@posiwise/common-services 0.2.24 → 0.2.26

package/fesm2022/posiwise-common-services.mjs

@@ -2,24 +2,24 @@ import * as i0 from '@angular/core';
 import { DOCUMENT, Inject, Injectable, isDevMode, inject, NgModule, ViewEncapsulation } from '@angular/core';
 import * as i3 from '@angular/router';
 import { NavigationEnd } from '@angular/router';
-import * as i1 from '@posiwise/app-config-service';
+import * as i2 from '@posiwise/app-config-service';
 import { AppConfigService } from '@posiwise/app-config-service';
-import * as i1$2 from '@angular/common/http';
+import * as i1$1 from '@angular/common/http';
 import { HttpErrorResponse, HttpHeaders } from '@angular/common/http';
 import { throwError, of, BehaviorSubject, tap, timer } from 'rxjs';
 import { catchError, take, tap as tap$1, switchMap, map, mergeMap, distinctUntilChanged } from 'rxjs/operators';
 import { HelperService } from '@posiwise/helper-service';
-import * as i1$1 from 'ngx-toastr';
+import * as i1 from 'ngx-toastr';
 import { CommonModule } from '@angular/common';
 import { getUser, SetUser, UserActionTypes, appReducers } from '@posiwise/app-store';
-import * as i1$3 from '@ngrx/effects';
+import * as i1$2 from '@ngrx/effects';
 import { Actions, createEffect, ofType, EffectsModule } from '@ngrx/effects';
-import * as i2 from '@ngrx/store';
+import * as i3$1 from '@ngrx/store';
 import { StoreModule } from '@ngrx/store';
-import { INTEGRATIONS_API_PREFIX, MAIN_API_PREFIX, PROJECT_PATH, USER_PATH, TOKEN_HEADER_KEY, NEWSLETTER_CONFIRMATION_PATH, NEWSLETTER_UNSUBSCRIBE_PATH, CAPTCHA_VALIDATION_PATH, SOCIAL_LOGIN_PATH, TOKEN_KEY, PERMISSION_NAMES, ADMIN_SUB_MENU_WHITELIST, AB_TEST_ACTIONS, GEO_PATH, PRODUCT_PATH, CONTACT_US_PATH, INCIDENTS_PATH, INCIDENTS_PATH_ADMIN, NEWSLETTERS_PATH, NEWSLETTER_SUBSCRIPTION_PATH, ADMIN_FAQS_PATH, FAQS_PATH, ORGANIZATIONS_PATH, GLOBAL_SUBSCRIPTION_CONFIGS_PATH, GLOBAL_CONFIGS_PATH, USER_LOGIN_NOTIFICATION, FEEDBACK_QUESTIONS_PATH, USER_FEEDBACKS_PATH, CUSTOMER_SUPPORT_PATH, ADMIN_TAG_PATH, ADMIN_TAG_CATEGORIES_PATH, ADMIN_PATH, QUALIFICATIONS_PATH, SOCKET_TYPE, BRAIN_API_PREFIX } from '@posiwise/common-utilities';
+import { INTEGRATIONS_API_PREFIX, MAIN_API_PREFIX, PROJECT_PATH, USER_PATH, TOKEN_HEADER_KEY, NEWSLETTER_CONFIRMATION_PATH, NEWSLETTER_UNSUBSCRIBE_PATH, CAPTCHA_VALIDATION_PATH, SOCIAL_LOGIN_PATH, TOKEN_KEY, PERMISSION_NAMES, ADMIN_SUB_MENU_WHITELIST, AB_TEST_ACTIONS, GEO_PATH, PRODUCT_PATH, CONTACT_US_PATH, INCIDENTS_PATH, INCIDENTS_PATH_ADMIN, NEWSLETTERS_PATH, NEWSLETTER_SUBSCRIPTION_PATH, ADMIN_FAQS_PATH, FAQS_PATH, ORGANIZATIONS_PATH, GLOBAL_SUBSCRIPTION_CONFIGS_PATH, GLOBAL_CONFIGS_PATH, USER_LOGIN_NOTIFICATION, FEEDBACK_QUESTIONS_PATH, USER_FEEDBACKS_PATH, CUSTOMER_SUPPORT_PATH, ADMIN_TAG_PATH, ADMIN_TAG_CATEGORIES_PATH, ADMIN_PATH, QUALIFICATIONS_PATH, BRAIN_API_PREFIX, SOCKET_TYPE } from '@posiwise/common-utilities';
 import swal from 'sweetalert2';
 import moment from 'moment';
-import * as i1$4 from '@angular/platform-browser';
+import * as i1$3 from '@angular/platform-browser';
 import cloneDeep from 'lodash/cloneDeep';
 import pickBy from 'lodash/pickBy';
 import * as i2$1 from 'ngx-cookie';
@@ -227,12 +227,12 @@ class GoogleAnalyticsService {
             this.subscription.unsubscribe();
         }
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: GoogleAnalyticsService, deps: [{ token: i3.Router }, { token: ScriptLoaderService }, { token: i1.AppConfigService }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: GoogleAnalyticsService, deps: [{ token: i3.Router }, { token: ScriptLoaderService }, { token: i2.AppConfigService }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: GoogleAnalyticsService }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: GoogleAnalyticsService, decorators: [{
             type: Injectable
-        }], ctorParameters: () => [{ type: i3.Router }, { type: ScriptLoaderService }, { type: i1.AppConfigService }] });
+        }], ctorParameters: () => [{ type: i3.Router }, { type: ScriptLoaderService }, { type: i2.AppConfigService }] });
 
