oip-common 0.4.0 → 0.6.0

package/index.d.ts

@@ -1,10 +1,10 @@
 import * as i0 from '@angular/core';
 import { OnDestroy, OnInit, DestroyRef, WritableSignal, OnChanges, SimpleChanges, Type, InjectionToken, Provider, EventEmitter, Renderer2, EnvironmentProviders } from '@angular/core';
-import { MessageService, ToastMessageOptions, ConfirmationService, MenuItem, FilterMetadata } from 'primeng/api';
-import { ActivatedRoute, QueryParamsHandling, IsActiveMatchOptions, Params, Router, UrlTree } from '@angular/router';
-import { InterpolationParameters, Translation, TranslationObject, TranslateService } from '@ngx-translate/core';
 import * as rxjs from 'rxjs';
 import { Observable, BehaviorSubject, Subscription, Subject } from 'rxjs';
+import { MessageService, ToastMessageOptions, ConfirmationService, MenuItem, FilterMetadata } from 'primeng/api';
+import { Router, ActivatedRoute, QueryParamsHandling, IsActiveMatchOptions, Params, CanActivateChildFn } from '@angular/router';
+import { TranslationObject, InterpolationParameters, Translation, TranslateService } from '@ngx-translate/core';
 import { ContextMenu } from 'primeng/contextmenu';
 import { PaletteDesignToken, Preset } from '@primeuix/themes/types';
 import { PrimeNG } from 'primeng/config';
@@ -22,6 +22,8 @@ interface TopBarDto {
 
 declare class TopBarService {
     topBarItems: TopBarDto[];
+    private readonly activeIdSubject;
+    readonly activeId$: rxjs.Observable<string>;
     private _activeId;
     get availableTopBarItems(): TopBarDto[];
     get activeTopBarItem(): TopBarDto | undefined;
@@ -45,8 +47,10 @@ declare class MsgService {
     error(detail: any, summary?: any, life?: number): void;
     extractErrorMessage(error: unknown, fallback: string): string;
     private extractValidationMessage;
+    private extractApiExceptionMessage;
     private toValidationMessages;
     private getObjectProperty;
+    private getStringProperty;
     errorFromException(error: unknown, fallback: string, summary?: string, life?: number): void;
     contrast(detail: any, summary?: any, life?: number): void;
     secondary(detail: any, summary?: any, life?: number): void;
@@ -81,6 +85,7 @@ interface AppConfig {
     timeFormat: string;
     dateTimeFormat: string;
     timeZone: string;
+    adminMode?: boolean;
 }
 interface LayoutState {
     staticMenuDesktopInactive?: boolean;
@@ -119,6 +124,7 @@ declare class LayoutService {
     dateTimeFormat: i0.Signal<string>;
     monthFormat: i0.Signal<string>;
     timeZone: i0.Signal<string>;
+    adminMode: i0.Signal<boolean>;
     transitionComplete: i0.WritableSignal<boolean>;
     private initialized;
     constructor();
@@ -141,6 +147,10 @@ declare class LayoutService {
     static ɵprov: i0.ɵɵInjectableDeclaration<LayoutService>;
 }
 
