AI Implementation feature(820): Project Scaffold and Platform Foundations (#1)

frontend/src/app/core/guards/auth.guard.ts

@@ -0,0 +1,18 @@
+import { inject } from '@angular/core';
+import { CanActivateFn, Router } from '@angular/router';
+import { AuthService } from '../services/auth.service';
+import { BootstrapService } from '../services/bootstrap.service';
+
+export const authGuard: CanActivateFn = () => {
+  const auth = inject(AuthService);
+  const bootstrap = inject(BootstrapService);
+  const router = inject(Router);
+
+  if (!bootstrap.initialized()) {
+    return router.createUrlTree(['/bootstrap']);
+  }
+  if (!auth.isAuthenticated()) {
+    return router.createUrlTree(['/login']);
+  }
+  return true;
+};

frontend/src/app/core/interceptors/auth.interceptor.ts

@@ -0,0 +1,12 @@
+import { HttpInterceptorFn } from '@angular/common/http';
+import { inject } from '@angular/core';
+import { AuthService } from '../services/auth.service';
+
+export const authInterceptor: HttpInterceptorFn = (req, next) => {
+  const auth = inject(AuthService);
+  const token = auth.getAccessToken();
+  if (token) {
+    req = req.clone({ setHeaders: { Authorization: `Bearer ${token}` } });
+  }
+  return next(req);
+};

frontend/src/app/core/interceptors/csrf.interceptor.ts

@@ -0,0 +1,23 @@
+import { HttpInterceptorFn } from '@angular/common/http';
+
+function readCookie(name: string): string | null {
+  const header = document.cookie;
+  if (!header) return null;
+  for (const part of header.split(';')) {
+    const [k, ...v] = part.trim().split('=');
+    if (k === name) return v.join('=');
+  }
+  return null;
+}
+
+const UNSAFE = new Set(['POST', 'PUT', 'PATCH', 'DELETE']);
+
+export const csrfInterceptor: HttpInterceptorFn = (req, next) => {
+  if (UNSAFE.has(req.method)) {
+    const token = readCookie('csrf');
+    if (token) {
+      req = req.clone({ setHeaders: { 'X-CSRF-Token': token } });
+    }
+  }
+  return next(req);
+};

frontend/src/app/core/services/auth.service.ts

@@ -0,0 +1,30 @@
+import { Injectable, signal, computed } from '@angular/core';
+
+export interface CurrentUser {
+  id: string;
+  username: string;
+  role: 'admin' | 'player';
+}
+
+@Injectable({ providedIn: 'root' })
+export class AuthService {
+  private accessToken = signal<string | null>(null);
+  private user = signal<CurrentUser | null>(null);
+
+  readonly currentUser = computed(() => this.user());
+  readonly isAuthenticated = computed(() => !!this.user());
+
+  setSession(token: string, user: CurrentUser): void {
+    this.accessToken.set(token);
+    this.user.set(user);
+  }
+
+  clear(): void {
+    this.accessToken.set(null);
+    this.user.set(null);
+  }
+
+  getAccessToken(): string | null {
+    return this.accessToken();
+  }
+}

frontend/src/app/core/services/bootstrap.service.ts

@@ -0,0 +1,49 @@
+import { Injectable, signal } from '@angular/core';
+
+export interface BootstrapPayload {
+  initialized: boolean;
+  pageTitle: string;
+  logo: string;
+  welcomeMarkdown: string;
+  theme: any;
+  defaultChallengeIp: string;
+  registrationsEnabled: boolean;
+}
+
+@Injectable({ providedIn: 'root' })
+export class BootstrapService {
+  readonly payload = signal<BootstrapPayload | null>(null);
+  readonly initialized = signal<boolean>(false);
+
+  async load(): Promise<BootstrapPayload | null> {
+    try {
+      const res = await fetch('/api/v1/bootstrap', { credentials: 'include' });
+      const data = (await res.json()) as BootstrapPayload;
+      this.payload.set(data);
+      this.initialized.set(data.initialized);
+      this.applyTheme(data.theme);
+      return data;
+    } catch (e) {
+      console.error('Bootstrap load failed', e);
+      return null;
+    }
+  }
+
+  private applyTheme(theme: any): void {
+    if (!theme?.tokens) return;
+    const root = document.documentElement.style;
+    const t = theme.tokens;
+    root.setProperty('--color-primary', t.primary);
+    root.setProperty('--color-secondary', t.secondary);
+    root.setProperty('--color-accent', t.accent);
+    root.setProperty('--color-surface', t.surface);
+    root.setProperty('--color-text', t.text);
+    root.setProperty('--color-success', t.success);
+    root.setProperty('--color-warning', t.warning);
+    root.setProperty('--color-danger', t.danger);
+    root.setProperty('--font-family', t.fontFamily);
+    root.setProperty('--radius-sm', t.radii.sm);
+    root.setProperty('--radius-md', t.radii.md);
+    root.setProperty('--radius-lg', t.radii.lg);
+  }
+}