valtech-components 4.0.34 → 4.0.35

package/fesm2022/valtech-components.mjs

@@ -1,5 +1,5 @@
 import * as i0 from '@angular/core';
-import { inject, InjectionToken, makeEnvironmentProviders, APP_INITIALIZER, ErrorHandler, Injectable, DestroyRef, Inject, signal, computed, PLATFORM_ID, isDevMode, Optional, runInInjectionContext, effect, Pipe, TemplateRef, ViewContainerRef, input, Directive, EventEmitter, Component, Input, Output, ChangeDetectionStrategy, HostBinding, HostListener, NgZone, ViewChild, ChangeDetectorRef, output, ContentChild, model, ViewEncapsulation, ElementRef, viewChild, untracked, Injector, isSignal } from '@angular/core';
+import { inject, InjectionToken, makeEnvironmentProviders, APP_INITIALIZER, ErrorHandler, Injectable, DestroyRef, Inject, signal, computed, PLATFORM_ID, isDevMode, Optional, runInInjectionContext, effect, Pipe, TemplateRef, ViewContainerRef, input, Directive, EventEmitter, Component, Input, Output, ChangeDetectionStrategy, HostBinding, HostListener, SecurityContext, NgZone, ViewChild, ChangeDetectorRef, output, ContentChild, model, ViewEncapsulation, ElementRef, viewChild, untracked, Injector, isSignal } from '@angular/core';
 import { BehaviorSubject, throwError, Subject, map, distinctUntilChanged, filter as filter$1, take as take$1, firstValueFrom, of, from, EMPTY, Observable, interval, debounceTime, switchMap as switchMap$1, catchError as catchError$1, takeUntil, isObservable, forkJoin, race, timer, shareReplay } from 'rxjs';
 import { catchError, switchMap, finalize, filter, take, map as map$1, tap, distinctUntilChanged as distinctUntilChanged$1, retry, timeout, debounceTime as debounceTime$1, takeUntil as takeUntil$1 } from 'rxjs/operators';
 import * as i1$3 from '@angular/common/http';
@@ -56,7 +56,7 @@ import { BrowserMultiFormatReader } from '@zxing/browser';
  * Current version of valtech-components.
  * This is automatically updated during the publish process.
  */
-const VERSION = '4.0.34';
+const VERSION = '4.0.35';
 
 // Control de estado de refresco (singleton a nivel de módulo)
 let isRefreshing = false;
@@ -2349,7 +2349,8 @@ class AuthStorageService {
             return;
         try {
             localStorage.setItem(this.keys.ACCESS_TOKEN, state.accessToken);
-            localStorage.setItem(this.keys.REFRESH_TOKEN, state.refreshToken);
+            // H-05: el refresh token NO se persiste en localStorage — vive en una
+            // cookie HttpOnly que el backend emite. Así un XSS no puede exfiltrarlo.
             localStorage.setItem(this.keys.ROLES, JSON.stringify(state.roles));
             localStorage.setItem(this.keys.PERMISSIONS, JSON.stringify(state.permissions));
             localStorage.setItem(this.keys.IS_SUPER_ADMIN, String(state.isSuperAdmin));
@@ -2407,15 +2408,10 @@ class AuthStorageService {
     /**
      * Guarda el refresh token (token rotation).
      */
-    saveRefreshToken(token) {
-        if (!this.isBrowser)
-            return;
-        try {
-            localStorage.setItem(this.keys.REFRESH_TOKEN, token);
-        }
-        catch (e) {
-            console.warn('[ValtechAuth] Error guardando refresh token:', e);
-        }
+    saveRefreshToken(_token) {
+        // H-05: no-op. El refresh token ya no se persiste en localStorage; lo
+        // transporta una cookie HttpOnly emitida por el backend. Se mantiene el
+        // método para no romper llamadores existentes durante la transición.
     }
     /**
      * Guarda los permisos actualizados.
@@ -6442,6 +6438,13 @@ class OAuthService {
         this.popup = null;
         this.messageHandler = null;
         this.checkClosedInterval = null;
+        /**
+         * Nonce del flujo OAuth en curso (M-07). Vive SOLO en memoria — un XSS no lo
+         * puede leer de localStorage/sessionStorage. Viaja al backend (client_nonce),
+         * vuelve en el callback, y se verifica acá → rechaza un oauth_callback_data
+         * forjado por XSS.
+         */
+        this.expectedNonce = null;
     }
     /**
      * Inicia flujo OAuth en popup.
@@ -6452,9 +6455,14 @@ class OAuthService {
      */
     startFlow(provider) {
         return new Observable(observer => {
+            // Nonce de flujo (M-07): vive solo en este objeto (no en storage), viaja
+            // al backend en client_nonce y vuelve en el callback. El opener lo verifica
+            // → un oauth_callback_data forjado en localStorage por XSS no lo conoce.
+            const nonce = this.generateNonce();
+            this.expectedNonce = nonce;
             // Construir URL de inicio
             const redirectUri = `${window.location.origin}/auth/oauth/callback`;
-            const startUrl = `${this.config?.apiUrl}/v2/auth/oauth/${provider}/start?redirect_uri=${encodeURIComponent(redirectUri)}`;
+            const startUrl = `${this.config?.apiUrl}/v2/auth/oauth/${provider}/start?redirect_uri=${encodeURIComponent(redirectUri)}&client_nonce=${encodeURIComponent(nonce)}`;
             // Abrir popup centrado
             const width = 500;
             const height = 600;
@@ -6480,6 +6488,11 @@ class OAuthService {
                 if (data?.type !== 'oauth-callback') {
                     return;
                 }
+                // Verificar el nonce del flujo (M-07): si no coincide, no es nuestro
+                // callback → ignorar (no consumir el observable).