+/**
+ * Translations of a single namespace grouped by language code, e.g. { en: {...}, ru: {...} }
+ */
+type TranslationsByLang = Record<string, TranslationObject>;
 interface LanguageDto {
     code: string;
     name: string;
@@ -157,11 +167,30 @@ declare class L10nService {
     private readonly primeNg;
     private readonly layoutService;
     availableLanguages: LanguageDto[];
+    /**
+     * Translations bundled with components, registered at module load time.
+     */
+    private static readonly staticTranslations;
+    /**
+     * Registers translations bundled with a component instead of loading them over HTTP.
+     * Namespaces are taken from the root keys of the passed dictionaries.
+     * Components derived from <c>BaseModuleComponent</c> don't call it directly - it is enough
+     * to declare the static <c>translations</c> field.
+     * @param byLang - Translations grouped by language code
+     * @param namespace - Explicit namespace, needed when the dictionaries are still empty
+     */
+    static registerTranslations(byLang: TranslationsByLang | undefined, namespace?: string): void;
+    constructor();
     /**
      * Loads translations for a specific component
      * @param component - Name of the component to load translations for
      */
     loadComponentTranslations(component: string): Observable<unknown>;
+    /**
+     * Loads translations from an explicit asset URL and merges them into the active language dictionary.
+     * Use this for extension modules whose assets are hosted outside the shell application.
+     */
+    loadTranslationsFromUrl(namespace: string, url: string, lang?: string): Observable<unknown>;
     /**
      * Gets the translated value of a key (or an array of keys)
      * @returns the translated key, or an object of translated keys
@@ -173,6 +202,12 @@ declare class L10nService {
      * @param lang - Language code to load translations for
      */
     private loadTranslations;
+    /**
+     * Merges a translation dictionary into the dictionary of the given language
+     * @param lang - Language code
+     * @param translations - Translations to merge
+     */
+    private mergeTranslation;
     /**
      * Changes the lang currently used
      */
@@ -212,10 +247,11 @@ declare abstract class SecurityService {
     abstract forceRefreshSession(customParams?: RefreshCustomParams, configId?: string): Observable<AuthSessionRefreshResult>;
     abstract getCsrfToken(): Observable<AuthCsrfToken | null>;
     abstract isAdmin(): boolean;
-    abstract authorize(): void;
+    abstract authorize(returnUrl?: string): void;
     abstract payload: BehaviorSubject<any>;
 }
 declare class BffSecurityService implements OnDestroy, SecurityService {
+    static readonly authorizeAfterLogoutReturnUrlKey = "oip.authorizeAfterLogoutReturnUrl";
     private readonly http;
     private readonly authenticated;
     private readonly currentUser;
@@ -231,14 +267,18 @@ declare class BffSecurityService implements OnDestroy, SecurityService {
     forceRefreshSession(): Observable<AuthSessionRefreshResult>;
     getCsrfToken(): Observable<AuthCsrfToken | null>;
     isAdmin(): boolean;
-    authorize(): void;
+    authorize(returnUrl?: string): void;
     ngOnDestroy(): void;
     private applySession;
     private createCurrentUser;
     private splitDisplayName;
     private applyAnonymousSession;
     private createPostForm;
+    private normalizeReturnUrl;
+    private replaceWithUnauthorizedUrl;
+    private storeAuthorizeAfterLogoutReturnUrl;
     private buildUrl;
+    private getBaseUrl;
     static ɵfac: i0.ɵɵFactoryDeclaration<BffSecurityService, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<BffSecurityService>;
 }
@@ -275,8 +315,14 @@ declare enum ContentType {
 declare class HttpClient<SecurityDataType = unknown> {
     protected securityService: SecurityService;
     protected layoutService: LayoutService;
+    protected router: Router;
     baseUrl: string;
     private securityWorker?;
+    /**
+     * Reads the module instance id of the deepest activated route.
+     * The backend uses it to check module instance rights on endpoints that do not carry the id in their contract.
+     */
+    protected getCurrentModuleInstanceId(): number | undefined;
     private abortControllers;
     private customFetch;
     private baseApiParams;
@@ -291,6 +337,7 @@ declare class HttpClient<SecurityDataType = unknown> {
     protected createAbortSignal: (cancelToken: CancelToken) => AbortSignal | undefined;
     abortRequest: (cancelToken: CancelToken) => void;
     request: <T = any, E = any>({ body, secure, path, type, query, format, baseUrl, cancelToken, ...params }: FullRequestParams) => Promise<T>;
+    private authorizeOnUnauthorized;
     private getCsrfRequestParams;
     static ɵfac: i0.ɵɵFactoryDeclaration<HttpClient<any>, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<HttpClient<any>>;
