@orechio/platform-angular 0.7.1 → 0.7.2

package/fesm2022/orechio-platform-angular.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"orechio-platform-angular.mjs","sources":["../../../projects/platform-angular/src/lib/config/platform-angular-config.ts","../../../projects/platform-angular/src/lib/session/session-store.ts","../../../projects/platform-angular/src/lib/auth/auth-client.ts","../../../projects/platform-angular/src/lib/auth/branch-selection.model.ts","../../../projects/platform-angular/src/lib/auth/branch-selector.ts","../../../projects/platform-angular/src/lib/auth/refresh-coordinator.ts","../../../projects/platform-angular/src/lib/http/provide-platform-angular-http.ts","../../../projects/platform-angular/src/lib/capabilities/capability.model.ts","../../../projects/platform-angular/src/lib/capabilities/capability.directive.ts","../../../projects/platform-angular/src/lib/problem-details/problem-details.model.ts","../../../projects/platform-angular/src/public-api.ts","../../../projects/platform-angular/src/orechio-platform-angular.ts"],"sourcesContent":["import { InjectionToken, Provider } from '@angular/core';\r\n\r\n/**\r\n * BFF endpoint paths for the auth contract. All paths are relative to `apiBaseUrl`.\r\n * `me` is optional: some BFFs bootstrap the session via `refresh` alone (no dedicated\r\n * session-read endpoint) instead of a separate `me` call.\r\n */\r\nexport interface PlatformAngularAuthPaths {\r\n  login: string;\r\n  refresh: string;\r\n  logout: string;\r\n  me?: string;\r\n  /**\r\n   * Branch switch for an already-authenticated session. Optional: only BFFs that\r\n   * expose an authenticated switch endpoint set it, and `AuthClient.selectBranch`\r\n   * fails fast when it is absent rather than guessing a URL.\r\n   */\r\n  selectBranch?: string;\r\n  /**\r\n   * Unwraps the raw auth-endpoint response body into TUser. Defaults to the\r\n   * identity function (response body IS the user object), matching Store's\r\n   * proven wire format. Portal's BFF wraps the user in an envelope\r\n   * (`{ user: UserInfo }`) — Portal supplies `(body) => body.user` here\r\n   * rather than the package assuming either shape.\r\n   */\r\n  unwrapUser?: (body: unknown) => unknown;\r\n}\r\n\r\nexport interface PlatformAngularConfig {\r\n  /** Same-origin API base path, e.g. '/api'. Never an absolute cross-origin URL — the\r\n   *  BFF/cookie-session pattern this library assumes requires same-origin requests. */\r\n  apiBaseUrl: string;\r\n  auth: PlatformAngularAuthPaths;\r\n  /** XSRF cookie/header names. Defaults match Angular's own defaults and both proven\r\n   *  consumers (Portal, Store): cookie 'XSRF-TOKEN', header 'X-XSRF-TOKEN'. */\r\n  xsrf?: {\r\n    cookieName?: string;\r\n    headerName?: string;\r\n  };\r\n  /** 401 handling strategy. 'redirect' clears the session and redirects immediately\r\n   *  (Store's proven behavior). 'refresh-then-redirect' attempts one silent refresh\r\n   *  before giving up (Portal's proven behavior). Defaults to 'redirect' — the simpler,\r\n   *  more conservative behavior — when omitted. */\r\n  unauthorizedStrategy?: 'redirect' | 'refresh-then-redirect';\r\n  /** Route to navigate to after a session is cleared. Defaults to '/login'. */\r\n  loginRoute?: string;\r\n}\r\n\r\nexport const PLATFORM_ANGULAR_CONFIG = new InjectionToken<PlatformAngularConfig>(\r\n  'PLATFORM_ANGULAR_CONFIG',\r\n);\r\n\r\nexport function providePlatformAngularConfig(config: PlatformAngularConfig): Provider {\r\n  return { provide: PLATFORM_ANGULAR_CONFIG, useValue: config };\r\n}\r\n","import { Injectable, Signal, computed, signal } from '@angular/core';\nimport { SessionUser } from './session-user.model';\n\n/**\n * Generic signal-based session store. Mirrors the pattern already proven\n * independently by both consumers (Portal's AuthService.user, Store's\n * EstadoDaSessao) — deliberately NOT a richer state machine (unknown /\n * loading / error states): neither consumer needed one, and ADR-010 §2.2\n * (\"projete para extração, não extraia por antecipação\") argues against\n * building one speculatively.\n *\n * Parameterized over TUser so each product can extend SessionUser with its\n * own fields without needing a package release.\n */\n@Injectable({ providedIn: 'root' })\nexport class SessionStore<TUser extends SessionUser = SessionUser> {\n  private readonly state = signal<TUser | null>(null);\n\n  readonly user: Signal<TUser | null> = this.state.asReadonly();\n  readonly isAuthenticated: Signal<boolean> = computed(() => this.state() !== null);\n\n  set(user: TUser): void {\n    this.state.set(user);\n  }\n\n  clear(): void {\n    this.state.set(null);\n  }\n}\n","import { HttpClient } from '@angular/common/http';\r\nimport { Injectable, inject } from '@angular/core';\r\nimport { Observable, finalize, map, tap, throwError } from 'rxjs';\r\nimport { PLATFORM_ANGULAR_CONFIG } from '../config/platform-angular-config';\r\nimport { SessionStore } from '../session/session-store';\r\nimport { SessionUser } from '../session/session-user.model';\r\n\r\n/**\r\n * Thin BFF client for the auth contract: login / refresh / logout, and an\r\n * optional session-read (\"me\") endpoint. Deliberately does NOT decode JWTs,\r\n * store bearer tokens, or treat itself as a security authority — per\r\n * ADR-010 §12 and this package's explicit non-goal (no JWT client SDK): the\r\n * BFF/backend is the only place tokens live, this class only reflects\r\n * whatever session-shaped JSON the BFF hands back.\r\n *\r\n * Endpoint paths are entirely config-driven (PLATFORM_ANGULAR_CONFIG) — this\r\n * class contains zero hardcoded URLs, so it works unmodified against\r\n * Portal's /api/auth/{login,me,refresh,logout} (envelope-wrapped\r\n * `{ user: UserInfo }` responses, unwrapped via config.auth.unwrapUser) and\r\n * Store's /api/auth/{login,refresh,logout} (no `me`, unwrapped responses)\r\n * alike.\r\n */\r\n@Injectable({ providedIn: 'root' })\r\nexport class AuthClient<TUser extends SessionUser = SessionUser> {\r\n  private readonly http = inject(HttpClient);\r\n  private readonly config = inject(PLATFORM_ANGULAR_CONFIG);\r\n  private readonly session = inject(SessionStore) as SessionStore<TUser>;\r\n\r\n  private url(path: string): string {\r\n    return `${this.config.apiBaseUrl}${path}`;\r\n  }\r\n\r\n  private unwrap(body: unknown): TUser {\r\n    const unwrapUser = this.config.auth.unwrapUser;\r\n    return (unwrapUser ? unwrapUser(body) : body) as TUser;\r\n  }\r\n\r\n  login(credentials: unknown): Observable<TUser> {\r\n    return this.http.post<unknown>(this.url(this.config.auth.login), credentials).pipe(\r\n      map((body) => this.unwrap(body)),\r\n      tap((user) => this.session.set(user)),\r\n    );\r\n  }\r\n\r\n  /**\r\n   * Reads the current session. Uses the configured `me` endpoint (GET) when\r\n   * present (Portal); falls back to `refresh` (POST) when it isn't (Store,\r\n   * which has no dedicated session-read endpoint and bootstraps via refresh).\r\n   */\r\n  initSession(): Observable<TUser> {\r\n    if (this.config.auth.me) {\r\n      return this.http.get<unknown>(this.url(this.config.auth.me)).pipe(\r\n        map((body) => this.unwrap(body)),\r\n        tap((user) => this.session.set(user)),\r\n      );\r\n    }\r\n    return this.refresh();\r\n  }\r\n\r\n  /**\r\n   * Asks the BFF to make `branchId` the current branch of the session that is\r\n   * already authenticated. No credentials are involved and none are re-sent: the\r\n   * browser proves nothing here beyond the session it already holds.\r\n   *\r\n   * `branchId` is a **requested target, never an authorization**. The BFF forwards\r\n   * it to the Platform, which re-reads the user's grants and refuses what is not\r\n   * granted — a rejection arrives as a failed request, and the session store is\r\n   * left exactly as it was, still on the previous branch.\r\n   *\r\n   * The store is updated only from the session the server returns, never\r\n   * optimistically from the requested id: the whole point of an explicit switch is\r\n   * that the server, not the client, decides which branch the user ends up in.\r\n   */\r\n  selectBranch(branchId: string): Observable<TUser> {\r\n    const path = this.config.auth.selectBranch;\r\n    if (!path) {\r\n      return throwError(\r\n        () =>\r\n          new Error(\r\n            'AuthClient.selectBranch requires config.auth.selectBranch. Configure the ' +\r\n              'BFF path that performs an authenticated branch switch.',\r\n          ),\r\n      );\r\n    }\r\n\r\n    return this.http.post<unknown>(this.url(path), { branchId }).pipe(\r\n      map((body) => this.unwrap(body)),\r\n      tap((user) => this.session.set(user)),\r\n    );\r\n  }\r\n\r\n  refresh(): Observable<TUser> {\r\n    return this.http.post<unknown>(this.url(this.config.auth.refresh), {}).pipe(\r\n      map((body) => this.unwrap(body)),\r\n      tap((user) => this.session.set(user)),\r\n    );\r\n  }\r\n\r\n  /**\r\n   * Clears the local session unconditionally — on success, on error, and on\r\n   * unsubscribe (`finalize`, not `tap`) — matching the behavior both\r\n   * consumers already converged on independently (Portal swallows the\r\n   * error before clearing; Store clears via `finalize` while still letting\r\n   * the error propagate). This does NOT swallow errors: callers that want\r\n   * Portal's \"always succeed\" UX compose their own `catchError` on top.\r\n   */\r\n  logout(): Observable<void> {\r\n    return this.http\r\n      .post<void>(this.url(this.config.auth.logout), {})\r\n      .pipe(finalize(() => this.session.clear()));\r\n  }\r\n}\r\n","import { HttpErrorResponse } from '@angular/common/http';\r\n\r\n/**\r\n * Control-flow code the Platform's auth contract returns (HTTP 409) when the\r\n * authenticated user has access to more than one branch and none was chosen.\r\n *\r\n * It is deliberately NOT a failure: no session is created, no cookie is set,\r\n * and the caller is expected to ask the user which branch to enter. Treating\r\n * it as a generic error is the bug this constant exists to prevent.\r\n */\r\nexport const BRANCH_SELECTION_REQUIRED_CODE = 'auth.branch_selection_required';\r\n\r\n/**\r\n * One selectable branch.\r\n *\r\n * `name` is optional because the current backend contract carries branch ids\r\n * only — see `readBranchSelectionRequired`. Modelling it as optional now means\r\n * the day the backend starts sending names, consumers get them without a\r\n * breaking change to this type.\r\n */\r\nexport interface BranchOption {\r\n  readonly id: string;\r\n  readonly name?: string | null;\r\n}\r\n\r\n/** Payload of a branch-selection-required response, normalized. */\r\nexport interface BranchSelectionRequired {\r\n  readonly branches: readonly BranchOption[];\r\n}\r\n\r\n/**\r\n * Recognizes a branch-selection-required response and normalizes its payload,\r\n * or returns `null` for anything else — so callers branch on a value instead of\r\n * re-deriving the contract from status codes and body shapes.\r\n *\r\n * Reads three wire shapes, in this order of preference:\r\n *\r\n * 1. `branchOptions: [{ id, name }]` — the display metadata the Platform sends\r\n *    alongside the ids. Preferred when present, because it is the only shape\r\n *    that lets an operator tell the branches apart.\r\n * 2. `branches: [\"<guid>\"]` — the original contract. Still authoritative for\r\n *    selection, and still enough on its own.\r\n * 3. `branches: [{ id, name }]` — tolerated since 0.3.0.\r\n *\r\n * Reading all three is what makes the rollout order irrelevant: a frontend on\r\n * this version works against a backend that has the metadata and against one\r\n * that does not, and neither side has to ship first.\r\n *\r\n * Entries without a usable id are dropped rather than rendered as blanks: an\r\n * unselectable option in a selection list is worse than a shorter list.\r\n */\r\nexport function readBranchSelectionRequired(error: unknown): BranchSelectionRequired | null {\r\n  if (!(error instanceof HttpErrorResponse) || error.status !== 409) return null;\r\n\r\n  const body = error.error as\r\n    | { code?: unknown; branches?: unknown; branchOptions?: unknown }\r\n    | null;\r\n  if (!body || body.code !== BRANCH_SELECTION_REQUIRED_CODE) return null;\r\n\r\n  // `branchOptions` só substitui os ids quando traz alguma opção utilizável —\r\n  // uma lista vazia ou ilegível não pode apagar a lista de ids que funciona.\r\n  const comMetadata = normalizeEntries(body.branchOptions);\r\n  if (comMetadata.length > 0) return { branches: comMetadata };\r\n\r\n  if (!Array.isArray(body.branches)) return null;\r\n  return { branches: normalizeEntries(body.branches) };\r\n}\r\n\r\nfunction normalizeEntries(raw: unknown): BranchOption[] {\r\n  if (!Array.isArray(raw)) return [];\r\n\r\n  return raw\r\n    .map((entry): BranchOption | null => {\r\n      if (typeof entry === 'string') return entry ? { id: entry } : null;\r\n      if (entry && typeof entry === 'object') {\r\n        const { id, name } = entry as { id?: unknown; name?: unknown };\r\n        if (typeof id === 'string' && id) {\r\n          return { id, name: typeof name === 'string' ? name : null };\r\n        }\r\n      }\r\n      return null;\r\n    })\r\n    .filter((branch): branch is BranchOption => branch !== null);\r\n}\r\n","import { ChangeDetectionStrategy, Component, input, output } from '@angular/core';\r\nimport { BranchOption } from './branch-selection.model';\r\n\r\n/**\r\n * Explicit branch picker for the multi-branch login step.\r\n *\r\n * Deliberately narrow: it receives options, renders them, and emits the id the\r\n * user actually chose. It does not call any backend, hold credentials, read\r\n * tokens, touch storage, or know which product it is rendering inside — the\r\n * flow around it belongs to the consumer, and the copy around it belongs to the\r\n * consumer's login page.\r\n *\r\n * **It never picks for the user.** When the backend answers\r\n * `auth.branch_selection_required` it has already refused to choose (no session\r\n * is created); a selector that quietly defaulted to the first option would put\r\n * the arbitrary choice back one layer up, in the place hardest to notice.\r\n *\r\n * Rendered as a radio group so the browser gives keyboard navigation, focus\r\n * management, and screen-reader semantics for free — a list of buttons would\r\n * need all three re-implemented, worse.\r\n */\r\n@Component({\r\n  selector: 'orechio-branch-selector',\r\n  changeDetection: ChangeDetectionStrategy.OnPush,\r\n  template: `\r\n    @if (branches().length === 0) {\r\n      <p class=\"orechio-branch-selector__empty\" role=\"status\">{{ emptyLabel() }}</p>\r\n    } @else {\r\n      <fieldset class=\"orechio-branch-selector\" [disabled]=\"busy()\">\r\n        <legend>{{ legend() }}</legend>\r\n\r\n        @for (branch of branches(); track branch.id; let index = $index) {\r\n          <label class=\"orechio-branch-selector__option\">\r\n            <input\r\n              type=\"radio\"\r\n              name=\"orechio-branch\"\r\n              [value]=\"branch.id\"\r\n              [checked]=\"chosen === branch.id\"\r\n              (change)=\"choose(branch.id)\"\r\n            />\r\n            <span class=\"orechio-branch-selector__label\">{{ label(branch, index) }}</span>\r\n            <span class=\"orechio-branch-selector__hint\">{{ fragment(branch) }}</span>\r\n          </label>\r\n        }\r\n\r\n        <button\r\n          type=\"button\"\r\n          class=\"orechio-branch-selector__confirm\"\r\n          [disabled]=\"!chosen || busy()\"\r\n          (click)=\"confirm()\"\r\n        >\r\n          {{ confirmLabel() }}\r\n        </button>\r\n      </fieldset>\r\n    }\r\n  `,\r\n})\r\nexport class BranchSelector {\r\n  /** Options to choose from. An empty list renders the empty state, never a silent no-op. */\r\n  readonly branches = input.required<readonly BranchOption[]>();\r\n\r\n  /** Blocks input while the consumer is completing the sign-in round-trip. */\r\n  readonly busy = input(false);\r\n\r\n  // Copy is injectable because wording belongs to the product, not to the\r\n  // platform package — the defaults exist so a consumer can drop the component\r\n  // in and iterate on the words later.\r\n  readonly legend = input('Selecione a filial');\r\n  readonly confirmLabel = input('Continuar');\r\n  readonly emptyLabel = input('Nenhuma filial disponível para este usuário.');\r\n\r\n  /** Emits only in response to a user action. */\r\n  readonly selected = output<string>();\r\n\r\n  protected chosen: string | null = null;\r\n\r\n  protected choose(id: string): void {\r\n    this.chosen = id;\r\n  }\r\n\r\n  protected confirm(): void {\r\n    if (this.chosen) this.selected.emit(this.chosen);\r\n  }\r\n\r\n  /**\r\n   * The name is the label whenever the contract carries one. The id fragment stays\r\n   * as secondary text rather than disappearing: the domain allows two branches to\r\n   * share a name, and when that happens the fragment is the only thing telling\r\n   * them apart.\r\n   *\r\n   * Without a name — an older backend, or metadata the server could not compose —\r\n   * the positional fallback keeps the list selectable. Two raw identifiers side by\r\n   * side are technically a choice and practically a coin flip, which is exactly\r\n   * why the name is preferred whenever it exists.\r\n   */\r\n  protected label(branch: BranchOption, index: number): string {\r\n    return branch.name ? branch.name : `Filial ${index + 1}`;\r\n  }\r\n\r\n  /** Fragment of the id, shown beside the label to disambiguate repeated names. */\r\n  protected fragment(branch: BranchOption): string {\r\n    return branch.id.slice(0, 8);\r\n  }\r\n}\r\n","import { inject, Injectable } from '@angular/core';\r\nimport { Router } from '@angular/router';\r\nimport { Observable, ReplaySubject, catchError, finalize, share, throwError } from 'rxjs';\r\nimport { PLATFORM_ANGULAR_CONFIG } from '../config/platform-angular-config';\r\nimport { SessionStore } from '../session/session-store';\r\nimport { SessionUser } from '../session/session-user.model';\r\nimport { AuthClient } from './auth-client';\r\n\r\n/**\r\n * INTERNAL. Not exported from public-api.ts — consumers never construct or configure this\r\n * directly; it exists purely to back `sessionExpiryInterceptor`'s `'refresh-then-redirect'`\r\n * strategy (WEB-0.2, ADR-016 §\"WEB-0.2 note\").\r\n *\r\n * Deduplicates concurrent `AuthClient.refresh()` calls that originate from the SAME Angular\r\n * application context (one injector, i.e. one running app/tab). Before this existed, every\r\n * 401'd request independently called `authClient.refresh()`, and since that method returns a\r\n * cold Observable (`http.post(...)`, no multicasting), N simultaneous 401s produced N\r\n * independent `POST /refresh` calls — proven by the characterization test in\r\n * `provide-platform-angular-http.spec.ts`.