valtech-components 2.0.1016 → 2.0.1017

package/lib/components/molecules/permission-selector/permission-selector.component.d.ts

@@ -0,0 +1,46 @@
+import { LocalizedLabel } from '../../../services/org/permission-catalog.service';
+import { PermissionSelectorResource } from './types';
+import * as i0 from "@angular/core";
+/**
+ * `val-permission-selector` — selector de permisos agrupado por recurso.
+ *
+ * Presentacional: recibe el catálogo (YA filtrado por el consumer — sin `internal`,
+ * sin otras apps) y emite los códigos `resource:action` seleccionados. Agrupa por
+ * recurso con su label legible (del backend), una fila por recurso con checkbox
+ * "Todos" (tri-estado) y un chip por acción. Bilingüe vía `locale` + los labels del
+ * catálogo; las pocas etiquetas propias (Todos / vacío) se auto-registran (es/en).
+ *
+ * Pensado para el modal de creación de API Key (asignar permisos a la key) y
+ * reusable en cualquier UI que asigne permisos (roles custom, etc.).
+ */
+export declare class PermissionSelectorComponent {
+    private i18n;
+    /** Catálogo YA filtrado (sin internal, sin otras apps). */
+    readonly permissions: import("@angular/core").InputSignal<PermissionSelectorResource[]>;
+    /** Labels de acción (es/en) por código de acción — del catálogo del backend. */
+    readonly actionLabels: import("@angular/core").InputSignal<Record<string, LocalizedLabel>>;
+    /** Idioma activo (es/en). Si no se pasa, usa el de `I18nService`. */
+    readonly locale: import("@angular/core").InputSignal<string>;
+    /** Permisos seleccionados (`resource:action`). Two-way (`model`). */
+    readonly selected: import("@angular/core").ModelSignal<string[]>;
+    constructor();
+    private readonly activeLocale;
+    readonly groups: import("@angular/core").Signal<{
+        resource: string;
+        label: string;
+        actions: {
+            action: string;
+            code: string;
+            label: string;
+            checked: boolean;
+        }[];
+        checkedCount: number;
+        all: boolean;
+        some: boolean;
+    }[]>;
+    toggleAction(code: string): void;
+    toggleGroup(resource: string): void;
+    protected tt(key: string): string;
+    static ɵfac: i0.ɵɵFactoryDeclaration<PermissionSelectorComponent, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<PermissionSelectorComponent, "val-permission-selector", never, { "permissions": { "alias": "permissions"; "required": false; "isSignal": true; }; "actionLabels": { "alias": "actionLabels"; "required": false; "isSignal": true; }; "locale": { "alias": "locale"; "required": false; "isSignal": true; }; "selected": { "alias": "selected"; "required": false; "isSignal": true; }; }, { "selected": "selectedChange"; }, never, never, true, never>;
+}

package/lib/components/molecules/permission-selector/types.d.ts

@@ -0,0 +1,15 @@
+import { LocalizedLabel } from '../../../services/org/permission-catalog.service';
+/**
+ * Un recurso del catálogo de permisos tal como lo consume `val-permission-selector`.
+ * Mismo shape que `PermissionResource` del catálogo del backend (resource + actions
+ * + label opcional). El consumer pasa el catálogo YA filtrado (sin `internal`, sin
+ * otras apps) — el selector no decide visibilidad, solo renderiza y selecciona.
+ */
+export interface PermissionSelectorResource {
+    resource: string;
+    actions: string[];
+    /** Nombre legible del recurso (es/en). Fallback al `resource` crudo. */
+    label?: LocalizedLabel;
+    scope?: string;
+    appId?: string;
+}

