF header injection is intentionally NOT duplicated here — Angular's\r\n * own `withXsrfConfiguration` (registered by `providePlatformAngularHttp`)\r\n * already does that. Portal's local interceptor previously re-implemented\r\n * XSRF header injection manually alongside `withXsrfConfiguration`; that\r\n * was redundant, not a pattern to preserve.\r\n /\r\nexport const credentialsInterceptor: HttpInterceptorFn = (req, next) => {\r\n const { apiBaseUrl } = inject(PLATFORM_ANGULAR_CONFIG);\r\n if (!isApiRequest(req.url, apiBaseUrl)) {\r\n return next(req);\r\n }\r\n return next(req.clone({ withCredentials: true }));\r\n};\r\n\r\n/\r\n On 401 from a non-auth API request: 'redirect' (default) clears the\r\n * session and navigates to the login route immediately (Store's proven\r\n * behavior). 'refresh-then-redirect' attempts one silent refresh first and\r\n * retries the original request on success, falling back to redirect\r\n * (Portal's proven behavior). Configured via\r\n * PlatformAngularConfig.unauthorizedStrategy.\r\n \r\n WEB-0.2: the 'refresh-then-redirect' path routes through `RefreshCoordinator`\r\n * instead of calling `AuthClient.refresh()` directly — every 401 handled by\r\n * the SAME running app shares one in-flight refresh instead of each request\r\n * triggering its own. The 'redirect' strategy is untouched: it never calls\r\n * refresh at all, so there is nothing to coordinate (see the config note on\r\n * `PlatformAngularConfig.unauthorizedStrategy`). On refresh failure, the\r\n * session-clear/navigate side effect now happens once inside the coordinator\r\n * (shared across every waiting caller) rather than once per waiting caller;\r\n * each caller still receives the ORIGINAL 401 error, not a refresh-specific\r\n * one, exactly as before. Multi-tab/multi-window coordination is explicitly\r\n * NOT handled here — see `RefreshCoordinator`'s doc comment — the Platform's\r\n * own server-side retry leeway (ADR-016) is what makes concurrent refreshes\r\n * from independent contexts safe.\r\n /\r\nexport const sessionExpiryInterceptor: HttpInterceptorFn = (req, next) => {\r\n const config = inject(PLATFORM_ANGULAR_CONFIG);\r\n const session = inject(SessionStore);\r\n const router = inject(Router);\r\n const refreshCoordinator = inject(RefreshCoordinator);\r\n\r\n if (\r\n !isApiRequest(req.url, config.apiBaseUrl) \|\|\r\n isAuthEndpoint(req.url, config.apiBaseUrl, config.auth)\r\n ) {\r\n return next(req);\r\n }\r\n\r\n return next(req).pipe(\r\n catchError((error: unknown) => {\r\n if (!(error instanceof HttpErrorResponse) \|\| error.status !== 401) {\r\n return throwError(() => error);\r\n }\r\n\r\n if (config.unauthorizedStrategy !== 'refresh-then-redirect') {\r\n session.clear();\r\n void router.navigateByUrl(config.loginRoute ?? '/login');\r\n return throwError(() => error);\r\n }\r\n\r\n return refreshCoordinator.refresh().pipe(\r\n switchMap(() => next(req)),\r\n // The coordinator already cleared the session and navigated once for\r\n // this shared failure (see RefreshCoordinator.refresh()) — this\r\n // request still needs to fail with its OWN original 401, not the\r\n // refresh's error, exactly as before WEB-0.2.