@valtimo/plugin 13.49.1 → 13.50.1

package/fesm2022/valtimo-plugin.mjs

@@ -1,6 +1,6 @@
 import * as i0 from '@angular/core';
-import { InjectionToken, Inject, Injectable, signal, Pipe, NgModule, EventEmitter, Output, Input, Component, ViewContainerRef, ViewChild, ChangeDetectionStrategy, ViewChildren } from '@angular/core';
-import { BehaviorSubject, combineLatest, tap, take, Subscription, map as map$1, switchMap, throwError, forkJoin, of, skip, filter, Subject, catchError } from 'rxjs';
+import { InjectionToken, Inject, Injectable, signal, Pipe, NgModule, EventEmitter, Output, Input, Component, ViewContainerRef, ViewChild, ChangeDetectionStrategy, forwardRef, inject, Injector, ViewChildren } from '@angular/core';
+import { BehaviorSubject, combineLatest, tap, take, Subscription, switchMap, map as map$1, of, defer, catchError, forkJoin, shareReplay, throwError, skip, filter, Subject } from 'rxjs';
 import { map, tap as tap$1 } from 'rxjs/operators';
 import * as i2 from '@ngx-translate/core';
 import { TranslateModule } from '@ngx-translate/core';
@@ -14,8 +14,10 @@ import { RouterModule } from '@angular/router';
 import * as i1$1 from '@angular/common';
 import { CommonModule } from '@angular/common';
 import * as i2$2 from '@valtimo/components';
-import { ParagraphModule, FormModule, InputModule, FitPageDirective, ValuePathSelectorPrefix, SelectModule, CarbonMultiInputModule, RadioModule, InputLabelModule, CARBON_THEME, CurrentCarbonTheme, OverflowMenuComponent, OverflowMenuOptionComponent, ReadOnlyDirective, VModalComponent, MultiInputFormModule, TooltipIconModule, ValtimoCdsModalDirective, VModalModule, DatePickerModule as DatePickerModule$1 } from '@valtimo/components';
+import { ParagraphModule, FormModule, InputModule, CurrentCarbonTheme, SidePanelService, CdsThemeService, FitPageDirective, ValuePathSelectorPrefix, SelectModule, CarbonMultiInputModule, RadioModule, InputLabelModule, CARBON_THEME, OverflowMenuComponent, OverflowMenuOptionComponent, ReadOnlyDirective, VModalComponent, MultiInputFormModule, TooltipIconModule, ValtimoCdsModalDirective, VModalModule, DatePickerModule as DatePickerModule$1 } from '@valtimo/components';
 import { validate } from 'uuid';
+import * as i1$6 from '@valtimo/document';
+import { DocumentService } from '@valtimo/document';
 import * as i1$3 from 'carbon-components-angular';
 import { LoadingModule, ComboBoxModule, LayerModule, NotificationModule, ToggleModule, ButtonModule, IconModule, DatePickerInputModule, DatePickerModule, TimePickerModule, ModalModule, InputModule as InputModule$1 } from 'carbon-components-angular';
 import { AuthGuardService } from '@valtimo/security';
@@ -25,7 +27,6 @@ import * as i7 from 'carbon-components-angular/dropdown';
 import flatpickr from 'flatpickr';
 import { Add16, TrashCan16, DataTable16, Checkmark16 } from '@carbon/icons';
 import * as i1$5 from '@valtimo/resource';
-import * as i1$6 from '@valtimo/document';
 import * as i4 from '@valtimo/process';
 
 /*
@@ -769,6 +770,41 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.25", ngImpo
                 }]
         }], ctorParameters: () => [{ type: i1.HttpClient }, { type: i2$1.ConfigService }] });
 
+/*
+ * Copyright 2015-2026 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+class ExternalPluginSidePanelService extends BaseApiService {
+    constructor(httpClient, configService) {
+        super(httpClient, configService);
+        this.httpClient = httpClient;
+        this.configService = configService;
+    }
+    getSidePanel(configurationId, bundleKey) {
+        const params = bundleKey ? new HttpParams().set('bundleKey', bundleKey) : undefined;
+        return this.httpClient.get(this.getApiUrl(`/v1/external-plugin/configuration/${configurationId}/side-panel`), { params });
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.25", ngImport: i0, type: ExternalPluginSidePanelService, deps: [{ token: i1.HttpClient }, { token: i2$1.ConfigService }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.25", ngImport: i0, type: ExternalPluginSidePanelService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.25", ngImport: i0, type: ExternalPluginSidePanelService, decorators: [{
+            type: Injectable,
+            args: [{
+                    providedIn: 'root',
+                }]
+        }], ctorParameters: () => [{ type: i1.HttpClient }, { type: i2$1.ConfigService }] });
+
 /*
  * Copyright 2015-2025 Ritense BV, the Netherlands.
  *
@@ -896,6 +932,22 @@ function isExternalPluginDefinitionIncompatible(definition) {
  * limitations under the License.
  */
 
+/*
+ * Copyright 2015-2026 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
 /*
  * Copyright 2015-2025 Ritense BV, the Netherlands.
  *
@@ -1346,6 +1398,75 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.25", ngImpo
                 }]
         }] });
 
+/*
+ * Copyright 2015-2026 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Side-panel content for an external-plugin `side-panel` bundle. Owns its own user-token session,
+ * so the token lives exactly as long as the panel content.
