valtech-components 2.0.902 → 2.0.904

package/fesm2022/valtech-components.mjs

@@ -31,7 +31,7 @@ import { Navigation, Pagination, EffectFade, EffectCube, EffectCoverflow, Effect
 import { takeUntilDestroyed, toSignal, toObservable } from '@angular/core/rxjs-interop';
 import { SwUpdate } from '@angular/service-worker';
 import * as i1$5 from '@angular/fire/firestore';
-import { provideFirestore, getFirestore, connectFirestoreEmulator, enableIndexedDbPersistence, doc, getDoc, collection, query as query$1, getDocs, getCountFromServer, limit, docData, collectionData, serverTimestamp, addDoc, setDoc, updateDoc, deleteDoc, writeBatch, arrayUnion, arrayRemove, increment, where, orderBy, startAfter, startAt, endBefore, endAt, Timestamp } from '@angular/fire/firestore';
+import { provideFirestore, getFirestore, connectFirestoreEmulator, enableIndexedDbPersistence, doc, getDoc, collection, query as query$1, getDocs, getCountFromServer, limit, docData, collectionData, serverTimestamp, addDoc, setDoc, updateDoc, deleteDoc, writeBatch, arrayUnion, arrayRemove, increment, where, orderBy, startAfter, startAt, endBefore, endAt, Timestamp, onSnapshot } from '@angular/fire/firestore';
 import { Analytics, logEvent, setUserId, setUserProperties, provideAnalytics, getAnalytics } from '@angular/fire/analytics';
 import { provideFirebaseApp, initializeApp } from '@angular/fire/app';
 import * as i1$6 from '@angular/fire/auth';
@@ -53,7 +53,7 @@ import 'prismjs/components/prism-json';
  * Current version of valtech-components.
  * This is automatically updated during the publish process.
  */
-const VERSION = '2.0.902';
+const VERSION = '2.0.904';
 
 /**
  * Servicio para gestionar presets de componentes.
@@ -21912,7 +21912,7 @@ class AuthStorageService {
     constructor(config, platformId) {
         this.config = config;
         this.isBrowser = isPlatformBrowser(platformId);
-        const prefix = this.config.storagePrefix || 'valtech_auth_';
+        const prefix = this.config?.storagePrefix || 'valtech_auth_';
         this.keys = {
             ACCESS_TOKEN: `${prefix}access_token`,
             REFRESH_TOKEN: `${prefix}refresh_token`,
@@ -22092,7 +22092,7 @@ class AuthSyncService {
         /** Observable de eventos de sincronización */
         this.onEvent$ = this.eventSubject.asObservable();
         this.isBrowser = isPlatformBrowser(platformId);
-        const prefix = this.config.storagePrefix || 'valtech_auth_';
+        const prefix = this.config?.storagePrefix || 'valtech_auth_';
         this.channelName = `${prefix}sync_channel`;
     }
     /**
@@ -22100,7 +22100,7 @@ class AuthSyncService {
      * SSR-noop — sync de pestañas solo aplica en browser.
      */
     start() {
-        if (!this.config.enableTabSync || !this.isBrowser) {
+        if (!this.config?.enableTabSync || !this.isBrowser) {
             return;
         }
         // Intentar usar BroadcastChannel API (mejor rendimiento)
@@ -22129,7 +22129,7 @@ class AuthSyncService {
      * Envía un evento a otras pestañas.
      */
     broadcast(event) {
-        if (!this.config.enableTabSync || !this.isBrowser) {
+        if (!this.config?.enableTabSync || !this.isBrowser) {
             return;
         }
         const fullEvent = {
@@ -22173,7 +22173,7 @@ class AuthSyncService {
      * Inicializa fallback con storage events.
      */
     initStorageEvents() {
-        const storageKey = `${this.config.storagePrefix}sync_event`;
+        const storageKey = `${this.config?.storagePrefix}sync_event`;
         this.storageListener = (event) => {
             if (event.key === storageKey && event.newValue) {
                 try {
@@ -22191,7 +22191,7 @@ class AuthSyncService {
      * Envía evento via localStorage (fallback).