\r\n *\r\n * This is defense-in-depth ONLY. The Platform already tolerates concurrent legitimate refresh\r\n * rotations correctly and safely (PLATFORM-REFRESH-1/1A/1B, ADR-016's retry leeway) — this class\r\n * exists to cut needless network traffic, cryptographic work, and rate-limit pressure on the\r\n * Platform, not to be the thing that makes concurrent refreshes safe. It does not, and does not\r\n * need to, coordinate across browser tabs/windows or other Angular application instances — see\r\n * the \"Multi-tab\" note on `sessionExpiryInterceptor` for why that's explicitly out of scope here\r\n * and handled server-side instead.\r\n */\r\n@Injectable({ providedIn: 'root' })\r\nexport class RefreshCoordinator {\r\n  private readonly authClient = inject(AuthClient);\r\n  private readonly session = inject(SessionStore);\r\n  private readonly router = inject(Router);\r\n  private readonly config = inject(PLATFORM_ANGULAR_CONFIG);\r\n\r\n  private inFlight$: Observable<SessionUser> | null = null;\r\n\r\n  /**\r\n   * Returns the single in-flight refresh operation if one is already running, or starts a new\r\n   * one. Every caller — first or piggybacking — gets the SAME underlying HTTP call's outcome.\r\n   *\r\n   * Semantics (WEB-0.2):\r\n   * - Single-flight, not a permanent cache: once the shared operation settles (success or\r\n   *   error), the reference is cleared (`finalize`, placed BEFORE `share()` so it fires exactly\r\n   *   once per underlying HTTP call, not once per subscriber — see the `share()` config note\r\n   *   below). The next call to `refresh()` after that always starts a genuinely new request.\r\n   * - On failure, the session is cleared and the browser is navigated to the login route\r\n   *   exactly once, regardless of how many callers are waiting — not once per waiting caller.\r\n   *   Each caller still receives its own error notification (multicast by `share()`) and is\r\n   *   responsible for propagating whatever error IT needs to its own subscriber (see\r\n   *   `sessionExpiryInterceptor`, which re-throws the ORIGINAL 401 to the request that\r\n   *   triggered it, not this refresh failure).\r\n   * - `resetOnRefCountZero: false` is load-bearing: if one waiting caller unsubscribes (e.g. a\r\n   *   cancelled navigation), the still-in-flight HTTP request for the OTHER callers must not be\r\n   *   aborted. Angular's `HttpClient` cancels the underlying network request when its Observable\r\n   *   loses its last subscriber — without this flag, one caller going away could silently\r\n   *   cancel the refresh everyone else is still waiting on.\r\n   * - `resetOnError`/`resetOnComplete` are left `false` too: this class never reuses a settled\r\n   *   `inFlight$` reference across cycles (the field is always nulled and rebuilt from scratch\r\n   *   by `finalize`), so `share()` itself never needs to reset its own internal connector.\r\n   */\r\n  refresh(): Observable<SessionUser> {\r\n    if (this.inFlight$) {\r\n      return this.inFlight$;\r\n    }\r\n\r\n    this.inFlight$ = this.authClient.refresh().pipe(\r\n      catchError((error: unknown) => {\r\n        this.session.clear();\r\n        void this.router.navigateByUrl(this.config.loginRoute ?? '/login');\r\n        return throwError(() => error);\r\n      }),\r\n      finalize(() => {\r\n        this.inFlight$ = null;\r\n      }),\r\n      share({\r\n        connector: () => new ReplaySubject<SessionUser>(1),\r\n        resetOnError: false,\r\n        resetOnComplete: false,\r\n        resetOnRefCountZero: false,\r\n      }),\r\n    );\r\n\r\n    return this.inFlight$;\r\n  }\r\n}\r\n","import {\r\n  HttpErrorResponse,\r\n  HttpInterceptorFn,\r\n  provideHttpClient,\r\n  withInterceptors,\r\n  withXsrfConfiguration,\r\n  HttpFeature,\r\n  HttpFeatureKind,\r\n} from '@angular/common/http';\r\nimport { inject } from '@angular/core';\r\nimport { Router } from '@angular/router';\r\nimport { catchError, switchMap, throwError } from 'rxjs';\r\nimport { PLATFORM_ANGULAR_CONFIG, PlatformAngularAuthPaths } from '../config/platform-angular-config';\r\nimport { RefreshCoordinator } from '../auth/refresh-coordinator';\r\nimport { SessionStore } from '../session/session-store';\r\n\r\nfunction isApiRequest(url: string, apiBaseUrl: string): boolean {\r\n  return url === apiBaseUrl || url.startsWith(`${apiBaseUrl}/`);\r\n}\r\n\r\nfunction isAuthEndpoint(url: string, apiBaseUrl: string, auth: PlatformAngularAuthPaths): boolean {\r\n  const authPaths = [auth.login, auth.refresh, auth.logout, auth.me].filter(\r\n    (p): p is string => !!p,\r\n  );\r\n  return authPaths.some((p) => url === `${apiBaseUrl}${p}`);\r\n}\r\n\r\n/**\r\n * Forces `withCredentials: true` on same-origin API requests, so the BFF's\r\n * HttpOnly session cookie is sent. Proven identically in both consumers.\r\n * XSRF header injection is intentionally NOT duplicated here — Angular's\r\n * own `withXsrfConfiguration` (registered by `providePlatformAngularHttp`)\r\n * already does that. Portal's local interceptor previously re-implemented\r\n * XSRF header injection manually alongside `withXsrfConfiguration`; that\r\n * was redundant, not a pattern to preserve.\r\n */\r\nexport const credentialsInterceptor: HttpInterceptorFn = (req, next) => {\r\n  const { apiBaseUrl } = inject(PLATFORM_ANGULAR_CONFIG);\r\n  if (!isApiRequest(req.url, apiBaseUrl)) {\r\n    return next(req);\r\n  }\r\n  return next(req.clone({ withCredentials: true }));\r\n};\r\n\r\n/**\r\n * On 401 from a non-auth API request: 'redirect' (default) clears the\r\n * session and navigates to the login route immediately (Store's proven\r\n * behavior). 'refresh-then-redirect' attempts one silent refresh first and\r\n * retries the original request on success, falling back to redirect\r\n * (Portal's proven behavior). Configured via\r\n * PlatformAngularConfig.unauthorizedStrategy.\r\n *\r\n * WEB-0.2: the 'refresh-then-redirect' path routes through `RefreshCoordinator`\r\n * instead of calling `AuthClient.refresh()` directly — every 401 handled by\r\n * the SAME running app shares one in-flight refresh instead of each request\r\n * triggering its own. The 'redirect' strategy is untouched: it never calls\r\n * refresh at all, so there is nothing to coordinate (see the config note on\r\n * `PlatformAngularConfig.unauthorizedStrategy`). On refresh failure, the\r\n * session-clear/navigate side effect now happens once inside the coordinator\r\n * (shared across every waiting caller) rather than once per waiting caller;\r\n * each caller still receives the ORIGINAL 401 error, not a refresh-specific\r\n * one, exactly as before. Multi-tab/multi-window coordination is explicitly\r\n * NOT handled here — see `RefreshCoordinator`'s doc comment — the Platform's\r\n * own server-side retry leeway (ADR-016) is what makes concurrent refreshes\r\n * from independent contexts safe.\r\n */\r\nexport const sessionExpiryInterceptor: HttpInterceptorFn = (req, next) => {\r\n  const config = inject(PLATFORM_ANGULAR_CONFIG);\r\n  const session = inject(SessionStore);\r\n  const router = inject(Router);\r\n  const refreshCoordinator = inject(RefreshCoordinator);\r\n\r\n  if (\r\n    !isApiRequest(req.url, config.apiBaseUrl) ||\r\n    isAuthEndpoint(req.url, config.apiBaseUrl, config.auth)\r\n  ) {\r\n    return next(req);\r\n  }\r\n\r\n  return next(req).pipe(\r\n    catchError((error: unknown) => {\r\n      if (!(error instanceof HttpErrorResponse) || error.status !== 401) {\r\n        return throwError(() => error);\r\n      }\r\n\r\n      if (config.unauthorizedStrategy !== 'refresh-then-redirect') {\r\n        session.clear();\r\n        void router.navigateByUrl(config.loginRoute ?? '/login');\r\n        return throwError(() => error);\r\n      }\r\n\r\n      return refreshCoordinator.refresh().pipe(\r\n        switchMap(() => next(req)),\r\n        // The coordinator already cleared the session and navigated once for\r\n        // this shared failure (see RefreshCoordinator.refresh()) — this\r\n        // request still needs to fail with its OWN original 401, not the\r\n        // refresh's error, exactly as before WEB-0.2.\r\n        catchError(() => throwError(() => error)),\r\n      );\r\n    }),\r\n  );\r\n};\r\n\r\n/**\r\n * Bundles provideHttpClient with the XSRF configuration and interceptors\r\n * proven necessary by both consumers. Cookie/header names default to\r\n * 'XSRF-TOKEN'/'X-XSRF-TOKEN' (identical in both consumers today) but\r\n * remain overridable via config. Consumers add their own extra\r\n * provideHttpClient features (e.g. Portal's withXhr()) by calling\r\n * provideHttpClient(...) separately — this function only owns the concerns\r\n * proven common to both.\r\n */\r\nexport function providePlatformAngularHttp(...extraFeatures: HttpFeature<HttpFeatureKind>[]) {\r\n  return provideHttpClient(\r\n    withXsrfConfiguration({\r\n      cookieName: 'XSRF-TOKEN',\r\n      headerName: 'X-XSRF-TOKEN',\r\n    }),\r\n    withInterceptors([credentialsInterceptor, sessionExpiryInterceptor]),\r\n    ...extraFeatures,\r\n  );\r\n}\r\n","/**\n * Generic capability map: a flat set of boolean feature flags fetched once\n * from the BFF (Portal's proven pattern — GET .../capabilities returning a\n * flat boolean-keyed object). Deliberately a generic `Record<string,\n * boolean>` rather than a typed interface enumerating every field: Portal's\n * capability set already has 17 product-specific fields and Store will\n * grow its own, unrelated set. A typed interface would require a package\n * release for every new product capability (see ADR-010 §18 — evolution\n * cadence mismatch is a real argument against sharing). Each product\n * defines its own capability keys locally and reads them through this map.\n *\n * UX ONLY. This does not replace server-side authorization. Every consumer\n * MUST continue to handle 403 from the actual mutating/reading endpoint —\n * capability checks here are a consultive pre-check, exactly as already\n * documented in Portal's application.service.ts before this extraction.\n */\nexport type CapabilityMap = Readonly<Record<string, boolean>>;\n\nexport function hasCapability(capabilities: CapabilityMap | null | undefined, key: string): boolean {\n  return capabilities?.[key] === true;\n}\n","import { Directive, Input, TemplateRef, ViewContainerRef, inject } from '@angular/core';\nimport { CapabilityMap, hasCapability } from './capability.model';\n\n/**\n * Structural directive gating template content on a capability key from a\n * consumer-supplied CapabilityMap. Net-new (neither consumer had factored\n * their proven inline `@if (capabilities()?.x)` pattern into a directive),\n * but grounded in Portal's validated usage — see capability.model.ts.\n *\n * UX ONLY — see capability.model.ts. Hiding an element here does not\n * authorize anything; the backend re-validates on every mutating call.\n *\n * Usage: `<button *orxCapability=\"capabilities(); has: 'manageTenants'\">`\n */\n@Directive({\n  selector: '[orxCapability]',\n  standalone: true,\n})\nexport class CapabilityDirective {\n  private readonly templateRef = inject(TemplateRef<unknown>);\n  private readonly viewContainer = inject(ViewContainerRef);\n\n  private map: CapabilityMap | null | undefined;\n  private key: string | undefined;\n  private hasView = false;\n\n  @Input()\n  set orxCapability(map: CapabilityMap | null | undefined) {\n    this.map = map;\n    this.render();\n  }\n\n  @Input('orxCapabilityHas')\n  set has(key: string) {\n    this.key = key;\n    this.render();\n  }\n\n  private render(): void {\n    const shouldShow = !!this.key && hasCapability(this.map, this.key);\n    if (shouldShow && !this.hasView) {\n      this.viewContainer.createEmbeddedView(this.templateRef);\n      this.hasView = true;\n    } else if (!shouldShow && this.hasView) {\n      this.viewContainer.clear();\n      this.hasView = false;\n    }\n  }\n}\n","import { HttpErrorResponse } from '@angular/common/http';\r\n\r\n/**\r\n * Canonical error shape, generalized from Store's already-proven\r\n * ErroApresentavel/normalizarErroApi (the more mature of the two consumers'\r\n * error handling — Portal had no typed contract at all, just five\r\n * duplicated `error.error.code` reads). `message` is optional: Portal never\r\n * received a server-supplied message field, only `code`, and resolves\r\n * user-facing text locally — so this contract cannot require it.\r\n *\r\n * `correlation_id` (API-1, ADR-017 §3.3): added after confirming directly\r\n * from Orechio.Platform's `ProblemResponses.cs` that it IS present in the\r\n * JSON body of every error response the Platform host produces (not just\r\n * the `X-Correlation-ID` response header), and that Portal's BFF relays\r\n * that body byte-for-byte, unreshaped, for every typed endpoint. The\r\n * earlier NG-1-era absence was accurate for what it tested at the time but\r\n * incomplete relative to Platform's actual wire contract. Optional: not\r\n * every error path in every consumer emits this field today (Store's own\r\n * narrower auth/CSRF error shapes don't) — its absence must not be treated\r\n * as a parse failure.\r\n *\r\n * Domain-specific error codes (e.g. 'access.platform_only',\r\n * 'tenant.not_found', 'csrf.invalid') are NOT enumerated here — `code`\r\n * stays a plain string so any code survives normalization unmodified and\r\n * remains identifiable by callers, per Passo 28.\r\n */\r\nexport interface ProblemDetails {\r\n  code: string;\r\n  message?: string;\r\n  status: number;\r\n  required?: string;\r\n  correlationId?: string;\r\n}\r\n\r\n/**\r\n * Normalizes an HttpErrorResponse into ProblemDetails. Mirrors Store's\r\n * normalizarErroApi exactly, generalized to make `message` optional and to\r\n * accept an HttpErrorResponse without any consumer-specific fallback\r\n * message map (each product keeps its own code→message copy locally —\r\n * that's product-specific text, not shared infrastructure).\r\n */\r\nexport function normalizeProblemDetails(error: HttpErrorResponse): ProblemDetails {\r\n  const body = error.error as Record<string, unknown> | null | undefined;\r\n  const code = typeof body?.['code'] === 'string' ? (body['code'] as string) : `http.${error.status || 0}`;\r\n  const message = typeof body?.['message'] === 'string' ? (body['message'] as string) : undefined;\r\n  const required = typeof body?.['required'] === 'string' ? (body['required'] as string) : undefined;\r\n  // Wire field is `correlation_id` (snake_case, ADR-017 §3) — kept as-is on the wire,\r\n  // exposed as `correlationId` here per TS/Angular convention (same server-side pattern:\r\n  // OrechioProblemDetails.CorrelationId is [JsonPropertyName(\"correlation_id\")]).\r\n  const correlationId =\r\n    typeof body?.['correlation_id'] === 'string' ? (body['correlation_id'] as string) : undefined;\r\n\r\n  return {\r\n    code,\r\n    message,\r\n    status: error.status,\r\n    ...(required ? { required } : {}),\r\n    ...(correlationId ? { correlationId } : {}),\r\n  };\r\n}\r\n","/*\r\n * Public API Surface of @orechio/platform-angular\r\n */\r\n\r\nexport type { PlatformAngularConfig, PlatformAngularAuthPaths } from './lib/config/platform-angular-config';\r\nexport { PLATFORM_ANGULAR_CONFIG, providePlatformAngularConfig } from './lib/config/platform-angular-config';\r\n\r\nexport type { SessionUser } from './lib/session/session-user.model';\r\nexport { SessionStore } from './lib/session/session-store';\r\n\r\nexport { AuthClient } from './lib/auth/auth-client';\r\n\r\nexport type { BranchOption, BranchSelectionRequired } from './lib/auth/branch-selection.model';\r\nexport {\r\n  BRANCH_SELECTION_REQUIRED_CODE,\r\n  readBranchSelectionRequired,\r\n} from './lib/auth/branch-selection.model';\r\nexport { BranchSelector } from './lib/auth/branch-selector';\r\n\r\nexport { credentialsInterceptor, sessionExpiryInterceptor, providePlatformAngularHttp } from './lib/http/provide-platform-angular-http';\r\n\r\nexport type { CapabilityMap } from './lib/capabilities/capability.model';\r\nexport { hasCapability } from './lib/capabilities/capability.model';\r\nexport { CapabilityDirective } from './lib/capabilities/capability.directive';\r\n\r\nexport type { ProblemDetails } from './lib/problem-details/problem-details.model';\r\nexport { normalizeProblemDetails } from './lib/problem-details/problem-details.model';\r\n\r\nexport type { PagedResult } from './lib/pagination/paged-result.model';\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;MAgDa,uBAAuB,GAAG,IAAI,cAAc,CACvD,yBAAyB;AAGrB,SAAU,4BAA4B,CAAC,MAA6B,EAAA;IACxE,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,EAAE;AAC/D;;ACnDA;;;;;;;;;;AAUG;MAEU,YAAY,CAAA;IACN,KAAK,GAAG,MAAM,CAAe,IAAI;8EAAC;AAE1C,IAAA,IAAI,GAAyB,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE;IACpD,eAAe,GAAoB,QAAQ,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI;wFAAC;AAEjF,IAAA,GAAG,CAAC,IAAW,EAAA;AACb,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IACtB;IAEA,KAAK,GAAA;AACH,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IACtB;uGAZW,YAAY,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAZ,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,YAAY,cADC,MAAM,EAAA,CAAA;;2FACnB,YAAY,EAAA,UAAA,EAAA,CAAA;kBADxB,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACPlC;;;;;;;;;;;;;;AAcG;MAEU,UAAU,CAAA;AACJ,IAAA,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;AACzB,IAAA,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;AACxC,IAAA,OAAO,GAAG,MAAM,CAAC,YAAY,CAAwB;AAE9D,IAAA,GAAG,CAAC,IAAY,EAAA;QACtB,OAAO,CAAA,EAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAA,EAAG,IAAI,CAAA,CAAE;IAC3C;AAEQ,IAAA,MAAM,CAAC,IAAa,EAAA;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU;AAC9C,QAAA,QAAQ,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI;IAC9C;AAEA,IAAA,KAAK,CAAC,WAAoB,EAAA;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAChF,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;IACH;AAEA;;;;AAIG;IACH,WAAW,GAAA;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;YACvB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAC/D,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;QACH;AACA,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE;IACvB;AAEA;;;;;;;;;;;;;AAaG;AACH,IAAA,YAAY,CAAC,QAAgB,EAAA;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;QAC1C,IAAI,CAAC,IAAI,EAAE;YACT,OAAO,UAAU,CACf,MACE,IAAI,KAAK,CACP,2EAA2E;gBACzE,wDAAwD,CAC3D,CACJ;QACH;QAEA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAC/D,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;IACH;IAEA,OAAO,GAAA;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CACzE,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;IACH;AAEA;;;;;;;AAOG;IACH,MAAM,GAAA;QACJ,OAAO,IAAI,CAAC;AACT,aAAA,IAAI,CAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;AAChD,aAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C;uGAvFW,UAAU,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAV,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,UAAU,cADG,MAAM,EAAA,CAAA;;2FACnB,UAAU,EAAA,UAAA,EAAA,CAAA;kBADtB,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACpBlC;;;;;;;AAOG;AACI,MAAM,8BAA8B,GAAG;AAoB9C;;;;;;;;;;;;;;;;;;;;AAoBG;AACG,SAAU,2BAA2B,CAAC,KAAc,EAAA;IACxD,IAAI,EAAE,KAAK,YAAY,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;AAAE,QAAA,OAAO,IAAI;AAE9E,IAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAEX;AACR,IAAA,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,8BAA8B;AAAE,QAAA,OAAO,IAAI;;;IAItE,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;AACxD,IAAA,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;AAAE,QAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;IAE5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;AAAE,QAAA,OAAO,IAAI;IAC9C,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;AACtD;AAEA,SAAS,gBAAgB,CAAC,GAAY,EAAA;AACpC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;AAAE,QAAA,OAAO,EAAE;AAElC,IAAA,OAAO;AACJ,SAAA,GAAG,CAAC,CAAC,KAAK,KAAyB;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;AAAE,YAAA,OAAO,KAAK,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI;AAClE,QAAA,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AACtC,YAAA,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAyC;AAC9D,YAAA,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,EAAE;AAChC,gBAAA,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,GAAG,IAAI,EAAE;YAC7D;QACF;AACA,QAAA,OAAO,IAAI;AACb,IAAA,CAAC;SACA,MAAM,CAAC,CAAC,MAAM,KAA6B,MAAM,KAAK,IAAI,CAAC;AAChE;;AChFA;;;;;;;;;;;;;;;;;AAiBG;MAqCU,cAAc,CAAA;;IAEhB,QAAQ,GAAG,KAAK,CAAC,QAAQ;iFAA2B;;IAGpD,IAAI,GAAG,KAAK,CAAC,KAAK;6EAAC;;;;IAKnB,MAAM,GAAG,KAAK,CAAC,oBAAoB;+EAAC;IACpC,YAAY,GAAG,KAAK,CAAC,WAAW;qFAAC;IACjC,UAAU,GAAG,KAAK,CAAC,8CAA8C;mFAAC;;IAGlE,QAAQ,GAAG,MAAM,EAAU;IAE1B,MAAM,GAAkB,IAAI;AAE5B,IAAA,MAAM,CAAC,EAAU,EAAA;AACzB,QAAA,IAAI,CAAC,MAAM,GAAG,EAAE;IAClB;IAEU,OAAO,GAAA;QACf,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAClD;AAEA;;;;;;;;;;AAUG;IACO,KAAK,CAAC,MAAoB,EAAE,KAAa,EAAA;AACjD,QAAA,OAAO,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAA,OAAA,EAAU,KAAK,GAAG,CAAC,EAAE;IAC1D;;AAGU,IAAA,QAAQ,CAAC,MAAoB,EAAA;QACrC,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9B;uGA7CW,cAAc,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAAd,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,cAAc,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,yBAAA,EAAA,MAAA,EAAA,EAAA,QAAA,EAAA,EAAA,iBAAA,EAAA,UAAA,EAAA,UAAA,EAAA,UAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,IAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,IAAA,EAAA,EAAA,iBAAA,EAAA,MAAA,EAAA,UAAA,EAAA,MAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,MAAA,EAAA,EAAA,iBAAA,EAAA,QAAA,EAAA,UAAA,EAAA,QAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,YAAA,EAAA,EAAA,iBAAA,EAAA,cAAA,EAAA,UAAA,EAAA,cAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,UAAA,EAAA,EAAA,iBAAA,EAAA,YAAA,EAAA,UAAA,EAAA,YAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,EAAA,OAAA,EAAA,EAAA,QAAA,EAAA,UAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,QAAA,EAjCf,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BT,EAAA,CAAA,EAAA,QAAA,EAAA,IAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,MAAA,EAAA,CAAA;;2FAEU,cAAc,EAAA,UAAA,EAAA,CAAA;kBApC1B,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,yBAAyB;oBACnC,eAAe,EAAE,uBAAuB,CAAC,MAAM;AAC/C,oBAAA,QAAQ,EAAE,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BT,EAAA,CAAA;AACF,iBAAA;;;AChDD;;;;;;;;;;;;;;;;;;;AAmBG;MAEU,kBAAkB,CAAA;AACZ,IAAA,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;AAC/B,IAAA,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC;AAC9B,IAAA,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AACvB,IAAA,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;IAEjD,SAAS,GAAmC,IAAI;AAExD;;;;;;;;;;;;;;;;;;;;;;;AAuBG;IACH,OAAO,GAAA;AACL,QAAA,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,IAAI,CAAC,SAAS;QACvB;AAEA,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,IAAI,CAC7C,UAAU,CAAC,CAAC,KAAc,KAAI;AAC5B,YAAA,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;AACpB,YAAA,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC;AAClE,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;AAChC,QAAA,CAAC,CAAC,EACF,QAAQ,CAAC,MAAK;AACZ,YAAA,IAAI,CAAC,SAAS,GAAG,IAAI;QACvB,CAAC,CAAC,EACF,KAAK,CAAC;YACJ,SAAS,EAAE,MAAM,IAAI,aAAa,CAAc,CAAC,CAAC;AAClD,YAAA,YAAY,EAAE,KAAK;AACnB,YAAA,eAAe,EAAE,KAAK;AACtB,YAAA,mBAAmB,EAAE,KAAK;AAC3B,SAAA,CAAC,CACH;QAED,OAAO,IAAI,CAAC,SAAS;IACvB;uGAvDW,kBAAkB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAlB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,kBAAkB,cADL,MAAM,EAAA,CAAA;;2FACnB,kBAAkB,EAAA,UAAA,EAAA,CAAA;kBAD9B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACZlC,SAAS,YAAY,CAAC,GAAW,EAAE,UAAkB,EAAA;AACnD,IAAA,OAAO,GAAG,KAAK,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA,EAAG,UAAU,CAAA,CAAA,CAAG,CAAC;AAC/D;AAEA,SAAS,cAAc,CAAC,GAAW,EAAE,UAAkB,EAAE,IAA8B,EAAA;AACrF,IAAA,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CACvE,CAAC,CAAC,KAAkB,CAAC,CAAC,CAAC,CACxB;AACD,IAAA,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAA,EAAG,UAAU,GAAG,CAAC,CAAA,CAAE,CAAC;AAC3D;AAEA;;;;;;;;AAQG;MACU,sBAAsB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;IACrE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,uBAAuB,CAAC;IACtD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE;AACtC,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB;AACA,IAAA,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD;AAEA;;;;;;;;;;;;;;;;;;;;;AAqBG;MACU,wBAAwB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;AACvE,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;AAC9C,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC;AACpC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AAC7B,IAAA,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC;IAErD,IACE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;AACzC,QAAA,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EACvD;AACA,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB;AAEA,IAAA,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CACnB,UAAU,CAAC,CAAC,KAAc,KAAI;AAC5B,QAAA,IAAI,EAAE,KAAK,YAAY,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE;AACjE,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC;AAEA,QAAA,IAAI,MAAM,CAAC,oBAAoB,KAAK,uBAAuB,EAAE;YAC3D,OAAO,CAAC,KAAK,EAAE;YACf,KAAK,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC;AACxD,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC;AAEA,QAAA,OAAO,kBAAkB,CAAC,OAAO,EAAE,CAAC,IAAI,CACtC,SAAS,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;;;;;AAK1B,QAAA,UAAU,CAAC,MAAM,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAC1C;IACH,CAAC,CAAC,CACH;AACH;AAEA;;;;;;;;AAQG;AACG,SAAU,0BAA0B,CAAC,GAAG,aAA6C,EAAA;IACzF,OAAO,iBAAiB,CACtB,qBAAqB,CAAC;AACpB,QAAA,UAAU,EAAE,YAAY;AACxB,QAAA,UAAU,EAAE,cAAc;AAC3B,KAAA,CAAC,EACF,gBAAgB,CAAC,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC,EACpE,GAAG,aAAa,CACjB;AACH;;ACvGM,SAAU,aAAa,CAAC,YAA8C,EAAE,GAAW,EAAA;AACvF,IAAA,OAAO,YAAY,GAAG,GAAG,CAAC,KAAK,IAAI;AACrC;;ACjBA;;;;;;;;;;AAUG;MAKU,mBAAmB,CAAA;AACb,IAAA,WAAW,GAAG,MAAM,EAAC,WAAoB,EAAC;AAC1C,IAAA,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAEjD,IAAA,GAAG;AACH,IAAA,GAAG;IACH,OAAO,GAAG,KAAK;IAEvB,IACI,aAAa,CAAC,GAAqC,EAAA;AACrD,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;QACd,IAAI,CAAC,MAAM,EAAE;IACf;IAEA,IACI,GAAG,CAAC,GAAW,EAAA;AACjB,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;QACd,IAAI,CAAC,MAAM,EAAE;IACf;IAEQ,MAAM,GAAA;AACZ,QAAA,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AAClE,QAAA,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAC/B,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;AACvD,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI;QACrB;AAAO,aAAA,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE;AACtC,YAAA,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE;AAC1B,YAAA,IAAI,CAAC,OAAO,GAAG,KAAK;QACtB;IACF;uGA7BW,mBAAmB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;2FAAnB,mBAAmB,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,iBAAA,EAAA,MAAA,EAAA,EAAA,aAAA,EAAA,eAAA,EAAA,GAAA,EAAA,CAAA,kBAAA,EAAA,KAAA,CAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,CAAA;;2FAAnB,mBAAmB,EAAA,UAAA,EAAA,CAAA;kBAJ/B,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,iBAAiB;AAC3B,oBAAA,UAAU,EAAE,IAAI;AACjB,iBAAA;;sBASE;;sBAMA,KAAK;uBAAC,kBAAkB;;;ACE3B;;;;;;AAMG;AACG,SAAU,uBAAuB,CAAC,KAAwB,EAAA;AAC9D,IAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAAmD;IACtE,MAAM,IAAI,GAAG,OAAO,IAAI,GAAG,MAAM,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,MAAM,CAAY,GAAG,CAAA,KAAA,EAAQ,KAAK,CAAC,MAAM,IAAI,CAAC,CAAA,CAAE;IACxG,MAAM,OAAO,GAAG,OAAO,IAAI,GAAG,SAAS,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,SAAS,CAAY,GAAG,SAAS;IAC/F,MAAM,QAAQ,GAAG,OAAO,IAAI,GAAG,UAAU,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,UAAU,CAAY,GAAG,SAAS;;;;IAIlG,MAAM,aAAa,GACjB,OAAO,IAAI,GAAG,gBAAgB,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,gBAAgB,CAAY,GAAG,SAAS;IAE/F,OAAO;QACL,IAAI;QACJ,OAAO;QACP,MAAM,EAAE,KAAK,CAAC,MAAM;AACpB,QAAA,IAAI,QAAQ,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AACjC,QAAA,IAAI,aAAa,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;KAC5C;AACH;;AC3DA;;AAEG;;ACFH;;AAEG;;;;"}
+{"version":3,"file":"orechio-platform-angular.mjs","sources":["../../../projects/platform-angular/src/lib/config/platform-angular-config.ts","../../../projects/platform-angular/src/lib/session/session-store.ts","../../../projects/platform-angular/src/lib/auth/auth-client.ts","../../../projects/platform-angular/src/lib/auth/branch-selection.model.ts","../../../projects/platform-angular/src/lib/auth/branch-selector.ts","../../../projects/platform-angular/src/lib/auth/refresh-coordinator.ts","../../../projects/platform-angular/src/lib/http/provide-platform-angular-http.ts","../../../projects/platform-angular/src/lib/capabilities/capability.model.ts","../../../projects/platform-angular/src/lib/capabilities/capability.directive.ts","../../../projects/platform-angular/src/lib/problem-details/problem-details.model.ts","../../../projects/platform-angular/src/public-api.ts","../../../projects/platform-angular/src/orechio-platform-angular.ts"],"sourcesContent":["import { InjectionToken, Provider } from '@angular/core';\r\n\r\n/**\r\n * BFF endpoint paths for the auth contract. All paths are relative to `apiBaseUrl`.\r\n * `me` is optional: some BFFs bootstrap the session via `refresh` alone (no dedicated\r\n * session-read endpoint) instead of a separate `me` call.\r\n */\r\nexport interface PlatformAngularAuthPaths {\r\n  login: string;\r\n  refresh: string;\r\n  logout: string;\r\n  me?: string;\r\n  /**\r\n   * Branch switch for an already-authenticated session. Optional: only BFFs that\r\n   * expose an authenticated switch endpoint set it, and `AuthClient.selectBranch`\r\n   * fails fast when it is absent rather than guessing a URL.\r\n   */\r\n  selectBranch?: string;\r\n  /**\r\n   * Unwraps the raw auth-endpoint response body into TUser. Defaults to the\r\n   * identity function (response body IS the user object), matching Store's\r\n   * proven wire format. Portal's BFF wraps the user in an envelope\r\n   * (`{ user: UserInfo }`) — Portal supplies `(body) => body.user` here\r\n   * rather than the package assuming either shape.\r\n   */\r\n  unwrapUser?: (body: unknown) => unknown;\r\n}\r\n\r\nexport interface PlatformAngularConfig {\r\n  /** Same-origin API base path, e.g. '/api'. Never an absolute cross-origin URL — the\r\n   *  BFF/cookie-session pattern this library assumes requires same-origin requests. */\r\n  apiBaseUrl: string;\r\n  auth: PlatformAngularAuthPaths;\r\n  /** XSRF cookie/header names. Defaults match Angular's own defaults and both proven\r\n   *  consumers (Portal, Store): cookie 'XSRF-TOKEN', header 'X-XSRF-TOKEN'. */\r\n  xsrf?: {\r\n    cookieName?: string;\r\n    headerName?: string;\r\n  };\r\n  /** 401 handling strategy. 'redirect' clears the session and redirects immediately\r\n   *  (Store's proven behavior). 'refresh-then-redirect' attempts one silent refresh\r\n   *  before giving up (Portal's proven behavior). Defaults to 'redirect' — the simpler,\r\n   *  more conservative behavior — when omitted. */\r\n  unauthorizedStrategy?: 'redirect' | 'refresh-then-redirect';\r\n  /** Route to navigate to after a session is cleared. Defaults to '/login'. */\r\n  loginRoute?: string;\r\n}\r\n\r\nexport const PLATFORM_ANGULAR_CONFIG = new InjectionToken<PlatformAngularConfig>(\r\n  'PLATFORM_ANGULAR_CONFIG',\r\n);\r\n\r\nexport function providePlatformAngularConfig(config: PlatformAngularConfig): Provider {\r\n  return { provide: PLATFORM_ANGULAR_CONFIG, useValue: config };\r\n}\r\n","import { Injectable, Signal, computed, signal } from '@angular/core';\nimport { SessionUser } from './session-user.model';\n\n/**\n * Generic signal-based session store. Mirrors the pattern already proven\n * independently by both consumers (Portal's AuthService.user, Store's\n * EstadoDaSessao) — deliberately NOT a richer state machine (unknown /\n * loading / error states): neither consumer needed one, and ADR-010 §2.2\n * (\"projete para extração, não extraia por antecipação\") argues against\n * building one speculatively.\n *\n * Parameterized over TUser so each product can extend SessionUser with its\n * own fields without needing a package release.\n */\n@Injectable({ providedIn: 'root' })\nexport class SessionStore<TUser extends SessionUser = SessionUser> {\n  private readonly state = signal<TUser | null>(null);\n\n  readonly user: Signal<TUser | null> = this.state.asReadonly();\n  readonly isAuthenticated: Signal<boolean> = computed(() => this.state() !== null);\n\n  set(user: TUser): void {\n    this.state.set(user);\n  }\n\n  clear(): void {\n    this.state.set(null);\n  }\n}\n","import { HttpClient } from '@angular/common/http';\r\nimport { Injectable, inject } from '@angular/core';\r\nimport { Observable, finalize, map, tap, throwError } from 'rxjs';\r\nimport { PLATFORM_ANGULAR_CONFIG } from '../config/platform-angular-config';\r\nimport { SessionStore } from '../session/session-store';\r\nimport { SessionUser } from '../session/session-user.model';\r\n\r\n/**\r\n * Thin BFF client for the auth contract: login / refresh / logout, and an\r\n * optional session-read (\"me\") endpoint. Deliberately does NOT decode JWTs,\r\n * store bearer tokens, or treat itself as a security authority — per\r\n * ADR-010 §12 and this package's explicit non-goal (no JWT client SDK): the\r\n * BFF/backend is the only place tokens live, this class only reflects\r\n * whatever session-shaped JSON the BFF hands back.\r\n *\r\n * Endpoint paths are entirely config-driven (PLATFORM_ANGULAR_CONFIG) — this\r\n * class contains zero hardcoded URLs, so it works unmodified against\r\n * Portal's /api/auth/{login,me,refresh,logout} (envelope-wrapped\r\n * `{ user: UserInfo }` responses, unwrapped via config.auth.unwrapUser) and\r\n * the cookie-session hosts' /api/auth/{login,session,refresh,logout,select-branch}\r\n * (unwrapped responses; `session` is configured as `me`) alike. Those hosts are\r\n * Store, Moveis and any host mounting Orechio.Platform.Bff.Account 0.3.0\r\n * (ADR-022), which serves exactly this contract.\r\n */\r\n@Injectable({ providedIn: 'root' })\r\nexport class AuthClient<TUser extends SessionUser = SessionUser> {\r\n  private readonly http = inject(HttpClient);\r\n  private readonly config = inject(PLATFORM_ANGULAR_CONFIG);\r\n  private readonly session = inject(SessionStore) as SessionStore<TUser>;\r\n\r\n  private url(path: string): string {\r\n    return `${this.config.apiBaseUrl}${path}`;\r\n  }\r\n\r\n  private unwrap(body: unknown): TUser {\r\n    const unwrapUser = this.config.auth.unwrapUser;\r\n    return (unwrapUser ? unwrapUser(body) : body) as TUser;\r\n  }\r\n\r\n  login(credentials: unknown): Observable<TUser> {\r\n    return this.http.post<unknown>(this.url(this.config.auth.login), credentials).pipe(\r\n      map((body) => this.unwrap(body)),\r\n      tap((user) => this.session.set(user)),\r\n    );\r\n  }\r\n\r\n  /**\r\n   * Reads the current session. Uses the configured `me` endpoint (GET) when\r\n   * present (Portal; Store and Moveis via `/api/auth/session`; and the\r\n   * Orechio.Platform.Bff.Account 0.3.0 session routes, ADR-022) — a read that\r\n   * neither rotates the session nor its cookies. Falls back to `refresh` (POST)\r\n   * only for a host that configures no `me`, which then bootstraps via refresh.\r\n   */\r\n  initSession(): Observable<TUser> {\r\n    if (this.config.auth.me) {\r\n      return this.http.get<unknown>(this.url(this.config.auth.me)).pipe(\r\n        map((body) => this.unwrap(body)),\r\n        tap((user) => this.session.set(user)),\r\n      );\r\n    }\r\n    return this.refresh();\r\n  }\r\n\r\n  /**\r\n   * Asks the BFF to make `branchId` the current branch of the session that is\r\n   * already authenticated. No credentials are involved and none are re-sent: the\r\n   * browser proves nothing here beyond the session it already holds.\r\n   *\r\n   * `branchId` is a **requested target, never an authorization**. The BFF forwards\r\n   * it to the Platform, which re-reads the user's grants and refuses what is not\r\n   * granted — a rejection arrives as a failed request, and the session store is\r\n   * left exactly as it was, still on the previous branch.\r\n   *\r\n   * The store is updated only from the session the server returns, never\r\n   * optimistically from the requested id: the whole point of an explicit switch is\r\n   * that the server, not the client, decides which branch the user ends up in.\r\n   */\r\n  selectBranch(branchId: string): Observable<TUser> {\r\n    const path = this.config.auth.selectBranch;\r\n    if (!path) {\r\n      return throwError(\r\n        () =>\r\n          new Error(\r\n            'AuthClient.selectBranch requires config.auth.selectBranch. Configure the ' +\r\n              'BFF path that performs an authenticated branch switch.',\r\n          ),\r\n      );\r\n    }\r\n\r\n    return this.http.post<unknown>(this.url(path), { branchId }).pipe(\r\n      map((body) => this.unwrap(body)),\r\n      tap((user) => this.session.set(user)),\r\n    );\r\n  }\r\n\r\n  refresh(): Observable<TUser> {\r\n    return this.http.post<unknown>(this.url(this.config.auth.refresh), {}).pipe(\r\n      map((body) => this.unwrap(body)),\r\n      tap((user) => this.session.set(user)),\r\n    );\r\n  }\r\n\r\n  /**\r\n   * Clears the local session unconditionally — on success, on error, and on\r\n   * unsubscribe (`finalize`, not `tap`) — matching the behavior both\r\n   * consumers already converged on independently (Portal swallows the\r\n   * error before clearing; Store clears via `finalize` while still letting\r\n   * the error propagate). This does NOT swallow errors: callers that want\r\n   * Portal's \"always succeed\" UX compose their own `catchError` on top.\r\n   */\r\n  logout(): Observable<void> {\r\n    return this.http\r\n      .post<void>(this.url(this.config.auth.logout), {})\r\n      .pipe(finalize(() => this.session.clear()));\r\n  }\r\n}\r\n","import { HttpErrorResponse } from '@angular/common/http';\r\n\r\n/**\r\n * Control-flow code the Platform's auth contract returns (HTTP 409) when the\r\n * authenticated user has access to more than one branch and none was chosen.