valtech-components 2.0.1006 → 2.0.1007

package/lib/components/organisms/api-keys-modal/api-keys-modal.component.d.ts

@@ -0,0 +1,44 @@
+import { OnInit } from '@angular/core';
+import { ClientApiKey, ClientApiKeyWithSecret } from '../../../services/apikeys/types';
+import * as i0 from "@angular/core";
+/**
+ * `val-api-keys-modal` — gestión de Client API Keys org-scopeadas (ADR-023 fase 6).
+ *
+ * Lista las keys de la org, permite crear (mostrando el secreto UNA vez con copia)
+ * y revocar. Pensado para habilitar integraciones M2M del import de miembros, pero
+ * sirve a cualquier permiso del catálogo. Header canónico (Regla #5).
+ */
+export declare class ApiKeysModalComponent implements OnInit {
+    private i18n;
+    private apiKeys;
+    /** Inyectado por `ModalService.open`. */
+    _modalRef?: {
+        dismiss: (data?: unknown, role?: string) => void;
+    };
+    /** Namespace i18n. */
+    i18nNamespace: string;
+    readonly keys: import("@angular/core").WritableSignal<ClientApiKey[]>;
+    readonly availablePermissions: import("@angular/core").WritableSignal<string[]>;
+    readonly loading: import("@angular/core").WritableSignal<boolean>;
+    readonly showCreate: import("@angular/core").WritableSignal<boolean>;
+    readonly submitting: import("@angular/core").WritableSignal<boolean>;
+    readonly errorMsg: import("@angular/core").WritableSignal<string>;
+    readonly secret: import("@angular/core").WritableSignal<ClientApiKeyWithSecret>;
+    readonly copied: import("@angular/core").WritableSignal<boolean>;
+    name: string;
+    expiresInDays: number | null;
+    readonly selectedPerms: import("@angular/core").WritableSignal<Set<string>>;
+    constructor();
+    ngOnInit(): void;
+    private refresh;
+    openCreate(): void;
+    togglePerm(perm: string, ev: Event): void;
+    submit(): void;
+    revoke(key: ClientApiKey): void;
+    copy(secret: string): Promise<void>;
+    finishSecret(): void;
+    dismiss(): void;
+    t(key: string): string;
+    static ɵfac: i0.ɵɵFactoryDeclaration<ApiKeysModalComponent, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<ApiKeysModalComponent, "val-api-keys-modal", never, { "_modalRef": { "alias": "_modalRef"; "required": false; }; "i18nNamespace": { "alias": "i18nNamespace"; "required": false; }; }, {}, never, never, true, never>;
+}

package/lib/components/organisms/api-keys-modal/api-keys-modal.i18n.d.ts

@@ -0,0 +1,6 @@
+import { LanguagesContent } from '../../../services/i18n/types';
+/**
+ * Defaults i18n (es/en) embebidos en `val-api-keys-modal` (ADR-023).
+ * Auto-registrados si el consumer no proveyó el namespace `Settings.ApiKeysModal`.
+ */
+export declare const API_KEYS_MODAL_I18N: LanguagesContent;

package/lib/components/organisms/member-import-modal/member-import-modal.component.d.ts