 class CustomToastService {
     constructor(toastr) {
@@ -304,7 +304,7 @@ class CustomToastService {
                 this.error(message);
         }
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: CustomToastService, deps: [{ token: i1$1.ToastrService }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: CustomToastService, deps: [{ token: i1.ToastrService }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: CustomToastService, providedIn: 'root' }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: CustomToastService, decorators: [{
@@ -312,7 +312,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
             args: [{
                     providedIn: 'root'
                 }]
-        }], ctorParameters: () => [{ type: i1$1.ToastrService }] });
+        }], ctorParameters: () => [{ type: i1.ToastrService }] });
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 class BaseHttpService {
@@ -323,8 +323,14 @@ class BaseHttpService {
         this.getConfig();
         this.toast = injector.get(CustomToastService);
     }
+    buildUrl(url) {
+        // Collapse any run of 2+ slashes (arises when baseUrl ends with '/'
+        // and the caller path also starts with '/', sometimes twice) down to
+        // one, while preserving the '://' of an absolute URL scheme.
+        return `${this.baseUrl}${url}`.replace(/([^:]\/)\/+/g, '$1');
+    }
     get(url) {
-        return this.http.get(`${this.baseUrl}${url}`).pipe(catchError(error => {
+        return this.http.get(this.buildUrl(url)).pipe(catchError(error => {
             this.handleError(error);
             return throwError(() => new HttpErrorResponse(error));
         }));
@@ -338,31 +344,31 @@ class BaseHttpService {
                 delete params[k];
             }
         }
-        return this.http.get(`${this.baseUrl}${url}`, { params }).pipe(catchError(error => {
+        return this.http.get(this.buildUrl(url), { params }).pipe(catchError(error => {
             this.handleError(error);
             return throwError(() => new HttpErrorResponse(error));
         }));
     }
     post(url, params = {}) {
-        return this.http.post(`${this.baseUrl}${url}`, params).pipe(catchError(error => {
+        return this.http.post(this.buildUrl(url), params).pipe(catchError(error => {
             this.handleError(error);
             return throwError(() => new HttpErrorResponse(error));
         }));
     }
     put(url, params = {}) {
-        return this.http.put(`${this.baseUrl}${url}`, params).pipe(catchError(error => {
+        return this.http.put(this.buildUrl(url), params).pipe(catchError(error => {
             this.handleError(error);
             return throwError(() => new HttpErrorResponse(error));
         }));
     }
     patch(url, params = {}) {
-        return this.http.patch(`${this.baseUrl}${url}`, params).pipe(catchError(error => {
+        return this.http.patch(this.buildUrl(url), params).pipe(catchError(error => {
             this.handleError(error);
             return throwError(() => new HttpErrorResponse(error));
         }));
     }
     delete(url, option = {}) {
-        return this.http.delete(`${this.baseUrl}${url}`, option).pipe(catchError(error => {
+        return this.http.delete(this.buildUrl(url), option).pipe(catchError(error => {
             this.handleError(error);
             return throwError(() => new HttpErrorResponse(error));
         }));
@@ -371,7 +377,7 @@ class BaseHttpService {
         const formData = new FormData();
         formData.append(param, file);
         const headers = new HttpHeaders({ enctype: 'multipart/form-data' });
-        return this.http.put(`${this.baseUrl}${url}`, formData, { headers }).pipe(catchError(error => {
+        return this.http.put(this.buildUrl(url), formData, { headers }).pipe(catchError(error => {
             this.handleError(error);
             return throwError(() => new HttpErrorResponse(error));
         }));
@@ -385,7 +391,7 @@ class BaseHttpService {
             }
         }
         const headers = new HttpHeaders({ enctype: 'multipart/form-data' });
-        return this.http.post(`${this.baseUrl}${url}`, formData, { headers }).pipe(catchError(error => {
+        return this.http.post(this.buildUrl(url), formData, { headers }).pipe(catchError(error => {
             this.handleError(error);
             return throwError(() => new HttpErrorResponse(error));
         }));
@@ -398,12 +404,12 @@ class BaseHttpService {
             this.toast.showToast(error);
         }
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: BaseHttpService, deps: [{ token: i1$2.HttpClient }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: BaseHttpService, deps: [{ token: i1$1.HttpClient }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: BaseHttpService }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: BaseHttpService, decorators: [{
             type: Injectable
-        }], ctorParameters: () => [{ type: i1$2.HttpClient }, { type: i0.Injector }] });
+        }], ctorParameters: () => [{ type: i1$1.HttpClient }, { type: i0.Injector }] });
 
