@flusys/ng-iam 1.0.0-rc → 1.0.1

package/fesm2022/{flusys-ng-iam-flusys-ng-iam-BPIpfrjN.mjs → flusys-ng-iam-flusys-ng-iam-CJAQT60K.mjs}

@@ -1,8 +1,8 @@
-import * as i0 from '@angular/core';
-import { inject, Injectable, signal, input, output, computed, effect, ChangeDetectionStrategy, Component, DestroyRef } from '@angular/core';
 import { HttpClient } from '@angular/common/http';
-import { ApiResourceService, PermissionValidatorService, AngularModule, PrimeModule, ROLE_ACTION_PERMISSIONS, HasPermissionDirective, COMPANY_ACTION_PERMISSIONS, COMPANY_API_PROVIDER, USER_ROLE_PERMISSIONS, USER_PERMISSION_PROVIDER, UserSelectComponent, USER_ACTION_PERMISSIONS, PROFILE_PERMISSION_PROVIDER } from '@flusys/ng-shared';
-import { APP_CONFIG, BaseApiService, isCompanyFeatureEnabled } from '@flusys/ng-core';
+import * as i0 from '@angular/core';
+import { inject, Injectable, signal, input, output, effect, ChangeDetectionStrategy, Component, DestroyRef, computed } from '@angular/core';
+import { ApiResourceService, PermissionValidatorService, AngularModule, PrimeModule, ROLE_ACTION_PERMISSIONS, HasPermissionDirective, COMPANY_ACTION_PERMISSIONS, COMPANY_API_PROVIDER, USER_ROLE_PERMISSIONS, USER_PERMISSION_PROVIDER, UserSelectComponent, USER_ACTION_PERMISSIONS, PROFILE_PERMISSION_PROVIDER, permissionGuard, ACTION_PERMISSIONS, ROLE_PERMISSIONS, anyPermissionGuard } from '@flusys/ng-shared';
+import { APP_CONFIG, getServiceUrl, BaseApiService, isCompanyFeatureEnabled } from '@flusys/ng-core';
 import { ConfirmationService, MessageService } from 'primeng/api';
 import { of, firstValueFrom, map as map$1 } from 'rxjs';
 import { tap, catchError, map } from 'rxjs/operators';
@@ -19,11 +19,7 @@ import * as i7 from 'primeng/treetable';
 import { LAYOUT_AUTH_STATE } from '@flusys/ng-layout';
 import * as i5$1 from 'primeng/table';
 
-// ==================== ENUMS ====================
-/**
- * Action Type - determines how action is used
- * CRITICAL: Must match backend ActionType enum exactly
- */
+/** Must match backend ActionType enum */
 var ActionType;
 (function (ActionType) {
     ActionType["BACKEND"] = "backend";
@@ -33,130 +29,66 @@ var ActionType;
 
 // Company interfaces
 
-/**
- * Pagination Constants
- *
- * Standard pagination limits for IAM components.
- * Prevents excessive data loading and potential DoS.
- */
-/**
- * Maximum items to fetch for dropdown lists
- * Used for: companies, roles, users, branches
- *
- * Security: Prevents memory exhaustion from loading excessive records
- */
+/** Maximum items for dropdown lists (companies, roles, users, branches) */
 const MAX_DROPDOWN_ITEMS = 100;
 
-/**
- * Role API Service
- * Handles role CRUD operations
- * Endpoint: POST /iam/roles/*
- * Conditional: Only available in RBAC/FULL mode
- */
 class RoleApiService extends ApiResourceService {
     constructor() {
-        const http = inject(HttpClient);
-        super('iam/roles', http);
+        super('roles', inject(HttpClient), 'iam');
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: RoleApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: RoleApiService, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: RoleApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: RoleApiService, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: RoleApiService, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: RoleApiService, decorators: [{
             type: Injectable,
-            args: [{
-                    providedIn: 'root',
-                }]
+            args: [{ providedIn: 'root' }]
         }], ctorParameters: () => [] });
 