@@ -0,0 +1,47 @@
+import { OnInit } from '@angular/core';
+import { ImportMembersResponse, ImportOnConflict, ImportRowResult } from '../../../services/org/types';
+import * as i0 from "@angular/core";
+/**
+ * `val-member-import-modal` — panel de carga masiva de miembros (ADR-023 fase 6).
+ *
+ * El admin pega un CSV (`email,nombre,rol`); el modal lo parsea a filas y llama
+ * `OrgService.importMembers`. Muestra el resultado por-fila (partial success):
+ * `created` / `assigned` / `skipped` / `error`. Header canónico (Regla #5).
+ *
+ * Auto-registra defaults i18n (es/en) en `Settings.ImportModal`.
+ */
+export declare class MemberImportModalComponent implements OnInit {
+    private i18n;
+    private orgService;
+    /** Org destino del import. */
+    orgId: string;
+    /** Nombres de roles disponibles (para el hint). Opcional. */
+    availableRoles: string[];
+    /** Callback tras una importación exitosa (≥1 fila procesada) — refresca la lista. */
+    onSuccess?: () => void;
+    /** Inyectado por `ModalService.open`. */
+    _modalRef?: {
+        dismiss: (data?: unknown, role?: string) => void;
+    };
+    /** Namespace i18n. */
+    i18nNamespace: string;
+    csv: string;
+    onConflict: ImportOnConflict;
+    sendActivation: boolean;
+    readonly submitting: import("@angular/core").WritableSignal<boolean>;
+    readonly errorMsg: import("@angular/core").WritableSignal<string>;
+    readonly results: import("@angular/core").WritableSignal<ImportMembersResponse>;
+    readonly rolesHint: import("@angular/core").Signal<string>;
+    readonly summaryLabel: import("@angular/core").Signal<string>;
+    constructor();
+    ngOnInit(): void;
+    /** Parsea el CSV pegado a filas {email,name,roleName}. Tolera header. */
+    private parseCsv;
+    submit(): void;
+    statusLabel(r: ImportRowResult): string;
+    reset(): void;
+    dismiss(): void;
+    t(key: string): string;
+    static ɵfac: i0.ɵɵFactoryDeclaration<MemberImportModalComponent, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<MemberImportModalComponent, "val-member-import-modal", never, { "orgId": { "alias": "orgId"; "required": false; }; "availableRoles": { "alias": "availableRoles"; "required": false; }; "onSuccess": { "alias": "onSuccess"; "required": false; }; "_modalRef": { "alias": "_modalRef"; "required": false; }; "i18nNamespace": { "alias": "i18nNamespace"; "required": false; }; }, {}, never, never, true, never>;
+}

package/lib/components/organisms/member-import-modal/member-import-modal.i18n.d.ts

@@ -0,0 +1,6 @@
+import { LanguagesContent } from '../../../services/i18n/types';
+/**
+ * Defaults i18n (es/en) embebidos en `val-member-import-modal` (ADR-023).
+ * Auto-registrados si el consumer no proveyó el namespace `Settings.ImportModal`.
+ */
+export declare const MEMBER_IMPORT_MODAL_I18N: LanguagesContent;

package/lib/components/organisms/organization-view/organization-view.component.d.ts

@@ -61,6 +61,7 @@ export declare class OrganizationViewComponent {
     readonly members: import("@angular/core").WritableSignal<MemberDetail[]>;
     readonly membersLoading: import("@angular/core").WritableSignal<boolean>;
     private readonly membersLoadError;
+    readonly membersErrorState: import("@angular/core").Signal<EmptyStateMetadata>;
     readonly membersNextToken: import("@angular/core").WritableSignal<string>;
     readonly loadingMoreMembers: import("@angular/core").WritableSignal<boolean>;
     readonly showAllMembers: import("@angular/core").WritableSignal<boolean>;
@@ -81,12 +82,17 @@ export declare class OrganizationViewComponent {
     readonly viewPermissionsButtonProps: import("@angular/core").Signal<Partial<ButtonMetadata>>;
     readonly transferButtonProps: import("@angular/core").Signal<Partial<ButtonMetadata>>;
     readonly openInviteButtonProps: import("@angular/core").Signal<Partial<ButtonMetadata>>;
+    readonly openImportButtonProps: import("@angular/core").Signal<Partial<ButtonMetadata>>;
+    readonly openApiKeysButtonProps: import("@angular/core").Signal<Partial<ButtonMetadata>>;
     /** Guarda para detectar el primer disparo del effect (evita doble carga). */
     private lastLoadedOrgId;
     constructor();
     onEdit(): void;
     onLeave(): Promise<void>;
     onOpenInvite(): void;
+    onOpenImport(): void;
+    onOpenApiKeys(): void;
+    onOrgInfo(): void;
     onViewPermissions(): void;
     onOpenTransfer(): void;
     onTransfer(newOwnerId: string): Promise<void>;