+                if (!this.isNonceValid(data)) {
+                    return;
+                }
                 // Limpiar
                 this.cleanup();
                 // Emitir resultado dentro de NgZone para trigger change detection
@@ -6512,11 +6525,16 @@ class OAuthService {
                             observer.error(storedData.error);
                         }
                         else if (storedData.tokens) {
-                            console.log('[OAuthService] Retrieved tokens from localStorage fallback', {
-                                keys: Object.keys(storedData.tokens),
-                                hasFirebaseToken: !!storedData.tokens.firebaseToken,
-                                firebaseTokenLength: storedData.tokens.firebaseToken?.length ?? 0,
-                            });
+                            // Gate de diagnóstico: la metadata de tokens (keys, presencia y
+                            // longitud del firebaseToken) no debe filtrarse a la consola en
+                            // producción (L4 del audit). Solo en dev.
+                            if (isDevMode()) {
+                                console.log('[OAuthService] Retrieved tokens from localStorage fallback', {
+                                    keys: Object.keys(storedData.tokens),
+                                    hasFirebaseToken: !!storedData.tokens.firebaseToken,
+                                    firebaseTokenLength: storedData.tokens.firebaseToken?.length ?? 0,
+                                });
+                            }
                             observer.next(storedData.tokens);
                             observer.complete();
                         }
@@ -6669,6 +6687,18 @@ class OAuthService {
             }
             const data = JSON.parse(dataStr);
             this.clearLocalStorageFallback();
+            // El camino localStorage es el que un XSS podría forjar (M-07). El
+            // postMessage ya valida origin + tipo; acá replicamos esas defensas y
+            // sumamos la verificación del nonce de flujo + forma del payload.
+            if (data?.type !== 'oauth-callback') {
+                return null;
+            }
+            if (!this.isNonceValid(data)) {
+                return null;
+            }
+            if (!this.isCallbackShapeValid(data)) {
+                return null;
+            }
             return data;
         }
         catch (e) {
@@ -6704,6 +6734,47 @@ class OAuthService {
             this.popup.close();
         }
         this.popup = null;
+        // El nonce ya fue verificado (si correspondía) antes de llegar acá; se
+        // limpia para no reusarlo en un flujo futuro (M-07).
+        this.expectedNonce = null;
+    }
+    /**
+     * Genera un nonce aleatorio (CSPRNG) url-safe para el flujo OAuth (M-07).
+     */
+    generateNonce() {
+        const bytes = new Uint8Array(16);
+        crypto.getRandomValues(bytes);
+        let bin = '';
+        bytes.forEach(b => (bin += String.fromCharCode(b)));
+        // base64url sin padding.
+        return btoa(bin).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+    }
+    /**
+     * Verifica que el callback traiga el nonce del flujo actual (M-07).
+     *
+     * Estricto: si el opener generó un nonce (siempre, en clientes nuevos) exige
+     * que el callback lo traiga y coincida. Un payload forjado en localStorage por
+     * XSS no conoce el nonce (vive solo en memoria) → se rechaza.
+     *
+     * ⚠️ Requiere que el backend ya eche `client_nonce` en el callback. Deploy:
+     * backend ANTES que el frontend, si no este check rechaza callbacks legítimos
+     * (sin nonce) durante la ventana de transición.
+     */
+    isNonceValid(data) {
+        if (!this.expectedNonce) {
+            // No hay flujo con nonce activo (caso legacy / link flow) → no bloquear.
+            return true;
+        }
+        return data?.nonce === this.expectedNonce;
+    }
+    /**
+     * Valida la forma del payload del callback (M-07): debe ser un error o tokens
+     * como objeto. Bloquea inyecciones malformadas (primitivos, shapes basura).
+     */
+    isCallbackShapeValid(data) {
+        const hasError = !!data.error && typeof data.error === 'object';
+        const hasTokens = !!data.tokens && typeof data.tokens === 'object';
+        return hasError || hasTokens;
     }
     static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: OAuthService, deps: [{ token: VALTECH_AUTH_CONFIG, optional: true }, { token: i1$3.HttpClient }, { token: i0.NgZone }], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "18.2.14", ngImport: i0, type: OAuthService, providedIn: 'root' }); }
@@ -8122,8 +8193,12 @@ class AuthService {
                     this.setupFirestoreRBACSync(claims.uid);
                 }
             }
-            else if (storedState.refreshToken) {
-                // 4. Token expirado pero hay refresh token.
+            else if (storedState.accessToken) {
+                // 4. Token de acceso expirado. El refresh token vive en la cookie
+                // HttpOnly (H-05), no en storage — así que el disparador ya no es
+                // "hay refresh en storage" sino "había un access token" (sesión
+                // previa). El /refresh de fondo usa la cookie; si no es válida, falla
+                // y caemos a signOut (catch más abajo).
                 //
                 // NO bloqueamos el bootstrap esperando la red: un /refresh en una
                 // Lambda fría son 2-5s de pantalla en blanco (Angular no renderiza
@@ -8383,20 +8458,21 @@ class AuthService {
      * que el cliente debe guardar para el próximo refresh.
      */
     refreshAccessToken() {
+        // H-05: el refresh token vive en una cookie HttpOnly (no en storage). El
+        // gate ya NO exige tenerlo en memoria — la cookie lo aporta. Durante la
+        // transición, si todavía hay un refresh en estado (sesión vieja), se manda
+        // en el body (el backend prioriza body sobre cookie). withCredentials hace
+        // que el browser envíe la cookie en la request cross-site.
         const refreshToken = this.state().refreshToken;
-        if (!refreshToken) {
-            return throwError(() => ({
-                code: 'NO_REFRESH_TOKEN',
-                message: 'No hay token de refresco',
-            }));
-        }
-        return this.http.post(`${this.baseUrl}/refresh`, { refreshToken }).pipe(tap(response => {
+        const body = refreshToken ? { refreshToken } : {};
+        return this.http
+            .post(`${this.baseUrl}/refresh`, body, { withCredentials: true })
+            .pipe(tap(response => {
             const expiresAt = Date.now() + response.expiresIn * 1000;
-            // Token rotation: guardar nuevo access token Y refresh token
+            // Token rotation: el access token se guarda; el refresh rotado viaja en
+            // la cookie HttpOnly (NO se persiste en localStorage — H-05).