+ */
+class ExternalPluginSidePanelComponent {
+    constructor(sidePanelApiService, sessionService) {
+        this.sidePanelApiService = sidePanelApiService;
+        this.sessionService = sessionService;
+        this.bundleKey = null;
+        this.context = {};
+        this.$iframeReady = signal(false);
+        this.$panel = signal(null);
+        this.$pluginDataUrl = signal(null);
+        this.$state = signal('loading');
+        this._subscriptions = new Subscription();
+    }
+    ngOnInit() {
+        this._subscriptions.add(this.sidePanelApiService
+            .getSidePanel(this.configurationId, this.bundleKey)
+            .pipe(switchMap(panel => this.sessionService.startSession(panel.configurationId).pipe(map$1(() => panel))))
+            .subscribe({
+            next: panel => {
+                this.$panel.set(panel);
+                this.$pluginDataUrl.set(derivePluginDataUrl(panel.bundleUrl));
+                this.$state.set('ready');
+            },
+            error: () => this.$state.set('error'),
+        }));
+    }
+    ngOnDestroy() {
+        this._subscriptions.unsubscribe();
+    }
+    onIframeReady() {
+        this.$iframeReady.set(true);
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.25", ngImport: i0, type: ExternalPluginSidePanelComponent, deps: [{ token: ExternalPluginSidePanelService }, { token: ExternalPluginSessionService }], target: i0.ɵɵFactoryTarget.Component }); }
+    static { this.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "19.2.25", type: ExternalPluginSidePanelComponent, isStandalone: true, selector: "valtimo-external-plugin-side-panel", inputs: { bundleKey: "bundleKey", configurationId: "configurationId", context: "context" }, providers: [ExternalPluginSessionService], ngImport: i0, template: "<!--\n  ~ Copyright 2015-2026 Ritense BV, the Netherlands.\n  ~\n  ~ Licensed under EUPL, Version 1.2 (the \"License\");\n  ~ you may not use this file except in compliance with the License.\n  ~ You may obtain a copy of the License at\n  ~\n  ~ https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n  ~\n  ~ Unless required by applicable law or agreed to in writing, software\n  ~ distributed under the License is distributed on an \"AS IS\" basis,\n  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n  ~ See the License for the specific language governing permissions and\n  ~ limitations under the License.\n  -->\n\n<div class=\"external-plugin-side-panel\">\n  @switch ($state()) {\n    @case ('loading') {\n      <div class=\"external-plugin-side-panel__status\">\n        <cds-loading [isActive]=\"true\" [overlay]=\"false\" size=\"normal\"></cds-loading>\n      </div>\n    }\n\n    @case ('error') {\n      <div class=\"external-plugin-side-panel__status external-plugin-side-panel__status--error\">\n        {{ 'sidePanel.loadError' | translate }}\n      </div>\n    }\n\n    @case ('ready') {\n      @if (!$iframeReady()) {\n        <div class=\"external-plugin-side-panel__status\">\n          <cds-loading [isActive]=\"true\" [overlay]=\"false\" size=\"normal\"></cds-loading>\n        </div>\n      }\n\n      <valtimo-external-plugin-iframe\n        [allowedEndpoints]=\"sessionService.$allowedEndpoints()\"\n        [bundleUrl]=\"$panel()!.bundleUrl\"\n        [configurationId]=\"$panel()!.configurationId\"\n        [context]=\"context\"\n        [pluginDataUrl]=\"$pluginDataUrl()\"\n        [userToken]=\"sessionService.$userToken()\"\n        (readyEvent)=\"onIframeReady()\"\n      ></valtimo-external-plugin-iframe>\n    }\n  }\n</div>\n", styles: [".external-plugin-side-panel{display:flex;flex-direction:column;height:100%}.external-plugin-side-panel ::ng-deep valtimo-external-plugin-iframe{display:block;flex:1;min-height:0}.external-plugin-side-panel ::ng-deep .external-plugin-iframe{width:100%;height:100%;border:0}.external-plugin-side-panel__status{display:flex;align-items:center;justify-content:center;padding:var(--cds-spacing-07);color:var(--cds-text-secondary)}.external-plugin-side-panel__status--error{color:var(--cds-text-error)}\n/*!\n * Copyright 2015-2026 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n"], dependencies: [{ kind: "ngmodule", type: i0.forwardRef(() => CommonModule) }, { kind: "ngmodule", type: i0.forwardRef(() => LoadingModule) }, { kind: "component", type: i0.forwardRef(() => i1$3.Loading), selector: "cds-loading, ibm-loading", inputs: ["title", "isActive", "size", "overlay"] }, { kind: "ngmodule", type: i0.forwardRef(() => TranslateModule) }, { kind: "pipe", type: i0.forwardRef(() => i2.TranslatePipe), name: "translate" }, { kind: "component", type: i0.forwardRef(() => ExternalPluginIframeComponent), selector: "valtimo-external-plugin-iframe", inputs: ["bundleUrl", "context", "prefillConfiguration", "userToken", "pluginDataUrl", "allowedEndpoints", "configurationId", "autoHeight"], outputs: ["configurationChangedEvent", "readyEvent", "taskCompletedEvent", "submitTaskEvent"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.25", ngImport: i0, type: ExternalPluginSidePanelComponent, decorators: [{