 class IntegrationsApiHttpService extends BaseHttpService {
     constructor(http, injector) {
@@ -416,7 +422,7 @@ class IntegrationsApiHttpService extends BaseHttpService {
                 : config?.['links']?.integrations_api;
         });
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: IntegrationsApiHttpService, deps: [{ token: i1$2.HttpClient }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: IntegrationsApiHttpService, deps: [{ token: i1$1.HttpClient }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: IntegrationsApiHttpService, providedIn: 'root' }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: IntegrationsApiHttpService, decorators: [{
@@ -424,7 +430,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
             args: [{
                     providedIn: 'root'
                 }]
-        }], ctorParameters: () => [{ type: i1$2.HttpClient }, { type: i0.Injector }] });
+        }], ctorParameters: () => [{ type: i1$1.HttpClient }, { type: i0.Injector }] });
 
 class LocalStorage {
     getItem$(key) {
@@ -464,7 +470,7 @@ class MainApiHttpService extends BaseHttpService {
             this.baseUrl = isDevMode() ? MAIN_API_PREFIX : config?.['links']?.main_api;
         });
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: MainApiHttpService, deps: [{ token: i1$2.HttpClient }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: MainApiHttpService, deps: [{ token: i1$1.HttpClient }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: MainApiHttpService, providedIn: 'root' }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: MainApiHttpService, decorators: [{
@@ -472,7 +478,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
             args: [{
                     providedIn: 'root'
                 }]
-        }], ctorParameters: () => [{ type: i1$2.HttpClient }, { type: i0.Injector }] });
+        }], ctorParameters: () => [{ type: i1$1.HttpClient }, { type: i0.Injector }] });
 