-/**
- * Action API Service
- * Handles action CRUD operations
- * Endpoint: POST /iam/actions/*
- */
 class ActionApiService extends ApiResourceService {
     appConfig = inject(APP_CONFIG);
     constructor() {
-        const http = inject(HttpClient);
-        super('iam/actions', http);
+        super('actions', inject(HttpClient), 'iam');
     }
-    /**
-     * Get actions for permission assignment
-     * POST /iam/actions/tree-for-permission
-     * Returns actions filtered by company whitelist if enabled
-     */
+    /** Get actions filtered by company whitelist for permission assignment */
     getActionsForPermission() {
-        return this.http.post(`${this.appConfig.apiBaseUrl}/iam/actions/tree-for-permission`, {});
+        const iamBaseUrl = getServiceUrl(this.appConfig, 'iam');
+        return this.http.post(`${iamBaseUrl}/actions/tree-for-permission`, {});
     }
-    /**
-     * Get actions in hierarchical tree structure
-     * POST /iam/actions/tree
-     * Returns all actions organized in parent-child tree
-     *
-     * @param search - Optional search term (name or code)
-     * @param isActive - Optional filter by active status
-     * @param withDeleted - Include deleted actions (default: false)
-     * @returns Observable of action tree response
-     */
+    /** Get actions in hierarchical tree structure */
     getTree(search, isActive, withDeleted) {
         const body = {};
-        if (search?.trim()) {
+        if (search?.trim())
             body.search = search.trim();
-        }
-        if (isActive !== undefined) {
+        if (isActive !== undefined)
             body.isActive = isActive;
-        }
-        if (withDeleted !== undefined) {
+        if (withDeleted !== undefined)
             body.withDeleted = withDeleted;
-        }
-        return this.http.post(`${this.appConfig.apiBaseUrl}/iam/actions/tree`, body);
+        const iamBaseUrl = getServiceUrl(this.appConfig, 'iam');
+        return this.http.post(`${iamBaseUrl}/actions/tree`, body);
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: ActionApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: ActionApiService, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: ActionApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: ActionApiService, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: ActionApiService, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: ActionApiService, decorators: [{
             type: Injectable,
-            args: [{
-                    providedIn: 'root',
-                }]
+            args: [{ providedIn: 'root' }]
         }], ctorParameters: () => [] });
 
-/**
- * Extract all required action IDs from a permission logic tree
- * This is useful for prerequisite validation
- *
- * @param logic - Permission logic to analyze
- * @returns Set of action IDs that are required
- */
 function extractRequiredActionIds(logic) {
     const actionIds = new Set();
-    if (!logic) {
-        return actionIds;
+    if (logic) {
+        collectActionIds(logic, actionIds);
     }
-    collectActionIds(logic, actionIds);
     return actionIds;
 }
-/**
- * Recursively collect action IDs from logic tree
- */
 function collectActionIds(node, actionIds) {
     if (node.type === 'action' && node.actionId) {
         actionIds.add(node.actionId);
     }
     else if (node.type === 'group' && node.children) {
-        for (const child of node.children) {
-            collectActionIds(child, actionIds);
-        }
+        node.children.forEach((child) => collectActionIds(child, actionIds));
     }
 }
-/**
- * Validate if an action's prerequisites are satisfied
- * Respects AND/OR logic operators in permission tree
- *
- * @param action - Action to validate
- * @param selectedActionIds - Set of currently selected action IDs
- * @param allActions - All available actions (to look up missing ones)
- * @returns Validation result with missing actions
- */
 function validateActionPrerequisites(action, selectedActionIds, allActions) {
     if (!action.permissionLogic) {
         return { valid: true, missingActions: [] };
@@ -168,20 +100,12 @@ function validateActionPrerequisites(action, selectedActionIds, allActions) {
     const missingActions = allActions.filter((a) => a.id && result.missingActionIds.has(a.id));
     return { valid: false, missingActions };
 }
-/**
- * Recursively evaluate logic node respecting AND/OR operators
- * Returns validation result with missing action IDs (for prerequisite dialogs)
- * Note: This differs from evaluateLogicNode in ng-shared which returns boolean only
- */
 function evaluateLogicNodeWithMissing(node, selectedActionIds) {
     if (node.type === 'action' && node.actionId) {
         const valid = selectedActionIds.has(node.actionId);
-        return {
-            valid,
-            missingActionIds: valid ? new Set() : new Set([node.actionId]),
-        };
+        return { valid, missingActionIds: valid ? new Set() : new Set([node.actionId]) };
     }
-    if (node.type === 'group' && node.children && node.children.length > 0) {
+    if (node.type === 'group' && node.children?.length) {
         const operator = node.operator || 'AND';
         if (operator === 'AND') {
             const missingIds = new Set();
@@ -195,109 +119,28 @@ function evaluateLogicNodeWithMissing(node, selectedActionIds) {
             }
             return { valid: allValid, missingActionIds: missingIds };
         }
-        else {
-            for (const child of node.children) {
-                const childResult = evaluateLogicNodeWithMissing(child, selectedActionIds);
-                if (childResult.valid) {
-                    return { valid: true, missingActionIds: new Set() };
-                }
+        // OR operator
+        for (const child of node.children) {
+            const childResult = evaluateLogicNodeWithMissing(child, selectedActionIds);
+            if (childResult.valid) {
+                return { valid: true, missingActionIds: new Set() };
             }
-            const firstChildResult = evaluateLogicNodeWithMissing(node.children[0], selectedActionIds);
-            return {
-                valid: false,
-                missingActionIds: firstChildResult.missingActionIds,
-            };
         }
+        const firstChildResult = evaluateLogicNodeWithMissing(node.children[0], selectedActionIds);
+        return { valid: false, missingActionIds: firstChildResult.missingActionIds };
     }
     return { valid: true, missingActionIds: new Set() };
 }
-/**
- * Get human-readable prerequisite description
- *
- * @param logic - Permission logic to describe
- * @param allActions - All available actions for name lookup
- * @returns Human-readable string describing prerequisites
- */
-function describePrerequisites(logic, allActions) {
-    if (!logic) {
-        return 'None';
-    }
-    const requiredIds = extractRequiredActionIds(logic);
-    if (requiredIds.size === 0) {
-        return 'None';
-    }
-    const actionMap = new Map(allActions.map((a) => [a.id, a]));
-    const names = Array.from(requiredIds)
-        .map((id) => actionMap.get(id)?.name || id)
-        .filter(Boolean);
-    if (names.length === 0) {
-        return 'Unknown prerequisites';
-    }
-    if (names.length === 1) {
-        return names[0];
-    }
-    return names.join(', ');
-}
 