package/lib/services/apikeys/api-keys.service.d.ts

@@ -0,0 +1,25 @@
+import { HttpClient } from '@angular/common/http';
+import { Observable } from 'rxjs';
+import { ValtechAuthConfig } from '../auth/types';
+import { ClientApiKey, CreateApiKeyRequest, CreateApiKeyResponse, RevokeApiKeyResponse } from './types';
+import * as i0 from "@angular/core";
+/**
+ * Cliente HTTP de Client API Keys org-scopeadas (ADR-023). La org activa se
+ * resuelve en backend desde el JWT, así que el path no la incluye.
+ */
+export declare class ApiKeyService {
+    private config;
+    private http;
+    constructor(config: ValtechAuthConfig, http: HttpClient);
+    private get baseUrl();
+    /** Lista las API keys de la org activa. */
+    list(): Observable<ClientApiKey[]>;
+    /** Crea una API key. La respuesta incluye el secreto (se muestra UNA vez). */
+    create(req: CreateApiKeyRequest): Observable<CreateApiKeyResponse>;
+    /** Revoca (elimina) una API key por id. */
+    revoke(keyId: string): Observable<RevokeApiKeyResponse>;
+    /** Catálogo de permisos asignables a una key. */
+    availablePermissions(): Observable<string[]>;
+    static ɵfac: i0.ɵɵFactoryDeclaration<ApiKeyService, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<ApiKeyService>;
+}

package/lib/services/apikeys/types.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Tipos de Client API Keys org-scopeadas (ADR-023). Contrato espejo de
+ * `lambdas/org` `/org/api-keys/*`. El orgID se resuelve del JWT (ActiveOrgID),
+ * no va en el path.
+ */
+export interface ClientApiKey {
+    keyId: string;
+    name: string;
+    organizationId: string;
+    status: string;
+    permissions: string[];
+    rateLimit?: number;
+    expiresAt?: string;
+    allowedIps?: string[];
+    createdBy: string;
+    createdAt: string;
+    lastUsedAt?: string;
+}
+/** Solo en la respuesta de creación: el secreto se muestra UNA vez. */
+export interface ClientApiKeyWithSecret extends ClientApiKey {
+    secret: string;
+}
+export interface CreateApiKeyRequest {
+    name: string;
+    permissions: string[];
+    rateLimit?: number;
+    expiresInDays?: number;
+    allowedIps?: string[];
+}
+export interface CreateApiKeyResponse {
+    operationId: string;
+    key: ClientApiKeyWithSecret;
+}
+export interface ListApiKeysResponse {
+    operationId: string;
+    keys: ClientApiKey[];
+    nextToken?: string;
+}
+export interface AvailablePermissionsResponse {
+    operationId: string;
+    permissions: string[];
+}
+export interface RevokeApiKeyResponse {
+    operationId: string;
+    message: string;
+}

package/lib/services/auth/auth.service.d.ts

@@ -6,7 +6,7 @@ import { AuthStateService } from './auth-state.service';
 import { TokenService } from './token.service';
 import { AuthStorageService } from './storage.service';
 import { AuthSyncService } from './sync.service';
-import { SigninRequest, SigninResponse, SignupRequest, SignupResponse, VerifyEmailRequest, VerifyEmailResponse, ResendCodeRequest, ResendCodeResponse, MFAVerifyResponse, RefreshResponse, GetPermissionsResponse, GetProfileResponse, UpdateProfileRequest, UpdateProfileResponse, MFASetupResponse, MFAConfirmResponse, MFADisableRequest, MFADisableResponse, ForgotPasswordRequest, ForgotPasswordResponse, ResetPasswordRequest, ResetPasswordResponse, ChangePasswordResponse, DeleteAccountResponse, SendDeleteAccountCodeResponse, SwitchOrgResponse, MFAMethod, AuthError, ValtechAuthConfig, EnableNotificationsResult, NotificationPermissionState, RegisterDeviceResult, TOTPSetupResponse, TOTPVerifySetupResponse, TOTPDisableResponse, RegenerateBackupCodesResponse, BackupCodesCountResponse, OAuthProvider, LinkedProvider, HasPasswordResponse, UpdateHandleResponse, CheckHandleResponse, UpdateAvatarRequest, UpdateAvatarResponse, InitiateEmailChangeResponse, ConfirmEmailChangeStep1Response, ConfirmEmailChangeStep2Response } from './types';
+import { SigninRequest, SigninResponse, SignupRequest, SignupResponse, VerifyEmailRequest, VerifyEmailResponse, ResendCodeRequest, ResendCodeResponse, MFAVerifyResponse, RefreshResponse, GetPermissionsResponse, GetProfileResponse, UpdateProfileRequest, UpdateProfileResponse, MFASetupResponse, MFAConfirmResponse, MFADisableRequest, MFADisableResponse, ForgotPasswordRequest, ForgotPasswordResponse, ResetPasswordRequest, ResetPasswordResponse, ActivateAccountRequest, ActivateAccountResponse, ChangePasswordResponse, DeleteAccountResponse, SendDeleteAccountCodeResponse, SwitchOrgResponse, MFAMethod, AuthError, ValtechAuthConfig, EnableNotificationsResult, NotificationPermissionState, RegisterDeviceResult, TOTPSetupResponse, TOTPVerifySetupResponse, TOTPDisableResponse, RegenerateBackupCodesResponse, BackupCodesCountResponse, OAuthProvider, LinkedProvider, HasPasswordResponse, UpdateHandleResponse, CheckHandleResponse, UpdateAvatarRequest, UpdateAvatarResponse, InitiateEmailChangeResponse, ConfirmEmailChangeStep1Response, ConfirmEmailChangeStep2Response } from './types';
 import { OAuthService } from './oauth.service';
 import { FirebaseService, MessagingService } from '../firebase';
 import { I18nService } from '../i18n';
@@ -288,6 +288,12 @@ export declare class AuthService implements OnDestroy {
      * Resetea la contraseña usando el código enviado por email.
      */
     resetPassword(request: ResetPasswordRequest): Observable<ResetPasswordResponse>;
+    /**
+     * Activa una cuenta pre-aprovisionada por una organización (ADR-023): define
+     * la contraseña con el token del enlace de email. En éxito el backend devuelve
+     * tokens de auto-signin → el usuario queda logueado (mismo flujo que verify-email).
+     */
+    activateAccount(request: ActivateAccountRequest): Observable<ActivateAccountResponse>;
     /**
      * Cambia la contraseña del usuario autenticado.
      * Requiere la contraseña actual para verificación.