\r\n *\r\n * It is deliberately NOT a failure: no session is created, no cookie is set,\r\n * and the caller is expected to ask the user which branch to enter. Treating\r\n * it as a generic error is the bug this constant exists to prevent.\r\n */\r\nexport const BRANCH_SELECTION_REQUIRED_CODE = 'auth.branch_selection_required';\r\n\r\n/**\r\n * One selectable branch.\r\n *\r\n * `name` is optional because the current backend contract carries branch ids\r\n * only — see `readBranchSelectionRequired`. Modelling it as optional now means\r\n * the day the backend starts sending names, consumers get them without a\r\n * breaking change to this type.\r\n */\r\nexport interface BranchOption {\r\n  readonly id: string;\r\n  readonly name?: string | null;\r\n}\r\n\r\n/** Payload of a branch-selection-required response, normalized. */\r\nexport interface BranchSelectionRequired {\r\n  readonly branches: readonly BranchOption[];\r\n}\r\n\r\n/**\r\n * Recognizes a branch-selection-required response and normalizes its payload,\r\n * or returns `null` for anything else — so callers branch on a value instead of\r\n * re-deriving the contract from status codes and body shapes.\r\n *\r\n * Reads three wire shapes, in this order of preference:\r\n *\r\n * 1. `branchOptions: [{ id, name }]` — the display metadata the Platform sends\r\n *    alongside the ids. Preferred when present, because it is the only shape\r\n *    that lets an operator tell the branches apart.\r\n * 2. `branches: [\"<guid>\"]` — the original contract. Still authoritative for\r\n *    selection, and still enough on its own.\r\n * 3. `branches: [{ id, name }]` — tolerated since 0.3.0.\r\n *\r\n * Reading all three is what makes the rollout order irrelevant: a frontend on\r\n * this version works against a backend that has the metadata and against one\r\n * that does not, and neither side has to ship first.\r\n *\r\n * Entries without a usable id are dropped rather than rendered as blanks: an\r\n * unselectable option in a selection list is worse than a shorter list.\r\n */\r\nexport function readBranchSelectionRequired(error: unknown): BranchSelectionRequired | null {\r\n  if (!(error instanceof HttpErrorResponse) || error.status !== 409) return null;\r\n\r\n  const body = error.error as\r\n    | { code?: unknown; branches?: unknown; branchOptions?: unknown }\r\n    | null;\r\n  if (!body || body.code !== BRANCH_SELECTION_REQUIRED_CODE) return null;\r\n\r\n  // `branchOptions` só substitui os ids quando traz alguma opção utilizável —\r\n  // uma lista vazia ou ilegível não pode apagar a lista de ids que funciona.\r\n  const comMetadata = normalizeEntries(body.branchOptions);\r\n  if (comMetadata.length > 0) return { branches: comMetadata };\r\n\r\n  if (!Array.isArray(body.branches)) return null;\r\n  return { branches: normalizeEntries(body.branches) };\r\n}\r\n\r\nfunction normalizeEntries(raw: unknown): BranchOption[] {\r\n  if (!Array.isArray(raw)) return [];\r\n\r\n  return raw\r\n    .map((entry): BranchOption | null => {\r\n      if (typeof entry === 'string') return entry ? { id: entry } : null;\r\n      if (entry && typeof entry === 'object') {\r\n        const { id, name } = entry as { id?: unknown; name?: unknown };\r\n        if (typeof id === 'string' && id) {\r\n          return { id, name: typeof name === 'string' ? name : null };\r\n        }\r\n      }\r\n      return null;\r\n    })\r\n    .filter((branch): branch is BranchOption => branch !== null);\r\n}\r\n","import { ChangeDetectionStrategy, Component, input, output } from '@angular/core';\r\nimport { BranchOption } from './branch-selection.model';\r\n\r\n/**\r\n * Explicit branch picker for the multi-branch login step.\r\n *\r\n * Deliberately narrow: it receives options, renders them, and emits the id the\r\n * user actually chose. It does not call any backend, hold credentials, read\r\n * tokens, touch storage, or know which product it is rendering inside — the\r\n * flow around it belongs to the consumer, and the copy around it belongs to the\r\n * consumer's login page.\r\n *\r\n * **It never picks for the user.** When the backend answers\r\n * `auth.branch_selection_required` it has already refused to choose (no session\r\n * is created); a selector that quietly defaulted to the first option would put\r\n * the arbitrary choice back one layer up, in the place hardest to notice.\r\n *\r\n * Rendered as a radio group so the browser gives keyboard navigation, focus\r\n * management, and screen-reader semantics for free — a list of buttons would\r\n * need all three re-implemented, worse.\r\n */\r\n@Component({\r\n  selector: 'orechio-branch-selector',\r\n  changeDetection: ChangeDetectionStrategy.OnPush,\r\n  template: `\r\n    @if (branches().length === 0) {\r\n      <p class=\"orechio-branch-selector__empty\" role=\"status\">{{ emptyLabel() }}</p>\r\n    } @else {\r\n      <fieldset class=\"orechio-branch-selector\" [disabled]=\"busy()\">\r\n        <legend>{{ legend() }}</legend>\r\n\r\n        @for (branch of branches(); track branch.id; let index = $index) {\r\n          <label class=\"orechio-branch-selector__option\">\r\n            <input\r\n              type=\"radio\"\r\n              name=\"orechio-branch\"\r\n              [value]=\"branch.id\"\r\n              [checked]=\"chosen === branch.id\"\r\n              (change)=\"choose(branch.id)\"\r\n            />\r\n            <span class=\"orechio-branch-selector__label\">{{ label(branch, index) }}</span>\r\n            <span class=\"orechio-branch-selector__hint\">{{ fragment(branch) }}</span>\r\n          </label>\r\n        }\r\n\r\n        <button\r\n          type=\"button\"\r\n          class=\"orechio-branch-selector__confirm\"\r\n          [disabled]=\"!chosen || busy()\"\r\n          (click)=\"confirm()\"\r\n        >\r\n          {{ confirmLabel() }}\r\n        </button>\r\n      </fieldset>\r\n    }\r\n  `,\r\n})\r\nexport class BranchSelector {\r\n  /** Options to choose from. An empty list renders the empty state, never a silent no-op. */\r\n  readonly branches = input.required<readonly BranchOption[]>();\r\n\r\n  /** Blocks input while the consumer is completing the sign-in round-trip. */\r\n  readonly busy = input(false);\r\n\r\n  // Copy is injectable because wording belongs to the product, not to the\r\n  // platform package — the defaults exist so a consumer can drop the component\r\n  // in and iterate on the words later.\r\n  readonly legend = input('Selecione a filial');\r\n  readonly confirmLabel = input('Continuar');\r\n  readonly emptyLabel = input('Nenhuma filial disponível para este usuário.');\r\n\r\n  /** Emits only in response to a user action. */\r\n  readonly selected = output<string>();\r\n\r\n  protected chosen: string | null = null;\r\n\r\n  protected choose(id: string): void {\r\n    this.chosen = id;\r\n  }\r\n\r\n  protected confirm(): void {\r\n    if (this.chosen) this.selected.emit(this.chosen);\r\n  }\r\n\r\n  /**\r\n   * The name is the label whenever the contract carries one. The id fragment stays\r\n   * as secondary text rather than disappearing: the domain allows two branches to\r\n   * share a name, and when that happens the fragment is the only thing telling\r\n   * them apart.\r\n   *\r\n   * Without a name — an older backend, or metadata the server could not compose —\r\n   * the positional fallback keeps the list selectable. Two raw identifiers side by\r\n   * side are technically a choice and practically a coin flip, which is exactly\r\n   * why the name is preferred whenever it exists.\r\n   */\r\n  protected label(branch: BranchOption, index: number): string {\r\n    return branch.name ? branch.name : `Filial ${index + 1}`;\r\n  }\r\n\r\n  /** Fragment of the id, shown beside the label to disambiguate repeated names. */\r\n  protected fragment(branch: BranchOption): string {\r\n    return branch.id.slice(0, 8);\r\n  }\r\n}\r\n","import { inject, Injectable } from '@angular/core';\r\nimport { Router } from '@angular/router';\r\nimport { Observable, ReplaySubject, catchError, finalize, share, throwError } from 'rxjs';\r\nimport { PLATFORM_ANGULAR_CONFIG } from '../config/platform-angular-config';\r\nimport { SessionStore } from '../session/session-store';\r\nimport { SessionUser } from '../session/session-user.model';\r\nimport { AuthClient } from './auth-client';\r\n\r\n/**\r\n * INTERNAL. Not exported from public-api.ts — consumers never construct or configure this\r\n * directly; it exists purely to back `sessionExpiryInterceptor`'s `'refresh-then-redirect'`\r\n * strategy (WEB-0.2, ADR-016 §\"WEB-0.2 note\").\r\n *\r\n * Deduplicates concurrent `AuthClient.refresh()` calls that originate from the SAME Angular\r\n * application context (one injector, i.e. one running app/tab). Before this existed, every\r\n * 401'd request independently called `authClient.refresh()`, and since that method returns a\r\n * cold Observable (`http.post(...)`, no multicasting), N simultaneous 401s produced N\r\n * independent `POST /refresh` calls — proven by the characterization test in\r\n * `provide-platform-angular-http.spec.ts`.\r\n *\r\n * This is defense-in-depth ONLY. The Platform already tolerates concurrent legitimate refresh\r\n * rotations correctly and safely (PLATFORM-REFRESH-1/1A/1B, ADR-016's retry leeway) — this class\r\n * exists to cut needless network traffic, cryptographic work, and rate-limit pressure on the\r\n * Platform, not to be the thing that makes concurrent refreshes safe. It does not, and does not\r\n * need to, coordinate across browser tabs/windows or other Angular application instances — see\r\n * the \"Multi-tab\" note on `sessionExpiryInterceptor` for why that's explicitly out of scope here\r\n * and handled server-side instead.\r\n */\r\n@Injectable({ providedIn: 'root' })\r\nexport class RefreshCoordinator {\r\n  private readonly authClient = inject(AuthClient);\r\n  private readonly session = inject(SessionStore);\r\n  private readonly router = inject(Router);\r\n  private readonly config = inject(PLATFORM_ANGULAR_CONFIG);\r\n\r\n  private inFlight$: Observable<SessionUser> | null = null;\r\n\r\n  /**\r\n   * Returns the single in-flight refresh operation if one is already running, or starts a new\r\n   * one. Every caller — first or piggybacking — gets the SAME underlying HTTP call's outcome.\r\n   *\r\n   * Semantics (WEB-0.2):\r\n   * - Single-flight, not a permanent cache: once the shared operation settles (success or\r\n   *   error), the reference is cleared (`finalize`, placed BEFORE `share()` so it fires exactly\r\n   *   once per underlying HTTP call, not once per subscriber — see the `share()` config note\r\n   *   below). The next call to `refresh()` after that always starts a genuinely new request.\r\n   * - On failure, the session is cleared and the browser is navigated to the login route\r\n   *   exactly once, regardless of how many callers are waiting — not once per waiting caller.\r\n   *   Each caller still receives its own error notification (multicast by `share()`) and is\r\n   *   responsible for propagating whatever error IT needs to its own subscriber (see\r\n   *   `sessionExpiryInterceptor`, which re-throws the ORIGINAL 401 to the request that\r\n   *   triggered it, not this refresh failure).\r\n   * - `resetOnRefCountZero: false` is load-bearing: if one waiting caller unsubscribes (e.g. a\r\n   *   cancelled navigation), the still-in-flight HTTP request for the OTHER callers must not be\r\n   *   aborted. Angular's `HttpClient` cancels the underlying network request when its Observable\r\n   *   loses its last subscriber — without this flag, one caller going away could silently\r\n   *   cancel the refresh everyone else is still waiting on.\r\n   * - `resetOnError`/`resetOnComplete` are left `false` too: this class never reuses a settled\r\n   *   `inFlight$` reference across cycles (the field is always nulled and rebuilt from scratch\r\n   *   by `finalize`), so `share()` itself never needs to reset its own internal connector.\r\n   */\r\n  refresh(): Observable<SessionUser> {\r\n    if (this.inFlight$) {\r\n      return this.inFlight$;\r\n    }\r\n\r\n    this.inFlight$ = this.authClient.refresh().pipe(\r\n      catchError((error: unknown) => {\r\n        this.session.clear();\r\n        void this.router.navigateByUrl(this.config.loginRoute ?? '/login');\r\n        return throwError(() => error);\r\n      }),\r\n      finalize(() => {\r\n        this.inFlight$ = null;\r\n      }),\r\n      share({\r\n        connector: () => new ReplaySubject<SessionUser>(1),\r\n        resetOnError: false,\r\n        resetOnComplete: false,\r\n        resetOnRefCountZero: false,\r\n      }),\r\n    );\r\n\r\n    return this.inFlight$;\r\n  }\r\n}\r\n","import {\r\n  HttpErrorResponse,\r\n  HttpInterceptorFn,\r\n  provideHttpClient,\r\n  withInterceptors,\r\n  withXsrfConfiguration,\r\n  HttpFeature,\r\n  HttpFeatureKind,\r\n} from '@angular/common/http';\r\nimport { inject } from '@angular/core';\r\nimport { Router } from '@angular/router';\r\nimport { catchError, switchMap, throwError } from 'rxjs';\r\nimport { PLATFORM_ANGULAR_CONFIG, PlatformAngularAuthPaths } from '../config/platform-angular-config';\r\nimport { RefreshCoordinator } from '../auth/refresh-coordinator';\r\nimport { SessionStore } from '../session/session-store';\r\n\r\nfunction isApiRequest(url: string, apiBaseUrl: string): boolean {\r\n  return url === apiBaseUrl || url.startsWith(`${apiBaseUrl}/`);\r\n}\r\n\r\nfunction isAuthEndpoint(url: string, apiBaseUrl: string, auth: PlatformAngularAuthPaths): boolean {\r\n  const authPaths = [auth.login, auth.refresh, auth.logout, auth.me].filter(\r\n    (p): p is string => !!p,\r\n  );\r\n  return authPaths.some((p) => url === `${apiBaseUrl}${p}`);\r\n}\r\n\r\n/**\r\n * Forces `withCredentials: true` on same-origin API requests, so the BFF's\r\n * HttpOnly session cookie is sent. Proven identically in both consumers.\r\n * XSRF header injection is intentionally NOT duplicated here — Angular's\r\n * own `withXsrfConfiguration` (registered by `providePlatformAngularHttp`)\r\n * already does that. Portal's local interceptor previously re-implemented\r\n * XSRF header injection manually alongside `withXsrfConfiguration`; that\r\n * was redundant, not a pattern to preserve.\r\n */\r\nexport const credentialsInterceptor: HttpInterceptorFn = (req, next) => {\r\n  const { apiBaseUrl } = inject(PLATFORM_ANGULAR_CONFIG);\r\n  if (!isApiRequest(req.url, apiBaseUrl)) {\r\n    return next(req);\r\n  }\r\n  return next(req.clone({ withCredentials: true }));\r\n};\r\n\r\n/**\r\n * On 401 from a non-auth API request: 'redirect' (default) clears the\r\n * session and navigates to the login route immediately (Store's proven\r\n * behavior). 'refresh-then-redirect' attempts one silent refresh first and\r\n * retries the original request on success, falling back to redirect\r\n * (Portal's proven behavior). Configured via\r\n * PlatformAngularConfig.unauthorizedStrategy.\r\n *\r\n * WEB-0.2: the 'refresh-then-redirect' path routes through `RefreshCoordinator`\r\n * instead of calling `AuthClient.refresh()` directly — every 401 handled by\r\n * the SAME running app shares one in-flight refresh instead of each request\r\n * triggering its own. The 'redirect' strategy is untouched: it never calls\r\n * refresh at all, so there is nothing to coordinate (see the config note on\r\n * `PlatformAngularConfig.unauthorizedStrategy`). On refresh failure, the\r\n * session-clear/navigate side effect now happens once inside the coordinator\r\n * (shared across every waiting caller) rather than once per waiting caller;\r\n * each caller still receives the ORIGINAL 401 error, not a refresh-specific\r\n * one, exactly as before. Multi-tab/multi-window coordination is explicitly\r\n * NOT handled here — see `RefreshCoordinator`'s doc comment — the Platform's\r\n * own server-side retry leeway (ADR-016) is what makes concurrent refreshes\r\n * from independent contexts safe.\r\n */\r\nexport const sessionExpiryInterceptor: HttpInterceptorFn = (req, next) => {\r\n  const config = inject(PLATFORM_ANGULAR_CONFIG);\r\n  const session = inject(SessionStore);\r\n  const router = inject(Router);\r\n  const refreshCoordinator = inject(RefreshCoordinator);\r\n\r\n  if (\r\n    !isApiRequest(req.url, config.apiBaseUrl) ||\r\n    isAuthEndpoint(req.url, config.apiBaseUrl, config.auth)\r\n  ) {\r\n    return next(req);\r\n  }\r\n\r\n  return next(req).pipe(\r\n    catchError((error: unknown) => {\r\n      if (!(error instanceof HttpErrorResponse) || error.status !== 401) {\r\n        return throwError(() => error);\r\n      }\r\n\r\n      if (config.unauthorizedStrategy !== 'refresh-then-redirect') {\r\n        session.clear();\r\n        void router.navigateByUrl(config.loginRoute ?? '/login');\r\n        return throwError(() => error);\r\n      }\r\n\r\n      return refreshCoordinator.refresh().pipe(\r\n        switchMap(() => next(req)),\r\n        // The coordinator already cleared the session and navigated once for\r\n        // this shared failure (see RefreshCoordinator.refresh()) — this\r\n        // request still needs to fail with its OWN original 401, not the\r\n        // refresh's error, exactly as before WEB-0.2.\r\n        catchError(() => throwError(() => error)),\r\n      );\r\n    }),\r\n  );\r\n};\r\n\r\n/**\r\n * Bundles provideHttpClient with the XSRF configuration and interceptors\r\n * proven necessary by both consumers. Cookie/header names default to\r\n * 'XSRF-TOKEN'/'X-XSRF-TOKEN' (identical in both consumers today) but\r\n * remain overridable via config. Consumers add their own extra\r\n * provideHttpClient features (e.g. Portal's withXhr()) by calling\r\n * provideHttpClient(...) separately — this function only owns the concerns\r\n * proven common to both.\r\n */\r\nexport function providePlatformAngularHttp(...extraFeatures: HttpFeature<HttpFeatureKind>[]) {\r\n  return provideHttpClient(\r\n    withXsrfConfiguration({\r\n      cookieName: 'XSRF-TOKEN',\r\n      headerName: 'X-XSRF-TOKEN',\r\n    }),\r\n    withInterceptors([credentialsInterceptor, sessionExpiryInterceptor]),\r\n    ...extraFeatures,\r\n  );\r\n}\r\n","/**\n * Generic capability map: a flat set of boolean feature flags fetched once\n * from the BFF (Portal's proven pattern — GET .../capabilities returning a\n * flat boolean-keyed object). Deliberately a generic `Record<string,\n * boolean>` rather than a typed interface enumerating every field: Portal's\n * capability set already has 17 product-specific fields and Store will\n * grow its own, unrelated set. A typed interface would require a package\n * release for every new product capability (see ADR-010 §18 — evolution\n * cadence mismatch is a real argument against sharing). Each product\n * defines its own capability keys locally and reads them through this map.