+            type: Component,
+            args: [{ standalone: true, selector: 'valtimo-external-plugin-side-panel', changeDetection: ChangeDetectionStrategy.OnPush, providers: [ExternalPluginSessionService], imports: [
+                        CommonModule,
+                        LoadingModule,
+                        TranslateModule,
+                        forwardRef(() => ExternalPluginIframeComponent),
+                    ], template: "<!--\n  ~ Copyright 2015-2026 Ritense BV, the Netherlands.\n  ~\n  ~ Licensed under EUPL, Version 1.2 (the \"License\");\n  ~ you may not use this file except in compliance with the License.\n  ~ You may obtain a copy of the License at\n  ~\n  ~ https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n  ~\n  ~ Unless required by applicable law or agreed to in writing, software\n  ~ distributed under the License is distributed on an \"AS IS\" basis,\n  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n  ~ See the License for the specific language governing permissions and\n  ~ limitations under the License.\n  -->\n\n<div class=\"external-plugin-side-panel\">\n  @switch ($state()) {\n    @case ('loading') {\n      <div class=\"external-plugin-side-panel__status\">\n        <cds-loading [isActive]=\"true\" [overlay]=\"false\" size=\"normal\"></cds-loading>\n      </div>\n    }\n\n    @case ('error') {\n      <div class=\"external-plugin-side-panel__status external-plugin-side-panel__status--error\">\n        {{ 'sidePanel.loadError' | translate }}\n      </div>\n    }\n\n    @case ('ready') {\n      @if (!$iframeReady()) {\n        <div class=\"external-plugin-side-panel__status\">\n          <cds-loading [isActive]=\"true\" [overlay]=\"false\" size=\"normal\"></cds-loading>\n        </div>\n      }\n\n      <valtimo-external-plugin-iframe\n        [allowedEndpoints]=\"sessionService.$allowedEndpoints()\"\n        [bundleUrl]=\"$panel()!.bundleUrl\"\n        [configurationId]=\"$panel()!.configurationId\"\n        [context]=\"context\"\n        [pluginDataUrl]=\"$pluginDataUrl()\"\n        [userToken]=\"sessionService.$userToken()\"\n        (readyEvent)=\"onIframeReady()\"\n      ></valtimo-external-plugin-iframe>\n    }\n  }\n</div>\n", styles: [".external-plugin-side-panel{display:flex;flex-direction:column;height:100%}.external-plugin-side-panel ::ng-deep valtimo-external-plugin-iframe{display:block;flex:1;min-height:0}.external-plugin-side-panel ::ng-deep .external-plugin-iframe{width:100%;height:100%;border:0}.external-plugin-side-panel__status{display:flex;align-items:center;justify-content:center;padding:var(--cds-spacing-07);color:var(--cds-text-secondary)}.external-plugin-side-panel__status--error{color:var(--cds-text-error)}\n/*!\n * Copyright 2015-2026 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n"] }]
+        }], ctorParameters: () => [{ type: ExternalPluginSidePanelService }, { type: ExternalPluginSessionService }], propDecorators: { bundleKey: [{
+                type: Input
+            }], configurationId: [{
+                type: Input
+            }], context: [{
+                type: Input
+            }] } });
+
 /*
  * Copyright 2015-2026 Ritense BV, the Netherlands.
  *
@@ -1367,11 +1488,19 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.25", ngImpo
  * scroll.
  */
 const MAX_IFRAME_HEIGHT = 20000;
+const MAX_PANEL_TEXT_LENGTH = 200;
+/** Context keys that name the case; only GZAC's surface context may set them. */
+const CASE_CONTEXT_KEYS = ['documentId', 'caseDefinitionKey'];
 class ExternalPluginIframeComponent {
-    constructor(_sanitizer, _translateService, _configService) {
+    constructor(_sanitizer, _translateService, _configService, 
+    // Defaults keep subclasses that call super() with the original three arguments working.