 /**
  * Secure Token Storage Service
@@ -698,11 +704,11 @@ class SecureTokenStorageService {
         }
         return null;
     }
-    /**
-     * Delete cookie
-     */
+    // Attributes MUST mirror setSecureCookie — browsers require matching
+    // Secure + SameSite for the delete to take effect on HTTPS.
     deleteCookie(name) {
-        this.document.cookie = `${name}=; Path=/; expires=Thu, 01 Jan 1970 00:00:01 GMT;`;
+        const isSecure = this.document.location.protocol === 'https:';
+        this.document.cookie = `${name}=; Path=/; ${isSecure ? 'Secure; ' : ''}SameSite=Strict; expires=Thu, 01 Jan 1970 00:00:01 GMT;`;
     }
     /**
      * Initialize tokens from storage on service startup
@@ -1007,7 +1013,7 @@ class UserService {
     refreshUserApiTokens() {
         return this.api.get(`${this.endpoint}/refresh_user_api_tokens`);
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: UserService, deps: [{ token: MainApiHttpService }, { token: i2.Store }, { token: i3.Router }, { token: i1.AppConfigService }, { token: ProfileService }, { token: CustomToastService }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: UserService, deps: [{ token: MainApiHttpService }, { token: i3$1.Store }, { token: i3.Router }, { token: i2.AppConfigService }, { token: ProfileService }, { token: CustomToastService }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: UserService, providedIn: 'root' }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: UserService, decorators: [{
@@ -1015,7 +1021,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
             args: [{
                     providedIn: 'root'
                 }]
-        }], ctorParameters: () => [{ type: MainApiHttpService }, { type: i2.Store }, { type: i3.Router }, { type: i1.AppConfigService }, { type: ProfileService }, { type: CustomToastService }] });
+        }], ctorParameters: () => [{ type: MainApiHttpService }, { type: i3$1.Store }, { type: i3.Router }, { type: i2.AppConfigService }, { type: ProfileService }, { type: CustomToastService }] });
 
 class AuthService {
     constructor(localStorage, secureTokenStorage, router, http, userService, toastr, appConfigService, integrationsApi, document) {
@@ -1157,6 +1163,7 @@ class AuthService {
         }
         return this.http.delete('session', options).pipe(tap$1(() => {
             this.secureTokenStorage.clearTokens().subscribe();
+            this.clearBrainChatStorage();
             // Reset Crisp session on logout so next visitor is anonymous again
             if (typeof window?.$crisp?.push === 'function') {
                 window.$crisp.push(['do', 'session:reset']);
@@ -1167,6 +1174,25 @@ class AuthService {
             }
         }));
     }
+    /**
+     * Wipe every `pw-brain.*` localStorage key on logout so the next user
+     * on a shared browser doesn't inherit the previous user's chat thread
+     * (ticket #4167). Best-effort: private-browsing / quota throws are
+     * swallowed so logout never breaks.
+     */
+    clearBrainChatStorage() {
+        try {
+            for (let i = localStorage.length - 1; i >= 0; i--) {
+                const key = localStorage.key(i);
+                if (key?.startsWith('pw-brain.')) {
+                    localStorage.removeItem(key);
+                }
+            }
+        }
+        catch {
+            // ignored — best-effort cleanup
+        }
+    }
     /**
      * Clear all authentication tokens
      */
@@ -1374,12 +1400,12 @@ class AuthService {
             }
         });
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: AuthService, deps: [{ token: LocalStorage }, { token: SecureTokenStorageService }, { token: i3.Router }, { token: MainApiHttpService }, { token: UserService }, { token: CustomToastService }, { token: i1.AppConfigService }, { token: IntegrationsApiHttpService }, { token: DOCUMENT }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: AuthService, deps: [{ token: LocalStorage }, { token: SecureTokenStorageService }, { token: i3.Router }, { token: MainApiHttpService }, { token: UserService }, { token: CustomToastService }, { token: i2.AppConfigService }, { token: IntegrationsApiHttpService }, { token: DOCUMENT }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: AuthService }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: AuthService, decorators: [{
             type: Injectable
-        }], ctorParameters: () => [{ type: LocalStorage }, { type: SecureTokenStorageService }, { type: i3.Router }, { type: MainApiHttpService }, { type: UserService }, { type: CustomToastService }, { type: i1.AppConfigService }, { type: IntegrationsApiHttpService }, { type: Document, decorators: [{
+        }], ctorParameters: () => [{ type: LocalStorage }, { type: SecureTokenStorageService }, { type: i3.Router }, { type: MainApiHttpService }, { type: UserService }, { type: CustomToastService }, { type: i2.AppConfigService }, { type: IntegrationsApiHttpService }, { type: Document, decorators: [{
                     type: Inject,
                     args: [DOCUMENT]
                 }] }] });
@@ -1406,7 +1432,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
 