@@ -375,6 +422,16 @@ declare abstract class BaseModuleComponent<TBackendStoreSettings, TLocalStoreSet
      * @type {string}
      */
     title: string;
+    /**
+     * Translations bundled with the component, grouped by language code.
+     * Declare it in a derived component to load translations from the component folder
+     * instead of `assets/i18n`:
+     *
+     * ```ts
+     * static override readonly translations = { en, ru };
+     * ```
+     */
+    static readonly translations: TranslationsByLang | undefined;
     l10nService: L10nService;
     l10n$: Observable<Translation | TranslationObject>;
     canRead: boolean;
@@ -465,13 +522,13 @@ declare abstract class BaseModuleComponent<TBackendStoreSettings, TLocalStoreSet
     /**
      * Starts watching current token roles and maps them to module instance security settings.
      */
-    protected watchSecurityRights(controller?: string, id?: number | undefined): void;
+    protected watchSecurityRights(controller?: string, id?: number | undefined): Promise<void>;
     private resetRightsState;
     private updateRightsState;
     protected hasSecurityRight(roles: string[], securitySettings: SecurityDto[], code: string): boolean;
     protected getSecurity(controller?: string, id?: number | undefined): Promise<SecurityDto[]>;
     protected saveSecurity(request: PutSecurityDto, controller?: string): Promise<unknown>;
-    protected getModuleInstanceSettings<TSettings>(controller?: string, id?: number | undefined): Promise<TSettings>;
+    protected getModuleInstanceSettings<TSettings>(controller?: string): Promise<TSettings>;
     protected saveModuleInstanceSettings<TSettings>(request: {
         id: number;
         settings: TSettings;
@@ -512,7 +569,9 @@ declare class SecurityComponent implements OnChanges, OnInit, OnDestroy {
 declare class UserService {
     private readonly securityService;
     private readonly userProfileApi;
-    private requestedPhotoEmail;
+    private readonly msgService;
+    private readonly translateService;
+    private requestedPhotoKey;
     constructor();
     /**
      * Stores the user's photo as a data URL or binary blob, depending on how it's processed.
@@ -529,10 +588,11 @@ declare class UserService {
     get shortLabel(): string;
     get userName(): string;
     /**
-     * Initiates an HTTP request to fetch the user's photo based on their email,
+     * Initiates an HTTP request to fetch the current user's photo,
      * and updates the `photo` and `photoLoaded` properties accordingly.
      */
     getUserPhoto(): void;
+    refreshUserPhoto(): void;
     /**
      * Converts a Blob image into a Base64 data URL and stores it in the `photo` property.
      *
@@ -540,6 +600,7 @@ declare class UserService {
      */
     private createImageFromBlob;
     private getInitials;
+    private getCurrentUserPhotoKey;
     static ɵfac: i0.ɵɵFactoryDeclaration<UserService, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<UserService>;
 }
@@ -561,6 +622,7 @@ declare class AppTopbar {
     logoService: LogoService;
     private readonly confirmationService;
     private readonly translateService;
+    onActiveTabChange(value: string | number | undefined): void;
     toggleDarkMode(): void;
     logoutKeyDown($event: KeyboardEvent): void;
     confirmLogout(): void;
@@ -600,6 +662,11 @@ interface EditModuleInstanceDto {
     viewRoles?: string[] | null;
     moduleId?: number | null;
 }
+interface ExistModuleDto {
+    moduleId?: number;
+    name?: string | null;
+    currentlyLoaded?: boolean;
+}
 interface FolderModuleSettings {
     html?: string | null;
 }
@@ -610,12 +677,6 @@ interface IntKeyValueDto {
     key?: number;
     value?: string | null;
 }
-interface ModuleDto {
-    moduleId?: number;
-    name?: string | null;
-    settings?: string | null;
-    moduleSecurities?: ModuleSecurityDto[] | null;
-}
 interface ModuleInstanceDto {
     moduleInstanceId?: number;
     moduleId?: number;
@@ -631,14 +692,7 @@ interface ModuleInstanceDto {
     order?: number;
     separator?: boolean;
 }
-interface ModuleSecurityDto {
-    right: string | null;
-    role: string | null;
-}
-interface GetModuleInstanceSettingsParams {
-    id?: number;
-}
-interface GetModuleInstanceSettingsParams2 {
+interface GetModuleInstanceRightsParams {
     id?: number;
 }
 interface DeleteModuleInstanceParams {
@@ -706,11 +760,13 @@ declare class MenuService {
     private readonly resetSource;
     private readonly titleService;
     private readonly menuDataService;
+    private readonly layoutService;
     menuSource$: rxjs.Observable<MenuChangeEvent>;
     resetSource$: rxjs.Observable<unknown>;
     contextMenuItem: any;
     menu: ModuleInstanceDto[];
-    adminMode: boolean;
+    get adminMode(): boolean;
+    set adminMode(value: boolean);
     loadMenu(): Promise<void>;
     /**
      * Handles changes in the menu state.
@@ -731,6 +787,7 @@ declare class MenuService {
 