\r\n catchError(() => throwError(() => error)),\r\n );\r\n }),\r\n );\r\n};\r\n\r\n/\r\n Bundles provideHttpClient with the XSRF configuration and interceptors\r\n * proven necessary by both consumers. Cookie/header names default to\r\n * 'XSRF-TOKEN'/'X-XSRF-TOKEN' (identical in both consumers today) but\r\n * remain overridable via config. Consumers add their own extra\r\n * provideHttpClient features (e.g. Portal's withXhr()) by calling\r\n * provideHttpClient(...) separately — this function only owns the concerns\r\n * proven common to both.\r\n /\r\nexport function providePlatformAngularHttp(...extraFeatures: HttpFeature<HttpFeatureKind>[]) {\r\n return provideHttpClient(\r\n withXsrfConfiguration({\r\n cookieName: 'XSRF-TOKEN',\r\n headerName: 'X-XSRF-TOKEN',\r\n }),\r\n withInterceptors([credentialsInterceptor, sessionExpiryInterceptor]),\r\n ...extraFeatures,\r\n );\r\n}\r\n","/\n Generic capability map: a flat set of boolean feature flags fetched once\n * from the BFF (Portal's proven pattern — GET .../capabilities returning a\n * flat boolean-keyed object). Deliberately a generic `Record<string,\n * boolean>` rather than a typed interface enumerating every field: Portal's\n * capability set already has 17 product-specific fields and Store will\n * grow its own, unrelated set. A typed interface would require a package\n * release for every new product capability (see ADR-010 §18 — evolution\n * cadence mismatch is a real argument against sharing). Each product\n * defines its own capability keys locally and reads them through this map.\n \n UX ONLY. This does not replace server-side authorization. Every consumer\n * MUST continue to handle 403 from the actual mutating/reading endpoint —\n * capability checks here are a consultive pre-check, exactly as already\n * documented in Portal's application.service.ts before this extraction.\n /\nexport type CapabilityMap = Readonly<Record<string, boolean>>;\n\nexport function hasCapability(capabilities: CapabilityMap \| null \| undefined, key: string): boolean {\n return capabilities?.[key] === true;\n}\n","import { Directive, Input, TemplateRef, ViewContainerRef, inject } from '@angular/core';\nimport { CapabilityMap, hasCapability } from './capability.model';\n\n/\n Structural directive gating template content on a capability key from a\n * consumer-supplied CapabilityMap. Net-new (neither consumer had factored\n * their proven inline `@if (capabilities()?.x)` pattern into a directive),\n * but grounded in Portal's validated usage — see capability.model.ts.\n \n UX ONLY — see capability.model.ts. Hiding an element here does not\n * authorize anything; the backend re-validates on every mutating call.\n \n Usage: `<button orxCapability=\"capabilities(); has: 'manageTenants'\">`\n /\n@Directive({\n selector: '[orxCapability]',\n standalone: true,\n})\nexport class CapabilityDirective {\n private readonly templateRef = inject(TemplateRef<unknown>);\n private readonly viewContainer = inject(ViewContainerRef);\n\n private map: CapabilityMap \| null \| undefined;\n private key: string \| undefined;\n private hasView = false;\n\n @Input()\n set orxCapability(map: CapabilityMap \| null \| undefined) {\n this.map = map;\n this.render();\n }\n\n @Input('orxCapabilityHas')\n set has(key: string) {\n this.key = key;\n this.render();\n }\n\n private render(): void {\n const shouldShow = !!this.key && hasCapability(this.map, this.key);\n if (shouldShow && !this.hasView) {\n this.viewContainer.createEmbeddedView(this.templateRef);\n this.hasView = true;\n } else if (!shouldShow && this.hasView) {\n this.viewContainer.clear();\n this.hasView = false;\n }\n }\n}\n","import { HttpErrorResponse } from '@angular/common/http';\r\n\r\n/*\r\n Canonical error shape, generalized from Store's already-proven\r\n * ErroApresentavel/normalizarErroApi (the more mature of the two consumers'\r\n * error handling — Portal had no typed contract at all, just five\r\n * duplicated `error.error.code` reads). `message` is optional: Portal never\r\n * received a server-supplied message field, only `code`, and resolves\r\n * user-facing text locally — so this contract cannot require it.