valtech-components 4.0.56 → 4.0.58

package/lib/components/organisms/login/login.component.d.ts

@@ -47,6 +47,15 @@ export declare class LoginComponent implements OnInit, OnDestroy {
     private _verifyFormSectionName;
     private _mfaVerifyFormState;
     private _mfaMethod;
+    /** Método MFA pendiente — expuesto al template para gatear el link de backup (solo TOTP). */
+    readonly mfaMethod: import("@angular/core").Signal<"EMAIL" | "SMS" | "TOTP">;
+    /** A: el user togglea a "código de respaldo" (8 chars alfanuméricos) cuando perdió el 2º factor. */
+    readonly mfaUseBackupCode: import("@angular/core").WritableSignal<boolean>;
+    isMFAResetModalOpen: boolean;
+    private _mfaResetStep;
+    readonly mfaResetStep: import("@angular/core").Signal<"confirm" | "request">;
+    private _mfaResetFormState;
+    private _mfaResetEmail;
     private _forgotPasswordFormState;
     private _resetPasswordFormState;
     private _resetFormSectionName;
@@ -54,6 +63,8 @@ export declare class LoginComponent implements OnInit, OnDestroy {
     readonly registerFormProps: import("@angular/core").Signal<FormMetadata>;
     readonly verifyFormProps: import("@angular/core").Signal<FormMetadata>;
     readonly mfaVerifyFormProps: import("@angular/core").Signal<FormMetadata>;
+    readonly mfaResetRequestFormProps: import("@angular/core").Signal<FormMetadata>;
+    readonly mfaResetConfirmFormProps: import("@angular/core").Signal<FormMetadata>;
     readonly forgotPasswordFormProps: import("@angular/core").Signal<FormMetadata>;
     readonly resetPasswordFormProps: import("@angular/core").Signal<FormMetadata>;
     loginHandler(event: FormSubmit): void;
@@ -67,6 +78,12 @@ export declare class LoginComponent implements OnInit, OnDestroy {
     resendCode(): void;
     openMFAVerifyModal(): void;
     closeMFAVerifyModal(): void;
+    /** A: alterna entre el código TOTP (6 díg) y un código de respaldo (8 chars). */
+    toggleMFABackupCode(): void;
+    openMFAResetModal(): void;
+    closeMFAResetModal(): void;
+    mfaResetRequestHandler(event: FormSubmit): void;
+    mfaResetConfirmHandler(event: FormSubmit): void;
     verifyMFAHandler(event: FormSubmit): void;
     onMFAVerifyDismissed(): void;
     openForgotPasswordModal(): void;

package/lib/components/organisms/organization-view/organization-view.component.d.ts