 declare class MenuApi<SecurityDataType = unknown> extends HttpClient<SecurityDataType> {
     get: (params?: RequestParams) => Promise<ModuleInstanceDto[]>;
+    getModuleInstanceRights: (query: GetModuleInstanceRightsParams, params?: RequestParams) => Promise<string[]>;
     getAdminMenu: (params?: RequestParams) => Promise<ModuleInstanceDto[]>;
     getModules: (params?: RequestParams) => Promise<IntKeyValueDto[]>;
     addModuleInstance: (data: AddModuleInstanceDto, params?: RequestParams) => Promise<void>;
@@ -777,7 +834,6 @@ declare class MenuItemEditDialogComponent {
     private readonly msgService;
     visible: boolean;
     visibleChange: EventEmitter<boolean>;
-    modules: any[];
     roles: string[];
     iconOptions: PrimeIconOption[];
     item: EditModuleInstanceDto;
@@ -848,25 +904,59 @@ declare class NotfoundComponent {
     static ɵcmp: i0.ɵɵComponentDeclaration<NotfoundComponent, "app-notfound", never, {}, {}, never, never, true, never>;
 }
 
-declare class UnauthorizedComponent {
+declare class UnauthorizedComponent implements OnInit {
     protected readonly securityService: SecurityService;
     private readonly route;
-    private readonly router;
+    ngOnInit(): void;
     protected signIn(): void;
     static ɵfac: i0.ɵɵFactoryDeclaration<UnauthorizedComponent, never>;
     static ɵcmp: i0.ɵɵComponentDeclaration<UnauthorizedComponent, "ng-component", never, {}, {}, never, never, true, never>;
 }
 
+declare class AccessComponent {
+    static ɵfac: i0.ɵɵFactoryDeclaration<AccessComponent, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<AccessComponent, "app-access", never, {}, {}, never, never, true, never>;
+}
+
 declare class ErrorComponent {
     static ɵfac: i0.ɵɵFactoryDeclaration<ErrorComponent, never>;
     static ɵcmp: i0.ɵɵComponentDeclaration<ErrorComponent, "app-error", never, {}, {}, never, never, true, never>;
 }
 
+interface UserSettingsDto {
+    preset?: string | null;
+    primary?: string | null;
+    surface?: string | null;
+    darkTheme?: boolean;
+    menuMode?: string | null;
+    language?: string | null;
+    dateFormat?: string | null;
+    timeFormat?: string | null;
+    timeZone?: string | null;
+}
+interface GetUserPhotoByIdParams {
+    userId: number;
+}
+interface PostUserPhotoPayload {
+    files?: Blob;
+}
+
+declare class UserProfileApi<SecurityDataType = unknown> extends HttpClient<SecurityDataType> {
+    getUserPhoto: (params?: RequestParams) => Promise<Blob>;
+    getUserPhotoById: ({ userId, ...query }: GetUserPhotoByIdParams, params?: RequestParams) => Promise<Blob>;
+    postUserPhoto: (data: PostUserPhotoPayload, params?: RequestParams) => Promise<void>;
+    getSettings: (params?: RequestParams) => Promise<UserSettingsDto>;
+    setSettings: (data: UserSettingsDto, params?: RequestParams) => Promise<void>;
+    static ɵfac: i0.ɵɵFactoryDeclaration<UserProfileApi<any>, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<UserProfileApi<any>>;
+}
+
 declare class ProfileComponent {
     readonly userService: UserService;
     readonly msgService: MsgService;
     readonly translateService: TranslateService;
-    onBasicUploadAuto($event: any): void;
+    readonly userProfileApi: UserProfileApi<any>;
+    uploadPhoto(event: any): Promise<void>;
     static ɵfac: i0.ɵɵFactoryDeclaration<ProfileComponent, never>;
     static ɵcmp: i0.ɵɵComponentDeclaration<ProfileComponent, "user-profile", never, {}, {}, never, never, true, never>;
 }
@@ -907,8 +997,47 @@ interface MigrationDto {
     exist: boolean;
 }
 declare class DbMigrationComponent extends BaseModuleComponent<NoSettingsDto, NoSettingsDto> implements OnInit, OnDestroy {
+    static readonly translations: {
+        en: {
+            "db-migration": {
+                migrationManager: string;
+                actions: {
+                    refresh: string;
+                    cleanFilter: string;
+                    applyMigration: string;
+                };
+                columns: {
+                    name: string;
+                    applied: string;
+                    exist: string;
+                    pending: string;
+                };
+                messages: {
+                    errorRefreshing: string;
+                };
+            };
+        };
+        ru: {
+            "db-migration": {
+                migrationManager: string;
+                actions: {
+                    refresh: string;
+                    cleanFilter: string;
+                    applyMigration: string;
+                };
+                columns: {
+                    name: string;
+                    applied: string;
+                    exist: string;
+                    pending: string;
+                };
+                messages: {
+                    errorRefreshing: string;
+                };
+            };
+        };
+    };
     data: MigrationDto[];
-    constructor();
     ngOnInit(): Promise<void>;
     refreshAction(): Promise<void>;
     getData(): Promise<MigrationDto[]>;
@@ -918,17 +1047,22 @@ declare class DbMigrationComponent extends BaseModuleComponent<NoSettingsDto, No
 }
 