+    _sidePanelService = inject(SidePanelService), _cdsThemeService = inject(CdsThemeService), _injector = inject(Injector)) {
         this._sanitizer = _sanitizer;
         this._translateService = _translateService;
         this._configService = _configService;
+        this._sidePanelService = _sidePanelService;
+        this._cdsThemeService = _cdsThemeService;
+        this._injector = _injector;
         this.context = {};
         this.prefillConfiguration = null;
         /**
@@ -1407,6 +1536,10 @@ class ExternalPluginIframeComponent {
         this.submitTaskEvent = new EventEmitter();
         this.$trustedUrl = signal(null);
         this._onMessageBound = this._onMessage.bind(this);
+        this._subscriptions = new Subscription();
+        /** Offers waiting for their case to resolve, by key without the case. */
+        this._pendingPanelOffers = new Map();
+        this._theme = CurrentCarbonTheme.WHITE;
         this._apiBasePath = this._deriveApiBasePath();
     }
     ngOnInit() {
@@ -1416,9 +1549,16 @@ class ExternalPluginIframeComponent {
             this.$trustedUrl.set(this._sanitizer.bypassSecurityTrustResourceUrl(this.bundleUrl));
         }
         window.addEventListener('message', this._onMessageBound);
+        this._subscriptions.add(this._cdsThemeService.currentTheme$.subscribe(theme => {
+            const changed = theme !== this._theme;
+            this._theme = theme;
+            if (changed)
+                this._postToIframe('themeChanged', { theme });
+        }));
     }
     ngOnDestroy() {
         window.removeEventListener('message', this._onMessageBound);
+        this._subscriptions.unsubscribe();
     }
     triggerSave() {
         this._postToIframe('save', {});
@@ -1439,7 +1579,7 @@ class ExternalPluginIframeComponent {
     onIframeLoad() {
         this._postToIframe('init', {
             context: this.context,
-            theme: 'white',
+            theme: this._theme,
             locale: this._translateService.currentLang ?? this._translateService.defaultLang ?? 'en',
         });
     }
@@ -1483,7 +1623,140 @@ class ExternalPluginIframeComponent {
             case 'proxyRequest':
                 void this._handleProxyRequest(data.payload);
                 break;
+            case 'offerPanel':
+                this._offerPanel(data.payload);
+                break;
+            case 'withdrawPanel':
+                this._withdrawPanel(data.payload);
+                break;
+        }
+    }
+    /**
+     * Offers one of this configuration's own `side-panel` bundles to the app-wide side panel. The
+     * bundle URL is resolved by GZAC, never taken from the iframe. This surface's context is trusted
+     * and overrides same-named keys in the plugin-supplied context; the keys naming the case are
+     * GZAC's alone.
+     */
+    _offerPanel(payload) {
+        const offer = this._parsePanelOffer(payload);
+        if (!offer || !this.configurationId)
+            return;
+        const configurationId = this.configurationId;
+        const documentId = this._contextString('documentId');
+        // Per case: the same key offered for another case gets a fresh iframe with that case's context.
+        const key = `${this._panelKeyBase(offer.bundleKey, offer.key)}:${encodeURIComponent(documentId ?? '')}`;
+        const pluginContext = Object.fromEntries(Object.entries(offer.context ?? {}).filter(([name]) => !CASE_CONTEXT_KEYS.includes(name)));
+        this._cancelPendingPanelOffer(offer.bundleKey, offer.key);
+        const subscription = this._caseOrigin(documentId).subscribe(origin => {
+            this._pendingPanelOffers.delete(this._panelKeyBase(offer.bundleKey, offer.key));
+            this._sidePanelService.offer({
+                key,
+                title: offer.title,
+                subtitle: offer.subtitle,
+                // Named by GZAC, never by the plugin, so the user can trust which case it is for.
+                origin,
+                pinned: offer.pinned,
+                component: ExternalPluginSidePanelComponent,
+                inputs: {
+                    bundleKey: offer.bundleKey ?? null,
+                    configurationId,
+                    context: { ...pluginContext, ...this.context },
+                },
+            });
+        });
+        if (!subscription.closed) {
+            this._pendingPanelOffers.set(this._panelKeyBase(offer.bundleKey, offer.key), subscription);
+        }
+    }
+    /**
+     * Withdraws the panel only when it still shows this configuration's content under that key, for
+     * whichever case it was offered.
+     */
+    _withdrawPanel(payload) {
+        const { bundleKey, key } = (payload ?? {});
+        if (!this.configurationId || !this._isPanelText(key))
+            return;
+        if (bundleKey !== undefined && !this._isPanelText(bundleKey))
+            return;
+        this._cancelPendingPanelOffer(bundleKey, key);
+        const keyBase = `${this._panelKeyBase(bundleKey, key)}:`;