      */
     broadcastViaStorage(event) {
-        const storageKey = `${this.config.storagePrefix}sync_event`;
+        const storageKey = `${this.config?.storagePrefix}sync_event`;
         try {
             // Escribir y luego limpiar para permitir múltiples eventos del mismo tipo
             localStorage.setItem(storageKey, JSON.stringify(event));
@@ -25273,7 +25273,7 @@ class OAuthService {
         return new Observable(observer => {
             // Construir URL de inicio
             const redirectUri = `${window.location.origin}/auth/oauth/callback`;
-            const startUrl = `${this.config.apiUrl}/v2/auth/oauth/${provider}/start?redirect_uri=${encodeURIComponent(redirectUri)}`;
+            const startUrl = `${this.config?.apiUrl}/v2/auth/oauth/${provider}/start?redirect_uri=${encodeURIComponent(redirectUri)}`;
             // Abrir popup centrado
             const width = 500;
             const height = 600;
@@ -25378,7 +25378,7 @@ class OAuthService {
     startLinkFlow(provider) {
         return new Observable(observer => {
             const redirectUri = `${window.location.origin}/auth/oauth/callback`;
-            const startUrl = `${this.config.apiUrl}/v2/auth/oauth/link/${provider}/start?redirect_uri=${encodeURIComponent(redirectUri)}`;
+            const startUrl = `${this.config?.apiUrl}/v2/auth/oauth/link/${provider}/start?redirect_uri=${encodeURIComponent(redirectUri)}`;
             const width = 500;
             const height = 600;
             const left = window.screenX + (window.outerWidth - width) / 2;
@@ -25429,7 +25429,7 @@ class OAuthService {
      */
     getLinkedProviders() {
         return this.http
-            .get(`${this.config.apiUrl}/v2/auth/oauth/providers`)
+            .get(`${this.config?.apiUrl}/v2/auth/oauth/providers`)
             .pipe(catchError(error => throwError(() => ({
             code: error.error?.code || 'FETCH_ERROR',
             message: error.error?.message || 'Error al obtener proveedores vinculados',
@@ -25440,7 +25440,7 @@ class OAuthService {
      */
     unlinkProvider(provider) {
         return this.http
-            .post(`${this.config.apiUrl}/v2/auth/oauth/unlink`, { provider })
+            .post(`${this.config?.apiUrl}/v2/auth/oauth/unlink`, { provider })
             .pipe(catchError(error => throwError(() => ({
             code: error.error?.code || 'UNLINK_ERROR',
             message: error.error?.message || 'Error al desvincular proveedor',
@@ -25451,7 +25451,7 @@ class OAuthService {
      */
     setPassword(password) {
         return this.http
-            .post(`${this.config.apiUrl}/v2/auth/oauth/set-password`, { password })
+            .post(`${this.config?.apiUrl}/v2/auth/oauth/set-password`, { password })
             .pipe(catchError(error => throwError(() => ({
             code: error.error?.code || 'SET_PASSWORD_ERROR',
             message: error.error?.message || 'Error al establecer contraseña',
@@ -25462,7 +25462,7 @@ class OAuthService {
      */
     hasPassword() {
         return this.http
-            .get(`${this.config.apiUrl}/v2/auth/oauth/has-password`)
+            .get(`${this.config?.apiUrl}/v2/auth/oauth/has-password`)
             .pipe(catchError(error => throwError(() => ({
             code: error.error?.code || 'CHECK_PASSWORD_ERROR',
             message: error.error?.message || 'Error al verificar contraseña',
@@ -25759,7 +25759,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "18.2.14", ngImpo
  * ```
  */
 class AuthService {
-    constructor(config, http, router, stateService, tokenService, storageService, syncService, firebaseService, oauthService, messagingService, i18nService, confirmationService) {
+    constructor(config, http, router, stateService, tokenService, storageService, syncService, firebaseService, oauthService, messagingService, i18nService, confirmationService, firestoreInstance) {
         this.config = config;
         this.http = http;
         this.router = router;
@@ -25772,9 +25772,11 @@ class AuthService {
         this.messagingService = messagingService;
         this.i18nService = i18nService;
         this.confirmationService = confirmationService;
+        this.firestoreInstance = firestoreInstance;
         // Timer para refresh proactivo