 class CommonServicesModule {
     static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: CommonServicesModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule }); }
-    static { this.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "21.2.6", ngImport: i0, type: CommonServicesModule, imports: [CommonModule, i1$3.EffectsRootModule, i2.StoreRootModule] }); }
+    static { this.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "21.2.6", ngImport: i0, type: CommonServicesModule, imports: [CommonModule, i1$2.EffectsRootModule, i3$1.StoreRootModule] }); }
     static { this.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: CommonServicesModule, providers: [AuthService], imports: [CommonModule, EffectsModule.forRoot([UserEffects]), StoreModule.forRoot(appReducers)] }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: CommonServicesModule, decorators: [{
@@ -1446,7 +1472,7 @@ class SeoService {
         this.meta.updateTag({ name: 'twitter:description', content: description });
         this.meta.updateTag({ name: 'twitter:card', content: 'summary' });
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: SeoService, deps: [{ token: i1$4.Meta }, { token: i1$4.Title }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: SeoService, deps: [{ token: i1$3.Meta }, { token: i1$3.Title }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: SeoService, providedIn: 'root' }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: SeoService, decorators: [{
@@ -1454,7 +1480,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
             args: [{
                     providedIn: 'root'
                 }]
-        }], ctorParameters: () => [{ type: i1$4.Meta }, { type: i1$4.Title }] });
+        }], ctorParameters: () => [{ type: i1$3.Meta }, { type: i1$3.Title }] });
 
 /**
  * Centralized feature flag evaluation service.
@@ -1912,7 +1938,7 @@ class AbTestService {
             ? this.injector.get(service)
             : this.injector.get(MainApiHttpService);
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: AbTestService, deps: [{ token: i0.Injector }, { token: i1$2.HttpClient }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: AbTestService, deps: [{ token: i0.Injector }, { token: i1$1.HttpClient }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: AbTestService, providedIn: 'root' }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: AbTestService, decorators: [{
@@ -1920,7 +1946,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
             args: [{
                     providedIn: 'root'
                 }]
-        }], ctorParameters: () => [{ type: i0.Injector }, { type: i1$2.HttpClient }] });
+        }], ctorParameters: () => [{ type: i0.Injector }, { type: i1$1.HttpClient }] });
 