-/**
- * Action Permission Logic Service
- *
- * Shared service for handling smart dependency management across all action selectors:
- * - Company-Action Selector
- * - Role-Action Selector
- * - User-Action Selector
- *
- * **Core Features:**
- * - Smart auto-selection (AND/OR optimization)
- * - Dependency detection and management
- * - Alternative suggestion for OR logic
- * - Visual formatting of permission logic trees
- * - Prerequisite validation
- *
- * @example
- * constructor() {
- *   this.permissionLogic = inject(ActionPermissionLogicService);
- * }
- *
- * onActionToggle(action: IAction, newValue: boolean) {
- *   if (!newValue) {
- *     this.permissionLogic.handleUncheck(
- *       action,
- *       this.selectionMap(),
- *       this.actions(),
- *       (newMap) => this.selectionMap.set(newMap)
- *     );
- *   } else {
- *     this.permissionLogic.handleCheck(
- *       action,
- *       this.selectionMap(),
- *       this.actions(),
- *       (newMap) => this.selectionMap.set(newMap),
- *       (previousState) => this.selectionMap.set(previousState)
- *     );
- *   }
- * }
- */
+/** Shared service for smart dependency management across action selectors */
 class ActionPermissionLogicService {
     confirmationService = inject(ConfirmationService);
     messageService = inject(MessageService);
-    /**
-     * Handle checking an action with prerequisite validation
-     *
-     * Uses recursive deep scan to find ALL missing prerequisites at all levels,
-     * not just direct dependencies. This ensures cascading dependencies are
-     * resolved in a single step.
-     *
-     * @param action - Action being checked
-     * @param currentSelection - Current selection map
-     * @param allActions - All available actions
-     * @param onUpdate - Callback to update selection
-     * @param onCancel - Callback when user cancels
-     */
+    /** Handle checking an action with prerequisite validation (recursive deep scan) */
     handleCheck(action, currentSelection, allActions, onUpdate, onCancel) {
         // Validate prerequisites with RECURSIVE DEEP SCAN
         if (action.permissionLogic) {
-            const selectedActionIds = new Set(Object.keys(currentSelection).filter((id) => currentSelection[id]));
+            const selectedActionIds = this.getSelectedIds(currentSelection);
             const validationResult = validateActionPrerequisites(action, selectedActionIds, allActions);
             if (!validationResult.valid) {
                 // Store previous state
@@ -318,14 +161,7 @@ class ActionPermissionLogicService {
         selMap[action.id] = true;
         onUpdate(selMap);
     }
-    /**
-     * Handle unchecking an action with dependency detection
-     *
-     * @param action - Action being unchecked
-     * @param currentSelection - Current selection map
-     * @param allActions - All available actions
-     * @param onUpdate - Callback to update selection
-     */
+    /** Handle unchecking an action with dependency detection */
     handleUncheck(action, currentSelection, allActions, onUpdate) {
         const affectedActions = this.findActionsDependingOn(action.id, currentSelection, allActions);
         if (affectedActions.length > 0) {
@@ -337,46 +173,28 @@ class ActionPermissionLogicService {
         selMap[action.id] = false;
         onUpdate(selMap);
     }
-    /**
-     * Check if an action has unmet prerequisites
-     *
-     * @param action - Action to check
-     * @param currentSelection - Current selection map
-     * @param allActions - All available actions
-     * @returns True if action has unmet prerequisites
-     */
+    /** Check if an action has unmet prerequisites */