         this.refreshTimerId = null;
         this.syncSubscription = null;
+        this.firestoreRBACUnsubscribe = null;
         // =============================================
         // ESTADO PÚBLICO (Signals readonly)
         // =============================================
@@ -25871,7 +25873,7 @@ class AuthService {
             }
         }
         // 5. Iniciar sincronización entre pestañas
-        if (this.config.enableTabSync) {
+        if (this.config?.enableTabSync) {
             this.syncService.start();
             this.syncSubscription = this.syncService.onEvent$.subscribe(event => this.handleSyncEvent(event));
         }
@@ -25880,6 +25882,7 @@ class AuthService {
     ngOnDestroy() {
         this.stopRefreshTimer();
         this.syncSubscription?.unsubscribe();
+        this.teardownFirestoreRBACSync();
     }
     // =============================================
     // AUTENTICACIÓN
@@ -26103,7 +26106,7 @@ class AuthService {
             this.stateService.updateRefreshToken(response.refreshToken); // NUEVO: guardar refresh rotado
             this.storageService.saveAccessToken(response.accessToken, expiresAt);
             this.storageService.saveRefreshToken(response.refreshToken); // NUEVO: persistir refresh rotado
-            if (this.config.enableFirebaseIntegration && response.firebaseToken) {
+            if (this.config?.enableFirebaseIntegration && response.firebaseToken) {
                 this.signInWithFirebase(response.firebaseToken);
             }
             this.startRefreshTimer();
@@ -26189,7 +26192,7 @@ class AuthService {
         this.signOutFirebase();
         this.clearState();
         this.syncService.broadcast({ type: 'LOGOUT' });
-        this.router.navigate([this.config.loginRoute]);
+        this.router.navigate([this.config?.loginRoute]);
     }
     // =============================================
     // MFA SETUP (usuario autenticado)
@@ -26404,7 +26407,7 @@ class AuthService {
                 this.signOutFirebase();
                 this.clearState();
                 this.syncService.broadcast({ type: 'LOGOUT' });
-                this.router.navigate([this.config.loginRoute]);
+                this.router.navigate([this.config?.loginRoute]);
             }
         }), catchError(error => this.handleAuthError(error)));
     }
@@ -26481,11 +26484,11 @@ class AuthService {
     // PRIVATE METHODS
     // =============================================
     get baseUrl() {
-        return `${this.config.apiUrl}${this.config.authPrefix}`;
+        return `${this.config?.apiUrl}${this.config?.authPrefix}`;
     }
     /** Base for /v2/users endpoints (separate from /v2/auth). */
     get usersBaseUrl() {
-        return `${this.config.apiUrl}/v2/users`;
+        return `${this.config?.apiUrl}/v2/users`;
     }
     handleSuccessfulAuth(response) {
         const expiresAt = Date.now() + response.expiresIn * 1000;
@@ -26518,18 +26521,18 @@ class AuthService {
         this.syncService.broadcast({ type: 'LOGIN' });
         // Integración con Firebase
         console.log('[ValtechAuth] handleSuccessfulAuth - Firebase check:', {
-            enableFirebaseIntegration: this.config.enableFirebaseIntegration,
+            enableFirebaseIntegration: this.config?.enableFirebaseIntegration,
             hasFirebaseTokenKey: 'firebaseToken' in response,
             firebaseTokenValue: !!response.firebaseToken,
             firebaseTokenLength: response.firebaseToken?.length || 0,
         });
-        if (this.config.enableFirebaseIntegration &&
+        if (this.config?.enableFirebaseIntegration &&
             'firebaseToken' in response &&
             response.firebaseToken) {
             console.log('[ValtechAuth] Calling signInWithFirebase with token length:', response.firebaseToken.length);
             this.signInWithFirebase(response.firebaseToken);
         }
-        else if (this.config.enableFirebaseIntegration) {
+        else if (this.config?.enableFirebaseIntegration) {
             // El login NO trajo firebaseToken (ej. flujo OAuth que lo perdió). En vez
             // de quedar sin sesión de Firebase, recurrimos al fallback self-healing:
             // /refresh sí devuelve un firebaseToken confiable.