 class GeoService {
     constructor(api, cookieService) {
@@ -2024,8 +2050,8 @@ class SubscriptionService {
     toggleAdmin(id, data) {
         return this.api.put(`/subscriptions/${id}/toggle_admin`, data);
     }
-    updateSubscriptionAPIKey(id) {
-        return this.api.put(`/subscriptions/${id}/update_api_key`);
+    updateSubscriptionAPIKey(id, productId) {
+        return this.api.put(`/subscriptions/${id}/update_api_key`, { product_id: productId });
     }
     refreshApiTokens(id) {
         return this.api.get(`/subscriptions/${id}/refresh_api_tokens`);
@@ -2229,11 +2255,17 @@ class AhoyService {
         this.ahoy = '/ahoy';
         this.toast = injector.get(CustomToastService);
     }
+    // AhoyService does not extend BaseHttpService, so it needs its own
+    // slash normalization: the micro-service base URL ends with '/' and the
+    // path segments below start with '/', producing '/main-api/v1//versions'.
+    buildUrl(url) {
+        return url.replace(/([^:]\/)\/+/g, '$1');
+    }
     getAhoyEvents(params, service, paging) {
         const baseUrl = HelperService.getBaseUrlMicroService(service);
         const page = HelperService.getPagingParams(paging);
         return this.http
-            .get(`${baseUrl}${this.ahoy}/events`, {
+            .get(this.buildUrl(`${baseUrl}${this.ahoy}/events`), {
             params: { ...page, ...params }
         })
             .pipe(catchError(error => {
@@ -2245,7 +2277,7 @@ class AhoyService {
         const baseUrl = HelperService.getBaseUrlMicroService(service);
         const page = HelperService.getPagingParams(paging);
         return this.http
-            .get(`${baseUrl}${this.ahoy}/messages`, {
+            .get(this.buildUrl(`${baseUrl}${this.ahoy}/messages`), {
             params: { ...page, ...params }
         })
             .pipe(catchError(error => {
@@ -2257,7 +2289,7 @@ class AhoyService {
         const baseUrl = HelperService.getBaseUrlMicroService(service);
         const page = HelperService.getPagingParams(paging);
         return this.http
-            .get(`${baseUrl}${this.ahoy}/visits`, {
+            .get(this.buildUrl(`${baseUrl}${this.ahoy}/visits`), {
             params: { ...page, ...params }
         })
             .pipe(catchError(error => {
@@ -2269,7 +2301,7 @@ class AhoyService {
         const baseUrl = HelperService.getBaseUrlMicroService(service);
         const page = HelperService.getPagingParams(paging);
         return this.http
-            .get(`${baseUrl}/versions/get_all`, {
+            .get(this.buildUrl(`${baseUrl}/versions/get_all`), {
             params: { ...page, ...params }
         })
             .pipe(catchError(error => {
@@ -2281,7 +2313,7 @@ class AhoyService {
         const baseUrl = HelperService.getBaseUrlMicroService(service);
         const page = HelperService.getPagingParams(paging);
         return this.http
-            .get(`${baseUrl}/events/get_all`, {
+            .get(this.buildUrl(`${baseUrl}/events/get_all`), {
             params: { ...page, ...params }
         })
             .pipe(catchError(error => {
@@ -2297,7 +2329,7 @@ class AhoyService {
             this.toast.showToast(error);
         }
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: AhoyService, deps: [{ token: i1$2.HttpClient }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: AhoyService, deps: [{ token: i1$1.HttpClient }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: AhoyService, providedIn: 'root' }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: AhoyService, decorators: [{
@@ -2305,7 +2337,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
             args: [{
                     providedIn: 'root'
                 }]
-        }], ctorParameters: () => [{ type: i1$2.HttpClient }, { type: i0.Injector }] });
+        }], ctorParameters: () => [{ type: i1$1.HttpClient }, { type: i0.Injector }] });
 