\r\n \r\n `correlation_id` (API-1, ADR-017 §3.3): added after confirming directly\r\n * from Orechio.Platform's `ProblemResponses.cs` that it IS present in the\r\n * JSON body of every error response the Platform host produces (not just\r\n * the `X-Correlation-ID` response header), and that Portal's BFF relays\r\n * that body byte-for-byte, unreshaped, for every typed endpoint. The\r\n * earlier NG-1-era absence was accurate for what it tested at the time but\r\n * incomplete relative to Platform's actual wire contract. Optional: not\r\n * every error path in every consumer emits this field today (Store's own\r\n * narrower auth/CSRF error shapes don't) — its absence must not be treated\r\n * as a parse failure.\r\n \r\n Domain-specific error codes (e.g. 'access.platform_only',\r\n * 'tenant.not_found', 'csrf.invalid') are NOT enumerated here — `code`\r\n * stays a plain string so any code survives normalization unmodified and\r\n * remains identifiable by callers, per Passo 28.\r\n /\r\nexport interface ProblemDetails {\r\n code: string;\r\n message?: string;\r\n status: number;\r\n required?: string;\r\n correlationId?: string;\r\n}\r\n\r\n/\r\n Normalizes an HttpErrorResponse into ProblemDetails. Mirrors Store's\r\n * normalizarErroApi exactly, generalized to make `message` optional and to\r\n * accept an HttpErrorResponse without any consumer-specific fallback\r\n * message map (each product keeps its own code→message copy locally —\r\n * that's product-specific text, not shared infrastructure).\r\n /\r\nexport function normalizeProblemDetails(error: HttpErrorResponse): ProblemDetails {\r\n const body = error.error as Record<string, unknown> \| null \| undefined;\r\n const code = typeof body?.['code'] === 'string' ? (body['code'] as string) : `http.${error.status \|\| 0}`;\r\n const message = typeof body?.['message'] === 'string' ? (body['message'] as string) : undefined;\r\n const required = typeof body?.['required'] === 'string' ? (body['required'] as string) : undefined;\r\n // Wire field is `correlation_id` (snake_case, ADR-017 §3) — kept as-is on the wire,\r\n // exposed as `correlationId` here per TS/Angular convention (same server-side pattern:\r\n // OrechioProblemDetails.CorrelationId is [JsonPropertyName(\"correlation_id\")]).\r\n const correlationId =\r\n typeof body?.['correlation_id'] === 'string' ? (body['correlation_id'] as string) : undefined;\r\n\r\n return {\r\n code,\r\n message,\r\n status: error.status,\r\n ...(required ? { required } : {}),\r\n ...