             this.stateService.updateAccessToken(response.accessToken, response.expiresIn);
-            this.stateService.updateRefreshToken(response.refreshToken); // NUEVO: guardar refresh rotado
             this.storageService.saveAccessToken(response.accessToken, expiresAt);
-            this.storageService.saveRefreshToken(response.refreshToken); // NUEVO: persistir refresh rotado
             if (this.config?.enableFirebaseIntegration && response.firebaseToken) {
                 this.signInWithFirebase(response.firebaseToken);
             }
@@ -8472,13 +8548,16 @@ class AuthService {
         const refreshToken = this.state().refreshToken;
         // Eliminar dispositivo del backend antes de cerrar sesión
         await this.unregisterDevice();
-        // Notificar al backend (fire and forget)
-        if (refreshToken) {
-            this.http
-                .post(`${this.baseUrl}/logout`, { refreshToken })
-                .pipe(catchError(() => of(null)))
-                .subscribe();
-        }
+        // Notificar al backend (fire and forget). El refresh token va por la cookie
+        // HttpOnly (H-05); si aún hay uno en estado (sesión vieja) se manda en el
+        // body. El backend revoca la sesión y expira la cookie. withCredentials
+        // envía la cookie cross-site.
+        this.http
+            .post(`${this.baseUrl}/logout`, refreshToken ? { refreshToken } : {}, {
+            withCredentials: true,
+        })
+            .pipe(catchError(() => of(null)))
+            .subscribe();
         // Cerrar sesión de Firebase si está integrado
         this.signOutFirebase();
         this.clearState();
@@ -11514,7 +11593,7 @@ class LinkProcessorService {
                     : '';
                 const typeClass = isExternal ? externalLinkClass : internalLinkClass;
                 const classes = `${linkClass} ${typeClass}`.trim();
-                const linkHtml = `<a href="${url}"${target} class="${classes}">${linkText}</a>`;
+                const linkHtml = `<a href="${this.safeHref(url)}"${target} class="${classes}">${this.escapeHtml(linkText)}</a>`;
                 processedText =
                     processedText.substring(0, startIndex) + linkHtml + processedText.substring(endIndex);
             }
@@ -11548,7 +11627,7 @@ class LinkProcessorService {
             hasLinks = true;
             const target = openExternalInNewTab ? ' target="_blank" rel="noopener noreferrer"' : '';
             const classes = `${linkClass} ${externalLinkClass}`.trim();
-            const linkHtml = `<a href="${cleanUrl}"${target} class="${classes}">${cleanUrl}</a>`;
+            const linkHtml = `<a href="${this.safeHref(cleanUrl)}"${target} class="${classes}">${this.escapeHtml(cleanUrl)}</a>`;
             // Reemplazar el URL original con el enlace + puntuación si existía
             const replacement = punctuationRemoved ? linkHtml + punctuation : linkHtml;
             processedText =
@@ -11579,7 +11658,7 @@ class LinkProcessorService {
             hasLinks = true;
             const target = openInternalInNewTab ? ' target="_blank"' : '';
             const classes = `${linkClass} ${internalLinkClass}`.trim();
-            const linkHtml = `<a href="${route}"${target} class="${classes}">${route}</a>`;
+            const linkHtml = `<a href="${this.safeHref(route)}"${target} class="${classes}">${this.escapeHtml(route)}</a>`;
             const replacement = `${prefix}${linkHtml}`;
             processedText =
                 processedText.substring(0, startIndex) + replacement + processedText.substring(endIndex);
@@ -11590,6 +11669,28 @@ class LinkProcessorService {
         }
         return text;
     }
+    /**
+     * Devuelve un valor seguro para el atributo href. Como processLinks usa
+     * bypassSecurityTrustHtml (desactiva la sanitización automática de Angular),
+     * cada URL se valida explícitamente: el sanitizador de Angular neutraliza
+     * esquemas peligrosos (javascript:, data:, vbscript:) prefijándolos con
+     * `unsafe:`, y luego se escapa el resultado para el contexto de atributo —
+     * evitando que una URL como `[x](javascript:alert(1))` o `http://a" onx="..."`
+     * inyecte script o atributos.
+     */
+    safeHref(url) {
+        const sanitized = this.sanitizer.sanitize(SecurityContext.URL, url) ?? '';
+        return this.escapeHtml(sanitized);
+    }
+    /** Escapa los caracteres especiales de HTML (texto y valores de atributo). */
+    escapeHtml(value) {
+        return value
+            .replace(/&/g, '&amp;')
+            .replace(/</g, '&lt;')
+            .replace(/>/g, '&gt;')
+            .replace(/"/g, '&quot;')
+            .replace(/'/g, '&#39;');
+    }
     /**
      * Detecta si un texto contiene enlaces (URLs, rutas internas o enlaces Markdown).
      *
@@ -32719,12 +32820,19 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "18.2.14", ngImpo
 class OAuthCallbackComponent {
     constructor() {
         this.message = 'Procesando autenticación...';
+        /**
+         * Nonce que el opener generó y pasó por el flujo (round-trip backend). Se
+         * reenvía al opener en cada mensaje para que verifique el origen del callback
+         * y rechace un oauth_callback_data forjado en localStorage por XSS (M-07).
+         */
+        this.clientNonce = null;
     }
     ngOnInit() {
         this.processCallback();
     }
     processCallback() {
         const params = new URLSearchParams(window.location.search);
+        this.clientNonce = params.get('client_nonce');
         // DEBUG: Log all received params
         console.log('[OAuthCallback] URL params received:', {
             url: window.location.href,
@@ -32823,6 +32931,11 @@ class OAuthCallbackComponent {
         this.closeAfterDelay();
     }
     sendToParent(data) {
+        // Adjuntar el nonce del opener (M-07) a TODO mensaje (success, MFA, error)
+        // para que el opener verifique que el callback es de su propio flujo.