@@ -1,5 +1,6 @@
 import { EmptyStateMetadata } from '../../molecules/empty-state/types';
 import { ButtonMetadata } from '../../types';
+import { ButtonGroupMetadata } from '../../molecules/button-group/types';
 import { AuthService } from '../../../services/auth/auth.service';
 import { OrgRole, Organization } from '../../../services/org/types';
 import { MemberDetail } from '../member-detail-modal/types';
@@ -50,7 +51,7 @@ export declare class OrganizationViewComponent {
      * `resolvedConfig` mergea con los defaults — `@Input` gana sobre route data.
      */
     config?: OrganizationViewConfig;
-    readonly resolvedConfig: import("@angular/core").Signal<Required<Omit<OrganizationViewConfig, "onOrgEdited" | "onMemberInvited" | "onOwnershipTransferred" | "onLeftOrg" | "onOrgDeleted">> & Pick<OrganizationViewConfig, "onOrgEdited" | "onMemberInvited" | "onOwnershipTransferred" | "onLeftOrg" | "onOrgDeleted">>;
+    readonly resolvedConfig: import("@angular/core").Signal<Required<Omit<OrganizationViewConfig, "onOrgCreated" | "onOrgEdited" | "onMemberInvited" | "onOwnershipTransferred" | "onLeftOrg" | "onOrgDeleted">> & Pick<OrganizationViewConfig, "onOrgCreated" | "onOrgEdited" | "onMemberInvited" | "onOwnershipTransferred" | "onLeftOrg" | "onOrgDeleted">>;
     /** Namespace i18n resuelto (capturado para llamadas no-reactivas). */
     private get ns();
     readonly org: import("@angular/core").WritableSignal<Organization>;
@@ -59,6 +60,7 @@ export declare class OrganizationViewComponent {
     readonly loading: import("@angular/core").WritableSignal<boolean>;
     readonly leaving: import("@angular/core").WritableSignal<boolean>;
     readonly permissionsOpen: import("@angular/core").WritableSignal<boolean>;
+    readonly createOrgModalOpen: import("@angular/core").WritableSignal<boolean>;
     private readonly orgLoadError;
     readonly orgErrorState: import("@angular/core").Signal<EmptyStateMetadata>;
     readonly members: import("@angular/core").WritableSignal<MemberDetail[]>;
@@ -89,12 +91,21 @@ export declare class OrganizationViewComponent {
     readonly openImportButtonProps: import("@angular/core").Signal<Partial<ButtonMetadata>>;
     readonly openApiKeysButtonProps: import("@angular/core").Signal<Partial<ButtonMetadata>>;
     readonly deleteButtonProps: import("@angular/core").Signal<Partial<ButtonMetadata>>;
+    readonly newOrgCtaProps: import("@angular/core").Signal<{
+        title: string;
+        description: string;
+        padding: string;
+        borderRadius: string;
+        actions: ButtonGroupMetadata;
+    }>;
     /** Guarda para detectar el primer disparo del effect (evita doble carga). */
     private lastLoadedOrgId;
     constructor();
     onEdit(): void;
     onLeave(): Promise<void>;
     onDelete(): Promise<void>;
+    onNewOrg(): void;
+    onOrgCreated(newOrg: Organization): void;
     onOpenInvite(): void;
     onOpenImport(): void;
     onOpenApiKeys(): void;

package/lib/components/organisms/organization-view/types.d.ts

@@ -28,6 +28,11 @@ export interface OrganizationViewConfig {
      * además permiso `users:*` (gating RBAC interno vía `*valHasPermission`).
      */
     showInvite?: boolean;
+    /**
+     * Muestra la CTA card "Nueva organización" que abre `val-create-org-modal`.
+     * Default `false` (opt-in).
+     */
+    showNewOrgCta?: boolean;
     /**
      * Muestra la sección "Transferir propiedad". Default `true`. El render real exige
      * además ser owner (gating RBAC interno vía `isOwner()`).
@@ -71,4 +76,6 @@ export interface OrganizationViewConfig {
     onLeftOrg?: () => void;
     /** Hook tras eliminar la organización. */
     onOrgDeleted?: () => void;
+    /** Hook tras crear una nueva organización desde esta vista. */
+    onOrgCreated?: (org: import('../../../services/org/types').Organization) => void;
 }