(correlationId ? { correlationId } : {}),\r\n };\r\n}\r\n","/\r\n * Public API Surface of @orechio/platform-angular\r\n /\r\n\r\nexport type { PlatformAngularConfig, PlatformAngularAuthPaths } from './lib/config/platform-angular-config';\r\nexport { PLATFORM_ANGULAR_CONFIG, providePlatformAngularConfig } from './lib/config/platform-angular-config';\r\n\r\nexport type { SessionUser } from './lib/session/session-user.model';\r\nexport { SessionStore } from './lib/session/session-store';\r\n\r\nexport { AuthClient } from './lib/auth/auth-client';\r\n\r\nexport type { BranchOption, BranchSelectionRequired } from './lib/auth/branch-selection.model';\r\nexport {\r\n BRANCH_SELECTION_REQUIRED_CODE,\r\n readBranchSelectionRequired,\r\n} from './lib/auth/branch-selection.model';\r\nexport { BranchSelector } from './lib/auth/branch-selector';\r\n\r\nexport { credentialsInterceptor, sessionExpiryInterceptor, providePlatformAngularHttp } from './lib/http/provide-platform-angular-http';\r\n\r\nexport type { CapabilityMap } from './lib/capabilities/capability.model';\r\nexport { hasCapability } from './lib/capabilities/capability.model';\r\nexport { CapabilityDirective } from './lib/capabilities/capability.directive';\r\n\r\nexport type { ProblemDetails } from './lib/problem-details/problem-details.model';\r\nexport { normalizeProblemDetails } from './lib/problem-details/problem-details.model';\r\n\r\nexport type { PagedResult } from './lib/pagination/paged-result.model';\r\n","/\n Generated bundle index. Do not edit.\n /\n\nexport from './public-api';\n"],"names":[],"mappings":";;;;;;MAgDa,uBAAuB,GAAG,IAAI,cAAc,CACvD,yBAAyB;AAGrB,SAAU,4BAA4B,CAAC,MAA6B,EAAA;IACxE,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,EAAE;AAC/D;;ACnDA;;;;;;;;;;AAUG;MAEU,YAAY,CAAA;IACN,KAAK,GAAG,MAAM,CAAe,IAAI;8EAAC;AAE1C,IAAA,IAAI,GAAyB,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE;IACpD,eAAe,GAAoB,QAAQ,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI;wFAAC;AAEjF,IAAA,GAAG,CAAC,IAAW,EAAA;AACb,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IACtB;IAEA,KAAK,GAAA;AACH,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IACtB;uGAZW,YAAY,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAZ,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,YAAY,cADC,MAAM,EAAA,CAAA;;2FACnB,YAAY,EAAA,UAAA,EAAA,CAAA;kBADxB,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACPlC;;;;;;;;;;;;;;AAcG;MAEU,UAAU,CAAA;AACJ,IAAA,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;AACzB,IAAA,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;AACxC,IAAA,OAAO,GAAG,MAAM,CAAC,YAAY,CAAwB;AAE9D,IAAA,GAAG,CAAC,IAAY,EAAA;QACtB,OAAO,CAAA,EAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAA,EAAG,IAAI,CAAA,CAAE;IAC3C;AAEQ,IAAA,MAAM,CAAC,IAAa,EAAA;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU;AAC9C,QAAA,QAAQ,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI;IAC9C;AAEA,IAAA,KAAK,CAAC,WAAoB,EAAA;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAChF,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;IACH;AAEA;;;;AAIG;IACH,WAAW,GAAA;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;YACvB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAC/D,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;QACH;AACA,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE;IACvB;AAEA;;;;;;;;;;;;;AAaG;AACH,IAAA,YAAY,CAAC,QAAgB,EAAA;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;QAC1C,IAAI,CAAC,IAAI,EAAE;YACT,OAAO,UAAU,CACf,MACE,IAAI,KAAK,CACP,2EAA2E;gBACzE,wDAAwD,CAC3D,CACJ;QACH;QAEA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAC/D,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;IACH;IAEA,OAAO,GAAA;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CACzE,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;IACH;AAEA;;;;;;;AAOG;IACH,MAAM,GAAA;QACJ,OAAO,IAAI,CAAC;AACT,aAAA,IAAI,CAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;AAChD,aAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C;uGAvFW,UAAU,