+        if (this.clientNonce) {
+            data.nonce = this.clientNonce;
+        }
         // Siempre guardar en localStorage como fallback (para COOP issues)
         try {
             localStorage.setItem('oauth_callback_data', JSON.stringify(data));
@@ -66641,6 +66754,47 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "18.2.14", ngImpo
             args: [{ providedIn: 'root' }]
         }] });
 
+const DEFAULT_VISIBILITY = 'ORG';
+/**
+ * ¿Este viewer puede ENVIAR una solicitud de este tipo? Espeja el gate
+ * server-side (`backend/.../request: submissionTargetOrg`). Es solo UX — el
+ * backend siempre valida —, pero evita que cada app reimplemente (mal) el filtro:
+ *
+ *  - PUBLIC        → cualquiera (anónimo solo si allowAnonymous).
+ *  - AUTHENTICATED → logueado + verificado (cross-org).
+ *  - ORG/INTERNAL  → miembro de la org dueña (activeOrg === type.orgId).
+ */
+function canSubmitRequestType(type, ctx) {
+    const visibility = type.visibility ?? DEFAULT_VISIBILITY;
+    switch (visibility) {
+        case 'PUBLIC':
+            return ctx.isAuthenticated || type.allowAnonymous;
+        case 'AUTHENTICATED':
+            return ctx.isAuthenticated && (ctx.isVerified ?? true);
+        case 'ORG':
+        case 'INTERNAL':
+            return ctx.isAuthenticated && (!type.orgId || ctx.activeOrg === type.orgId);
+        default:
+            return false;
+    }
+}
+/** Filtra el catálogo a los tipos que el viewer puede enviar. */
+function selectableRequestTypes(types, ctx) {
+    return types.filter(t => canSubmitRequestType(t, ctx));
+}
+/**
+ * Modo de envío a usar: `'anonymous'` solo para tipos PUBLIC + allowAnonymous sin
+ * sesión; en el resto `'authenticated'`. Mapea a
+ * `RequestService.createAnonymousRequest` vs `createRequest`.
+ */
+function requestSubmitMode(type, ctx) {
+    const visibility = type.visibility ?? DEFAULT_VISIBILITY;
+    if (visibility === 'PUBLIC' && !ctx.isAuthenticated && type.allowAnonymous) {
+        return 'anonymous';
+    }
+    return 'authenticated';
+}
+
 /**
  * Default values for ArticleStripMetadata.
  */
@@ -67637,5 +67791,5 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "18.2.14", ngImpo
  * Generated bundle index. Do not edit.
  */
 
-export { ACTION_CARD_DEFAULTS, AD_SIZE_MAP, API_TABLE_COLUMN_LABELS, APP_VERSION_PLATFORM_PLUGIN, APP_VERSION_REMOTE_PLUGIN, ARTICLE_CARD_DEFAULTS, ARTICLE_SPACING, ARTICLE_STRIP_DEFAULTS, AUTH_CTA_DEFAULTS, AVATAR_UPLOAD_DEFAULTS, AboutViewComponent, AccordionComponent, AccountViewComponent, ActionCardComponent, ActionHeaderComponent, ActionType, AdSlotComponent, AdsLoaderService, AdsService, AlertBoxComponent, AnalyticsErrorHandler, AnalyticsRouterTracker, AnalyticsService, AnimatedTerminalComponent, ApiKeyCreateModalComponent, ApiKeyService, ApiKeysModalComponent, ApiKeysViewComponent, AppConfigService, AppVersionService, ArticleBuilder, ArticleCardComponent, ArticleComponent, ArticleStripComponent, AttachmentUploaderComponent, AuthBackgroundComponent, AuthCtaComponent, AuthService, AuthStateService, AuthStorageService, AuthSyncService, AvatarComponent, AvatarUploadComponent, BOTTOM_NAV_DEFAULTS, BannerComponent, BlogPostBuilder, BottomNavComponent, BoxComponent, BreadcrumbComponent, ButtonComponent, ButtonGroupComponent, CALLOUT_LABELS, CHEV_KEYS, CIRCLE_KEYS, COMMON_COUNTRY_CODES, COMMON_CURRENCIES, CORNER_KEYS, CTA_CARD_DEFAULTS, CURRENCY_INFO, CardComponent, CardSection, CardType, CardsCarouselComponent, ChangeEmailModalComponent, ChangePasswordModalComponent, CheckInputComponent, CheckboxRadioInputComponent, ChipGroupComponent, CodeDisplayComponent, CommandDisplayComponent, CommentComponent, CommentInputComponent, CommentSectionComponent, CompanyFooterComponent, ComponentStates, ConfirmationDialogService, ContainerComponent, ContentLoaderComponent, ContentReactionComponent, ContentService, ContentTransformer, CookieBannerComponent, CountdownComponent, CreateOrgModalComponent, CtaCardComponent, CurrencyInputComponent, DEFAULT_ADS_CONFIG, DEFAULT_APP_CONFIG_SERVICE_CONFIG, DEFAULT_APP_VERSION_SERVICE_CONFIG, DEFAULT_AUTH_CONFIG, DEFAULT_BACK_HEADER, DEFAULT_BUTTON_PRESETS, DEFAULT_CANCEL_BUTTON, DEFAULT_CHECK_INTERVAL_MS, DEFAULT_CONFIRM_BUTTON, DEFAULT_COUNTDOWN_LABELS, DEFAULT_COUNTDOWN_LABELS_EN, DEFAULT_DEBUG_CONSOLE_CONFIG, DEFAULT_DONATION_CONFIG, DEFAULT_EMPTY_STATE, DEFAULT_EMULATOR_CONFIG, DEFAULT_FEEDBACK_CONFIG, DEFAULT_FEEDBACK_TYPE_OPTIONS, DEFAULT_HOME_HEADER, DEFAULT_INFINITE_LIST_METADATA, DEFAULT_LOGIN_LOGO, DEFAULT_MODAL_CANCEL_BUTTON, DEFAULT_MODAL_CONFIRM_BUTTON, DEFAULT_PAGE_SIZE_OPTIONS, DEFAULT_PLATFORMS, DEFAULT_PRESETS, DEFAULT_REFRESHER_METADATA, DEFAULT_SKELETON_CONFIG, DEFAULT_SPLASH_SCREEN_CONFIG, DataTableComponent, DateInputComponent, DatePickerComponent, DateRangeInputComponent, DebugConsoleComponent, DeleteAccountModalComponent, DetailSkeletonComponent, DeviceService, DisplayComponent, DividerComponent, DocsApiTableComponent, DocsBreadcrumbComponent, DocsBuilder, DocsCalloutComponent, DocsCodeExampleComponent, DocsLayoutComponent, DocsNavLinksComponent, DocsNavigationService, DocsPageComponent, DocsSearchComponent, DocsSectionComponent, DocsShellComponent, DocsSidebarComponent, DocsTocComponent, DonationService, DownloadService, EditOrgModalComponent, EmptyStateComponent, ExpandableTextComponent, FEATURES_LIST_DEFAULTS, FUN_MODAL_DEFAULTS, FabComponent, FaqComponent, FeaturesListComponent, FeedbackFormComponent, FeedbackService, FieldListComponent, FileInputComponent, FirebaseService, FirestoreCollectionFactory, FirestoreService, FontSizeOption, FontSizeService, FooterComponent, FooterLinksComponent, FormComponent, FormSkeletonComponent, FunHeaderComponent, FunModalComponent, GlassComponent, GlowCardComponent, GlowComponent, GridSkeletonComponent, HANDOFF_ROUTE_PARAM, HANDOFF_TOKEN_PARAM, HandoffService, HasPermissionDirective, HeaderComponent, HintComponent, HorizontalScrollComponent, HrefComponent, I18nService, IMAGE_DEFAULTS, INITIAL_AUTH_STATE, INITIAL_MFA_STATE, INVITATION_CARD_DEFAULTS, IONIC_COLORS$5 as IONIC_COLORS, Icon, IconComponent, IconService, ImageComponent, ImageCropComponent, ImageService, InAppBrowserService, InfiniteListComponent, InfoComponent, InputI18nHelper, InputType, InvitationCardComponent, InviteMemberModalComponent, ItemListComponent, LANG_STORAGE_KEY$1 as LANG_STORAGE_KEY, LEGAL_CONTENT_CONFIG, LOGIN_DEFAULTS, LandingSplitComponent, LandingStepsComponent, LanguageSelectorComponent, LayeredCardComponent, LegalContentService, LegalLinkService, LinkComponent, LinkProcessorService, LinkedProvidersComponent, LinksAccordionComponent, LinksCakeComponent, ListSkeletonComponent, LoadingDirective, LocalStorageService, LocaleService, LoginAttemptModalComponent, LoginComponent, MEDIA_OBJECT_DEFAULTS, MEMBER_CARD_DEFAULTS, METRIC_CARD_DEFAULTS, MODAL_SIZES, MOTIF_KEYS, MOTION, MaintenancePageComponent, MarkdownArticleParserService, MediaObjectComponent, MemberCardComponent, MemberDetailModalComponent, MemberImportModalComponent, MenuComponent, MessagingService, MetaService, MetricCardComponent, MfaModalComponent, ModalService, ModalShellComponent, MultiSelectSearchComponent, NUM_KEYS, NavigationService, NetworkBannerComponent, NetworkStatusService, NewsBuilder, NoContentComponent, NotesBoxComponent, NotificationActionService, NotificationPreferencesViewComponent, NotificationsService, NotificationsViewComponent, NumberFromToComponent, NumberStepperComponent, OAUTH_PROVIDERS_INFO, OAuthCallbackComponent, OAuthService, OrgInfoSheetComponent, OrgService, OrgSwitchService, OrganizationViewComponent, PATTERN_MOTIFS, PATTERN_PALETTES, PATTERN_STYLE_CONFIGS, PLATFORM_CONFIGS, PageContentComponent, PageLinksComponent, PageRefreshService, PageTemplateComponent, PageWavesComponent, PageWrapperComponent, PaginationComponent, PaginationService, PasswordInputComponent, PatternComponent, PermissionCatalogService, PermissionSelectorComponent, PermissionsModalComponent, PermissionsViewComponent, PhoneInputComponent, PillComponent, PinInputComponent, PlainCodeBoxComponent, PopoverSelectorComponent, PreferencesService, PreferencesViewComponent, PresetService, PriceTagComponent, ProcessLinksPipe, ProfileSkeletonComponent, ProfileViewComponent, ProgressBarComponent, ProgressRingComponent, ProgressStatusComponent, PrompterComponent, QR_PRESETS, QrCodeComponent, QrGeneratorService, QrScannerComponent, QueryBuilder, QuoteBoxComponent, REQUEST_STATUSES, RadioInputComponent, RangeInputComponent, RatingComponent, RefresherComponent, RequestFirestoreService, RequestFormBuilderService, RequestService, RightsFooterComponent, RotatingTextComponent, SEARCH_HEADER_DEFAULTS, SETTINGS_SECTIONS_CATALOG, SHAPE_KEYS, SHARE_PROFILE_MODAL_DEFAULTS, SKELETON_LAYOUT_DEFAULT_ROWS, SKELETON_PRESETS, SOLID_KEYS, STATS_BAR_DEFAULTS, STROKE_KEYS, SearchHeaderComponent, SearchSelectorComponent, SearchbarComponent, SecurityViewComponent, SegmentControlComponent, SelectSearchComponent, SessionListModalComponent, SessionService, SettingsHubComponent, ShareButtonsComponent, ShareProfileModalComponent, SimpleComponent, SkeletonComponent, SkeletonLayoutComponent, SkeletonService, SplashScreenService, StatsBarComponent, StatsCardComponent, StepperComponent, StorageService, SwipeCarouselComponent, SwitchOrgModalComponent, TRI_KEYS, TabbedContentComponent, TableSkeletonComponent, TabsComponent, Terminal404Component, TestimonialCardComponent, TestimonialCarouselComponent, TextComponent, TextInputComponent, TextareaInputComponent, ThemeOption, ThemeService, TicketCardComponent, TimelineComponent, TitleBlockComponent, TitleComponent, ToastService, ToggleInputComponent, TokenService, ToolbarActionType, ToolbarComponent, TransferOwnershipModalComponent, TranslatePipe, TypedCollection, UPDATE_BANNER_DEFAULT_CONTENT, UPDATE_BANNER_I18N_NAMESPACE, UpdateBannerComponent, UserAvatarComponent, UsernameInputComponent, VALTECH_ADS_CONFIG, VALTECH_APP_CONFIG, VALTECH_APP_VERSION, VALTECH_AUTH_CONFIG, VALTECH_COMPANY_LINKS, VALTECH_CONTENT_CONFIG, VALTECH_DEBUG_CONSOLE, VALTECH_DEFAULT_CONTENT, VALTECH_DONATION_CONFIG, VALTECH_FEEDBACK_CONFIG, VALTECH_FIREBASE_CONFIG, VALTECH_FOOTER_I18N, VALTECH_FOOTER_LOGO, VALTECH_LANGUAGE_SELECTOR, VALTECH_LEGAL_CONFIG, VALTECH_NETWORK_ERROR_KEY, VALTECH_SETTINGS_MENU_LINKS, VALTECH_SITE_PATHS, VALTECH_SOCIAL_LINKS, VALTECH_SPLASH_SCREEN, VALTECH_WEB_BASE_URLS, VALTECH_WHATSAPP_CONFIG, VERSION, ValtechErrorService, WhatsappFabComponent, WhatsappService, WizardComponent, WizardFooterComponent, applyDefaultValueToControl, authGuard, authInterceptor, authPasswordValidator, beautifyLegalArticle, blogPost, buildCompanyFooterProps, buildFooterLinks, buildLegalLinkResolver, buildPath, buildSettingsCards, button, collections, connectPageRefresh, createErrorStateProps, createFirebaseConfig, createGlowCardProps, createInitialPaginationState, createNumberFromToField, createPageState, createPermissionLabeler, createRefreshableStream, createTitleProps, docs, errorLoggingInterceptor, extractPathParams, generatePatternTiles, generateRandomTile, getAppInfo, getAppVersion, getCollectionPath, getDocumentId, getTimeOfDayKey, goToTop, guestGuard, hasEmulators, iconButton, interpretError, isAtEnd, isCollectionPath, isDocumentPath, isEmulatorMode, isIonicColor, isValidPath, joinPath, maxLength, mulberry32, news, parseMarkdownArticle, permissionGuard, permissionGuardFromRoute, provideLegalContent, provideSplashScreen, provideValtechAboutRoutes, provideValtechAccountRoutes, provideValtechAds, provideValtechApiKeysRoutes, provideValtechAppConfig, provideValtechAppVersion, provideValtechAppVersionHttp, provideValtechAuth, provideValtechAuthInterceptor, provideValtechContent, provideValtechDebugConsole, provideValtechDonations, provideValtechErrorHandling, provideValtechFeedback, provideValtechFirebase, provideValtechI18n, provideValtechLegal, provideValtechNotificationPreferencesRoutes, provideValtechNotificationsRoutes, provideValtechOrganizationRoutes, provideValtechPermissionsRoutes, provideValtechPreferencesRoutes, provideValtechPresets, provideValtechProfileRoutes, provideValtechSecurityRoutes, provideValtechSettingsRoutes, provideValtechSite, provideValtechSkeleton, provideValtechWhatsapp, query, renderPatternSvgInner, replaceSpecialChars, resolveColor, resolveInputDefaultValue, resolveIonicColor, resolveWebBaseUrl, roleGuard, storagePaths, superAdminGuard, toArticle };
+export { ACTION_CARD_DEFAULTS, AD_SIZE_MAP, API_TABLE_COLUMN_LABELS, APP_VERSION_PLATFORM_PLUGIN, APP_VERSION_REMOTE_PLUGIN, ARTICLE_CARD_DEFAULTS, ARTICLE_SPACING, ARTICLE_STRIP_DEFAULTS, AUTH_CTA_DEFAULTS, AVATAR_UPLOAD_DEFAULTS, AboutViewComponent, AccordionComponent, AccountViewComponent, ActionCardComponent, ActionHeaderComponent, ActionType, AdSlotComponent, AdsLoaderService, AdsService, AlertBoxComponent, AnalyticsErrorHandler, AnalyticsRouterTracker, AnalyticsService, AnimatedTerminalComponent, ApiKeyCreateModalComponent, ApiKeyService, ApiKeysModalComponent, ApiKeysViewComponent, AppConfigService, AppVersionService, ArticleBuilder, ArticleCardComponent, ArticleComponent, ArticleStripComponent, AttachmentUploaderComponent, AuthBackgroundComponent, AuthCtaComponent, AuthService, AuthStateService, AuthStorageService, AuthSyncService, AvatarComponent, AvatarUploadComponent, BOTTOM_NAV_DEFAULTS, BannerComponent, BlogPostBuilder, BottomNavComponent, BoxComponent, BreadcrumbComponent, ButtonComponent, ButtonGroupComponent, CALLOUT_LABELS, CHEV_KEYS, CIRCLE_KEYS, COMMON_COUNTRY_CODES, COMMON_CURRENCIES, CORNER_KEYS, CTA_CARD_DEFAULTS, CURRENCY_INFO, CardComponent, CardSection, CardType, CardsCarouselComponent, ChangeEmailModalComponent, ChangePasswordModalComponent, CheckInputComponent, CheckboxRadioInputComponent, ChipGroupComponent, CodeDisplayComponent, CommandDisplayComponent, CommentComponent, CommentInputComponent, CommentSectionComponent, CompanyFooterComponent, ComponentStates, ConfirmationDialogService, ContainerComponent, ContentLoaderComponent, ContentReactionComponent, ContentService, ContentTransformer, CookieBannerComponent, CountdownComponent, CreateOrgModalComponent, CtaCardComponent, CurrencyInputComponent, DEFAULT_ADS_CONFIG, DEFAULT_APP_CONFIG_SERVICE_CONFIG, DEFAULT_APP_VERSION_SERVICE_CONFIG, DEFAULT_AUTH_CONFIG, DEFAULT_BACK_HEADER, DEFAULT_BUTTON_PRESETS, DEFAULT_CANCEL_BUTTON, DEFAULT_CHECK_INTERVAL_MS, DEFAULT_CONFIRM_BUTTON, DEFAULT_COUNTDOWN_LABELS, DEFAULT_COUNTDOWN_LABELS_EN, DEFAULT_DEBUG_CONSOLE_CONFIG, DEFAULT_DONATION_CONFIG, DEFAULT_EMPTY_STATE, DEFAULT_EMULATOR_CONFIG, DEFAULT_FEEDBACK_CONFIG, DEFAULT_FEEDBACK_TYPE_OPTIONS, DEFAULT_HOME_HEADER, DEFAULT_INFINITE_LIST_METADATA, DEFAULT_LOGIN_LOGO, DEFAULT_MODAL_CANCEL_BUTTON, DEFAULT_MODAL_CONFIRM_BUTTON, DEFAULT_PAGE_SIZE_OPTIONS, DEFAULT_PLATFORMS, DEFAULT_PRESETS, DEFAULT_REFRESHER_METADATA, DEFAULT_SKELETON_CONFIG, DEFAULT_SPLASH_SCREEN_CONFIG, DataTableComponent, DateInputComponent, DatePickerComponent, DateRangeInputComponent, DebugConsoleComponent, DeleteAccountModalComponent, DetailSkeletonComponent, DeviceService, DisplayComponent, DividerComponent, DocsApiTableComponent, DocsBreadcrumbComponent, DocsBuilder, DocsCalloutComponent, DocsCodeExampleComponent, DocsLayoutComponent, DocsNavLinksComponent, DocsNavigationService, DocsPageComponent, DocsSearchComponent, DocsSectionComponent, DocsShellComponent, DocsSidebarComponent, DocsTocComponent, DonationService, DownloadService, EditOrgModalComponent, EmptyStateComponent, ExpandableTextComponent, FEATURES_LIST_DEFAULTS, FUN_MODAL_DEFAULTS, FabComponent, FaqComponent, FeaturesListComponent, FeedbackFormComponent, FeedbackService, FieldListComponent, FileInputComponent, FirebaseService, FirestoreCollectionFactory, FirestoreService, FontSizeOption, FontSizeService, FooterComponent, FooterLinksComponent, FormComponent, FormSkeletonComponent, FunHeaderComponent, FunModalComponent, GlassComponent, GlowCardComponent, GlowComponent, GridSkeletonComponent, HANDOFF_ROUTE_PARAM, HANDOFF_TOKEN_PARAM, HandoffService, HasPermissionDirective, HeaderComponent, HintComponent, HorizontalScrollComponent, HrefComponent, I18nService, IMAGE_DEFAULTS, INITIAL_AUTH_STATE, INITIAL_MFA_STATE, INVITATION_CARD_DEFAULTS, IONIC_COLORS$5 as IONIC_COLORS, Icon, IconComponent, IconService, ImageComponent, ImageCropComponent, ImageService, InAppBrowserService, InfiniteListComponent, InfoComponent, InputI18nHelper, InputType, InvitationCardComponent, InviteMemberModalComponent, ItemListComponent, LANG_STORAGE_KEY$1 as LANG_STORAGE_KEY, LEGAL_CONTENT_CONFIG, LOGIN_DEFAULTS, LandingSplitComponent, LandingStepsComponent, LanguageSelectorComponent, LayeredCardComponent, LegalContentService, LegalLinkService, LinkComponent, LinkProcessorService, LinkedProvidersComponent, LinksAccordionComponent, LinksCakeComponent, ListSkeletonComponent, LoadingDirective, LocalStorageService, LocaleService, LoginAttemptModalComponent, LoginComponent, MEDIA_OBJECT_DEFAULTS, MEMBER_CARD_DEFAULTS, METRIC_CARD_DEFAULTS, MODAL_SIZES, MOTIF_KEYS, MOTION, MaintenancePageComponent, MarkdownArticleParserService, MediaObjectComponent, MemberCardComponent, MemberDetailModalComponent, MemberImportModalComponent, MenuComponent, MessagingService, MetaService, MetricCardComponent, MfaModalComponent, ModalService, ModalShellComponent, MultiSelectSearchComponent, NUM_KEYS, NavigationService, NetworkBannerComponent, NetworkStatusService, NewsBuilder, NoContentComponent, NotesBoxComponent, NotificationActionService, NotificationPreferencesViewComponent, NotificationsService, NotificationsViewComponent, NumberFromToComponent, NumberStepperComponent, OAUTH_PROVIDERS_INFO, OAuthCallbackComponent, OAuthService, OrgInfoSheetComponent, OrgService, OrgSwitchService, OrganizationViewComponent, PATTERN_MOTIFS, PATTERN_PALETTES, PATTERN_STYLE_CONFIGS, PLATFORM_CONFIGS, PageContentComponent, PageLinksComponent, PageRefreshService, PageTemplateComponent, PageWavesComponent, PageWrapperComponent, PaginationComponent, PaginationService, PasswordInputComponent, PatternComponent, PermissionCatalogService, PermissionSelectorComponent, PermissionsModalComponent, PermissionsViewComponent