+        this._sidePanelService.current$.pipe(take(1)).subscribe(current => {
+            if (current?.key.startsWith(keyBase))
+                this._sidePanelService.withdraw(current.key);
+        });
+    }
+    _cancelPendingPanelOffer(bundleKey, key) {
+        const keyBase = this._panelKeyBase(bundleKey, key);
+        this._pendingPanelOffers.get(keyBase)?.unsubscribe();
+        this._pendingPanelOffers.delete(keyBase);
+    }
+    /** Synchronous when the surface names the case; a task form only knows its document. */
+    _caseOrigin(documentId) {
+        if (!documentId)
+            return of(undefined);
+        const caseDefinitionKey = this._contextString('caseDefinitionKey');
+        const caseDefinitionKey$ = caseDefinitionKey
+            ? of(caseDefinitionKey)
+            : defer(() => this._injector.get(DocumentService).getDocument(documentId)).pipe(map$1(document => document?.definitionId?.name || null), catchError(() => of(null)));
+        return caseDefinitionKey$.pipe(map$1(definitionKey => definitionKey
+            ? {
+                route: ['/cases', definitionKey, 'document', documentId],
+                label: this._caseLabel(definitionKey, documentId),
+            }
+            : undefined));
+    }
+    /** E.g. "Inwonerplan #12". Resolved only once shown. */
+    _caseLabel(caseDefinitionKey, documentId) {
+        return defer(() => {
+            const documentService = this._injector.get(DocumentService);
+            return forkJoin({
+                caseDefinition: documentService
+                    .getActiveCaseDefinition(caseDefinitionKey)
+                    .pipe(catchError(() => of(null))),
+                documentDefinition: documentService
+                    .getDocumentDefinition(caseDefinitionKey)
+                    .pipe(catchError(() => of(null))),
+                document: documentService.getDocument(documentId).pipe(catchError(() => of(null))),
+            });
+        }).pipe(map$1(({ caseDefinition, documentDefinition, document }) => {
+            const name = caseDefinition?.name || documentDefinition?.schema?.title || caseDefinitionKey;
+            return document?.sequence ? `${name} #${document.sequence}` : name;
+        }), shareReplay({ bufferSize: 1, refCount: false }));
+    }
+    _contextString(name) {
+        const value = this.context?.[name];
+        return typeof value === 'string' && value ? value : null;
+    }
+    _isPanelText(value) {
+        return typeof value === 'string' && value.length > 0 && value.length <= MAX_PANEL_TEXT_LENGTH;
+    }
+    _panelKeyBase(bundleKey, key) {
+        return `external-plugin:${this.configurationId}:${encodeURIComponent(bundleKey ?? '')}:${encodeURIComponent(key)}`;
+    }
+    _parsePanelOffer(payload) {
+        if (!payload || typeof payload !== 'object')
+            return null;
+        const { bundleKey, key, title, subtitle, pinned, context } = payload;
+        if (!this._isPanelText(key) || !this._isPanelText(title))
+            return null;
+        if (bundleKey !== undefined && !this._isPanelText(bundleKey))
+            return null;
+        if (subtitle !== undefined && !this._isPanelText(subtitle))
+            return null;
+        if (pinned !== undefined && typeof pinned !== 'boolean')
+            return null;
+        if (context !== undefined &&
+            (!context || typeof context !== 'object' || Array.isArray(context))) {
+            return null;
         }
+        return {
+            bundleKey: bundleKey,
+            key,
+            title,
+            subtitle: subtitle,
+            pinned: pinned,
+            context: context,
+        };
     }
     /**
      * Size the iframe to the height its content reported. The iframe is at an opaque origin, so this
@@ -1663,13 +1936,13 @@ class ExternalPluginIframeComponent {
             .replace(/§§/g, '.*');
         return new RegExp(`^${regex}$`).test(pathname);
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.25", ngImport: i0, type: ExternalPluginIframeComponent, deps: [{ token: i3.DomSanitizer }, { token: i2.TranslateService }, { token: i2$1.ConfigService }], target: i0.ɵɵFactoryTarget.Component }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.25", ngImport: i0, type: ExternalPluginIframeComponent, deps: [{ token: i3.DomSanitizer }, { token: i2.TranslateService }, { token: i2$1.ConfigService }, { token: i2$2.SidePanelService }, { token: i2$2.CdsThemeService }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Component }); }