@@ -26540,7 +26543,7 @@ class AuthService {
             console.log('[ValtechAuth] Firebase signin skipped - integración Firebase desactivada');
         }
         // Registro automático de dispositivo para push notifications
-        if (this.config.enableDeviceRegistration) {
+        if (this.config?.enableDeviceRegistration) {
             this.registerDeviceIfNeeded(); // fire-and-forget
         }
         // Sincronizar idioma del usuario con i18n
@@ -26552,18 +26555,47 @@ class AuthService {
                 console.log(`[ValtechAuth] Language synced to: ${userLang}`);
             }
         }
+        // Listener Firestore RBAC — opt-in via enableFirestoreRBAC: true
+        const userId = this.stateService.state().userId;
+        if (userId) {
+            this.setupFirestoreRBACSync(userId);
+        }
     }
     clearState() {
         this.stopRefreshTimer();
+        this.teardownFirestoreRBACSync();
         this.stateService.reset();
         this.storageService.clear();
     }
+    setupFirestoreRBACSync(userId) {
+        if (!this.config?.enableFirestoreRBAC || !this.firestoreInstance)
+            return;
+        this.teardownFirestoreRBACSync();
+        const docRef = doc(this.firestoreInstance, 'users', userId);
+        this.firestoreRBACUnsubscribe = onSnapshot(docRef, snap => {
+            const rbac = snap.data()?.['rbac'];
+            if (!rbac)
+                return;
+            const activeOrg = this.stateService.state().activeOrg;
+            if (rbac['activeOrg'] && rbac['activeOrg'] !== activeOrg)
+                return;
+            const roles = rbac['roles'] ?? [];
+            const permissions = rbac['permissions'] ?? [];
+            this.stateService.updatePermissions(roles, permissions, permissions.includes('*:*'));
+        });
+    }
+    teardownFirestoreRBACSync() {
+        if (this.firestoreRBACUnsubscribe) {
+            this.firestoreRBACUnsubscribe();
+            this.firestoreRBACUnsubscribe = null;
+        }
+    }
     startRefreshTimer() {
         this.stopRefreshTimer();
         const state = this.stateService.state();
         if (!state.expiresAt)
             return;
-        const refreshBeforeMs = (this.config.refreshBeforeExpiry || 60) * 1000;
+        const refreshBeforeMs = (this.config?.refreshBeforeExpiry || 60) * 1000;
         const refreshAt = state.expiresAt - refreshBeforeMs;
         const delay = refreshAt - Date.now();
         if (delay > 0) {
@@ -26608,7 +26640,7 @@ class AuthService {
             case 'LOGOUT':
                 this.stateService.reset();
                 this.stopRefreshTimer();
-                this.router.navigate([this.config.loginRoute]);
+                this.router.navigate([this.config?.loginRoute]);
                 break;
             case 'PERMISSIONS_UPDATE': {
                 const perms = this.storageService.loadPermissions();
@@ -26654,7 +26686,7 @@ class AuthService {
         }
     }
     async signOutFirebase() {
-        if (!this.config.enableFirebaseIntegration)
+        if (!this.config?.enableFirebaseIntegration)
             return;
         try {
             if (this.firebaseService) {
@@ -26685,7 +26717,7 @@ class AuthService {
      * Fire-and-forget: se invoca con `void` para no demorar `initialize()`.
      */
     async ensureFirebaseSessionOnBootstrap() {
-        if (!this.config.enableFirebaseIntegration || !this.firebaseService)
+        if (!this.config?.enableFirebaseIntegration || !this.firebaseService)
             return;
         // Dar a la persistencia IndexedDB propia de Firebase Auth una oportunidad
         // de auto-restaurarse (navegador normal). En una PWA standalone de iOS
@@ -26711,7 +26743,7 @@ class AuthService {
      * desde el debug-console qué disparó el fallback.