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAV,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,UAAU,cADG,MAAM,EAAA,CAAA;;2FACnB,UAAU,EAAA,UAAA,EAAA,CAAA;kBADtB,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACpBlC;;;;;;;AAOG;AACI,MAAM,8BAA8B,GAAG;AAoB9C;;;;;;;;;;;;;;;;;;;;AAoBG;AACG,SAAU,2BAA2B,CAAC,KAAc,EAAA;IACxD,IAAI,EAAE,KAAK,YAAY,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;AAAE,QAAA,OAAO,IAAI;AAE9E,IAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAEX;AACR,IAAA,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,8BAA8B;AAAE,QAAA,OAAO,IAAI;;;IAItE,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;AACxD,IAAA,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;AAAE,QAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;IAE5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;AAAE,QAAA,OAAO,IAAI;IAC9C,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;AACtD;AAEA,SAAS,gBAAgB,CAAC,GAAY,EAAA;AACpC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;AAAE,QAAA,OAAO,EAAE;AAElC,IAAA,OAAO;AACJ,SAAA,GAAG,CAAC,CAAC,KAAK,KAAyB;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;AAAE,YAAA,OAAO,KAAK,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI;AAClE,QAAA,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AACtC,YAAA,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAyC;AAC9D,YAAA,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,EAAE;AAChC,gBAAA,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,GAAG,IAAI,EAAE;YAC7D;QACF;AACA,QAAA,OAAO,IAAI;AACb,IAAA,CAAC;SACA,MAAM,CAAC,CAAC,MAAM,KAA6B,MAAM,KAAK,IAAI,CAAC;AAChE;;AChFA;;;;;;;;;;;;;;;;;AAiBG;MAqCU,cAAc,CAAA;;IAEhB,QAAQ,GAAG,KAAK,CAAC,QAAQ;iFAA2B;;IAGpD,IAAI,GAAG,KAAK,CAAC,KAAK;6EAAC;;;;IAKnB,MAAM,GAAG,KAAK,CAAC,oBAAoB;+EAAC;IACpC,YAAY,GAAG,KAAK,CAAC,WAAW;qFAAC;IACjC,UAAU,GAAG,KAAK,CAAC,8CAA8C;mFAAC;;IAGlE,QAAQ,GAAG,MAAM,EAAU;IAE1B,MAAM,GAAkB,IAAI;AAE5B,IAAA,MAAM,CAAC,EAAU,EAAA;AACzB,QAAA,IAAI,CAAC,MAAM,GAAG,EAAE;IAClB;IAEU,OAAO,GAAA;QACf,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAClD;AAEA;;;;;;;;;;AAUG;IACO,KAAK,CAAC,MAAoB,EAAE,KAAa,EAAA;AACjD,QAAA,OAAO,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAA,OAAA,EAAU,KAAK,GAAG,CAAC,EAAE;IAC1D;;AAGU,IAAA,QAAQ,CAAC,MAAoB,EAAA;QACrC,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9B;uGA7CW,cAAc,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAAd,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,cAAc,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,yBAAA,EAAA,MAAA,EAAA,EAAA,QAAA,EAAA,EAAA,iBAAA,EAAA,UAAA,EAAA,UAAA,EAAA,UAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,IAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,IAAA,EAAA,EAAA,iBAAA,EAAA,MAAA,EAAA,UAAA,EAAA,MAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,MAAA,EAAA,EAAA,iBAAA,EAAA,QAAA,EAAA,UAAA,EAAA,QAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,YAAA,EAAA,EAAA,iBAAA,EAAA,cAAA,EAAA,UAAA,EAAA,cAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,UAAA,EAAA,EAAA,iBAAA,EAAA,YAAA,EAAA,UAAA,EAAA,YAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,EAAA,OAAA,EAAA,EAAA,QAAA,EAAA,UAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,QAAA,EAjCf,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BT,EAAA,CAAA,EAAA,QAAA,EAAA,IAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,MAAA,EAAA,CAAA;;2FAEU,cAAc,EAAA,UAAA,EAAA,CAAA;kBApC1B,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,yBAAyB;oBACnC,eAAe,EAAE,uBAAuB,CAAC,MAAM;AAC/C,oBAAA,QAAQ,EAAE,