     static { this.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "19.2.25", type: ExternalPluginIframeComponent, isStandalone: true, selector: "valtimo-external-plugin-iframe", inputs: { bundleUrl: "bundleUrl", context: "context", prefillConfiguration: "prefillConfiguration", userToken: "userToken", pluginDataUrl: "pluginDataUrl", allowedEndpoints: "allowedEndpoints", configurationId: "configurationId", autoHeight: "autoHeight" }, outputs: { configurationChangedEvent: "configurationChangedEvent", readyEvent: "readyEvent", taskCompletedEvent: "taskCompletedEvent", submitTaskEvent: "submitTaskEvent" }, viewQueries: [{ propertyName: "iframeRef", first: true, predicate: ["pluginIframe"], descendants: true }], ngImport: i0, template: "<!--\n  ~ Copyright 2015-2026 Ritense BV, the Netherlands.\n  ~\n  ~ Licensed under EUPL, Version 1.2 (the \"License\");\n  ~ you may not use this file except in compliance with the License.\n  ~ You may obtain a copy of the License at\n  ~\n  ~ https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n  ~\n  ~ Unless required by applicable law or agreed to in writing, software\n  ~ distributed under the License is distributed on an \"AS IS\" basis,\n  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n  ~ See the License for the specific language governing permissions and\n  ~ limitations under the License.\n  -->\n\n<!--\n  sandbox is deliberately WITHOUT allow-same-origin (opaque origin, no access to the GZAC session\n  or token \u2014 see the parent-proxy model). `allow-forms` lets a plugin use an idiomatic <form> to\n  submit (e.g. a task-form): without it the browser blocks the submit event before the plugin's\n  handler can forward it via postMessage. It grants nothing beyond what allow-scripts already can\n  (a script can already POST via fetch), and does not weaken origin isolation.\n-->\n<iframe\n  *ngIf=\"$trustedUrl() as url\"\n  #pluginIframe\n  [src]=\"url\"\n  (load)=\"onIframeLoad()\"\n  sandbox=\"allow-scripts allow-forms\"\n  class=\"external-plugin-iframe\"\n></iframe>\n", styles: [":host{display:block;height:100%}.external-plugin-iframe{display:block;width:100%;height:100%;border:none}\n/*!\n * Copyright 2015-2026 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n"], dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "directive", type: i1$1.NgIf, selector: "[ngIf]", inputs: ["ngIf", "ngIfThen", "ngIfElse"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.25", ngImport: i0, type: ExternalPluginIframeComponent, decorators: [{
             type: Component,
             args: [{ standalone: true, selector: 'valtimo-external-plugin-iframe', changeDetection: ChangeDetectionStrategy.OnPush, imports: [CommonModule], template: "<!--\n  ~ Copyright 2015-2026 Ritense BV, the Netherlands.\n  ~\n  ~ Licensed under EUPL, Version 1.2 (the \"License\");\n  ~ you may not use this file except in compliance with the License.\n  ~ You may obtain a copy of the License at\n  ~\n  ~ https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n  ~\n  ~ Unless required by applicable law or agreed to in writing, software\n  ~ distributed under the License is distributed on an \"AS IS\" basis,\n  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n  ~ See the License for the specific language governing permissions and\n  ~ limitations under the License.\n  -->\n\n<!--\n  sandbox is deliberately WITHOUT allow-same-origin (opaque origin, no access to the GZAC session\n  or token \u2014 see the parent-proxy model). `allow-forms` lets a plugin use an idiomatic <form> to\n  submit (e.g. a task-form): without it the browser blocks the submit event before the plugin's\n  handler can forward it via postMessage. It grants nothing beyond what allow-scripts already can\n  (a script can already POST via fetch), and does not weaken origin isolation.\n-->\n<iframe\n  *ngIf=\"$trustedUrl() as url\"\n  #pluginIframe\n  [src]=\"url\"\n  (load)=\"onIframeLoad()\"\n  sandbox=\"allow-scripts allow-forms\"\n  class=\"external-plugin-iframe\"\n></iframe>\n", styles: [":host{display:block;height:100%}.external-plugin-iframe{display:block;width:100%;height:100%;border:none}\n/*!\n * Copyright 2015-2026 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n"] }]
-        }], ctorParameters: () => [{ type: i3.DomSanitizer }, { type: i2.TranslateService }, { type: i2$1.ConfigService }], propDecorators: { iframeRef: [{
+        }], ctorParameters: () => [{ type: i3.DomSanitizer }, { type: i2.TranslateService }, { type: i2$1.ConfigService }, { type: i2$2.SidePanelService }, { type: i2$2.CdsThemeService }, { type: i0.Injector }], propDecorators: { iframeRef: [{
                 type: ViewChild,
                 args: ['pluginIframe']
             }], bundleUrl: [{
@@ -12895,5 +13168,5 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.25", ngImpo
  * Generated bundle index. Do not edit.
  */
 