      */
     async reestablishFirebaseViaRefresh(reason) {
-        if (!this.config.enableFirebaseIntegration || !this.firebaseService)
+        if (!this.config?.enableFirebaseIntegration || !this.firebaseService)
             return;
         console.log(`[FBAuth] fallback — re-estableciendo Firebase vía /refresh (motivo: ${reason})`);
         try {
@@ -26784,7 +26816,7 @@ class AuthService {
             if (token) {
                 // Eliminar del backend
                 await firstValueFrom(this.http
-                    .request('DELETE', `${this.config.apiUrl}/v2/users/me/devices/by-token`, {
+                    .request('DELETE', `${this.config?.apiUrl}/v2/users/me/devices/by-token`, {
                     body: { token },
                 })
                     .pipe(catchError(() => of(null))));
@@ -26854,7 +26886,7 @@ class AuthService {
             }
             // Registrar en backend
             const { platform, browser, os } = this.detectPlatformInfo();
-            const response = await firstValueFrom(this.http.post(`${this.config.apiUrl}/v2/users/me/devices`, {
+            const response = await firstValueFrom(this.http.post(`${this.config?.apiUrl}/v2/users/me/devices`, {
                 token,
                 platform,
                 browser,
@@ -26877,7 +26909,7 @@ class AuthService {
      */
     async registerDeviceIfNeeded() {
         // Solo si está habilitado y messaging está disponible
-        if (!this.config.enableDeviceRegistration || !this.messagingService) {
+        if (!this.config?.enableDeviceRegistration || !this.messagingService) {
             return false;
         }
         try {
@@ -26897,7 +26929,7 @@ class AuthService {
             }
             // Registrar en backend
             const { platform, browser, os } = this.detectPlatformInfo();
-            await firstValueFrom(this.http.post(`${this.config.apiUrl}/v2/users/me/devices`, {
+            await firstValueFrom(this.http.post(`${this.config?.apiUrl}/v2/users/me/devices`, {
                 token,
                 platform,
                 browser,
@@ -26916,7 +26948,7 @@ class AuthService {
      * Elimina el dispositivo del backend y borra el token FCM.
      */
     async unregisterDevice() {
-        if (!this.config.enableDeviceRegistration || !this.messagingService) {
+        if (!this.config?.enableDeviceRegistration || !this.messagingService) {
             return;
         }
         try {
@@ -26924,7 +26956,7 @@ class AuthService {
             if (token) {
                 // Delete from backend (fire and forget)
                 this.http
-                    .request('DELETE', `${this.config.apiUrl}/v2/users/me/devices/by-token`, {
+                    .request('DELETE', `${this.config?.apiUrl}/v2/users/me/devices/by-token`, {
                     body: { token },
                 })
                     .pipe(catchError(() => of(null)))
@@ -26976,7 +27008,7 @@ class AuthService {
         }
         return { platform: 'web', browser, os };
     }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: AuthService, deps: [{ token: VALTECH_AUTH_CONFIG, optional: true }, { token: i1$8.HttpClient }, { token: i1$1.Router }, { token: AuthStateService }, { token: TokenService }, { token: AuthStorageService }, { token: AuthSyncService }, { token: FirebaseService }, { token: OAuthService }, { token: MessagingService, optional: true }, { token: I18nService, optional: true }, { token: ConfirmationDialogService }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: AuthService, deps: [{ token: VALTECH_AUTH_CONFIG, optional: true }, { token: i1$8.HttpClient }, { token: i1$1.Router }, { token: AuthStateService }, { token: TokenService }, { token: AuthStorageService }, { token: AuthSyncService }, { token: FirebaseService }, { token: OAuthService }, { token: MessagingService, optional: true }, { token: I18nService, optional: true }, { token: ConfirmationDialogService }, { token: i1$5.Firestore, optional: true }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: AuthService, providedIn: 'root' }); }
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: AuthService, decorators: [{
@@ -26991,7 +27023,9 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "18.2.14", ngImpo
                     type: Optional
                 }] }, { type: I18nService, decorators: [{
                     type: Optional
-                }] }, { type: ConfirmationDialogService }] });
+                }] }, { type: ConfirmationDialogService }, { type: i1$5.Firestore, decorators: [{
+                    type: Optional
+                }] }] });
 
 addIcons({ checkmarkCircle, closeCircle, alertCircle });
 /**
@@ -30165,7 +30199,7 @@ class DeviceService {
         this.http = http;
     }
     get baseUrl() {
-        return `${this.config.apiUrl}/v2/users/me/devices`;
+        return `${this.config?.apiUrl}/v2/users/me/devices`;
     }
     /**
      * Lista todos los dispositivos registrados del usuario.