package/lib/services/auth/types.d.ts

@@ -238,6 +238,29 @@ export interface VerifyEmailResponse {
     expiresIn?: number;
     tokenType?: string;
 }
+/**
+ * Request para activar una cuenta pre-aprovisionada por una organización
+ * (ADR-023): el usuario define su contraseña con el token del enlace de email.
+ */
+export interface ActivateAccountRequest {
+    token: string;
+    newPassword: string;
+}
+/**
+ * Response de activación de cuenta. En éxito incluye tokens de auto-signin
+ * (mismo shape que verify-email) — el usuario queda logueado tras activar.
+ */
+export interface ActivateAccountResponse {
+    operationId: string;
+    activated: boolean;
+    accessToken?: string;
+    refreshToken?: string;
+    firebaseToken?: string;
+    expiresIn?: number;
+    tokenType?: string;
+    roles?: string[];
+    permissions?: string[];
+}
 /**
  * Request para reenviar código de verificación.
  */

package/lib/services/org/org.service.d.ts

@@ -1,7 +1,7 @@
 import { HttpClient } from '@angular/common/http';
 import { Observable } from 'rxjs';
 import { ValtechAuthConfig } from '../auth/types';
-import { Organization, ListMyOrgsResponse, CreateOrgRequest, UpdateOrgRequest, InviteUserRequest, InviteUserResponse, LeaveOrgResponse, ListOrgMembersResponse, OrgRole, ChangeMemberRoleResponse, PendingInvitation, AcceptInvitationResponse } from './types';
+import { Organization, ListMyOrgsResponse, CreateOrgRequest, UpdateOrgRequest, InviteUserRequest, InviteUserResponse, LeaveOrgResponse, ListOrgMembersResponse, OrgRole, ChangeMemberRoleResponse, PendingInvitation, AcceptInvitationResponse, ImportMembersRequest, ImportMembersResponse } from './types';
 import * as i0 from "@angular/core";
 export declare class OrgService {
     private config;
@@ -21,6 +21,11 @@ export declare class OrgService {
         message: string;
     }>;
     inviteUser(orgId: string, req: InviteUserRequest): Observable<InviteUserResponse>;
+    /**
+     * Crea/asigna miembros en masa (ADR-023). Resultado por-fila (partial success):
+     * `created` (pre-aprovisionado), `assigned` (ya existía), `skipped`, `error`.
+     */
+    importMembers(orgId: string, req: ImportMembersRequest): Observable<ImportMembersResponse>;
     leaveOrg(orgId: string): Observable<LeaveOrgResponse>;
     getOrgMembers(orgId: string, params?: {
         limit?: number;