package/lib/services/auth/auth.service.d.ts

@@ -6,7 +6,7 @@ import { AuthStateService } from './auth-state.service';
 import { TokenService } from './token.service';
 import { AuthStorageService } from './storage.service';
 import { AuthSyncService } from './sync.service';
-import { SigninRequest, SigninResponse, SignupRequest, SignupResponse, VerifyEmailRequest, VerifyEmailResponse, ResendCodeRequest, ResendCodeResponse, MFAVerifyResponse, RefreshResponse, GetPermissionsResponse, GetProfileResponse, UpdateProfileRequest, UpdateProfileResponse, MFASetupResponse, MFAConfirmResponse, MFADisableRequest, MFADisableResponse, ForgotPasswordRequest, ForgotPasswordResponse, ResetPasswordRequest, ResetPasswordResponse, ActivateAccountRequest, ActivateAccountResponse, ChangePasswordResponse, DeleteAccountResponse, SendDeleteAccountCodeResponse, SwitchOrgResponse, MFAMethod, AuthError, ValtechAuthConfig, EnableNotificationsResult, NotificationPermissionState, RegisterDeviceResult, TOTPSetupResponse, TOTPVerifySetupResponse, TOTPDisableResponse, RegenerateBackupCodesResponse, BackupCodesCountResponse, OAuthProvider, LinkedProvider, HasPasswordResponse, UpdateHandleResponse, CheckHandleResponse, UpdateAvatarRequest, UpdateAvatarResponse, InitiateEmailChangeResponse, ConfirmEmailChangeStep1Response, ConfirmEmailChangeStep2Response } from './types';
+import { SigninRequest, SigninResponse, SignupRequest, SignupResponse, VerifyEmailRequest, VerifyEmailResponse, ResendCodeRequest, ResendCodeResponse, MFAVerifyResponse, RefreshResponse, GetPermissionsResponse, GetProfileResponse, UpdateProfileRequest, UpdateProfileResponse, MFASetupResponse, MFAConfirmResponse, MFADisableRequest, MFADisableResponse, ForgotPasswordRequest, ForgotPasswordResponse, ResetPasswordRequest, ResetPasswordResponse, MFAResetRequestRequest, MFAResetRequestResponse, MFAResetConfirmRequest, MFAResetConfirmResponse, ActivateAccountRequest, ActivateAccountResponse, ChangePasswordResponse, DeleteAccountResponse, SendDeleteAccountCodeResponse, SwitchOrgResponse, MFAMethod, AuthError, ValtechAuthConfig, EnableNotificationsResult, NotificationPermissionState, RegisterDeviceResult, TOTPSetupResponse, TOTPVerifySetupResponse, TOTPDisableResponse, RegenerateBackupCodesResponse, BackupCodesCountResponse, OAuthProvider, LinkedProvider, HasPasswordResponse, UpdateHandleResponse, CheckHandleResponse, UpdateAvatarRequest, UpdateAvatarResponse, InitiateEmailChangeResponse, ConfirmEmailChangeStep1Response, ConfirmEmailChangeStep2Response } from './types';
 import { OAuthService } from './oauth.service';
 import { FirebaseService, MessagingService } from '../firebase';
 import { I18nService } from '../i18n';
@@ -288,6 +288,17 @@ export declare class AuthService implements OnDestroy {
      * Resetea la contraseña usando el código enviado por email.
      */
     resetPassword(request: ResetPasswordRequest): Observable<ResetPasswordResponse>;
+    /**
+     * Inicia el reset de MFA por email cuando el user perdió su 2º factor
+     * (TOTP + backup codes). Envía un código de 6 dígitos al email verificado.
+     * Response siempre genérica (anti-enumeración).
+     */
+    requestMFAReset(request: MFAResetRequestRequest): Observable<MFAResetRequestResponse>;
+    /**
+     * Confirma el reset de MFA con el código recibido por email → deshabilita MFA.
+     * Tras esto el user inicia sesión normalmente (sin 2º factor) y re-enrola.
+     */
+    confirmMFAReset(request: MFAResetConfirmRequest): Observable<MFAResetConfirmResponse>;
     /**
      * Activa una cuenta pre-aprovisionada por una organización (ADR-023): define
      * la contraseña con el token del enlace de email. En éxito el backend devuelve

package/lib/services/auth/types.d.ts

@@ -450,6 +450,34 @@ export interface ResetPasswordResponse {
     operationId: string;
     success: boolean;
 }
+/**
+ * Request para iniciar reset de MFA por email (user perdió su 2º factor).
+ */
+export interface MFAResetRequestRequest {
+    email: string;
+}
+/**
+ * Response de MFA reset request (siempre igual por seguridad — anti-enumeración).
+ */
+export interface MFAResetRequestResponse {
+    operationId: string;
+    message: string;
+}
+/**
+ * Request para confirmar el reset de MFA con el código recibido por email.
+ */
+export interface MFAResetConfirmRequest {
+    email: string;
+    code: string;
+}
+/**
+ * Response de MFA reset confirm.
+ */
+export interface MFAResetConfirmResponse {
+    operationId: string;
+    success: boolean;
+    message: string;
+}
 /**
  * Request para cambiar contraseña (usuario autenticado).
  */

package/lib/version.d.ts

@@ -2,4 +2,4 @@
  * Current version of valtech-components.
  * This is automatically updated during the publish process.
  */
-export declare const VERSION = "4.0.56";
+export declare const VERSION = "4.0.58";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "valtech-components",
-  "version": "4.0.56",
+  "version": "4.0.58",
   "private": false,
   "bin": {
     "valtech-firebase-config": "./src/lib/services/firebase/scripts/generate-sw-config.js"