Welcome {{ store.loggedInUser()?.email }}
\n `,\n})\nexport class AppComponent {\n readonly store = inject(AuthStore);\n\n login() {\n this.store.login({ credential: 'user@example.com', password: 'secret' });\n }\n}\n```\n\n```ts\n// app.routes.ts\nimport { Routes } from '@angular/router';\nimport { policyGuard, resourcePolicyGuard } from '@anarchitects/auth-angular/feature';\n\nexport const routes: Routes = [\n {\n path: 'admin',\n canMatch: [policyGuard],\n data: { action: 'manage', subject: 'admin-section' },\n loadComponent: () => import('./admin.component').then((m) => m.AdminComponent),\n },\n {\n path: 'posts/:postId/edit',\n canMatch: [policyGuard],\n canActivate: [resourcePolicyGuard],\n data: {\n action: 'update',\n subject: 'Post',\n resourceKey: 'post',\n unauthorizedRedirectTo: '/posts',\n },\n loadComponent: () => import('./post-edit.component').then((m) => m.PostEditComponent),\n },\n];\n```\n\n`policyGuard` is a coarse route-attempt guard. It answers \"may this user attempt work on this subject at all?\" by using the shared route matcher from `@anarchitects/auth-ts`. Concrete ownership checks still belong to loaded resources. Use `resourcePolicyGuard` for resolved edit/detail routes and `canAccessResource(...)` / `canAccessResourceField(...)` for UI elements such as edit buttons.\n\n### Contract-driven auth forms\n\n`@anarchitects/auth-angular` uses the same auth contract profile for rendered form rules and submit-time payload shaping.\n\n- `provideAuthContracts(...)` supplies a profile override at app or feature scope.\n- The UI form components read the resolved contract metadata through DI.\n- `AuthStore` shapes outgoing payloads from the same contract profile before calling `AuthApi`.\n\nExample: require a register name, make login passwords optional, and strip empty optional names before submit.\n\n```ts\nimport { ApplicationConfig } from '@angular/core';\nimport { provideAuthContracts } from '@anarchitects/auth-angular/config';\n\nexport const appConfig: ApplicationConfig = {\n providers: [\n ...provideAuthContracts({\n register: {\n name: {\n required: true,\n minLength: 3,\n emptyStringPolicy: 'strip',\n },\n },\n login: {\n password: {\n required: false,\n },\n },\n }),\n ],\n};\n```\n\nThe auth UI components consume that profile automatically:\n\n```ts\nimport { Component } from '@angular/core';\nimport { AnarchitectsAuthUiRegisterForm } from '@anarchitects/auth-angular/ui';\n\n@Component({\n selector: 'app-register-page',\n imports: [AnarchitectsAuthUiRegisterForm],\n template: `