package/lib/services/org/types.d.ts

@@ -97,3 +97,33 @@ export interface ChangeMemberRoleResponse {
     orgId: string;
     roleId: string;
 }
+export type ImportOnConflict = 'assignRole' | 'skip' | 'error';
+export interface ImportUserRow {
+    email: string;
+    name?: string;
+    roleName: string;
+}
+export interface ImportMembersRequest {
+    users: ImportUserRow[];
+    onConflict?: ImportOnConflict;
+    sendActivation?: boolean;
+}
+export type ImportRowStatus = 'created' | 'assigned' | 'skipped' | 'error';
+export interface ImportRowResult {
+    email: string;
+    status: ImportRowStatus;
+    userId?: string;
+    activation?: 'sent' | 'pending';
+    reason?: string;
+}
+export interface ImportSummary {
+    created: number;
+    assigned: number;
+    skipped: number;
+    failed: number;
+}
+export interface ImportMembersResponse {
+    operationId: string;
+    summary: ImportSummary;
+    results: ImportRowResult[];
+}

package/lib/version.d.ts

@@ -2,4 +2,4 @@
  * Current version of valtech-components.
  * This is automatically updated during the publish process.
  */
-export declare const VERSION = "2.0.1006";
+export declare const VERSION = "2.0.1007";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "valtech-components",
-  "version": "2.0.1006",
+  "version": "2.0.1007",
   "private": false,
   "bin": {
     "valtech-firebase-config": "./src/lib/services/firebase/scripts/generate-sw-config.js"

package/public-api.d.ts

@@ -304,6 +304,8 @@ export * from './lib/components/organisms/org-info-sheet/org-info-sheet.componen
 export * from './lib/components/organisms/invite-member-modal/invite-member-modal.component';
 export * from './lib/components/organisms/member-detail-modal/member-detail-modal.component';
 export * from './lib/components/organisms/member-detail-modal/types';
+export * from './lib/components/organisms/member-import-modal/member-import-modal.component';
+export * from './lib/components/organisms/api-keys-modal/api-keys-modal.component';
 export * from './lib/components/organisms/edit-org-modal/edit-org-modal.component';
 export * from './lib/components/organisms/transfer-ownership-modal/transfer-ownership-modal.component';
 export * from './lib/components/organisms/transfer-ownership-modal/types';
@@ -350,7 +352,9 @@ export * from './lib/services/legal-link/legal-link.service';
 export * from './lib/services/firebase';
 export * from './lib/services/auth';
 export { OrgService } from './lib/services/org/org.service';
-export type { Organization, OrgType, OrgPlan, CreateOrgRequest, UpdateOrgRequest, InviteUserRequest, InviteUserResponse, LeaveOrgResponse, ListMyOrgsResponse, OrgResponse, OrgMember, ListOrgMembersResponse, PendingInvitation, ListPendingInvitationsResponse, AcceptInvitationResponse, OrgRole, ListOrgRolesResponse, ChangeMemberRoleRequest, ChangeMemberRoleResponse, } from './lib/services/org/types';
+export type { Organization, OrgType, OrgPlan, CreateOrgRequest, UpdateOrgRequest, InviteUserRequest, InviteUserResponse, LeaveOrgResponse, ListMyOrgsResponse, OrgResponse, OrgMember, ListOrgMembersResponse, PendingInvitation, ListPendingInvitationsResponse, AcceptInvitationResponse, OrgRole, ListOrgRolesResponse, ChangeMemberRoleRequest, ChangeMemberRoleResponse, ImportUserRow, ImportOnConflict, ImportMembersRequest, ImportRowStatus, ImportRowResult, ImportSummary, ImportMembersResponse, } from './lib/services/org/types';
+export { ApiKeyService } from './lib/services/apikeys/api-keys.service';
+export type { ClientApiKey, ClientApiKeyWithSecret, CreateApiKeyRequest, CreateApiKeyResponse, ListApiKeysResponse, AvailablePermissionsResponse, RevokeApiKeyResponse, } from './lib/services/apikeys/types';
 export * from './lib/services/i18n';
 export * from './lib/services/preferences';
 export * from './lib/services/network-status';