package/lib/components/organisms/api-keys-modal/api-keys-modal.component.d.ts

@@ -1,6 +1,7 @@
 import { OnInit } from '@angular/core';
 import { FormMetadata, FormSubmit } from '../../types';
 import { ClientApiKey, ClientApiKeyWithSecret } from '../../../services/apikeys/types';
+import { LocalizedLabel, PermissionResource } from '../../../services/org/permission-catalog.service';
 import * as i0 from "@angular/core";
 /**
  * `val-api-keys-modal` — gestión de Client API Keys org-scopeadas (ADR-023 fase 6).
@@ -12,14 +13,21 @@ import * as i0 from "@angular/core";
 export declare class ApiKeysModalComponent implements OnInit {
     private i18n;
     private apiKeys;
+    private catalog;
+    private auth;
     /** Inyectado por `ModalService.open`. */
     _modalRef?: {
         dismiss: (data?: unknown, role?: string) => void;
     };
     /** Namespace i18n. */
     i18nNamespace: string;
+    /** Permisos del catálogo YA filtrados (sin internal, sin otras apps). */
+    readonly catalogPermissions: import("@angular/core").WritableSignal<PermissionResource[]>;
+    /** Labels de acción (es/en) del backend, para el selector. */
+    readonly actionLabels: import("@angular/core").WritableSignal<Record<string, LocalizedLabel>>;
+    /** Permisos seleccionados para la nueva key (`resource:action`). */
+    readonly selectedPerms: import("@angular/core").WritableSignal<string[]>;
     readonly keys: import("@angular/core").WritableSignal<ClientApiKey[]>;
-    readonly availablePermissions: import("@angular/core").WritableSignal<string[]>;
     readonly loading: import("@angular/core").WritableSignal<boolean>;
     readonly showCreate: import("@angular/core").WritableSignal<boolean>;
     readonly submitting: import("@angular/core").WritableSignal<boolean>;
@@ -34,6 +42,14 @@ export declare class ApiKeysModalComponent implements OnInit {
     readonly createForm: import("@angular/core").Signal<FormMetadata>;
     constructor();
     ngOnInit(): void;
+    /**
+     * Carga el catálogo de permisos y lo filtra a lo asignable a una API Key de la
+     * org: descarta `scope:internal` (el backend ya los omite para no-staff) y los
+     * permisos de OTRAS apps (`appId !== appId del catálogo`). Quedan los permisos de
+     * org (users/roles/rbac) + los de la app actual.
+     */
+    private loadCatalog;
+    private activeOrgId;
     private refresh;
     openCreate(): void;
     onCreateSubmit(event: FormSubmit): void;

package/lib/services/org/permission-catalog.service.d.ts

@@ -3,16 +3,22 @@ import { Observable } from 'rxjs';
 import { ValtechAuthConfig } from '../auth/types';
 import * as i0 from "@angular/core";
 export type PermissionScope = 'app' | 'org' | 'internal';
+/** Etiqueta legible por idioma (es/en). El backend es autoritativo (ADR-024). */
+export type LocalizedLabel = Record<string, string>;
 export interface PermissionResource {
     resource: string;
     scope: PermissionScope;
     appId?: string;
     actions: string[];
+    /** Nombre legible del recurso (es/en), provisto por el backend. */
+    label?: LocalizedLabel;
 }
 export interface PermissionCatalogResponse {
     operationId: string;
     appId: string;
     permissions: PermissionResource[];
+    /** Nombre legible (es/en) por acción, transversal a los recursos. */
+    actionLabels?: Record<string, LocalizedLabel>;
 }
 /**
  * Consume el catálogo de permisos del backend (`GET /org/{orgId}/permissions-catalog`).

package/lib/version.d.ts

@@ -2,4 +2,4 @@
  * Current version of valtech-components.
  * This is automatically updated during the publish process.
  */
-export declare const VERSION = "2.0.1016";
+export declare const VERSION = "2.0.1017";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "valtech-components",
-  "version": "2.0.1016",
+  "version": "2.0.1017",
   "private": false,
   "bin": {
     "valtech-firebase-config": "./src/lib/services/firebase/scripts/generate-sw-config.js"

package/public-api.d.ts

@@ -185,6 +185,8 @@ export * from './lib/components/molecules/invitation-card/invitation-card.compon
 export * from './lib/components/molecules/invitation-card/types';
 export * from './lib/components/molecules/member-card/member-card.component';
 export * from './lib/components/molecules/member-card/types';
+export * from './lib/components/molecules/permission-selector/permission-selector.component';
+export * from './lib/components/molecules/permission-selector/types';
 export * from './lib/components/molecules/username-input/username-input.component';
 export * from './lib/components/molecules/username-input/types';
 export * from './lib/components/molecules/linked-providers/linked-providers.component';