, PhoneInputComponent, PillComponent, PinInputComponent, PlainCodeBoxComponent, PopoverSelectorComponent, PreferencesService, PreferencesViewComponent, PresetService, PriceTagComponent, ProcessLinksPipe, ProfileSkeletonComponent, ProfileViewComponent, ProgressBarComponent, ProgressRingComponent, ProgressStatusComponent, PrompterComponent, QR_PRESETS, QrCodeComponent, QrGeneratorService, QrScannerComponent, QueryBuilder, QuoteBoxComponent, REQUEST_STATUSES, RadioInputComponent, RangeInputComponent, RatingComponent, RefresherComponent, RequestFirestoreService, RequestFormBuilderService, RequestService, RightsFooterComponent, RotatingTextComponent, SEARCH_HEADER_DEFAULTS, SETTINGS_SECTIONS_CATALOG, SHAPE_KEYS, SHARE_PROFILE_MODAL_DEFAULTS, SKELETON_LAYOUT_DEFAULT_ROWS, SKELETON_PRESETS, SOLID_KEYS, STATS_BAR_DEFAULTS, STROKE_KEYS, SearchHeaderComponent, SearchSelectorComponent, SearchbarComponent, SecurityViewComponent, SegmentControlComponent, SelectSearchComponent, SessionListModalComponent, SessionService, SettingsHubComponent, ShareButtonsComponent, ShareProfileModalComponent, SimpleComponent, SkeletonComponent, SkeletonLayoutComponent, SkeletonService, SplashScreenService, StatsBarComponent, StatsCardComponent, StepperComponent, StorageService, SwipeCarouselComponent, SwitchOrgModalComponent, TRI_KEYS, TabbedContentComponent, TableSkeletonComponent, TabsComponent, Terminal404Component, TestimonialCardComponent, TestimonialCarouselComponent, TextComponent, TextInputComponent, TextareaInputComponent, ThemeOption, ThemeService, TicketCardComponent, TimelineComponent, TitleBlockComponent, TitleComponent, ToastService, ToggleInputComponent, TokenService, ToolbarActionType, ToolbarComponent, TransferOwnershipModalComponent, TranslatePipe, TypedCollection, UPDATE_BANNER_DEFAULT_CONTENT, UPDATE_BANNER_I18N_NAMESPACE, UpdateBannerComponent, UserAvatarComponent, UsernameInputComponent, VALTECH_ADS_CONFIG, VALTECH_APP_CONFIG, VALTECH_APP_VERSION, VALTECH_AUTH_CONFIG, VALTECH_COMPANY_LINKS, VALTECH_CONTENT_CONFIG, VALTECH_DEBUG_CONSOLE, VALTECH_DEFAULT_CONTENT, VALTECH_DONATION_CONFIG, VALTECH_FEEDBACK_CONFIG, VALTECH_FIREBASE_CONFIG, VALTECH_FOOTER_I18N, VALTECH_FOOTER_LOGO, VALTECH_LANGUAGE_SELECTOR, VALTECH_LEGAL_CONFIG, VALTECH_NETWORK_ERROR_KEY, VALTECH_SETTINGS_MENU_LINKS, VALTECH_SITE_PATHS, VALTECH_SOCIAL_LINKS, VALTECH_SPLASH_SCREEN, VALTECH_WEB_BASE_URLS, VALTECH_WHATSAPP_CONFIG, VERSION, ValtechErrorService, WhatsappFabComponent, WhatsappService, WizardComponent, WizardFooterComponent, applyDefaultValueToControl, authGuard, authInterceptor, authPasswordValidator, beautifyLegalArticle, blogPost, buildCompanyFooterProps, buildFooterLinks, buildLegalLinkResolver, buildPath, buildSettingsCards, button, canSubmitRequestType, collections, connectPageRefresh, createErrorStateProps, createFirebaseConfig, createGlowCardProps, createInitialPaginationState, createNumberFromToField, createPageState, createPermissionLabeler, createRefreshableStream, createTitleProps, docs, errorLoggingInterceptor, extractPathParams, generatePatternTiles, generateRandomTile, getAppInfo, getAppVersion, getCollectionPath, getDocumentId, getTimeOfDayKey, goToTop, guestGuard, hasEmulators, iconButton, interpretError, isAtEnd, isCollectionPath, isDocumentPath, isEmulatorMode, isIonicColor, isValidPath, joinPath, maxLength, mulberry32, news, parseMarkdownArticle, permissionGuard, permissionGuardFromRoute, provideLegalContent, provideSplashScreen, provideValtechAboutRoutes, provideValtechAccountRoutes, provideValtechAds, provideValtechApiKeysRoutes, provideValtechAppConfig, provideValtechAppVersion, provideValtechAppVersionHttp, provideValtechAuth, provideValtechAuthInterceptor, provideValtechContent, provideValtechDebugConsole, provideValtechDonations, provideValtechErrorHandling, provideValtechFeedback, provideValtechFirebase, provideValtechI18n, provideValtechLegal, provideValtechNotificationPreferencesRoutes, provideValtechNotificationsRoutes, provideValtechOrganizationRoutes, provideValtechPermissionsRoutes, provideValtechPreferencesRoutes, provideValtechPresets, provideValtechProfileRoutes, provideValtechSecurityRoutes, provideValtechSettingsRoutes, provideValtechSite, provideValtechSkeleton, provideValtechWhatsapp, query, renderPatternSvgInner, replaceSpecialChars, requestSubmitMode, resolveColor, resolveInputDefaultValue, resolveIonicColor, resolveWebBaseUrl, roleGuard, selectableRequestTypes, storagePaths, superAdminGuard, toArticle };
 //# sourceMappingURL=valtech-components.mjs.map