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BT,EAAA,CAAA;AACF,iBAAA;;;AChDD;;;;;;;;;;;;;;;;;;;AAmBG;MAEU,kBAAkB,CAAA;AACZ,IAAA,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;AAC/B,IAAA,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC;AAC9B,IAAA,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AACvB,IAAA,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;IAEjD,SAAS,GAAmC,IAAI;AAExD;;;;;;;;;;;;;;;;;;;;;;;AAuBG;IACH,OAAO,GAAA;AACL,QAAA,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,IAAI,CAAC,SAAS;QACvB;AAEA,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,IAAI,CAC7C,UAAU,CAAC,CAAC,KAAc,KAAI;AAC5B,YAAA,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;AACpB,YAAA,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC;AAClE,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;AAChC,QAAA,CAAC,CAAC,EACF,QAAQ,CAAC,MAAK;AACZ,YAAA,IAAI,CAAC,SAAS,GAAG,IAAI;QACvB,CAAC,CAAC,EACF,KAAK,CAAC;YACJ,SAAS,EAAE,MAAM,IAAI,aAAa,CAAc,CAAC,CAAC;AAClD,YAAA,YAAY,EAAE,KAAK;AACnB,YAAA,eAAe,EAAE,KAAK;AACtB,YAAA,mBAAmB,EAAE,KAAK;AAC3B,SAAA,CAAC,CACH;QAED,OAAO,IAAI,CAAC,SAAS;IACvB;uGAvDW,kBAAkB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAlB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,kBAAkB,cADL,MAAM,EAAA,CAAA;;2FACnB,kBAAkB,EAAA,UAAA,EAAA,CAAA;kBAD9B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACZlC,SAAS,YAAY,CAAC,GAAW,EAAE,UAAkB,EAAA;AACnD,IAAA,OAAO,GAAG,KAAK,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA,EAAG,UAAU,CAAA,CAAA,CAAG,CAAC;AAC/D;AAEA,SAAS,cAAc,CAAC,GAAW,EAAE,UAAkB,EAAE,IAA8B,EAAA;AACrF,IAAA,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CACvE,CAAC,CAAC,KAAkB,CAAC,CAAC,CAAC,CACxB;AACD,IAAA,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAA,EAAG,UAAU,GAAG,CAAC,CAAA,CAAE,CAAC;AAC3D;AAEA;;;;;;;;AAQG;MACU,sBAAsB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;IACrE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,uBAAuB,CAAC;IACtD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE;AACtC,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB;AACA,IAAA,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD;AAEA;;;;;;;;;;;;;;;;;;;;;AAqBG;MACU,wBAAwB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;AACvE,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;AAC9C,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC;AACpC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AAC7B,IAAA,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC;IAErD,IACE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;AACzC,QAAA,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EACvD;AACA,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB;AAEA,IAAA,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CACnB,UAAU,CAAC,CAAC,KAAc,KAAI;AAC5B,QAAA,IAAI,EAAE,KAAK,YAAY,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE;AACjE,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC;AAEA,QAAA,IAAI,MAAM,CAAC,oBAAoB,KAAK,uBAAuB,EAAE;YAC3D,OAAO,CAAC,KAAK,EAAE;YACf,KAAK,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC;AACxD,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC;AAEA,QAAA,OAAO,kBAAkB,CAAC,OAAO,EAAE,CAAC,IAAI,CACtC,SAAS,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;;;;;AAK1B,QAAA,UAAU,CAAC,MAAM,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAC1C;IACH,CAAC,CAAC,CACH;AACH;AAEA;;;;;;;;AAQG;AACG,SAAU,0BAA0B,CAAC,GAAG,aAA6C,EAAA;IACzF,OAAO,iBAAiB,CACtB,qBAAqB,CAAC;AACpB,QAAA,UAAU,EAAE,YAAY;AACxB,QAAA,UAAU,EAAE,cAAc;AAC3B,KAAA,CAAC,EACF,gBAAgB,CAAC,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC,EACpE,GAAG,aAAa,CACjB;AACH;;ACvGM,SAAU,aAAa,CAAC,YAA8C,EAAE,GAAW,EAAA;AACvF,IAAA,OAAO,YAAY,GAAG,GAAG,CAAC,KAAK,IAAI;AACrC;;ACjBA;;;;;;;;;;AAUG;MAKU,mBAAmB,CAAA;AACb,IAAA,WAAW,GAAG,MAAM,EAAC,WAAoB,EAAC;AAC1C,IAAA,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAEjD,IAAA,GAAG;AACH,IAAA,GAAG;IACH,OAAO,GAAG,KAAK;IAEvB,IACI,aAAa,CAAC,GAAqC,EAAA;AACrD,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;QACd,IAAI,CAAC,MAAM,EAAE;IACf;IAEA,IACI,GAAG,CAAC,GAAW,EAAA;AACjB,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;QACd,IAAI,CAAC,MAAM,EAAE;IACf;IAEQ,MAAM,GAAA;AACZ,QAAA,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AAClE,QAAA,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAC/B,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;AACvD,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI;QACrB;AAAO,aAAA,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE;AACtC,YAAA,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE;AAC1B,YAAA,IAAI,CAAC,OAAO,GAAG,KAAK;QACtB;IACF;uGA7BW,mBAAmB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;2FAAnB,mBAAmB,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,iBAAA,EAAA,MAAA,EAAA,EAAA,aAAA,EAAA,eAAA,EAAA,GAAA,EAAA,CAAA,kBAAA,EAAA,KAAA,CAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,CAAA;;2FAAnB,mBAAmB,EAAA,UAAA,EAAA,CAAA;kBAJ/B,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,iBAAiB;AAC3B,oBAAA,UAAU,EAAE,IAAI;AACjB,iBAAA;;sBASE;;sBAMA,KAAK;uBAAC,kBAAkB;;;ACE3B;;;;;;AAMG;AACG,SAAU,uBAAuB,CAAC,KAAwB,EAAA;AAC9D,IAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAAmD;IACtE,MAAM,IAAI,GAAG,OAAO,IAAI,GAAG,MAAM,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,MAAM,CAAY,GAAG,CAAA,KAAA,EAAQ,KAAK,CAAC,MAAM,IAAI,CAAC,CAAA,CAAE;IACxG,MAAM,OAAO,GAAG,OAAO,IAAI,GAAG,SAAS,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,SAAS,CAAY,GAAG,SAAS;IAC/F,MAAM,QAAQ,GAAG,OAAO,IAAI,GAAG,UAAU,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,UAAU,CAAY,GAAG,SAAS;;;;IAIlG,MAAM,aAAa,GACjB,OAAO,IAAI,GAAG,gBAAgB,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,gBAAgB,CAAY,GAAG,SAAS;IAE/F,OAAO;QACL,IAAI;QACJ,OAAO;QACP,MAAM,EAAE,KAAK,CAAC,MAAM;AACpB,QAAA,IAAI,QAAQ,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AACjC,QAAA,IAAI,aAAa,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;KAC5C;AACH;;AC3DA;;AAEG;;ACFH;;AAEG;;;;"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@orechio/platform-angular",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "peerDependencies": {
     "@angular/common": "^22.1.0",
     "@angular/core": "^22.1.0",
@@ -20,6 +20,10 @@
     ".": {
       "types": "./types/orechio-platform-angular.d.ts",
       "default": "./fesm2022/orechio-platform-angular.mjs"
+    },
+    "./account": {
+      "types": "./types/orechio-platform-angular-account.d.ts",
+      "default": "./fesm2022/orechio-platform-angular-account.mjs"
     }
   },
   "type": "module"

package/types/orechio-platform-angular-account.d.ts ADDED Viewed

@@ -0,0 +1,97 @@
+import { InjectionToken, Provider } from '@angular/core';
+import { UrlTree, Routes } from '@angular/router';
+/**
+ * A fronteira do core compartilhado, como o browser a recebe (ADR-019 §3).
+ *
+ * <p>
+ * Sem token nenhum, e isso é o contrato — não uma omissão. O BFF recebe os tokens da
+ * Platform e os entrega ao mecanismo de sessão do host; o que chega aqui é o estado da
+ * conta, nunca o material dela.