 class CommonService {
     constructor(api) {
@@ -2348,7 +2380,7 @@ class CommonService {
         return this.api.put(`${NEWSLETTER_SUBSCRIPTION_PATH}/${newsletterId}/toggle`, param);
     }
     unsubscribeNewsletter(token) {
-        return this.api.get(`/${NEWSLETTER_UNSUBSCRIBE_PATH}?token=${token}`);
+        return this.api.get(`${NEWSLETTER_UNSUBSCRIBE_PATH}?token=${token}`);
     }
     // FAQ
     getFaq(params) {
@@ -2958,7 +2990,7 @@ class McpJsonRpcService {
             return res.result;
         }));
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: McpJsonRpcService, deps: [{ token: i1$2.HttpClient }, { token: i1.AppConfigService }, { token: i2.Store }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: McpJsonRpcService, deps: [{ token: i1$1.HttpClient }, { token: i2.AppConfigService }, { token: i3$1.Store }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: McpJsonRpcService, providedIn: 'root' }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: McpJsonRpcService, decorators: [{
@@ -2966,7 +2998,99 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
             args: [{
                     providedIn: 'root'
                 }]
-        }], ctorParameters: () => [{ type: i1$2.HttpClient }, { type: i1.AppConfigService }, { type: i2.Store }] });
+        }], ctorParameters: () => [{ type: i1$1.HttpClient }, { type: i2.AppConfigService }, { type: i3$1.Store }] });
+
+/* eslint-disable @typescript-eslint/no-explicit-any */
+class MCPOrchestratorService {
+    /**
+     * Dev base — `BRAIN_API_PREFIX` = '/brain-api/v1/'. In prod the
+     * orchestrator is reached via the API-gateway public hostname; we read
+     * it from `links.brain_api` in app config (same convention as
+     * `BrainApiHttpService`).
+     */
+    constructor(http, appConfigService, store) {
+        this.http = http;
+        this.appConfigService = appConfigService;
+        this.store = store;
+    }
+    execute(body) {
+        return this.post('mcp/execute', body);
+    }
+    interpret(body) {
+        return this.post('mcp/interpret', body);
+    }
+    confirm(body) {
+        return this.post('mcp/confirm', body);
+    }
+    post(path, body) {
+        const base$ = isDevMode()
+            ? of(BRAIN_API_PREFIX.replace(/\/$/, ''))
+            : this.appConfigService.appConfig$.pipe(take(1), switchMap(c => {
+                const url = c?.links?.['brain_api'];
+                if (typeof url === 'string' && url.trim()) {
+                    return of(url.trim().replace(/\/$/, ''));
+                }
+                return throwError(() => new Error('Brain API is not configured: set links.brain_api in app configuration.'));
+            }));
+        return base$.pipe(switchMap(base => this.store.pipe(take(1), map((app) => this.pickApiCredentials(app.user?.currentUser ?? null)), switchMap(creds => {
+            if (!creds) {
+                return throwError(() => new Error('PosiWise Brain needs API credentials. Go to /account/details to set or rotate your API keys, then open the active subscription from /account/subscriptions to refresh its credentials.'));
+            }
+            return this.http.post(`${base}/${path}`, body, {
+                headers: this.buildHeaders(creds)
+            });
+        }))));
+    }
+    /**
+     * Pull `(token, userId, clientId?)` for the active session.
+     *
+     * `clientId` comes from `PermissionService.selectedSubscription` — the
+     * canonical "currently-active subscription" on this frontend, set when
+     * the user picks/lands on a subscription. Every other place in the
+     * codebase that needs subscription context (mailbox, chatbox, search,
+     * dashboard, admin lists) reads from the same static. Without it,
+     * downstream MCP tools that require subscription scope (e.g.
+     * `cloudolive-api.count_reconciled_account_inputs`) reject the call
+     * with `McpError: This tool requires subscription context. Please
+     * provide api_client_id parameter`.
+     *
+     * `api_client_id` does NOT live on the `User` interface — it's a
+     * property of `Subscription` (`subscription.interface.ts`). Reading
+     * from the user object would always return `undefined` and silently
+     * drop the header.
+     */
+    pickApiCredentials(user) {
+        if (!user) {
+            return null;
+        }
+        const token = user.api_user_token ?? user.api_keys?.api_user_token;
+        const userId = user.api_user_id ?? user.api_keys?.api_user_id;
+        if (!token || !userId) {
+            return null;
+        }
+        const clientId = PermissionService.selectedSubscription?.api_client_id;
+        return { token, userId, clientId };
+    }
+    buildHeaders(creds) {
+        let h = new HttpHeaders({
+            'Content-Type': 'application/json',
+            'X-API-USER-TOKEN': creds.token,
+            'X-API-USER-ID': creds.userId
+        });
+        if (creds.clientId) {
+            h = h.set('X-API-CLIENT-ID', creds.clientId);
+        }
+        return h;
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: MCPOrchestratorService, deps: [{ token: i1$1.HttpClient }, { token: i2.AppConfigService }, { token: i3$1.Store }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: MCPOrchestratorService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: MCPOrchestratorService, decorators: [{
+            type: Injectable,
+            args: [{
+                    providedIn: 'root'
+                }]
+        }], ctorParameters: () => [{ type: i1$1.HttpClient }, { type: i2.AppConfigService }, { type: i3$1.Store }] });
 