\n *\n * UX ONLY. This does not replace server-side authorization. Every consumer\n * MUST continue to handle 403 from the actual mutating/reading endpoint —\n * capability checks here are a consultive pre-check, exactly as already\n * documented in Portal's application.service.ts before this extraction.\n */\nexport type CapabilityMap = Readonly<Record<string, boolean>>;\n\nexport function hasCapability(capabilities: CapabilityMap | null | undefined, key: string): boolean {\n  return capabilities?.[key] === true;\n}\n","import { Directive, Input, TemplateRef, ViewContainerRef, inject } from '@angular/core';\nimport { CapabilityMap, hasCapability } from './capability.model';\n\n/**\n * Structural directive gating template content on a capability key from a\n * consumer-supplied CapabilityMap. Net-new (neither consumer had factored\n * their proven inline `@if (capabilities()?.x)` pattern into a directive),\n * but grounded in Portal's validated usage — see capability.model.ts.\n *\n * UX ONLY — see capability.model.ts. Hiding an element here does not\n * authorize anything; the backend re-validates on every mutating call.\n *\n * Usage: `<button *orxCapability=\"capabilities(); has: 'manageTenants'\">`\n */\n@Directive({\n  selector: '[orxCapability]',\n  standalone: true,\n})\nexport class CapabilityDirective {\n  private readonly templateRef = inject(TemplateRef<unknown>);\n  private readonly viewContainer = inject(ViewContainerRef);\n\n  private map: CapabilityMap | null | undefined;\n  private key: string | undefined;\n  private hasView = false;\n\n  @Input()\n  set orxCapability(map: CapabilityMap | null | undefined) {\n    this.map = map;\n    this.render();\n  }\n\n  @Input('orxCapabilityHas')\n  set has(key: string) {\n    this.key = key;\n    this.render();\n  }\n\n  private render(): void {\n    const shouldShow = !!this.key && hasCapability(this.map, this.key);\n    if (shouldShow && !this.hasView) {\n      this.viewContainer.createEmbeddedView(this.templateRef);\n      this.hasView = true;\n    } else if (!shouldShow && this.hasView) {\n      this.viewContainer.clear();\n      this.hasView = false;\n    }\n  }\n}\n","import { HttpErrorResponse } from '@angular/common/http';\r\n\r\n/**\r\n * Canonical error shape, generalized from Store's already-proven\r\n * ErroApresentavel/normalizarErroApi (the more mature of the two consumers'\r\n * error handling — Portal had no typed contract at all, just five\r\n * duplicated `error.error.code` reads). `message` is optional: Portal never\r\n * received a server-supplied message field, only `code`, and resolves\r\n * user-facing text locally — so this contract cannot require it.\r\n *\r\n * `correlation_id` (API-1, ADR-017 §3.3): added after confirming directly\r\n * from Orechio.Platform's `ProblemResponses.cs` that it IS present in the\r\n * JSON body of every error response the Platform host produces (not just\r\n * the `X-Correlation-ID` response header), and that Portal's BFF relays\r\n * that body byte-for-byte, unreshaped, for every typed endpoint. The\r\n * earlier NG-1-era absence was accurate for what it tested at the time but\r\n * incomplete relative to Platform's actual wire contract. Optional: not\r\n * every error path in every consumer emits this field today (Store's own\r\n * narrower auth/CSRF error shapes don't) — its absence must not be treated\r\n * as a parse failure.\r\n *\r\n * Domain-specific error codes (e.g. 'access.platform_only',\r\n * 'tenant.not_found', 'csrf.invalid') are NOT enumerated here — `code`\r\n * stays a plain string so any code survives normalization unmodified and\r\n * remains identifiable by callers, per Passo 28.\r\n */\r\nexport interface ProblemDetails {\r\n  code: string;\r\n  message?: string;\r\n  status: number;\r\n  required?: string;\r\n  correlationId?: string;\r\n}\r\n\r\n/**\r\n * Normalizes an HttpErrorResponse into ProblemDetails. Mirrors Store's\r\n * normalizarErroApi exactly, generalized to make `message` optional and to\r\n * accept an HttpErrorResponse without any consumer-specific fallback\r\n * message map (each product keeps its own code→message copy locally —\r\n * that's product-specific text, not shared infrastructure).\r\n */\r\nexport function normalizeProblemDetails(error: HttpErrorResponse): ProblemDetails {\r\n  const body = error.error as Record<string, unknown> | null | undefined;\r\n  const code = typeof body?.['code'] === 'string' ? (body['code'] as string) : `http.${error.status || 0}`;\r\n  const message = typeof body?.['message'] === 'string' ? (body['message'] as string) : undefined;\r\n  const required = typeof body?.['required'] === 'string' ? (body['required'] as string) : undefined;\r\n  // Wire field is `correlation_id` (snake_case, ADR-017 §3) — kept as-is on the wire,\r\n  // exposed as `correlationId` here per TS/Angular convention (same server-side pattern:\r\n  // OrechioProblemDetails.CorrelationId is [JsonPropertyName(\"correlation_id\")]).\r\n  const correlationId =\r\n    typeof body?.['correlation_id'] === 'string' ? (body['correlation_id'] as string) : undefined;\r\n\r\n  return {\r\n    code,\r\n    message,\r\n    status: error.status,\r\n    ...(required ? { required } : {}),\r\n    ...(correlationId ? { correlationId } : {}),\r\n  };\r\n}\r\n","/*\r\n * Public API Surface of @orechio/platform-angular\r\n */\r\n\r\nexport type { PlatformAngularConfig, PlatformAngularAuthPaths } from './lib/config/platform-angular-config';\r\nexport { PLATFORM_ANGULAR_CONFIG, providePlatformAngularConfig } from './lib/config/platform-angular-config';\r\n\r\nexport type { SessionUser } from './lib/session/session-user.model';\r\nexport { SessionStore } from './lib/session/session-store';\r\n\r\nexport { AuthClient } from './lib/auth/auth-client';\r\n\r\nexport type { BranchOption, BranchSelectionRequired } from './lib/auth/branch-selection.model';\r\nexport {\r\n  BRANCH_SELECTION_REQUIRED_CODE,\r\n  readBranchSelectionRequired,\r\n} from './lib/auth/branch-selection.model';\r\nexport { BranchSelector } from './lib/auth/branch-selector';\r\n\r\nexport { credentialsInterceptor, sessionExpiryInterceptor, providePlatformAngularHttp } from './lib/http/provide-platform-angular-http';\r\n\r\nexport type { CapabilityMap } from './lib/capabilities/capability.model';\r\nexport { hasCapability } from './lib/capabilities/capability.model';\r\nexport { CapabilityDirective } from './lib/capabilities/capability.directive';\r\n\r\nexport type { ProblemDetails } from './lib/problem-details/problem-details.model';\r\nexport { normalizeProblemDetails } from './lib/problem-details/problem-details.model';\r\n\r\nexport type { PagedResult } from './lib/pagination/paged-result.model';\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;MAgDa,uBAAuB,GAAG,IAAI,cAAc,CACvD,yBAAyB;AAGrB,SAAU,4BAA4B,CAAC,MAA6B,EAAA;IACxE,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,EAAE;AAC/D;;ACnDA;;;;;;;;;;AAUG;MAEU,YAAY,CAAA;IACN,KAAK,GAAG,MAAM,CAAe,IAAI;8EAAC;AAE1C,IAAA,IAAI,GAAyB,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE;IACpD,eAAe,GAAoB,QAAQ,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI;wFAAC;AAEjF,IAAA,GAAG,CAAC,IAAW,EAAA;AACb,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IACtB;IAEA,KAAK,GAAA;AACH,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;IACtB;uGAZW,YAAY,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAZ,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,YAAY,cADC,MAAM,EAAA,CAAA;;2FACnB,YAAY,EAAA,UAAA,EAAA,CAAA;kBADxB,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACPlC;;;;;;;;;;;;;;;;AAgBG;MAEU,UAAU,CAAA;AACJ,IAAA,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;AACzB,IAAA,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;AACxC,IAAA,OAAO,GAAG,MAAM,CAAC,YAAY,CAAwB;AAE9D,IAAA,GAAG,CAAC,IAAY,EAAA;QACtB,OAAO,CAAA,EAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAA,EAAG,IAAI,CAAA,CAAE;IAC3C;AAEQ,IAAA,MAAM,CAAC,IAAa,EAAA;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU;AAC9C,QAAA,QAAQ,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI;IAC9C;AAEA,IAAA,KAAK,CAAC,WAAoB,EAAA;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAChF,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;IACH;AAEA;;;;;;AAMG;IACH,WAAW,GAAA;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;YACvB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAC/D,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;QACH;AACA,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE;IACvB;AAEA;;;;;;;;;;;;;AAaG;AACH,IAAA,YAAY,CAAC,QAAgB,EAAA;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;QAC1C,IAAI,CAAC,IAAI,EAAE;YACT,OAAO,UAAU,CACf,MACE,IAAI,KAAK,CACP,2EAA2E;gBACzE,wDAAwD,CAC3D,CACJ;QACH;QAEA,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAC/D,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;IACH;IAEA,OAAO,GAAA;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CACzE,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAChC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtC;IACH;AAEA;;;;;;;AAOG;IACH,MAAM,GAAA;QACJ,OAAO,IAAI,CAAC;AACT,aAAA,IAAI,CAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;AAChD,aAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C;uGAzFW,UAAU,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAV,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,UAAU,cADG,MAAM,EAAA,CAAA;;2FACnB,UAAU,EAAA,UAAA,EAAA,CAAA;kBADtB,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACtBlC;;;;;;;AAOG;AACI,MAAM,8BAA8B,GAAG;AAoB9C;;;;;;;;;;;;;;;;;;;;AAoBG;AACG,SAAU,2BAA2B,CAAC,KAAc,EAAA;IACxD,IAAI,EAAE,KAAK,YAAY,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;AAAE,QAAA,OAAO,IAAI;AAE9E,IAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAEX;AACR,IAAA,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,8BAA8B;AAAE,QAAA,OAAO,IAAI;;;IAItE,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;AACxD,IAAA,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;AAAE,QAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE;IAE5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;AAAE,QAAA,OAAO,IAAI;IAC9C,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;AACtD;AAEA,SAAS,gBAAgB,CAAC,GAAY,EAAA;AACpC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;AAAE,QAAA,OAAO,EAAE;AAElC,IAAA,OAAO;AACJ,SAAA,GAAG,CAAC,CAAC,KAAK,KAAyB;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;AAAE,YAAA,OAAO,KAAK,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI;AAClE,QAAA,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AACtC,YAAA,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAyC;AAC9D,YAAA,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,EAAE;AAChC,gBAAA,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,GAAG,IAAI,EAAE;YAC7D;QACF;AACA,QAAA,OAAO,IAAI;AACb,IAAA,CAAC;SACA,MAAM,CAAC,CAAC,MAAM,KAA6B,MAAM,KAAK,IAAI,CAAC;AAChE;;AChFA;;;;;;;;;;;;;;;;;AAiBG;MAqCU,cAAc,CAAA;;IAEhB,QAAQ,GAAG,KAAK,CAAC,QAAQ;iFAA2B;;IAGpD,IAAI,GAAG,KAAK,CAAC,KAAK;6EAAC;;;;IAKnB,MAAM,GAAG,KAAK,CAAC,oBAAoB;+EAAC;IACpC,YAAY,GAAG,KAAK,CAAC,WAAW;qFAAC;IACjC,UAAU,GAAG,KAAK,CAAC,8CAA8C;mFAAC;;IAGlE,QAAQ,GAAG,MAAM,EAAU;IAE1B,MAAM,GAAkB,IAAI;AAE5B,IAAA,MAAM,CAAC,EAAU,EAAA;AACzB,QAAA,IAAI,CAAC,MAAM,GAAG,EAAE;IAClB;IAEU,OAAO,GAAA;QACf,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAClD;AAEA;;;;;;;;;;AAUG;IACO,KAAK,CAAC,MAAoB,EAAE,KAAa,EAAA;AACjD,QAAA,OAAO,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAA,OAAA,EAAU,KAAK,GAAG,CAAC,EAAE;IAC1D;;AAGU,IAAA,QAAQ,CAAC,MAAoB,EAAA;QACrC,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9B;uGA7CW,cAAc,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAAd,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,cAAc,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,yBAAA,EAAA,MAAA,EAAA,EAAA,QAAA,EAAA,EAAA,iBAAA,EAAA,UAAA,EAAA,UAAA,EAAA,UAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,IAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,IAAA,EAAA,EAAA,iBAAA,EAAA,MAAA,EAAA,UAAA,EAAA,MAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,MAAA,EAAA,EAAA,iBAAA,EAAA,QAAA,EAAA,UAAA,EAAA,QAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,YAAA,EAAA,EAAA,iBAAA,EAAA,cAAA,EAAA,UAAA,EAAA,cAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,UAAA,EAAA,EAAA,iBAAA,EAAA,YAAA,EAAA,UAAA,EAAA,YAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,EAAA,OAAA,EAAA,EAAA,QAAA,EAAA,UAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,QAAA,EAjCf,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BT,EAAA,CAAA,EAAA,QAAA,EAAA,IAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,MAAA,EAAA,CAAA;;2FAEU,cAAc,EAAA,UAAA,EAAA,CAAA;kBApC1B,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,yBAAyB;oBACnC,eAAe,EAAE,uBAAuB,CAAC,MAAM;AAC/C,oBAAA,QAAQ,EAAE,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BT,EAAA,CAAA;AACF,iBAAA;;;AChDD;;;;;;;;;;;;;;;;;;;AAmBG;MAEU,kBAAkB,CAAA;AACZ,IAAA,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;AAC/B,IAAA,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC;AAC9B,IAAA,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AACvB,IAAA,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;IAEjD,SAAS,GAAmC,IAAI;AAExD;;;;;;;;;;;;;;;;;;;;;;;AAuBG;IACH,OAAO,GAAA;AACL,QAAA,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,IAAI,CAAC,SAAS;QACvB;AAEA,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,IAAI,CAC7C,UAAU,CAAC,CAAC,KAAc,KAAI;AAC5B,YAAA,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;AACpB,YAAA,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC;AAClE,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;AAChC,QAAA,CAAC,CAAC,EACF,QAAQ,CAAC,MAAK;AACZ,YAAA,IAAI,CAAC,SAAS,GAAG,IAAI;QACvB,CAAC,CAAC,EACF,KAAK,CAAC;YACJ,SAAS,EAAE,MAAM,IAAI,aAAa,CAAc,CAAC,CAAC;AAClD,YAAA,YAAY,EAAE,KAAK;AACnB,YAAA,eAAe,EAAE,KAAK;AACtB,YAAA,mBAAmB,EAAE,KAAK;AAC3B,SAAA,CAAC,CACH;QAED,OAAO,IAAI,CAAC,SAAS;IACvB;uGAvDW,kBAAkB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAlB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,kBAAkB,cADL,MAAM,EAAA,CAAA;;2FACnB,kBAAkB,EAAA,UAAA,EAAA,CAAA;kBAD9B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACZlC,SAAS,YAAY,CAAC,GAAW,EAAE,UAAkB,EAAA;AACnD,IAAA,OAAO,GAAG,KAAK,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA,EAAG,UAAU,CAAA,CAAA,CAAG,CAAC;AAC/D;AAEA,SAAS,cAAc,CAAC,GAAW,EAAE,UAAkB,EAAE,IAA8B,EAAA;AACrF,IAAA,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CACvE,CAAC,CAAC,KAAkB,CAAC,CAAC,CAAC,CACxB;AACD,IAAA,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAA,EAAG,UAAU,GAAG,CAAC,CAAA,CAAE,CAAC;AAC3D;AAEA;;;;;;;;AAQG;MACU,sBAAsB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;IACrE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,uBAAuB,CAAC;IACtD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE;AACtC,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB;AACA,IAAA,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD;AAEA;;;;;;;;;;;;;;;;;;;;;AAqBG;MACU,wBAAwB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;AACvE,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;AAC9C,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC;AACpC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AAC7B,IAAA,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC;IAErD,IACE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;AACzC,QAAA,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EACvD;AACA,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB;AAEA,IAAA,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CACnB,UAAU,CAAC,CAAC,KAAc,KAAI;AAC5B,QAAA,IAAI,EAAE,KAAK,YAAY,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE;AACjE,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC;AAEA,QAAA,IAAI,MAAM,CAAC,oBAAoB,KAAK,uBAAuB,EAAE;YAC3D,OAAO,CAAC,KAAK,EAAE;YACf,KAAK,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC;AACxD,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC;AAEA,QAAA,OAAO,kBAAkB,CAAC,OAAO,EAAE,CAAC,IAAI,CACtC,SAAS,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;;;;;AAK1B,QAAA,UAAU,CAAC,MAAM,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAC1C;IACH,CAAC,CAAC,CACH;AACH;AAEA;;;;;;;;AAQG;AACG,SAAU,0BAA0B,CAAC,GAAG,aAA6C,EAAA;IACzF,OAAO,iBAAiB,CACtB,qBAAqB,CAAC;AACpB,QAAA,UAAU,EAAE,YAAY;AACxB,QAAA,UAAU,EAAE,cAAc;AAC3B,KAAA,CAAC,EACF,gBAAgB,CAAC,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC,EACpE,GAAG,aAAa,CACjB;AACH;;ACvGM,SAAU,aAAa,CAAC,YAA8C,EAAE,GAAW,EAAA;AACvF,IAAA,OAAO,YAAY,GAAG,GAAG,CAAC,KAAK,IAAI;AACrC;;ACjBA;;;;;;;;;;AAUG;MAKU,mBAAmB,CAAA;AACb,IAAA,WAAW,GAAG,MAAM,EAAC,WAAoB,EAAC;AAC1C,IAAA,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAEjD,IAAA,GAAG;AACH,IAAA,GAAG;IACH,OAAO,GAAG,KAAK;IAEvB,IACI,aAAa,CAAC,GAAqC,EAAA;AACrD,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;QACd,IAAI,CAAC,MAAM,EAAE;IACf;IAEA,IACI,GAAG,CAAC,GAAW,EAAA;AACjB,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;QACd,IAAI,CAAC,MAAM,EAAE;IACf;IAEQ,MAAM,GAAA;AACZ,QAAA,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AAClE,QAAA,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAC/B,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;AACvD,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI;QACrB;AAAO,aAAA,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE;AACtC,YAAA,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE;AAC1B,YAAA,IAAI,CAAC,OAAO,GAAG,KAAK;QACtB;IACF;uGA7BW,mBAAmB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;2FAAnB,mBAAmB,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,iBAAA,EAAA,MAAA,EAAA,EAAA,aAAA,EAAA,eAAA,EAAA,GAAA,EAAA,CAAA,kBAAA,EAAA,KAAA,CAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,CAAA;;2FAAnB,mBAAmB,EAAA,UAAA,EAAA,CAAA;kBAJ/B,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,iBAAiB;AAC3B,oBAAA,UAAU,EAAE,IAAI;AACjB,iBAAA;;sBASE;;sBAMA,KAAK;uBAAC,kBAAkB;;;ACE3B;;;;;;AAMG;AACG,SAAU,uBAAuB,CAAC,KAAwB,EAAA;AAC9D,IAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAAmD;IACtE,MAAM,IAAI,GAAG,OAAO,IAAI,GAAG,MAAM,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,MAAM,CAAY,GAAG,CAAA,KAAA,EAAQ,KAAK,CAAC,MAAM,IAAI,CAAC,CAAA,CAAE;IACxG,MAAM,OAAO,GAAG,OAAO,IAAI,GAAG,SAAS,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,SAAS,CAAY,GAAG,SAAS;IAC/F,MAAM,QAAQ,GAAG,OAAO,IAAI,GAAG,UAAU,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,UAAU,CAAY,GAAG,SAAS;;;;IAIlG,MAAM,aAAa,GACjB,OAAO,IAAI,GAAG,gBAAgB,CAAC,KAAK,QAAQ,GAAI,IAAI,CAAC,gBAAgB,CAAY,GAAG,SAAS;IAE/F,OAAO;QACL,IAAI;QACJ,OAAO;QACP,MAAM,EAAE,KAAK,CAAC,MAAM;AACpB,QAAA,IAAI,QAAQ,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AACjC,QAAA,IAAI,aAAa,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;KAC5C;AACH;;AC3DA;;AAEG;;ACFH;;AAEG;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orechio/platform-angular",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "peerDependencies": {
     "@angular/common": "^22.1.0",
     "@angular/core": "^22.1.0",

package/types/orechio-platform-angular.d.ts

@@ -99,8 +99,10 @@ declare class SessionStore<TUser extends SessionUser = SessionUser> {
  * class contains zero hardcoded URLs, so it works unmodified against
  * Portal's /api/auth/{login,me,refresh,logout} (envelope-wrapped
  * `{ user: UserInfo }` responses, unwrapped via config.auth.unwrapUser) and
- * Store's /api/auth/{login,refresh,logout} (no `me`, unwrapped responses)
- * alike.