-export { AddDocumentTrefwoordConfigurationComponent, BESLUITEN_API_CONFIGURATION_TEST_IDS, BesluitenApiConfigurationComponent, BesluitenApiPluginModule, CATALOGI_API_CONFIGURATION_TEST_IDS, CatalogiApiConfigurationComponent, CatalogiApiPluginModule, CompletePortalTaskComponent, CreateMedewerkerZaakRolComponent, CreateNatuurlijkPersoonZaakRolComponent, CreateNietNatuurlijkPersoonZaakRolComponent, CreateOrganisatorischeEenheidZaakRolComponent, CreatePersoonComponent, CreatePortalTaskComponent, CreateVestigingZaakRolComponent, CreateZaakBesluitConfigurationComponent, CreateZaakConfigurationComponent, CreateZaakNotitieConfigurationComponent, CreateZaakObjectConfigurationComponent, CreateZaakResultaatConfigurationComponent, CreateZaakeigenschapComponent, DEFAULT_PLUGIN_CONFIGURATION_TEST_IDS, DOCUMENTEN_API_CONFIGURATION_TEST_IDS, DeleteDocumentLinkConfigurationComponent, DeleteObjectComponent, DeleteZaakResultatenConfigurationComponent, DeleteZaakRolComponent, DeleteZaakeigenschapComponent, DocumentenApiConfigurationComponent, DocumentenApiPluginModule, DocumentenApiPreviewConfigurationComponent, DocumentenApiPreviewPluginModule, DownloadDocumentConfigurationComponent, EXTERNAL_PLUGIN_KEY_PREFIX, EndHersteltermijnComponent, ExactPluginModule, ExternalPluginIframeComponent, ExternalPluginPageComponent, ExternalPluginPageRoutingModule, ExternalPluginPageService, ExternalPluginService, ExternalPluginSessionService, ExternalPluginTaskFormSubmissionService, ExternalPluginUserTokenService, GenerateDocumentConfigurationComponent, GetAuditTrailConfigurationComponent, GetBesluitConfigurationComponent, GetBesluittypeConfigurationComponent, GetEigenschapConfigurationComponent, GetInformatieobjecttypeConfigurationComponent, GetInformatieobjecttypenConfigurationComponent, GetResultaattypeConfigurationComponent, GetResultaattypenConfigurationComponent, GetRoltypeConfigurationComponent, GetRoltypenConfigurationComponent, GetStatustypeConfigurationComponent, GetStatustypenConfigurationComponent, GetTemplateNamesComponent, GetZaakInformatieobjectenComponent, GetZaakbesluitenConfigurationComponent, KLANTINTERACTIES_API_CONFIGURATION_TEST_IDS, KlantinteractiesApiConfigurationComponent, KlantinteractiesApiPluginModule, LinkDocumentToBesluitConfigurationComponent, LinkDocumentToObjectConfigurationComponent, LinkDocumentToZaakConfigurationComponent, LinkUploadedDocumentToZaakConfigurationComponent, NOTIFICATIES_API_CONFIGURATION_TEST_IDS, NotificatiesApiConfigurationComponent, NotificatiesApiPluginModule, OBJECTEN_API_CONFIGURATION_TEST_IDS, OBJECTTYPEN_API_CONFIGURATION_TEST_IDS, OBJECT_TOKEN_AUTHENTICATION_CONFIGURATION_TEST_IDS, OPEN_KLANT_TOKEN_AUTHENTICATION_CONFIGURATION_TEST_IDS, OPEN_NOTIFICATIES_CONFIGURATION_TEST_IDS, OPEN_ZAAK_CONFIGURATION_TEST_IDS, ObjectTokenAuthencationConfigurationComponent, ObjectTokenAuthenticationPluginModule, ObjectenApiConfigurationComponent, ObjectenApiPluginModule, ObjecttypenApiConfigurationComponent, ObjecttypenApiPluginModule, OpenKlantTokenAuthenticationConfigurationComponent, OpenKlantTokenAuthenticationPluginModule, OpenNotificatiesConfigurationComponent, OpenNotificatiesPluginModule, OpenZaakConfigurationComponent, OpenZaakPluginModule, PLUGINS_TOKEN, PLUGIN_CATALOG_TEST_IDS, PLUGIN_EDIT_MODAL_TEST_IDS, PORTAALTAAK_CONFIGURATION_TEST_IDS, PatchZaakBesluitConfigurationComponent, PatchZaakConfigurationComponent, PatchZaakNotitieConfigurationComponent, PluginConfigurationContainerComponent, PluginConfigurationContainerModule, PluginConfigurationMappingComponent, PluginManagementService, PluginService, PluginTranslatePipe, PluginTranslatePipeModule, PluginTranslationService, PortaaltaakConfigurationComponent, PortaaltaakPluginModule, PublishNotificatieConfigurationComponent, ReceiveNotificatieConfigurationComponent, RelateerZakenComponent, SMART_DOCUMENTS_CONFIGURATION_TEST_IDS, SetZaakStatusConfigurationComponent, SetZaakopschortingComponent, SmartDocumentsConfigurationComponent, SmartDocumentsPluginModule, StartHersteltermijnConfigurationComponent, StoreTempDocumentConfigurationComponent, StoreUploadedDocumentConfigurationComponent, StoreUploadedDocumentInPartsConfigurationComponent, UpdateZaakeigenschapComponent, VERZOEK_CONFIGURATION_TEST_IDS, VerzoekConfigurationComponent, VerzoekPluginModule, ZAKEN_API_CONFIGURATION_TEST_IDS, ZAKEN_API_CREATE_ZAAK_ACTION_TEST_IDS, ZakenApiConfigurationComponent, ZakenApiPluginModule, besluitenApiPluginSpecification, catalogiApiPluginSpecification, derivePluginDataUrl, documentenApiPluginSpecification, documentenApiPreviewPluginSpecification, exactPluginSpecification, extractExternalDefinitionId, getExternalPluginDescription, getExternalPluginDisplayName, getExternalPluginName, isExternalPluginDefinitionIncompatible, isExternalPluginKey, klantinteractiesApiPluginSpecification, notificatiesApiPluginSpecification, objectTokenAuthenticationPluginSpecification, objectenApiPluginSpecification, objecttypenApiPluginSpecification, openKlantTokenAuthenticationPluginSpecification, openNotificatiesPluginSpecification, openZaakPluginSpecification, portaaltaakPluginSpecification, smartDocumentsPluginSpecification, toExternalPluginKey, verzoekPluginSpecification, zakenApiPluginSpecification };