 declare class AppModulesComponent implements OnInit {
-    protected modules: ModuleDto[];
+    protected modules: ExistModuleDto[];
     protected msgService: MsgService;
     protected confirmationService: ConfirmationService;
     protected l10nService: L10nService;
     protected titleService: AppTitleService;
+    protected externalModuleManifestUrl: string;
+    protected registeringExternalModule: boolean;
     private moduleService;
+    private extensionModulesService;
     private translationsReady;
     constructor();
     ngOnInit(): Promise<void>;
     refreshAction(): Promise<void>;
-    deleteModule(module: ModuleDto): Promise<void>;
+    protected get canRegisterExternalModule(): boolean;
+    registerExternalModule(): Promise<void>;
+    deleteModule(module: ExistModuleDto): Promise<void>;
     t(key: string): any;
     static ɵfac: i0.ɵɵFactoryDeclaration<AppModulesComponent, never>;
     static ɵcmp: i0.ɵɵComponentDeclaration<AppModulesComponent, "app-modules", never, {}, {}, never, never, true, never>;
@@ -1240,6 +1374,28 @@ declare class DiscussionComponent implements OnChanges, OnDestroy, OnInit {
 }
 
 declare class IframeModuleComponent extends BaseModuleComponent<IframeModuleSettings, IframeModuleSettings> implements OnInit, OnDestroy {
+    static readonly translations: {
+        en: {
+            "iframe-module": {
+                iframeModule: {
+                    urlPlaceholder: string;
+                    settingSaveButtonLabel: string;
+                    emptyUrlMessage: string;
+                    siteLoadingMessage: string;
+                };
+            };
+        };
+        ru: {
+            "iframe-module": {
+                iframeModule: {
+                    urlPlaceholder: string;
+                    settingSaveButtonLabel: string;
+                    emptyUrlMessage: string;
+                    siteLoadingMessage: string;
+                };
+            };
+        };
+    };
     private iframe?;
     private readonly renderer;
     private readonly translate;
@@ -1255,6 +1411,39 @@ declare class IframeModuleComponent extends BaseModuleComponent<IframeModuleSett
     static ɵcmp: i0.ɵɵComponentDeclaration<IframeModuleComponent, "ng-component", never, {}, {}, never, never, true, never>;
 }
 
+declare class ExtensionModuleHostComponent extends BaseModuleComponent<unknown, unknown> implements OnDestroy {
+    private set extensionViewContainer(value);
+    private readonly injector;
+    private readonly environmentInjector;
+    private readonly extensionModulesApi;
+    private viewContainer?;
+    private extensionComponent?;
+    private extensionElement?;
+    private extensionMetadata?;
+    private renderQueued;
+    private destroyed;
+    protected loadError: string | null;
+    private get extensionKey();
+    constructor();
+    reloadExtension(): Promise<void>;
+    protected onModuleInstanceChange(): Promise<void>;
+    protected onSecurityRightsChange(): void;
+    ngOnDestroy(): void;
+    private loadExtensionMetadata;
+    private renderExtension;
+    private queueRenderExtension;
+    private destroyExtensionComponent;
+    private renderFederatedExtension;
+    private loadExtensionTranslations;
+    private buildExtensionI18nUrl;
+    private getExtensionTranslationNamespaces;
+    private toKebabCase;
+    private updateExtensionContext;
+    private buildUrl;
+    static ɵfac: i0.ɵɵFactoryDeclaration<ExtensionModuleHostComponent, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<ExtensionModuleHostComponent, "ng-component", never, {}, {}, never, never, true, never>;
+}
+
 declare enum ImportanceLevel {
     Unspecified = "Unspecified",
     Low = "Low",
@@ -1345,21 +1534,65 @@ declare class AppTopbarApplicationSwitcherComponent implements OnInit {
  */
 declare class AuthGuardService {
     private readonly oidcSecurityService;
-    private readonly router;
     /**
      * Checks whether the route can be activated.
      * - Returns `true` if the user is authenticated and the token is valid.
      * - Attempts to refresh the token if expired.
-     * - Redirects to `/unauthorized` if not authenticated or refresh fails.
+     * - Starts the authorization flow if not authenticated or refresh fails.
      *
-     * @returns {Observable<boolean | UrlTree>} A stream resolving to true (allow), or UrlTree (redirect).
+     * @returns {Observable<boolean>} A stream resolving to true (allow), or false after starting authorization.
      */
-    canActivate(returnUrl?: string): Observable<boolean | UrlTree>;
-    private getReturnUrl;
+    canActivate(returnUrl?: string): Observable<boolean>;
     static ɵfac: i0.ɵɵFactoryDeclaration<AuthGuardService, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<AuthGuardService>;
 }
 