 class WebsocketService {
     constructor(appConfigService, authService) {
@@ -2979,7 +3103,7 @@ class WebsocketService {
             this.webSocket$ = this.webSocketSubject.asObservable().pipe(distinctUntilChanged());
         });
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: WebsocketService, deps: [{ token: i1.AppConfigService }, { token: AuthService }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: WebsocketService, deps: [{ token: i2.AppConfigService }, { token: AuthService }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: WebsocketService, providedIn: 'root' }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: WebsocketService, decorators: [{
@@ -2987,7 +3111,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
             args: [{
                     providedIn: 'root'
                 }]
-        }], ctorParameters: () => [{ type: i1.AppConfigService }, { type: AuthService }] });
+        }], ctorParameters: () => [{ type: i2.AppConfigService }, { type: AuthService }] });
 
 class NotificationService {
     constructor(api, toastrService, socketService) {
@@ -3535,7 +3659,7 @@ class SentryErrorHandler {
             console.error(error, e);
         }
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: SentryErrorHandler, deps: [{ token: i1.AppConfigService }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: SentryErrorHandler, deps: [{ token: i2.AppConfigService }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: SentryErrorHandler, providedIn: 'root' }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: SentryErrorHandler, decorators: [{
@@ -3543,7 +3667,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
             args: [{
                     providedIn: 'root'
                 }]
-        }], ctorParameters: () => [{ type: i1.AppConfigService }] });
+        }], ctorParameters: () => [{ type: i2.AppConfigService }] });
 
 class LogoCacheService {
     constructor() {
@@ -3659,7 +3783,7 @@ class BrainApiHttpService extends BaseHttpService {
             this.baseUrl = isDevMode() ? BRAIN_API_PREFIX : config?.['links']['brain_api'] ?? '';
         });
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: BrainApiHttpService, deps: [{ token: i1$2.HttpClient }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: BrainApiHttpService, deps: [{ token: i1$1.HttpClient }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: BrainApiHttpService, providedIn: 'root' }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImport: i0, type: BrainApiHttpService, decorators: [{
@@ -3667,7 +3791,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
             args: [{
                     providedIn: 'root'
                 }]
-        }], ctorParameters: () => [{ type: i1$2.HttpClient }, { type: i0.Injector }] });
+        }], ctorParameters: () => [{ type: i1$1.HttpClient }, { type: i0.Injector }] });
 
 class BrainApiService {
     constructor(api) {
@@ -3694,5 +3818,5 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.6", ngImpor
  * Generated bundle index. Do not edit.
  */
 
-export { AbTestService, AhoyService, AuthService, BaseHttpService, BrainApiHttpService, BrainApiService, CommonService, CommonServicesModule, CustomPreloadingStrategy, CustomToastService, DashboardService, DataService, FeatureFlagService, FormHelperService, GeoService, GoogleAnalyticsService, GroupService, HopscotchService, IntegrationsApiHttpService, LinkService, LocalStorage, LogoCacheService, MailBoxService, MainApiHttpService, McpJsonRpcService, NgbDateCustomParserFormatter, NotificationService, NumberPickerService, PermissionService, PrimeNgHelper, ProductService, ProfileService, QualificationService, ScriptLoaderService, SecureTokenStorageService, SentryErrorHandler, SeoService, SubscriptionService, TagService, TipsService, UserEffects, UserService, ValidationService, WebsocketService, WindowService };
+export { AbTestService, AhoyService, AuthService, BaseHttpService, BrainApiHttpService, BrainApiService, CommonService, CommonServicesModule, CustomPreloadingStrategy, CustomToastService, DashboardService, DataService, FeatureFlagService, FormHelperService, GeoService, GoogleAnalyticsService, GroupService, HopscotchService, IntegrationsApiHttpService, LinkService, LocalStorage, LogoCacheService, MCPOrchestratorService, MailBoxService, MainApiHttpService, McpJsonRpcService, NgbDateCustomParserFormatter, NotificationService, NumberPickerService, PermissionService, PrimeNgHelper, ProductService, ProfileService, QualificationService, ScriptLoaderService, SecureTokenStorageService, SentryErrorHandler, SeoService, SubscriptionService, TagService, TipsService, UserEffects, UserService, ValidationService, WebsocketService, WindowService };
 //# sourceMappingURL=posiwise-common-services.mjs.map