+ * the cookie-session hosts' /api/auth/{login,session,refresh,logout,select-branch}
+ * (unwrapped responses; `session` is configured as `me`) alike. Those hosts are
+ * Store, Moveis and any host mounting Orechio.Platform.Bff.Account 0.3.0
+ * (ADR-022), which serves exactly this contract.
  */
 declare class AuthClient<TUser extends SessionUser = SessionUser> {
     private readonly http;
@@ -111,8 +113,10 @@ declare class AuthClient<TUser extends SessionUser = SessionUser> {
     login(credentials: unknown): Observable<TUser>;
     /**
      * Reads the current session. Uses the configured `me` endpoint (GET) when
-     * present (Portal); falls back to `refresh` (POST) when it isn't (Store,
-     * which has no dedicated session-read endpoint and bootstraps via refresh).
+     * present (Portal; Store and Moveis via `/api/auth/session`; and the
+     * Orechio.Platform.Bff.Account 0.3.0 session routes, ADR-022) — a read that
+     * neither rotates the session nor its cookies. Falls back to `refresh` (POST)
+     * only for a host that configures no `me`, which then bootstraps via refresh.
      */
     initSession(): Observable<TUser>;
     /**

package/fesm2022/orechio-platform-angular-billing-billing-format-0nlddK-x.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"orechio-platform-angular-billing-billing-format-0nlddK-x.mjs","sources":["../../../projects/platform-angular/billing/src/billing-client.ts","../../../projects/platform-angular/billing/src/billing-errors.ts","../../../projects/platform-angular/billing/src/billing-error.component.ts","../../../projects/platform-angular/billing/src/billing-format.ts"],"sourcesContent":["import { HttpClient, HttpErrorResponse, HttpParams } from '@angular/common/http';\r\nimport { Injectable, inject } from '@angular/core';\r\nimport { Observable, catchError, throwError } from 'rxjs';\r\nimport { ProblemDetails, normalizeProblemDetails } from '@orechio/platform-angular';\r\nimport { ORECHIO_BILLING_CONFIG } from './billing-config';\r\nimport {\r\n  BillingAddressRequest,\r\n  BillingContactRequest,\r\n  BillingCycle,\r\n  BillingProfile,\r\n  CheckoutResult,\r\n  CreateBillingProfileRequest,\r\n  InvoiceDetail,\r\n  InvoicesPage,\r\n  Plan,\r\n  PricingPreview,\r\n  RefreshedPayment,\r\n  Subscription,\r\n} from './billing-models';\r\n\r\n/**\r\n * O cliente do BFF de cobrança (`Orechio.Platform.Bff.Account` 0.2.0,\r\n * `MapOrechioBillingEndpoints`). Same-origin, só com o BFF do host — mesmo desenho do\r\n * `AccountClient`, e o erro sai pelo mesmo `normalizeProblemDetails`.\r\n */\r\n@Injectable({ providedIn: 'root' })\r\nexport class BillingClient {\r\n  private readonly http = inject(HttpClient);\r\n  private readonly config = inject(ORECHIO_BILLING_CONFIG);\r\n\r\n  getSubscription(): Observable<Subscription> {\r\n    return this.falha(this.http.get<Subscription>(this.url('/subscription')));\r\n  }\r\n\r\n  getProfile(): Observable<BillingProfile> {\r\n    return this.falha(this.http.get<BillingProfile>(this.url('/profile')));\r\n  }\r\n\r\n  createProfile(request: CreateBillingProfileRequest): Observable<{ id: string }> {\r\n    return this.falha(this.http.post<{ id: string }>(this.url('/profile'), request));\r\n  }\r\n\r\n  updateProfileContact(request: BillingContactRequest): Observable<void> {\r\n    return this.falha(this.http.patch<void>(this.url('/profile/contact'), request));\r\n  }\r\n\r\n  updateProfileAddress(request: BillingAddressRequest): Observable<void> {\r\n    return this.falha(this.http.patch<void>(this.url('/profile/address'), request));\r\n  }\r\n\r\n  listPlans(): Observable<Plan[]> {\r\n    return this.falha(this.http.get<Plan[]>(this.url('/plans')));\r\n  }\r\n\r\n  previewPricing(planId: string, branchCount: number, cycle: BillingCycle): Observable<PricingPreview> {\r\n    const params = new HttpParams({ fromObject: { planId, branchCount, cycle } });\r\n    return this.falha(this.http.get<PricingPreview>(this.url('/pricing/preview'), { params }));\r\n  }\r\n\r\n  /**\r\n   * Checkout PIX. O corpo é o `CheckoutRequest` da Platform (`cycle`, `method`), sem\r\n   * `applicationId`: com o token de produto, a Platform usa o app do token.\r\n   */\r\n  checkout(cycle: BillingCycle): Observable<CheckoutResult> {\r\n    return this.falha(this.http.post<CheckoutResult>(this.url('/checkout'), { cycle, method: 'pix' }));\r\n  }\r\n\r\n  listInvoices(page = 1, pageSize = 20): Observable<InvoicesPage> {\r\n    const params = new HttpParams({ fromObject: { page, pageSize } });\r\n    return this.falha(this.http.get<InvoicesPage>(this.url('/invoices'), { params }));\r\n  }\r\n\r\n  getInvoice(id: string): Observable<InvoiceDetail> {\r\n    return this.falha(this.http.get<InvoiceDetail>(this.url(`/invoices/${encodeURIComponent(id)}`)));\r\n  }\r\n\r\n  refreshInvoicePix(id: string): Observable<RefreshedPayment> {\r\n    return this.falha(this.http.post<RefreshedPayment>(this.url(`/invoices/${encodeURIComponent(id)}/refresh`), null));\r\n  }\r\n\r\n  private url(path: string): string {\r\n    return `${this.config.basePath}${path}`;\r\n  }\r\n\r\n  private falha<T>(chamada: Observable<T>): Observable<T> {\r\n    return chamada.pipe(\r\n      catchError((error: HttpErrorResponse) =>\r\n        throwError((): ProblemDetails => normalizeProblemDetails(error)),\r\n      ),\r\n    );\r\n  }\r\n}\r\n","import { ProblemDetails } from '@orechio/platform-angular';\r\n\r\nexport interface MensagemDeErro {\r\n  texto: string;\r\n  /** Só para code desconhecido: é o que o suporte cruza com o log dos dois lados. */\r\n  correlationId?: string;\r\n}\r\n\r\nconst ENDERECO_INCOMPLETO = 'Preencha o endereço completo.';\r\nconst DOCUMENTO_INVALIDO = 'CPF ou CNPJ inválido.';\r\nconst DOCUMENTO_TRAVADO =\r\n  'O documento e o nome já foram usados em uma cobrança e não podem mais ser alterados.';\r\nconst PLANO_INDISPONIVEL = 'O plano da assinatura não está disponível. Fale com o suporte.';\r\nconst SO_O_TITULAR = 'Só o titular da conta pode ver e pagar a cobrança.';\r\n\r\n/**\r\n * Os codes que as rotas de cobrança da Platform e do BFF emitem de fato\r\n * (`Commerce*Endpoints`, handlers de `Billing/`, value objects de perfil,\r\n * `PermissionAuthorization`, `Bff.Account`).\r\n */\r\nconst MENSAGENS: Record<string, string> = {\r\n  'session.missing': 'Sua sessão expirou. Entre novamente para continuar.',\r\n  'platform.unavailable':\r\n    'O serviço de cobrança está indisponível no momento. Tente novamente em instantes.',\r\n  'http.0': 'Sem conexão com o servidor. Verifique sua internet e tente novamente.',\r\n  rate_limit_exceeded: 'Muitas tentativas. Aguarde alguns minutos e tente novamente.',\r\n\r\n  'access.platform_only': SO_O_TITULAR,\r\n  'permission.denied': SO_O_TITULAR,\r\n\r\n  'subscription.not_found': 'Nenhuma assinatura encontrada para esta conta.',\r\n\r\n  'billing_profile.not_found': 'Cadastre os dados de cobrança antes de pagar.',\r\n  'billing_profile.already_exists': 'Os dados de cobrança já estão cadastrados.',\r\n  'billing_profile.legal_name_required': 'Informe o nome completo ou a razão social.',\r\n  'billing_profile.billing_email_required': 'Informe o e-mail de cobrança.',\r\n  'billing_profile.billing_email_invalid': 'Informe um e-mail de cobrança válido.',\r\n  'billing_profile.mobile_phone_too_long': 'O celular informado é longo demais.',\r\n  'billing_profile.document_type_locked': DOCUMENTO_TRAVADO,\r\n  'billing_profile.document_number_locked': DOCUMENTO_TRAVADO,\r\n  'billing_profile.legal_name_locked': DOCUMENTO_TRAVADO,\r\n  'tax_document.value_required': 'Informe o CPF ou o CNPJ.',\r\n  'tax_document.length_invalid': DOCUMENTO_INVALIDO,\r\n  'tax_document.checksum_invalid': DOCUMENTO_INVALIDO,\r\n  'address.postal_code_invalid': 'CEP inválido.',\r\n  'address.state_invalid': 'UF inválida. Use a sigla do estado, como SP.',\r\n  'address.street_required': ENDERECO_INCOMPLETO,\r\n  'address.number_required': ENDERECO_INCOMPLETO,\r\n  'address.neighborhood_required': ENDERECO_INCOMPLETO,\r\n  'address.city_required': ENDERECO_INCOMPLETO,\r\n\r\n  'checkout.subscription_not_eligible':\r\n    'Não há pagamento de assinatura a fazer agora. Veja as faturas em aberto.',\r\n  'checkout.open_invoice_exists':\r\n    'Já existe uma fatura em aberto. Pague a fatura em aberto em vez de gerar uma nova cobrança.',\r\n  'checkout.pending_other_method':\r\n    'Já existe uma cobrança em aberto por outro meio de pagamento. Veja as faturas.',\r\n  'checkout.credit_card_not_supported': 'Pagamento por cartão ainda não está disponível.',\r\n  'checkout.invoice_in_inconsistent_state':\r\n    'A cobrança anterior ficou incompleta. Tente novamente em alguns minutos.',\r\n  'billing.cycle_invalid': 'Escolha um ciclo de cobrança válido.',\r\n  'pricing_preview.cycle_invalid': 'Escolha um ciclo de cobrança válido.',\r\n  'plan.not_found': PLANO_INDISPONIVEL,\r\n  'plan.not_available': PLANO_INDISPONIVEL,\r\n  'subscription.plan_inactive': PLANO_INDISPONIVEL,\r\n\r\n  'invoice.not_found': 'Fatura não encontrada.',\r\n  'invoice.payment_unavailable':\r\n    'Esta cobrança não está mais disponível para pagamento. Fale com o suporte.',\r\n  'invoice.refresh_not_allowed': 'Esta fatura não está mais em aberto.',\r\n  'invoice.refresh_pix_only': 'Só é possível gerar QR para faturas PIX.',\r\n  'invoice.no_external_payment':\r\n    'Esta fatura ainda não tem cobrança gerada. Tente novamente em alguns minutos.',\r\n};\r\n\r\nconst GENERICA =\r\n  'Não foi possível concluir a operação. Tente novamente; se continuar, informe o código de atendimento ao suporte.';\r\n\r\n/**\r\n * O texto de tela para um erro do BFF, escolhido por `code`. O corpo do erro (`message`) nunca\r\n * vira texto: ele é escrito para log, não para o cliente.\r\n */\r\nexport function mensagemDeErro(problema: ProblemDetails): MensagemDeErro {\r\n  const conhecida = MENSAGENS[problema.code];\r\n  if (conhecida) return { texto: conhecida };\r\n\r\n  return problema.correlationId\r\n    ? { texto: GENERICA, correlationId: problema.correlationId }\r\n    : { texto: GENERICA };\r\n}\r\n","import { ChangeDetectionStrategy, Component, computed, input } from '@angular/core';\r\nimport { ProblemDetails } from '@orechio/platform-angular';\r\nimport { mensagemDeErro } from './billing-errors';\r\n\r\n@Component({\r\n  selector: 'orechio-billing-error',\r\n  standalone: true,\r\n  changeDetection: ChangeDetectionStrategy.OnPush,\r\n  template: `\r\n    <div class=\"orechio-billing__error\" role=\"alert\">\r\n      <p>{{ mensagem().texto }}</p>\r\n      @if (mensagem().correlationId; as id) {\r\n        <p>Código de atendimento: <code>{{ id }}</code></p>\r\n      }\r\n    </div>\r\n  `,\r\n  styles: `.orechio-billing__error { color: var(--orechio-color-danger, #b00020); }`,\r\n})\r\nexport class BillingErrorComponent {\r\n  readonly problema = input.required<ProblemDetails>();\r\n  protected readonly mensagem = computed(() => mensagemDeErro(this.problema()));\r\n}\r\n","import { InvoiceStatus } from './billing-models';\r\n\r\nconst MOEDA = new Intl.NumberFormat('pt-BR', { style: 'currency', currency: 'BRL' });\r\n\r\nexport function moeda(valor: number): string {\r\n  return MOEDA.format(valor);\r\n}\r\n\r\nexport function data(iso: string | null | undefined): string {\r\n  return iso ? new Date(iso).toLocaleDateString('pt-BR') : '';\r\n}\r\n\r\nexport const STATUS_DA_FATURA: Record<InvoiceStatus, string> = {\r\n  Created: 'Em emissão',\r\n  Pending: 'Em aberto',\r\n  Paid: 'Paga',\r\n  Overdue: 'Vencida',\r\n  Refunded: 'Estornada',\r\n  Cancelled: 'Cancelada',\r\n};\r\n\r\nexport const ESTILO_BASE = `\r\n  .orechio-billing {\r\n    display: flex;\r\n    flex-direction: column;\r\n    gap: var(--orechio-space-3, 0.75rem);\r\n    max-width: 40rem;\r\n    margin: 0 auto;\r\n    padding: var(--orechio-space-6, 1.5rem);\r\n    color: var(--orechio-color-text, inherit);\r\n    font-family: var(--orechio-font-body, inherit);\r\n  }\r\n  .orechio-billing form { display: flex; flex-direction: column; gap: var(--orechio-space-2, 0.5rem); }\r\n  .orechio-billing__muted { color: var(--orechio-color-text-muted, #666); }\r\n  .orechio-billing__error { color: var(--orechio-color-danger, #b00020); }\r\n`;\r\n"],"names":[],"mappings":";;;;;;;AAoBA;;;;AAIG;MAEU,aAAa,CAAA;AACP,IAAA,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;AACzB,IAAA,MAAM,GAAG,MAAM,CAAC,sBAAsB,CAAC;IAExD,eAAe,GAAA;AACb,QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAe,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;IAC3E;IAEA,UAAU,GAAA;AACR,QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACxE;AAEA,IAAA,aAAa,CAAC,OAAoC,EAAA;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAiB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;IAClF;AAEA,IAAA,oBAAoB,CAAC,OAA8B,EAAA;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC,CAAC;IACjF;AAEA,IAAA,oBAAoB,CAAC,OAA8B,EAAA;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC,CAAC;IACjF;IAEA,SAAS,GAAA;AACP,QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAS,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D;AAEA,IAAA,cAAc,CAAC,MAAc,EAAE,WAAmB,EAAE,KAAmB,EAAA;AACrE,QAAA,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5F;AAEA;;;AAGG;AACH,IAAA,QAAQ,CAAC,KAAmB,EAAA;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAiB,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACpG;AAEA,IAAA,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,QAAQ,GAAG,EAAE,EAAA;AAClC,QAAA,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAe,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF;AAEA,IAAA,UAAU,CAAC,EAAU,EAAA;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAgB,IAAI,CAAC,GAAG,CAAC,CAAA,UAAA,EAAa,kBAAkB,CAAC,EAAE,CAAC,CAAA,CAAE,CAAC,CAAC,CAAC;IAClG;AAEA,IAAA,iBAAiB,CAAC,EAAU,EAAA;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAmB,IAAI,CAAC,GAAG,CAAC,CAAA,UAAA,EAAa,kBAAkB,CAAC,EAAE,CAAC,CAAA,QAAA,CAAU,CAAC,EAAE,IAAI,CAAC,CAAC;IACpH;AAEQ,IAAA,GAAG,CAAC,IAAY,EAAA;QACtB,OAAO,CAAA,EAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAA,EAAG,IAAI,CAAA,CAAE;IACzC;AAEQ,IAAA,KAAK,CAAI,OAAsB,EAAA;QACrC,OAAO,OAAO,CAAC,IAAI,CACjB,UAAU,CAAC,CAAC,KAAwB,KAClC,UAAU,CAAC,MAAsB,uBAAuB,CAAC,KAAK,CAAC,CAAC,CACjE,CACF;IACH;uGAhEW,aAAa,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAb,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,aAAa,cADA,MAAM,EAAA,CAAA;;2FACnB,aAAa,EAAA,UAAA,EAAA,CAAA;kBADzB,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACjBlC,MAAM,mBAAmB,GAAG,+BAA+B;AAC3D,MAAM,kBAAkB,GAAG,uBAAuB;AAClD,MAAM,iBAAiB,GACrB,sFAAsF;AACxF,MAAM,kBAAkB,GAAG,gEAAgE;AAC3F,MAAM,YAAY,GAAG,oDAAoD;AAEzE;;;;AAIG;AACH,MAAM,SAAS,GAA2B;AACxC,IAAA,iBAAiB,EAAE,qDAAqD;AACxE,IAAA,sBAAsB,EACpB,mFAAmF;AACrF,IAAA,QAAQ,EAAE,uEAAuE;AACjF,IAAA,mBAAmB,EAAE,8DAA8D;AAEnF,IAAA,sBAAsB,EAAE,YAAY;AACpC,IAAA,mBAAmB,EAAE,YAAY;AAEjC,IAAA,wBAAwB,EAAE,gDAAgD;AAE1E,IAAA,2BAA2B,EAAE,+CAA+C;AAC5E,IAAA,gCAAgC,EAAE,4CAA4C;AAC9E,IAAA,qCAAqC,EAAE,4CAA4C;AACnF,IAAA,wCAAwC,EAAE,+BAA+B;AACzE,IAAA,uCAAuC,EAAE,uCAAuC;AAChF,IAAA,uCAAuC,EAAE,qCAAqC;AAC9E,IAAA,sCAAsC,EAAE,iBAAiB;AACzD,IAAA,wCAAwC,EAAE,iBAAiB;AAC3D,IAAA,mCAAmC,EAAE,iBAAiB;AACtD,IAAA,6BAA6B,EAAE,0BAA0B;AACzD,IAAA,6BAA6B,EAAE,kBAAkB;AACjD,IAAA,+BAA+B,EAAE,kBAAkB;AACnD,IAAA,6BAA6B,EAAE,eAAe;AAC9C,IAAA,uBAAuB,EAAE,8CAA8C;AACvE,IAAA,yBAAyB,EAAE,mBAAmB;AAC9C,IAAA,yBAAyB,EAAE,mBAAmB;AAC9C,IAAA,+BAA+B,EAAE,mBAAmB;AACpD,IAAA,uBAAuB,EAAE,mBAAmB;AAE5C,IAAA,oCAAoC,EAClC,0EAA0E;AAC5E,IAAA,8BAA8B,EAC5B,6FAA6F;AAC/F,IAAA,+BAA+B,EAC7B,gFAAgF;AAClF,IAAA,oCAAoC,EAAE,iDAAiD;AACvF,IAAA,wCAAwC,EACtC,0EAA0E;AAC5E,IAAA,uBAAuB,EAAE,sCAAsC;AAC/D,IAAA,+BAA+B,EAAE,sCAAsC;AACvE,IAAA,gBAAgB,EAAE,kBAAkB;AACpC,IAAA,oBAAoB,EAAE,kBAAkB;AACxC,IAAA,4BAA4B,EAAE,kBAAkB;AAEhD,IAAA,mBAAmB,EAAE,wBAAwB;AAC7C,IAAA,6BAA6B,EAC3B,4EAA4E;AAC9E,IAAA,6BAA6B,EAAE,sCAAsC;AACrE,IAAA,0BAA0B,EAAE,0CAA0C;AACtE,IAAA,6BAA6B,EAC3B,+EAA+E;CAClF;AAED,MAAM,QAAQ,GACZ,kHAAkH;AAEpH;;;AAGG;AACG,SAAU,cAAc,CAAC,QAAwB,EAAA;IACrD,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC1C,IAAA,IAAI,SAAS;AAAE,QAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE;IAE1C,OAAO,QAAQ,CAAC;UACZ,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa;AAC1D,UAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;AACzB;;MCvEa,qBAAqB,CAAA;IACvB,QAAQ,GAAG,KAAK,CAAC,QAAQ;iFAAkB;AACjC,IAAA,QAAQ,GAAG,QAAQ,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;iFAAC;uGAFlE,qBAAqB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAArB,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,qBAAqB,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,uBAAA,EAAA,MAAA,EAAA,EAAA,QAAA,EAAA,EAAA,iBAAA,EAAA,UAAA,EAAA,UAAA,EAAA,UAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,IAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,QAAA,EAVtB,CAAA;;;;;;;AAOT,EAAA,CAAA,EAAA,QAAA,EAAA,IAAA,EAAA,MAAA,EAAA,CAAA,uEAAA,CAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,MAAA,EAAA,CAAA;;2FAGU,qBAAqB,EAAA,UAAA,EAAA,CAAA;kBAdjC,SAAS;AACE,YAAA,IAAA,EAAA,CAAA,EAAA,QAAA,EAAA,uBAAuB,cACrB,IAAI,EAAA,eAAA,EACC,uBAAuB,CAAC,MAAM,EAAA,QAAA,EACrC,CAAA;;;;;;;AAOT,EAAA,CAAA,EAAA,MAAA,EAAA,CAAA,uEAAA,CAAA,EAAA;;;ACbH,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAE9E,SAAU,KAAK,CAAC,KAAa,EAAA;AACjC,IAAA,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;AAC5B;AAEM,SAAU,IAAI,CAAC,GAA8B,EAAA;AACjD,IAAA,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE;AAC7D;AAEO,MAAM,gBAAgB,GAAkC;AAC7D,IAAA,OAAO,EAAE,YAAY;AACrB,IAAA,OAAO,EAAE,WAAW;AACpB,IAAA,IAAI,EAAE,MAAM;AACZ,IAAA,OAAO,EAAE,SAAS;AAClB,IAAA,QAAQ,EAAE,WAAW;AACrB,IAAA,SAAS,EAAE,WAAW;;AAGjB,MAAM,WAAW,GAAG,CAAA;;;;;;;;;;;;;;CAc1B;;;;"}

package/fesm2022/orechio-platform-angular-billing-pix-panel.component-B608dQmc.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"orechio-platform-angular-billing-pix-panel.component-B608dQmc.mjs","sources":["../../../projects/platform-angular/billing/src/pix-panel.component.ts"],"sourcesContent":["import { ChangeDetectionStrategy, Component, input, signal } from '@angular/core';\r\nimport { PixData } from './billing-models';\r\n\r\n/**\r\n * O QR e o copia-e-cola, como a Platform os devolveu. O `encodedImage` é PNG em base64\r\n * (ASAAS); o `payload` é o código que o app do banco aceita colado.\r\n */\r\n@Component({\r\n  selector: 'orechio-billing-pix',\r\n  standalone: true,\r\n  changeDetection: ChangeDetectionStrategy.OnPush,\r\n  template: `\r\n    <div class=\"orechio-billing-pix\">\r\n      <img data-qr [src]=\"'data:image/png;base64,' + pix().encodedImage\" alt=\"QR Code PIX\" width=\"240\" height=\"240\" />\r\n\r\n      <p>Ou copie o código PIX e cole no app do seu banco:</p>\r\n      <code class=\"orechio-billing-pix__codigo\">{{ pix().payload }}</code>\r\n      <button type=\"button\" data-copiar (click)=\"copiar()\">\r\n        {{ copiado() ? 'Código copiado' : 'Copiar código' }}\r\n      </button>\r\n      @if (semAreaDeTransferencia()) {\r\n        <p class=\"orechio-billing-pix__aviso\">Selecione o código acima e copie manualmente.</p>\r\n      }\r\n\r\n      @if (pix().expirationDate; as validade) {\r\n        <p class=\"orechio-billing-pix__aviso\">Válido até {{ validade }}.</p>\r\n      }\r\n\r\n      @if (invoiceUrl(); as url) {\r\n        <a data-invoice-url [href]=\"url\" target=\"_blank\" rel=\"noopener noreferrer\">\r\n          Pagar pelo site do ASAAS\r\n        </a>\r\n      }\r\n    </div>\r\n  `,\r\n  styles: `\r\n    .orechio-billing-pix { display: flex; flex-direction: column; align-items: flex-start; gap: var(--orechio-space-2, 0.5rem); }\r\n    .orechio-billing-pix__codigo { word-break: break-all; }\r\n    .orechio-billing-pix__aviso { color: var(--orechio-color-text-muted, #666); }\r\n  `,\r\n})\r\nexport class PixPanelComponent {\r\n  readonly pix = input.required<PixData>();\r\n  /** Página de pagamento do ASAAS, aberta em nova aba; sem ela, o link não aparece. */\r\n  readonly invoiceUrl = input<string | null | undefined>(null);\r\n\r\n  protected readonly copiado = signal(false);\r\n  protected readonly semAreaDeTransferencia = signal(false);\r\n\r\n  protected copiar(): void {\r\n    const areaDeTransferencia = globalThis.navigator?.clipboard;\r\n    if (!areaDeTransferencia) {\r\n      this.semAreaDeTransferencia.set(true);\r\n      return;\r\n    }\r\n\r\n    areaDeTransferencia.writeText(this.pix().payload).then(\r\n      () => this.copiado.set(true),\r\n      () => this.semAreaDeTransferencia.set(true),\r\n    );\r\n  }\r\n}\r\n"],"names":[],"mappings":";;;AAGA;;;AAGG;MAmCU,iBAAiB,CAAA;IACnB,GAAG,GAAG,KAAK,CAAC,QAAQ;4EAAW;;IAE/B,UAAU,GAAG,KAAK,CAA4B,IAAI;mFAAC;IAEzC,OAAO,GAAG,MAAM,CAAC,KAAK;gFAAC;IACvB,sBAAsB,GAAG,MAAM,CAAC,KAAK;+FAAC;IAE/C,MAAM,GAAA;AACd,QAAA,MAAM,mBAAmB,GAAG,UAAU,CAAC,SAAS,EAAE,SAAS;QAC3D,IAAI,CAAC,mBAAmB,EAAE;AACxB,YAAA,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC;YACrC;QACF;AAEA,QAAA,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CACpD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAC5B,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAC5C;IACH;uGAnBW,iBAAiB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAAjB,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,iBAAiB,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,qBAAA,EAAA,MAAA,EAAA,EAAA,GAAA,EAAA,EAAA,iBAAA,EAAA,KAAA,EAAA,UAAA,EAAA,KAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,IAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,UAAA,EAAA,EAAA,iBAAA,EAAA,YAAA,EAAA,UAAA,EAAA,YAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,QAAA,EA9BlB,CAAA;;;;;;;;;;;;;;;;;;;;;;;AAuBT,EAAA,CAAA,EAAA,QAAA,EAAA,IAAA,EAAA,MAAA,EAAA,CAAA,+OAAA,CAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,MAAA,EAAA,CAAA;;2FAOU,iBAAiB,EAAA,UAAA,EAAA,CAAA;kBAlC7B,SAAS;AACE,YAAA,IAAA,EAAA,CAAA,EAAA,QAAA,EAAA,qBAAqB,cACnB,IAAI,EAAA,eAAA,EACC,uBAAuB,CAAC,MAAM,EAAA,QAAA,EACrC,CAAA;;;;;;;;;;;;;;;;;;;;;;;AAuBT,EAAA,CAAA,EAAA,MAAA,EAAA,CAAA,+OAAA,CAAA,EAAA;;;;;"}

package/fesm2022/orechio-platform-angular-billing-profile.page-Baa6uoM6.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"orechio-platform-angular-billing-profile.page-Baa6uoM6.mjs","sources":["../../../projects/platform-angular/billing/src/pages/profile.page.ts"],"sourcesContent":["import { ChangeDetectionStrategy, Component, OnInit, inject, signal } from '@angular/core';\r\nimport { NgTemplateOutlet } from '@angular/common';\r\nimport { FormsModule } from '@angular/forms';\r\nimport { ActivatedRoute, Router, RouterLink } from '@angular/router';\r\nimport { Observable } from 'rxjs';\r\nimport { ProblemDetails } from '@orechio/platform-angular';\r\nimport { BillingClient } from '../billing-client';\r\nimport { BillingErrorComponent } from '../billing-error.component';\r\nimport { ESTILO_BASE } from '../billing-format';\r\nimport {\r\n  BillingAddressRequest,\r\n  BillingContactRequest,\r\n  BillingProfile,\r\n  DocumentType,\r\n} from '../billing-models';\r\n\r\ninterface Formulario {\r\n  documentType: DocumentType;\r\n  documentNumber: string;\r\n  legalName: string;\r\n  tradeName: string;\r\n  billingEmail: string;\r\n  phone: string;\r\n  mobilePhone: string;\r\n  postalCode: string;\r\n  street: string;\r\n  number: string;\r\n  complement: string;\r\n  neighborhood: string;\r\n  city: string;\r\n  state: string;\r\n}\r\n\r\nfunction doPerfil(perfil: BillingProfile): Formulario {\r\n  return {\r\n    documentType: perfil.documentType ?? 'Cnpj',\r\n    documentNumber: perfil.documentNumber ?? '',\r\n    legalName: perfil.legalName ?? '',\r\n    tradeName: perfil.tradeName ?? '',\r\n    billingEmail: perfil.billingEmail ?? '',\r\n    phone: perfil.phone ?? '',\r\n    mobilePhone: perfil.mobilePhone ?? '',\r\n    postalCode: perfil.postalCode ?? '',\r\n    street: perfil.street ?? '',\r\n    number: perfil.number ?? '',\r\n    complement: perfil.complement ?? '',\r\n    neighborhood: perfil.neighborhood ?? '',\r\n    city: perfil.city ?? '',\r\n    state: perfil.state ?? '',\r\n  };\r\n}\r\n\r\n/** Campo opcional vazio vai como `null`, que é o que a Platform espera nos `string?`. */\r\nfunction opcional(valor: string): string | null {\r\n  const limpo = valor.trim();\r\n  return limpo ? limpo : null;\r\n}\r\n\r\n/**\r\n * Perfil de cobrança (ADR-021 §3.5, item 2). Cria com `POST profile`; edita por partes, como a\r\n * Platform: `PATCH profile/contact` e `PATCH profile/address` — não existe PUT.\r\n */\r\n@Component({\r\n  selector: 'orechio-billing-profile',\r\n  standalone: true,\r\n  imports: [FormsModule, NgTemplateOutlet, RouterLink, BillingErrorComponent],\r\n  changeDetection: ChangeDetectionStrategy.OnPush,\r\n  template: `\r\n    <section class=\"orechio-billing\">\r\n      <h1>Dados de cobrança</h1>\r\n\r\n      @if (perfil(); as p) {\r\n        @if (!p.exists) {\r\n          <p class=\"orechio-billing__muted\">\r\n            Informe os dados que vão na cobrança. O CPF ou CNPJ é exigido pelo emissor do PIX.\r\n          </p>\r\n          <form data-criar (ngSubmit)=\"criar()\">\r\n            <ng-container *ngTemplateOutlet=\"contato\" />\r\n            <ng-container *ngTemplateOutlet=\"endereco\" />\r\n            <button type=\"submit\" [disabled]=\"enviando()\">{{ enviando() ? 'Salvando…' : 'Salvar' }}</button>\r\n          </form>\r\n        } @else {\r\n          <form data-contato (ngSubmit)=\"salvarContato()\">\r\n            <h2>Contato</h2>\r\n            <ng-container *ngTemplateOutlet=\"contato\" />\r\n            <button type=\"submit\" [disabled]=\"enviando()\">Salvar contato</button>\r\n          </form>\r\n\r\n          <form data-endereco (ngSubmit)=\"salvarEndereco()\">\r\n            <h2>Endereço</h2>\r\n            <ng-container *ngTemplateOutlet=\"endereco\" />\r\n            <button type=\"submit\" [disabled]=\"enviando()\">Salvar endereço</button>\r\n          </form>\r\n        }\r\n\r\n        @if (salvo()) {\r\n          <p role=\"status\">Dados salvos.</p>\r\n        }\r\n        <a routerLink=\"..\">Voltar para a assinatura</a>\r\n      } @else if (!erro()) {\r\n        <p class=\"orechio-billing__muted\">Carregando…</p>\r\n      }\r\n\r\n      @if (erro(); as problema) {\r\n        <orechio-billing-error [problema]=\"problema\" />\r\n      }\r\n    </section>\r\n\r\n    <ng-template #contato>\r\n      <label>Tipo de documento\r\n        <select name=\"documentType\" [(ngModel)]=\"form.documentType\" [disabled]=\"travado()\">\r\n          <option value=\"Cpf\">CPF</option>\r\n          <option value=\"Cnpj\">CNPJ</option>\r\n        </select>\r\n      </label>\r\n      <label>{{ form.documentType === 'Cpf' ? 'CPF' : 'CNPJ' }}\r\n        <input name=\"documentNumber\" inputmode=\"numeric\" [(ngModel)]=\"form.documentNumber\" [disabled]=\"travado()\" required />\r\n      </label>\r\n      <label>{{ form.documentType === 'Cpf' ? 'Nome completo' : 'Razão social' }}\r\n        <input name=\"legalName\" [(ngModel)]=\"form.legalName\" [disabled]=\"travado()\" required />\r\n      </label>\r\n      <label>Nome fantasia (opcional)\r\n        <input name=\"tradeName\" [(ngModel)]=\"form.tradeName\" />\r\n      </label>\r\n      <label>E-mail de cobrança\r\n        <input name=\"billingEmail\" type=\"email\" autocomplete=\"email\" [(ngModel)]=\"form.billingEmail\" required />\r\n      </label>\r\n      <label>Telefone (opcional)\r\n        <input name=\"phone\" type=\"tel\" [(ngModel)]=\"form.phone\" />\r\n      </label>\r\n      <label>Celular (opcional)\r\n        <input name=\"mobilePhone\" type=\"tel\" [(ngModel)]=\"form.mobilePhone\" />\r\n      </label>\r\n    </ng-template>\r\n\r\n    <ng-template #endereco>\r\n      <label>CEP <input name=\"postalCode\" inputmode=\"numeric\" autocomplete=\"postal-code\" [(ngModel)]=\"form.postalCode\" required /></label>\r\n      <label>Rua <input name=\"street\" autocomplete=\"address-line1\" [(ngModel)]=\"form.street\" required /></label>\r\n      <label>Número <input name=\"number\" [(ngModel)]=\"form.number\" required /></label>\r\n      <label>Complemento (opcional) <input name=\"complement\" autocomplete=\"address-line2\" [(ngModel)]=\"form.complement\" /></label>\r\n      <label>Bairro <input name=\"neighborhood\" [(ngModel)]=\"form.neighborhood\" required /></label>\r\n      <label>Cidade <input name=\"city\" autocomplete=\"address-level2\" [(ngModel)]=\"form.city\" required /></label>\r\n      <label>UF <input name=\"state\" maxlength=\"2\" autocomplete=\"address-level1\" [(ngModel)]=\"form.state\" required /></label>\r\n    </ng-template>\r\n  `,\r\n  styles: ESTILO_BASE,\r\n})\r\nexport class ProfilePage implements OnInit {\r\n  private readonly client = inject(BillingClient);\r\n  private readonly router = inject(Router);\r\n  private readonly route = inject(ActivatedRoute);\r\n\r\n  protected form: Formulario = doPerfil({} as BillingProfile);\r\n  protected readonly perfil = signal<BillingProfile | null>(null);\r\n  protected readonly travado = signal(false);\r\n  protected readonly enviando = signal(false);\r\n  protected readonly salvo = signal(false);\r\n  protected readonly erro = signal<ProblemDetails | null>(null);\r\n\r\n  ngOnInit(): void {\r\n    this.carregar();\r\n  }\r\n\r\n  protected criar(): void {\r\n    this.enviar(this.client.createProfile({ ...this.contato(), ...this.endereco() }), () => {\r\n      // Quem veio do pagamento volta para ele: foi o checkout que mandou para cá.\r\n      if (this.route.snapshot.queryParamMap.get('next') === 'checkout') {\r\n        void this.router.navigate(['../checkout'], { relativeTo: this.route });\r\n        return;\r\n      }\r\n      this.carregar();\r\n    });\r\n  }\r\n\r\n  protected salvarContato(): void {\r\n    this.enviar(this.client.updateProfileContact(this.contato()), () => this.salvo.set(true));\r\n  }\r\n\r\n  protected salvarEndereco(): void {\r\n    this.enviar(this.client.updateProfileAddress(this.endereco()), () => this.salvo.set(true));\r\n  }\r\n\r\n  private carregar(): void {\r\n    this.client.getProfile().subscribe({\r\n      next: (perfil) => {\r\n        this.form = doPerfil(perfil);\r\n        this.travado.set(perfil.isDocumentLocked === true);\r\n        this.perfil.set(perfil);\r\n      },\r\n      error: (problema: ProblemDetails) => this.erro.set(problema),\r\n    });\r\n  }\r\n\r\n  private enviar(chamada: Observable<unknown>, depois: () => void): void {\r\n    if (this.enviando()) return;\r\n    this.enviando.set(true);\r\n    this.salvo.set(false);\r\n    this.erro.set(null);\r\n\r\n    chamada.subscribe({\r\n      next: () => {\r\n        this.enviando.set(false);\r\n        depois();\r\n      },\r\n      error: (problema: ProblemDetails) => {\r\n        this.enviando.set(false);\r\n        this.erro.set(problema);\r\n      },\r\n    });\r\n  }\r\n\r\n  private contato(): BillingContactRequest {\r\n    return {\r\n      documentType: this.form.documentType,\r\n      documentNumber: this.form.documentNumber.trim(),\r\n      legalName: this.form.legalName.trim(),\r\n      tradeName: opcional(this.form.tradeName),\r\n      billingEmail: this.form.billingEmail.trim(),\r\n      phone: opcional(this.form.phone),\r\n      mobilePhone: opcional(this.form.mobilePhone),\r\n    };\r\n  }\r\n\r\n  private endereco(): BillingAddressRequest {\r\n    return {\r\n      postalCode: this.form.postalCode.trim(),\r\n      street: this.form.street.trim(),\r\n      number: this.form.number.trim(),\r\n      complement: opcional(this.form.complement),\r\n      neighborhood: this.form.neighborhood.trim(),\r\n      city: this.form.city.trim(),\r\n      state: this.form.state.trim().toUpperCase(),\r\n    };\r\n  }\r\n}\r\n"],"names":[],"mappings":";;;;;;;;AAiCA,SAAS,QAAQ,CAAC,MAAsB,EAAA;IACtC,OAAO;AACL,QAAA,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,MAAM;AAC3C,QAAA,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;AAC3C,QAAA,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;AACjC,QAAA,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;AACjC,QAAA,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;AACvC,QAAA,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;AACzB,QAAA,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;AACrC,QAAA,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;AACnC,QAAA,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;AAC3B,QAAA,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;AAC3B,QAAA,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;AACnC,QAAA,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;AACvC,QAAA,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;AACvB,QAAA,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;KAC1B;AACH;AAEA;AACA,SAAS,QAAQ,CAAC,KAAa,EAAA;AAC7B,IAAA,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE;IAC1B,OAAO,KAAK,GAAG,KAAK,GAAG,IAAI;AAC7B;AAEA;;;AAGG;MAsFU,WAAW,CAAA;AACL,IAAA,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;AAC9B,IAAA,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AACvB,IAAA,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC;AAErC,IAAA,IAAI,GAAe,QAAQ,CAAC,EAAoB,CAAC;IACxC,MAAM,GAAG,MAAM,CAAwB,IAAI;+EAAC;IAC5C,OAAO,GAAG,MAAM,CAAC,KAAK;gFAAC;IACvB,QAAQ,GAAG,MAAM,CAAC,KAAK;iFAAC;IACxB,KAAK,GAAG,MAAM,CAAC,KAAK;8EAAC;IACrB,IAAI,GAAG,MAAM,CAAwB,IAAI;6EAAC;IAE7D,QAAQ,GAAA;QACN,IAAI,CAAC,QAAQ,EAAE;IACjB;IAEU,KAAK,GAAA;QACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,MAAK;;AAErF,YAAA,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE;AAChE,gBAAA,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACtE;YACF;YACA,IAAI,CAAC,QAAQ,EAAE;AACjB,QAAA,CAAC,CAAC;IACJ;IAEU,aAAa,GAAA;QACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3F;IAEU,cAAc,GAAA;QACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5F;IAEQ,QAAQ,GAAA;AACd,QAAA,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC;AACjC,YAAA,IAAI,EAAE,CAAC,MAAM,KAAI;AACf,gBAAA,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,IAAI,CAAC;AAClD,gBAAA,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACzB,CAAC;AACD,YAAA,KAAK,EAAE,CAAC,QAAwB,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC7D,SAAA,CAAC;IACJ;IAEQ,MAAM,CAAC,OAA4B,EAAE,MAAkB,EAAA;QAC7D,IAAI,IAAI,CAAC,QAAQ,EAAE;YAAE;AACrB,QAAA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;AACvB,QAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;AACrB,QAAA,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAEnB,OAAO,CAAC,SAAS,CAAC;YAChB,IAAI,EAAE,MAAK;AACT,gBAAA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;AACxB,gBAAA,MAAM,EAAE;YACV,CAAC;AACD,YAAA,KAAK,EAAE,CAAC,QAAwB,KAAI;AAClC,gBAAA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;AACxB,gBAAA,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzB,CAAC;AACF,SAAA,CAAC;IACJ;IAEQ,OAAO,GAAA;QACb,OAAO;AACL,YAAA,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;YACpC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE;YAC/C,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;YACrC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YACxC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;YAC3C,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAChC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;SAC7C;IACH;IAEQ,QAAQ,GAAA;QACd,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;YACvC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAC/B,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAC/B,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;YAC1C,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;YAC3C,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAC3B,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SAC5C;IACH;uGAtFW,WAAW,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAAX,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,WAAW,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,yBAAA,EAAA,QAAA,EAAA,EAAA,EAAA,QAAA,EAhFZ,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6ET,EAAA,CAAA,EAAA,QAAA,EAAA,IAAA,EAAA,MAAA,EAAA,CAAA,ydAAA,CAAA,EAAA,YAAA,EAAA,CAAA,EAAA,IAAA,EAAA,UAAA,EAAA,IAAA,EA/ES,WAAW,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,aAAA,EAAA,QAAA,EAAA,8CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,cAAA,EAAA,QAAA,EAAA,QAAA,EAAA,MAAA,EAAA,CAAA,SAAA,EAAA,OAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,uBAAA,EAAA,QAAA,EAAA,QAAA,EAAA,MAAA,EAAA,CAAA,SAAA,EAAA,OAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,oBAAA,EAAA,QAAA,EAAA,wSAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,0BAAA,EAAA,QAAA,EAAA,0JAAA,EAAA,MAAA,EAAA,CAAA,aAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,eAAA,EAAA,QAAA,EAAA,2CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,oBAAA,EAAA,QAAA,EAAA,sGAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,iBAAA,EAAA,QAAA,EAAA,wIAAA,EAAA,MAAA,EAAA,CAAA,UAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,kBAAA,EAAA,QAAA,EAAA,4EAAA,EAAA,MAAA,EAAA,CAAA,WAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,OAAA,EAAA,QAAA,EAAA,qDAAA,EAAA,MAAA,EAAA,CAAA,MAAA,EAAA,UAAA,EAAA,SAAA,EAAA,gBAAA,CAAA,EAAA,OAAA,EAAA,CAAA,eAAA,CAAA,EAAA,QAAA,EAAA,CAAA,SAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,MAAA,EAAA,QAAA,EAAA,yEAAA,EAAA,MAAA,EAAA,CAAA,eAAA,CAAA,EAAA,OAAA,EAAA,CAAA,UAAA,CAAA,EAAA,QAAA,EAAA,CAAA,QAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAE,gBAAgB,EAAA,QAAA,EAAA,oBAAA,EAAA,MAAA,EAAA,CAAA,yBAAA,EAAA,kBAAA,EAAA,0BAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAE,UAAU,kPAAE,qBAAqB,EAAA,QAAA,EAAA,uBAAA,EAAA,MAAA,EAAA,CAAA,UAAA,CAAA,EAAA,CAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,MAAA,EAAA,CAAA;;2FAkF/D,WAAW,EAAA,UAAA,EAAA,CAAA;kBArFvB,SAAS;AACE,YAAA,IAAA,EAAA,CAAA,EAAA,QAAA,EAAA,yBAAyB,cACvB,IAAI,EAAA,OAAA,EACP,CAAC,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,qBAAqB,CAAC,EAAA,eAAA,EAC1D,uBAAuB,CAAC,MAAM,EAAA,QAAA,EACrC,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6ET,EAAA,CAAA,EAAA,MAAA,EAAA,CAAA,ydAAA,CAAA,EAAA;;;;;"}

package/fesm2022/orechio-platform-angular-billing-subscription.page-9NF8bWhu.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"orechio-platform-angular-billing-subscription.page-9NF8bWhu.mjs","sources":["../../../projects/platform-angular/billing/src/pages/subscription.page.ts"],"sourcesContent":["import { ChangeDetectionStrategy, Component, OnInit, computed, inject, signal } from '@angular/core';\r\nimport { RouterLink } from '@angular/router';\r\nimport { ProblemDetails } from '@orechio/platform-angular';\r\nimport { BillingClient } from '../billing-client';\r\nimport { BillingErrorComponent } from '../billing-error.component';\r\nimport { ESTILO_BASE, data } from '../billing-format';\r\nimport { InvoiceListItem, InvoiceStatus, Subscription } from '../billing-models';\r\n\r\nconst DIA = 24 * 60 * 60 * 1000;\r\nconst EM_ABERTO: InvoiceStatus[] = ['Created', 'Pending', 'Overdue'];\r\n\r\nconst emAtraso = (assinatura: Subscription) =>\r\n  assinatura.status === 'Grace' || assinatura.status === 'Suspended';\r\n\r\ninterface Situacao {\r\n  titulo: string;\r\n  detalhe: string;\r\n  acao: { texto: string; link: string };\r\n}\r\n\r\n/**\r\n * A ação de cada estado segue o que a Platform aceita: o checkout serve `Trial`,\r\n * `PendingPayment` e, desde a BILLING-2b, `Grace` e `Suspended` — mas só sem fatura aberta\r\n * (`Created|Pending|Overdue`; com ela, `checkout.open_invoice_exists`). Em carência e suspensão\r\n * a ação depende disso: fatura aberta → o detalhe dela; nenhuma → o checkout. Cancelada e\r\n * expirada não têm ação de pagamento nesta versão: reativar é v2 (ADR-021 §3.5).\r\n */\r\nfunction situacao(assinatura: Subscription, agora: number, emAberto: InvoiceListItem | null): Situacao {\r\n  const pagar = { texto: 'Pagar agora', link: 'checkout' };\r\n  const faturas = { texto: 'Ver faturas', link: 'invoices' };\r\n  const acaoDeAtraso = emAberto\r\n    ? { texto: 'Pagar fatura em aberto', link: `invoices/${emAberto.id}` }\r\n    : { texto: 'Pagar', link: 'checkout' };\r\n  const orientacao = emAberto ? 'Pague a fatura em aberto' : 'Faça o pagamento';\r\n\r\n  switch (assinatura.status) {\r\n    case 'Trial': {\r\n      const dias = Math.max(0, Math.ceil((Date.parse(assinatura.trialEndsAt) - agora) / DIA));\r\n      const restante =\r\n        dias === 0 ? 'O período de teste termina hoje.'\r\n        : dias === 1 ? 'Falta 1 dia para o fim do período de teste.'\r\n        : `Faltam ${dias} dias para o fim do período de teste.`;\r\n      return { titulo: 'Período de teste', detalhe: restante, acao: { texto: 'Assinar agora', link: 'checkout' } };\r\n    }\r\n    case 'PendingPayment':\r\n      return {\r\n        titulo: 'Pagamento pendente',\r\n        detalhe: 'A assinatura começa assim que o primeiro pagamento for confirmado.',\r\n        acao: pagar,\r\n      };\r\n    case 'Active':\r\n      return {\r\n        titulo: 'Assinatura ativa',\r\n        detalhe: assinatura.currentPeriodEndsAt\r\n          ? `Próxima renovação em ${data(assinatura.currentPeriodEndsAt)}.`\r\n          : 'Tudo em dia.',\r\n        acao: faturas,\r\n      };\r\n    case 'Grace':\r\n      return {\r\n        titulo: 'Pagamento em atraso',\r\n        detalhe: assinatura.graceEndsAt\r\n          ? `O acesso continua até ${data(assinatura.graceEndsAt)}. ${orientacao} para não ter o acesso suspenso.`\r\n          : `${orientacao} para não ter o acesso suspenso.`,\r\n        acao: acaoDeAtraso,\r\n      };\r\n    case 'Suspended':\r\n      return {\r\n        titulo: 'Assinatura suspensa',\r\n        detalhe: `O acesso foi suspenso por falta de pagamento. ${orientacao} para voltar a usar.`,\r\n        acao: acaoDeAtraso,\r\n      };\r\n    case 'Cancelled':\r\n      return {\r\n        titulo: 'Assinatura cancelada',\r\n        detalhe: assinatura.cancelEffectiveAt\r\n          ? `O cancelamento vale a partir de ${data(assinatura.cancelEffectiveAt)}. Para reativar, fale com o suporte.`\r\n          : 'Para reativar, fale com o suporte.',\r\n        acao: faturas,\r\n      };\r\n    case 'Expired':\r\n      return {\r\n        titulo: 'Assinatura expirada',\r\n        detalhe: 'Para voltar a assinar, fale com o suporte.',\r\n        acao: faturas,\r\n      };\r\n  }\r\n}\r\n\r\n@Component({\r\n  selector: 'orechio-billing-subscription',\r\n  standalone: true,\r\n  imports: [RouterLink, BillingErrorComponent],\r\n  changeDetection: ChangeDetectionStrategy.OnPush,\r\n  template: `\r\n    <section class=\"orechio-billing\">\r\n      <h1>Assinatura</h1>\r\n\r\n      @if (erro(); as problema) {\r\n        <orechio-billing-error [problema]=\"problema\" />\r\n      } @else if (atual(); as s) {\r\n        <h2>{{ s.titulo }}</h2>\r\n        <p>{{ s.detalhe }}</p>\r\n        <a data-acao [routerLink]=\"s.acao.link\">{{ s.acao.texto }}</a>\r\n\r\n        <nav class=\"orechio-billing__muted\">\r\n          <a routerLink=\"profile\">Dados de cobrança</a>\r\n          ·\r\n          <a routerLink=\"invoices\">Faturas</a>\r\n        </nav>\r\n      } @else {\r\n        <p class=\"orechio-billing__muted\">Carregando…</p>\r\n      }\r\n    </section>\r\n  `,\r\n  styles: ESTILO_BASE,\r\n})\r\nexport class SubscriptionPage implements OnInit {\r\n  private readonly client = inject(BillingClient);\r\n\r\n  private readonly assinatura = signal<Subscription | null>(null);\r\n  /** Só preenchido em Grace/Suspended: `undefined` = ainda não respondeu; `null` = nenhuma aberta. */\r\n  private readonly emAberto = signal<InvoiceListItem | null | undefined>(undefined);\r\n  protected readonly erro = signal<ProblemDetails | null>(null);\r\n  protected readonly atual = computed(() => {\r\n    const assinatura = this.assinatura();\r\n    if (!assinatura) return null;\r\n\r\n    const aberta = this.emAberto();\r\n    // Sem a resposta das faturas não se sabe o destino da ação: não se adivinha.\r\n    if (emAtraso(assinatura) && aberta === undefined) return null;\r\n\r\n    return situacao(assinatura, Date.now(), aberta ?? null);\r\n  });\r\n\r\n  ngOnInit(): void {\r\n    this.client.getSubscription().subscribe({\r\n      next: (assinatura) => {\r\n        this.assinatura.set(assinatura);\r\n        if (emAtraso(assinatura)) this.buscarFaturaEmAberto();\r\n      },\r\n      error: (problema: ProblemDetails) => this.erro.set(problema),\r\n    });\r\n  }\r\n\r\n  private buscarFaturaEmAberto(): void {\r\n    this.client.listInvoices().subscribe({\r\n      next: (pagina) => this.emAberto.set(pagina.invoices.find((f) => EM_ABERTO.includes(f.status)) ?? null),\r\n      error: (problema: ProblemDetails) => this.erro.set(problema),\r\n    });\r\n  }\r\n}\r\n"],"names":[],"mappings":";;;;;AAQA,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;AAC/B,MAAM,SAAS,GAAoB,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;AAEpE,MAAM,QAAQ,GAAG,CAAC,UAAwB,KACxC,UAAU,CAAC,MAAM,KAAK,OAAO,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW;AAQpE;;;;;;AAMG;AACH,SAAS,QAAQ,CAAC,UAAwB,EAAE,KAAa,EAAE,QAAgC,EAAA;IACzF,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE;IACxD,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE;IAC1D,MAAM,YAAY,GAAG;AACnB,UAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAA,SAAA,EAAY,QAAQ,CAAC,EAAE,EAAE;UAClE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE;IACxC,MAAM,UAAU,GAAG,QAAQ,GAAG,0BAA0B,GAAG,kBAAkB;AAE7E,IAAA,QAAQ,UAAU,CAAC,MAAM;QACvB,KAAK,OAAO,EAAE;AACZ,YAAA,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,KAAK,IAAI,GAAG,CAAC,CAAC;YACvF,MAAM,QAAQ,GACZ,IAAI,KAAK,CAAC,GAAG;AACb,kBAAE,IAAI,KAAK,CAAC,GAAG;AACf,sBAAE,CAAA,OAAA,EAAU,IAAI,CAAA,qCAAA,CAAuC;YACzD,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;QAC9G;AACA,QAAA,KAAK,gBAAgB;YACnB,OAAO;AACL,gBAAA,MAAM,EAAE,oBAAoB;AAC5B,gBAAA,OAAO,EAAE,oEAAoE;AAC7E,gBAAA,IAAI,EAAE,KAAK;aACZ;AACH,QAAA,KAAK,QAAQ;YACX,OAAO;AACL,gBAAA,MAAM,EAAE,kBAAkB;gBAC1B,OAAO,EAAE,UAAU,CAAC;sBAChB,wBAAwB,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAA,CAAA;AAC9D,sBAAE,cAAc;AAClB,gBAAA,IAAI,EAAE,OAAO;aACd;AACH,QAAA,KAAK,OAAO;YACV,OAAO;AACL,gBAAA,MAAM,EAAE,qBAAqB;gBAC7B,OAAO,EAAE,UAAU,CAAC;sBAChB,CAAA,sBAAA,EAAyB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA,EAAA,EAAK,UAAU,CAAA,gCAAA;sBACpE,CAAA,EAAG,UAAU,CAAA,gCAAA,CAAkC;AACnD,gBAAA,IAAI,EAAE,YAAY;aACnB;AACH,QAAA,KAAK,WAAW;YACd,OAAO;AACL,gBAAA,MAAM,EAAE,qBAAqB;gBAC7B,OAAO,EAAE,CAAA,8CAAA,EAAiD,UAAU,CAAA,oBAAA,CAAsB;AAC1F,gBAAA,IAAI,EAAE,YAAY;aACnB;AACH,QAAA,KAAK,WAAW;YACd,OAAO;AACL,gBAAA,MAAM,EAAE,sBAAsB;gBAC9B,OAAO,EAAE,UAAU,CAAC;sBAChB,mCAAmC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA,oCAAA;AACvE,sBAAE,oCAAoC;AACxC,gBAAA,IAAI,EAAE,OAAO;aACd;AACH,QAAA,KAAK,SAAS;YACZ,OAAO;AACL,gBAAA,MAAM,EAAE,qBAAqB;AAC7B,gBAAA,OAAO,EAAE,4CAA4C;AACrD,gBAAA,IAAI,EAAE,OAAO;aACd;;AAEP;MA8Ba,gBAAgB,CAAA;AACV,IAAA,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;IAE9B,UAAU,GAAG,MAAM,CAAsB,IAAI;mFAAC;;IAE9C,QAAQ,GAAG,MAAM,CAAqC,SAAS;iFAAC;IAC9D,IAAI,GAAG,MAAM,CAAwB,IAAI;6EAAC;AAC1C,IAAA,KAAK,GAAG,QAAQ,CAAC,MAAK;AACvC,QAAA,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE;AACpC,QAAA,IAAI,CAAC,UAAU;AAAE,YAAA,OAAO,IAAI;AAE5B,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE;;AAE9B,QAAA,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,MAAM,KAAK,SAAS;AAAE,YAAA,OAAO,IAAI;AAE7D,QAAA,OAAO,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,IAAI,IAAI,CAAC;IACzD,CAAC;8EAAC;IAEF,QAAQ,GAAA;AACN,QAAA,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC;AACtC,YAAA,IAAI,EAAE,CAAC,UAAU,KAAI;AACnB,gBAAA,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC/B,IAAI,QAAQ,CAAC,UAAU,CAAC;oBAAE,IAAI,CAAC,oBAAoB,EAAE;YACvD,CAAC;AACD,YAAA,KAAK,EAAE,CAAC,QAAwB,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC7D,SAAA,CAAC;IACJ;IAEQ,oBAAoB,GAAA;AAC1B,QAAA,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,SAAS,CAAC;AACnC,YAAA,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;AACtG,YAAA,KAAK,EAAE,CAAC,QAAwB,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC7D,SAAA,CAAC;IACJ;uGAjCW,gBAAgB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAAhB,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,gBAAgB,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,8BAAA,EAAA,QAAA,EAAA,EAAA,EAAA,QAAA,EAvBjB,CAAA;;;;;;;;;;;;;;;;;;;;GAoBT,EAAA,QAAA,EAAA,IAAA,EAAA,MAAA,EAAA,CAAA,ydAAA,CAAA,EAAA,YAAA,EAAA,CAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAtBS,UAAU,kPAAE,qBAAqB,EAAA,QAAA,EAAA,uBAAA,EAAA,MAAA,EAAA,CAAA,UAAA,CAAA,EAAA,CAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,MAAA,EAAA,CAAA;;2FAyBhC,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBA5B5B,SAAS;AACE,YAAA,IAAA,EAAA,CAAA,EAAA,QAAA,EAAA,8BAA8B,EAAA,UAAA,EAC5B,IAAI,EAAA,OAAA,EACP,CAAC,UAAU,EAAE,qBAAqB,CAAC,EAAA,eAAA,EAC3B,uBAAuB,CAAC,MAAM,EAAA,QAAA,EACrC,CAAA;;;;;;;;;;;;;;;;;;;;AAoBT,EAAA,CAAA,EAAA,MAAA,EAAA,CAAA,ydAAA,CAAA,EAAA;;;;;"}