+/**
+ * Route data flag marking a route that only administrators may open.
+ */
+interface ModuleAccessRouteData {
+    requireAdmin?: boolean;
+}
+/**
+ * Guards module routes against direct navigation without the required rights.
+ *
+ * - Routes flagged with `data: { requireAdmin: true }` require the `admin` role.
+ * - Routes carrying an `:id` segment require the `read` right on that module instance.
+ * - Everything else is left to {@link AuthGuardService}.
+ *
+ * Denied navigation is redirected to the access denied page. This is a UX guard only:
+ * the backend checks the same rights on every module endpoint.
+ */
+declare const moduleAccessGuard: CanActivateChildFn;
+
+/**
+ * Reads the rights the current user has on a module instance.
+ *
+ * Results are cached per instance and dropped whenever the authenticated user changes.
+ */
+declare class ModuleInstanceRightsService {
+    static readonly readRight = "read";
+    private readonly menuApi;
+    private readonly securityService;
+    private readonly cache;
+    private cachedIdentity;
+    constructor();
+    /**
+     * Gets the rights of the current user on the given module instance.
+     */
+    getRights(moduleInstanceId: number): Promise<string[]>;
+    /**
+     * Checks whether the current user has the `read` right on the given module instance.
+     */
+    canRead(moduleInstanceId: number): Promise<boolean>;
+    /**
+     * Drops every cached result, for example after module security was changed.
+     */
+    clearCache(): void;
+    static ɵfac: i0.ɵɵFactoryDeclaration<ModuleInstanceRightsService, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<ModuleInstanceRightsService>;
+}
+
 declare class NotificationService {
     private connection;
     private securityService;
@@ -1402,6 +1635,13 @@ declare class TableFilterService {
     static ɵprov: i0.ɵɵInjectableDeclaration<TableFilterService>;
 }
 
+declare class ExtensionLoaderService {
+    private readonly loadedScripts;
+    loadScript(scriptUrl: string): Promise<void>;
+    static ɵfac: i0.ɵɵFactoryDeclaration<ExtensionLoaderService, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<ExtensionLoaderService>;
+}
+
 interface AppThemePreset {
     id: string;
     label?: string;
@@ -1420,18 +1660,93 @@ declare function provideAppThemes(themes: AppThemePreset[], options?: ProvideApp
 declare function mergeWithDefaults(themes: AppThemePreset[]): EnvironmentProviders;
 declare function replaceDefaults(themes: AppThemePreset[]): EnvironmentProviders;
 
+declare const defaultTheme: AppThemePreset[];
+
 declare function provideOip(): i0.EnvironmentProviders;
 
 declare const langIntercept: HttpInterceptorFn;
 