@@ -30220,7 +30254,7 @@ class DeviceService {
      * ```
      */
     validateAction(token) {
-        return this.http.post(`${this.config.apiUrl}/v2/actions/validate`, { token });
+        return this.http.post(`${this.config?.apiUrl}/v2/actions/validate`, { token });
     }
     /**
      * Ejecuta una acción de dispositivo desde un token de email.
@@ -30243,7 +30277,7 @@ class DeviceService {
      */
     executeAction(token) {
         // Usa el endpoint unificado de acciones
-        return this.http.post(`${this.config.apiUrl}/v2/actions/execute`, { token }).pipe(map$1(response => ({
+        return this.http.post(`${this.config?.apiUrl}/v2/actions/execute`, { token }).pipe(map$1(response => ({
             operationId: response.operationId,
             success: response.success,
             message: response.message,
@@ -30302,7 +30336,7 @@ class SessionService {
         this.http = http;
     }
     get baseUrl() {
-        return `${this.config.apiUrl}/v2/users/me/sessions`;
+        return `${this.config?.apiUrl}/v2/users/me/sessions`;
     }
     /**
      * Lista todas las sesiones activas del usuario.
@@ -30625,7 +30659,7 @@ class HandoffService {
         const tokenParam = options.tokenParam ?? HANDOFF_TOKEN_PARAM;
         const routeParam = options.routeParam ?? HANDOFF_ROUTE_PARAM;
         const defaultRoute = options.defaultRoute ?? '/';
-        const errorRoute = options.errorRoute ?? this.config.loginRoute ?? '/login';
+        const errorRoute = options.errorRoute ?? this.config?.loginRoute ?? '/login';
         const params = new URLSearchParams(window.location.search);
         const token = params.get(tokenParam);
         if (!token) {
@@ -30655,7 +30689,7 @@ class HandoffService {
         });
     }
     get baseUrl() {
-        return `${this.config.apiUrl}${this.config.authPrefix}`;
+        return `${this.config?.apiUrl}${this.config?.authPrefix}`;
     }
     static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: HandoffService, deps: [{ token: VALTECH_AUTH_CONFIG, optional: true }, { token: i1$8.HttpClient }, { token: AuthService }, { token: i1$1.Router }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: HandoffService, providedIn: 'root' }); }
@@ -30843,7 +30877,7 @@ class NotificationActionService {
         if (!route) {
             return 'no-action-route';
         }
-        const currentApp = this.config.appId;
+        const currentApp = this.config?.appId;
         const targetApp = notif.appId;
         // 2) Cross-app: handoff + full redirect
         //
@@ -30853,7 +30887,7 @@ class NotificationActionService {
         if (targetApp && currentApp && targetApp !== currentApp) {
             try {
                 const resp = await firstValueFrom(this.handoff.createHandoff({ targetAppId: targetApp, route }));
-                const baseUrl = resp.targetBaseUrl ?? this.config.appUrls?.[targetApp];
+                const baseUrl = resp.targetBaseUrl ?? this.config?.appUrls?.[targetApp];
                 if (!baseUrl) {
                     console.warn(`[NotificationAction] No baseUrl for app '${targetApp}' — backend did not return targetBaseUrl and no appUrls fallback configured`);
                     return 'cross-app-unconfigured';