+export { AddDocumentTrefwoordConfigurationComponent, BESLUITEN_API_CONFIGURATION_TEST_IDS, BesluitenApiConfigurationComponent, BesluitenApiPluginModule, CATALOGI_API_CONFIGURATION_TEST_IDS, CatalogiApiConfigurationComponent, CatalogiApiPluginModule, CompletePortalTaskComponent, CreateMedewerkerZaakRolComponent, CreateNatuurlijkPersoonZaakRolComponent, CreateNietNatuurlijkPersoonZaakRolComponent, CreateOrganisatorischeEenheidZaakRolComponent, CreatePersoonComponent, CreatePortalTaskComponent, CreateVestigingZaakRolComponent, CreateZaakBesluitConfigurationComponent, CreateZaakConfigurationComponent, CreateZaakNotitieConfigurationComponent, CreateZaakObjectConfigurationComponent, CreateZaakResultaatConfigurationComponent, CreateZaakeigenschapComponent, DEFAULT_PLUGIN_CONFIGURATION_TEST_IDS, DOCUMENTEN_API_CONFIGURATION_TEST_IDS, DeleteDocumentLinkConfigurationComponent, DeleteObjectComponent, DeleteZaakResultatenConfigurationComponent, DeleteZaakRolComponent, DeleteZaakeigenschapComponent, DocumentenApiConfigurationComponent, DocumentenApiPluginModule, DocumentenApiPreviewConfigurationComponent, DocumentenApiPreviewPluginModule, DownloadDocumentConfigurationComponent, EXTERNAL_PLUGIN_KEY_PREFIX, EndHersteltermijnComponent, ExactPluginModule, ExternalPluginIframeComponent, ExternalPluginPageComponent, ExternalPluginPageRoutingModule, ExternalPluginPageService, ExternalPluginService, ExternalPluginSessionService, ExternalPluginSidePanelComponent, ExternalPluginSidePanelService, ExternalPluginTaskFormSubmissionService, ExternalPluginUserTokenService, GenerateDocumentConfigurationComponent, GetAuditTrailConfigurationComponent, GetBesluitConfigurationComponent, GetBesluittypeConfigurationComponent, GetEigenschapConfigurationComponent, GetInformatieobjecttypeConfigurationComponent, GetInformatieobjecttypenConfigurationComponent, GetResultaattypeConfigurationComponent, GetResultaattypenConfigurationComponent, GetRoltypeConfigurationComponent, GetRoltypenConfigurationComponent, GetStatustypeConfigurationComponent, GetStatustypenConfigurationComponent, GetTemplateNamesComponent, GetZaakInformatieobjectenComponent, GetZaakbesluitenConfigurationComponent, KLANTINTERACTIES_API_CONFIGURATION_TEST_IDS, KlantinteractiesApiConfigurationComponent, KlantinteractiesApiPluginModule, LinkDocumentToBesluitConfigurationComponent, LinkDocumentToObjectConfigurationComponent, LinkDocumentToZaakConfigurationComponent, LinkUploadedDocumentToZaakConfigurationComponent, NOTIFICATIES_API_CONFIGURATION_TEST_IDS, NotificatiesApiConfigurationComponent, NotificatiesApiPluginModule, OBJECTEN_API_CONFIGURATION_TEST_IDS, OBJECTTYPEN_API_CONFIGURATION_TEST_IDS, OBJECT_TOKEN_AUTHENTICATION_CONFIGURATION_TEST_IDS, OPEN_KLANT_TOKEN_AUTHENTICATION_CONFIGURATION_TEST_IDS, OPEN_NOTIFICATIES_CONFIGURATION_TEST_IDS, OPEN_ZAAK_CONFIGURATION_TEST_IDS, ObjectTokenAuthencationConfigurationComponent, ObjectTokenAuthenticationPluginModule, ObjectenApiConfigurationComponent, ObjectenApiPluginModule, ObjecttypenApiConfigurationComponent, ObjecttypenApiPluginModule, OpenKlantTokenAuthenticationConfigurationComponent, OpenKlantTokenAuthenticationPluginModule, OpenNotificatiesConfigurationComponent, OpenNotificatiesPluginModule, OpenZaakConfigurationComponent, OpenZaakPluginModule, PLUGINS_TOKEN, PLUGIN_CATALOG_TEST_IDS, PLUGIN_EDIT_MODAL_TEST_IDS, PORTAALTAAK_CONFIGURATION_TEST_IDS, PatchZaakBesluitConfigurationComponent, PatchZaakConfigurationComponent, PatchZaakNotitieConfigurationComponent, PluginConfigurationContainerComponent, PluginConfigurationContainerModule, PluginConfigurationMappingComponent, PluginManagementService, PluginService, PluginTranslatePipe, PluginTranslatePipeModule, PluginTranslationService, PortaaltaakConfigurationComponent, PortaaltaakPluginModule, PublishNotificatieConfigurationComponent, ReceiveNotificatieConfigurationComponent, RelateerZakenComponent, SMART_DOCUMENTS_CONFIGURATION_TEST_IDS, SetZaakStatusConfigurationComponent, SetZaakopschortingComponent, SmartDocumentsConfigurationComponent, SmartDocumentsPluginModule, StartHersteltermijnConfigurationComponent, StoreTempDocumentConfigurationComponent, StoreUploadedDocumentConfigurationComponent, StoreUploadedDocumentInPartsConfigurationComponent, UpdateZaakeigenschapComponent, VERZOEK_CONFIGURATION_TEST_IDS, VerzoekConfigurationComponent, VerzoekPluginModule, ZAKEN_API_CONFIGURATION_TEST_IDS, ZAKEN_API_CREATE_ZAAK_ACTION_TEST_IDS, ZakenApiConfigurationComponent, ZakenApiPluginModule, besluitenApiPluginSpecification, catalogiApiPluginSpecification, derivePluginDataUrl, documentenApiPluginSpecification, documentenApiPreviewPluginSpecification, exactPluginSpecification, extractExternalDefinitionId, getExternalPluginDescription, getExternalPluginDisplayName, getExternalPluginName, isExternalPluginDefinitionIncompatible, isExternalPluginKey, klantinteractiesApiPluginSpecification, notificatiesApiPluginSpecification, objectTokenAuthenticationPluginSpecification, objectenApiPluginSpecification, objecttypenApiPluginSpecification, openKlantTokenAuthenticationPluginSpecification, openNotificatiesPluginSpecification, openZaakPluginSpecification, portaaltaakPluginSpecification, smartDocumentsPluginSpecification, toExternalPluginKey, verzoekPluginSpecification, zakenApiPluginSpecification };
 //# sourceMappingURL=valtimo-plugin.mjs.map