+interface OipExtensionManifest {
+    key: string;
+    name: string;
+    version: string;
+    loadType?: OipExtensionLoadType;
+    elementName?: string | null;
+    scriptUrl?: string | null;
+    remoteEntryUrl?: string | null;
+    exposedModule?: string | null;
+    componentName?: string | null;
+    apiBaseUrl: string;
+    icon?: string | null;
+    description?: string | null;
+    permissions?: unknown;
+    settingsSchema?: unknown;
+}
+type OipExtensionLoadType = 'moduleFederation' | 'customElement';
+interface OipExtensionModuleMetadata {
+    moduleId: number;
+    name: string;
+    settings?: string | null;
+    kind: number;
+    manifestUrl?: string | null;
+    extensionKey?: string | null;
+    loadType?: OipExtensionLoadType | null;
+    elementName?: string | null;
+    scriptUrl?: string | null;
+    remoteEntryUrl?: string | null;
+    exposedModule?: string | null;
+    componentName?: string | null;
+    apiBaseUrl?: string | null;
+    version?: string | null;
+}
+interface OipExtensionHostContext {
+    moduleInstanceId: number | undefined;
+    extensionKey: string;
+    apiBasePath: string;
+    settings: unknown;
+    locale?: string;
+    theme?: unknown;
+    user?: unknown;
+    activeTabId?: string;
+    permissions: {
+        canRead: boolean;
+        canEdit: boolean;
+        canDelete: boolean;
+    };
+}
+interface OipExtensionNotifyEvent {
+    severity?: 'success' | 'info' | 'warn' | 'error';
+    summary?: string;
+    detail?: string;
+}
+interface OipExtensionNavigateEvent {
+    commands?: unknown[];
+    url?: string;
+}
+
+declare const OIP_EXTENSION_EVENTS: {
+    readonly contextChange: "oip:context-change";
+    readonly titleChange: "oip:title-change";
+    readonly settingsChange: "oip:settings-change";
+    readonly notify: "oip:notify";
+    readonly navigate: "oip:navigate";
+    readonly error: "oip:error";
+};
+declare function emitOipTitleChange(element: HTMLElement, title: string): void;
+declare function emitOipSettingsChange(element: HTMLElement, settings: unknown): void;
+declare function emitOipNotify(element: HTMLElement, notification: OipExtensionNotifyEvent): void;
+declare function emitOipNavigate(element: HTMLElement, navigation: OipExtensionNavigateEvent): void;
+declare function emitOipError(element: HTMLElement, error: unknown): void;
+declare function emitOipContextChange(element: HTMLElement, context: OipExtensionHostContext): void;
+
 declare class FolderModuleApi<SecurityDataType = unknown> extends HttpClient<SecurityDataType> {
-    getModuleInstanceSettings: (query: GetModuleInstanceSettingsParams, params?: RequestParams) => Promise<FolderModuleSettings>;
+    getModuleInstanceSettings: (params?: RequestParams) => Promise<FolderModuleSettings>;
     static ɵfac: i0.ɵɵFactoryDeclaration<FolderModuleApi<any>, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<FolderModuleApi<any>>;
 }
 
 declare class IframeModuleApi<SecurityDataType = unknown> extends HttpClient<SecurityDataType> {
-    getModuleInstanceSettings: (query: GetModuleInstanceSettingsParams2, params?: RequestParams) => Promise<IframeModuleSettings>;
+    getModuleInstanceSettings: (params?: RequestParams) => Promise<IframeModuleSettings>;
     static ɵfac: i0.ɵɵFactoryDeclaration<IframeModuleApi<any>, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<IframeModuleApi<any>>;
 }
@@ -1456,33 +1771,6 @@ declare class ApplicationsApi<SecurityDataType = unknown> extends HttpClient<Sec
     static ɵprov: i0.ɵɵInjectableDeclaration<ApplicationsApi<any>>;
 }
 
-interface UserSettingsDto {
-    preset?: string | null;
-    primary?: string | null;
-    surface?: string | null;
-    darkTheme?: boolean;
-    menuMode?: string | null;
-    language?: string | null;
-    dateFormat?: string | null;
-    timeFormat?: string | null;
-    timeZone?: string | null;
-}
-interface GetUserPhotoParams {
-    email?: string;
-}
-interface PostUserPhotoPayload {
-    files?: File;
-}
-
-declare class UserProfileApi<SecurityDataType = unknown> extends HttpClient<SecurityDataType> {
-    getUserPhoto: (query: GetUserPhotoParams, params?: RequestParams) => Promise<File>;
-    postUserPhoto: (data: PostUserPhotoPayload, params?: RequestParams) => Promise<void>;
-    getSettings: (params?: RequestParams) => Promise<UserSettingsDto>;
-    setSettings: (data: UserSettingsDto, params?: RequestParams) => Promise<void>;
-    static ɵfac: i0.ɵɵFactoryDeclaration<UserProfileApi<any>, never>;
-    static ɵprov: i0.ɵɵInjectableDeclaration<UserProfileApi<any>>;
-}
-
 declare function convertToPrimeNgDateFormat(dateformat: string): string;
 
 declare class NotificationApi<SecurityDataType = unknown> extends HttpClient<SecurityDataType> {
@@ -1494,5 +1782,47 @@ declare class NotificationApi<SecurityDataType = unknown> extends HttpClient<Sec
     static ɵprov: i0.ɵɵInjectableDeclaration<NotificationApi<any>>;
 }
 
-export { APP_THEME_PRESETS, APP_THEME_PRESETS_MERGE_MODE, AppConfiguratorComponent, AppFloatingConfiguratorComponent, AppLayoutComponent, AppModulesComponent, AppTopbar, AppTopbarApplicationSwitcherComponent, ApplicationRegistryService, ApplicationsApi, ApplicationsComponent, AuthGuardService, BaseModuleComponent, BffSecurityService, ConfigComponent, ContentType, DbMigrationComponent, DiscussionComponent, ErrorComponent, FolderModuleApi, FooterComponent, HttpClient, IframeModuleApi, IframeModuleComponent, L10nService, LOGO_COMPONENT_TOKEN, LayoutService, LogoComponent, LogoService, MenuComponent, MenuService, MsgService, NotfoundComponent, NotificationApi, NotificationService, ProfileComponent, SecurityApi, SecurityComponent, SecurityService, SidebarComponent, TableFilterService, TopBarService, UnauthorizedComponent, UserNotificationsComponent, UserProfileApi, UserService, convertToPrimeNgDateFormat, langIntercept, mergeWithDefaults, provideAppThemes, provideLogoComponent, provideOip, replaceDefaults };
-export type { AppConfig, AppThemePreset, AppThemePresetMergeMode, AuthCsrfToken, LanguageDto, MenuChangeEvent, NoSettingsDto, PutSecurityDto, RequestParams, SecurityDto, TopBarDto };
+declare class CustomElementExtensionModuleHostComponent extends BaseModuleComponent<unknown, unknown> implements OnDestroy {
+    private set extensionContainer(value);
+    private readonly extensionLoader;
+    private readonly router;
+    private readonly hostChangeDetectorRef;
+    private readonly extensionModulesApi;
+    private container?;
+    private extensionElement?;
+    private extensionMetadata?;
+    private removeListeners;
+    private renderQueued;
+    private activeTabSyncQueued;
+    private activeTabId;
+    private destroyed;
+    protected loadError: string | null;
+    protected get showContent(): boolean;
+    protected get showSettings(): boolean;
+    protected get showSecurity(): boolean;
+    private get extensionKey();
+    constructor();
+    protected onModuleInstanceChange(): Promise<void>;
+    protected onSecurityRightsChange(): void;
+    ngOnDestroy(): void;
+    reloadExtension(): Promise<void>;
+    private loadExtensionMetadata;
+    private renderExtension;
+    private queueRenderExtension;
+    private isActiveTab;
+    private queueActiveTabSync;
+    private getCurrentActiveTabId;
+    private updateExtensionContext;
+    private attachListeners;
+    private buildUrl;
+    private loadExtensionTranslations;
+    private buildExtensionI18nUrl;
+    private addListener;
+    private destroyExtensionElement;
+    private renderCustomElementExtension;
+    static ɵfac: i0.ɵɵFactoryDeclaration<CustomElementExtensionModuleHostComponent, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<CustomElementExtensionModuleHostComponent, "ng-component", never, {}, {}, never, never, true, never>;
+}
+
+export { APP_THEME_PRESETS, APP_THEME_PRESETS_MERGE_MODE, AccessComponent, AppConfiguratorComponent, AppFloatingConfiguratorComponent, AppLayoutComponent, AppModulesComponent, AppTopbar, AppTopbarApplicationSwitcherComponent, ApplicationRegistryService, ApplicationsApi, ApplicationsComponent, AuthGuardService, BaseModuleComponent, BffSecurityService, ConfigComponent, ContentType, CustomElementExtensionModuleHostComponent, DbMigrationComponent, DiscussionComponent, ErrorComponent, ExtensionLoaderService, ExtensionModuleHostComponent, FolderModuleApi, FooterComponent, HttpClient, IframeModuleApi, IframeModuleComponent, L10nService, LOGO_COMPONENT_TOKEN, LayoutService, LogoComponent, LogoService, MenuComponent, MenuService, ModuleInstanceRightsService, MsgService, NotfoundComponent, NotificationApi, NotificationService, OIP_EXTENSION_EVENTS, ProfileComponent, SecurityApi, SecurityComponent, SecurityService, SidebarComponent, TableFilterService, TopBarService, UnauthorizedComponent, UserNotificationsComponent, UserProfileApi, UserService, convertToPrimeNgDateFormat, defaultTheme, emitOipContextChange, emitOipError, emitOipNavigate, emitOipNotify, emitOipSettingsChange, emitOipTitleChange, langIntercept, mergeWithDefaults, moduleAccessGuard, provideAppThemes, provideLogoComponent, provideOip, replaceDefaults };
+export type { AppConfig, AppThemePreset, AppThemePresetMergeMode, AuthCsrfToken, LanguageDto, MenuChangeEvent, ModuleAccessRouteData, NoSettingsDto, OipExtensionHostContext, OipExtensionLoadType, OipExtensionManifest, OipExtensionModuleMetadata, OipExtensionNavigateEvent, OipExtensionNotifyEvent, PutSecurityDto, RequestParams, SecurityDto, TopBarDto };