+ * </p>
+ */
+interface AccountCompletionResult {
+    tenantId: string;
+    branchId: string;
+    applicationId: string;
+    userId: string;
+    /**
+     * `OperationalReady` ou `ProductContinuation` — enum fechado do lado da Platform.
+     * Trafega como string e é repassado **sem interpretação**: quem traduz isso em rota é o
+     * host, nunca este pacote.
+     */
+    nextStep: string;
+}
+/** Rotas do BFF que o host montou. Defaults batem com `MapOrechioAccountEndpoints`. */
+interface OrechioAccountPaths {
+    verifyEmail?: string;
+    initialBranch?: string;
+    forgotPassword?: string;
+    resetPassword?: string;
+    acceptInvite?: string;
+    resendVerification?: string;
+}
+interface OrechioAccountConfig {
+    /**
+     * Prefixo do BFF de conta, same-origin. Nunca uma URL absoluta cross-origin: o modelo é
+     * BFF no domínio do produto, e é isso que faz o cookie ser first-party.
+     */
+    basePath: string;
+    paths: Required<OrechioAccountPaths>;
+    /**
+     * **O único ponto de extensão do pacote.**
+     *
+     * Chamado quando a conta fica operacional. O host decide para onde ir: um produto com
+     * cadastro próprio manda para o passo dele, um produto sem passo próprio manda direto para
+     * o painel. O pacote não conhece nenhuma dessas rotas, e é essa ignorância que o mantém
+     * compartilhável (ADR-019 §3).
+     *
+     * Nem os nomes desses destinos aparecem aqui — nem em comentário. Um exemplo concreto de
+     * um produto irmão é a primeira forma do acoplamento: vira referência, depois default,
+     * depois `if`. A guarda de fronteira varre estes fontes e falha em termo vertical.
+     */
+    onCompleted: (result: AccountCompletionResult) => UrlTree | string;
+    /**
+     * Como o produto chama a primeira unidade operacional, no vocabulário dele. "Unidade" é o
+     * default por ser o termo mais neutro que existe — cada produto tem o seu, e nenhum deles
+     * é assunto do pacote. É por isso que isto é configuração e não literal na tela.
+     */
+    branchLabel: string;
+    /** Para onde mandar quem termina um fluxo que não abre sessão (reset, convite aceito). */
+    loginPath: string;
+}
+declare const ORECHIO_ACCOUNT_CONFIG: InjectionToken<OrechioAccountConfig>;
+interface OrechioAccountOptions {
+    basePath?: string;
+    paths?: OrechioAccountPaths;
+    onCompleted: OrechioAccountConfig['onCompleted'];
+    branchLabel?: string;
+    loginPath?: string;
+}
+declare function provideOrechioAccount(options: OrechioAccountOptions): Provider[];
+/**
+ * As rotas de conta, para o host registrar ONDE ELE QUISER.
+ *
+ * <p>
+ * São `Routes[]` e não um módulo com prefixo fixo de propósito: o produto monta em
+ * `/conta`, em `/auth`, na raiz, ou espalhadas — o pacote não reivindica caminho. O que ele
+ * fixa são os caminhos RELATIVOS entre elas, porque o `verify-email` navega para
+ * `../onboarding/branch` quando há provisioning pendente.
+ * </p>
+ *
+ * <pre>
+ * // no host:
+ * { path: 'conta', children: ORECHIO_ACCOUNT_ROUTES }
+ * </pre>
+ *
+ * <p>
+ * Todas com `loadComponent`: quem só usa recuperação de senha não carrega a tela de
+ * primeira filial, e o bundle inicial do produto não paga por telas que a maioria dos
+ * usuários vê uma vez na vida.
+ * </p>
+ */
+declare const ORECHIO_ACCOUNT_ROUTES: Routes;
+export { ORECHIO_ACCOUNT_CONFIG, ORECHIO_ACCOUNT_ROUTES, provideOrechioAccount };
+export type { AccountCompletionResult, OrechioAccountConfig, OrechioAccountOptions, OrechioAccountPaths };