     hasUnmetPrerequisites(action, currentSelection, allActions) {
         const isSelected = currentSelection[action.id];
         if (!isSelected || !action.permissionLogic) {
             return false;
         }
-        const selectedActionIds = new Set(Object.keys(currentSelection).filter((id) => currentSelection[id] && id !== action.id));
+        const selectedActionIds = this.getSelectedIds(currentSelection);
+        selectedActionIds.delete(action.id);
         const validationResult = validateActionPrerequisites(action, selectedActionIds, allActions);
         return !validationResult.valid;
     }
-    /**
-     * Get all selected actions that have unmet prerequisites
-     *
-     * @param currentSelection - Current selection map
-     * @param allActions - All available actions
-     * @returns Array of actions with unmet prerequisites
-     */
+    /** Get all selected actions that have unmet prerequisites */
     getActionsWithUnmetPrerequisites(currentSelection, allActions) {
         const selectedActions = allActions.filter((a) => currentSelection[a.id]);
         return selectedActions.filter((action) => this.hasUnmetPrerequisites(action, currentSelection, allActions));
     }
-    /**
-     * Show validation error dialog with auto-fix options
-     *
-     * @param invalidActions - Actions with unmet prerequisites
-     * @param currentSelection - Current selection map
-     * @param allActions - All available actions
-     * @param onUpdate - Callback to update selection
-     */
+    /** Show validation error dialog with auto-fix options */
     showValidationErrorDialog(invalidActions, currentSelection, allActions, onUpdate) {
         const errorList = invalidActions
             .map((action) => {
-            const selectedActionIds = new Set(Object.keys(currentSelection).filter((id) => currentSelection[id] && id !== action.id));
+            const selectedActionIds = this.getSelectedIds(currentSelection);
+            selectedActionIds.delete(action.id);
             const validationResult = validateActionPrerequisites(action, selectedActionIds, allActions);
             const sanitizedActionName = this.sanitizeHtml(action.name ?? 'Unknown');
             const missingNames = validationResult.missingActions
@@ -418,19 +236,12 @@ class ActionPermissionLogicService {
             },
         });
     }
-    /**
-     * Get prerequisite description for tooltip display
-     *
-     * @param action - Action to get prerequisites for
-     * @param currentSelection - Current selection map
-     * @param allActions - All available actions
-     * @returns Plain text prerequisite description
-     */
+    /** Get prerequisite description for tooltip display */
     getPrerequisiteTooltip(action, currentSelection, allActions) {
         if (!action.permissionLogic) {
             return '';
         }
-        const selectedActionIds = new Set(Object.keys(currentSelection).filter((id) => currentSelection[id]));
+        const selectedActionIds = this.getSelectedIds(currentSelection);
         const validationResult = validateActionPrerequisites(action, selectedActionIds, allActions);
         if (validationResult.valid) {
             return '[OK] Prerequisites Satisfied\n\nAll required actions are already selected.\nYou can safely add this action.';
@@ -442,23 +253,16 @@ class ActionPermissionLogicService {
         const hint = '\n\n💡 Click to auto-select required actions';
         return `${header}\n\n${logicTree}${hint}`;
     }
-    /**
-     * Build dynamic logic tree message with AND/OR operators and nesting
-     *
-     * @param logic - Permission logic tree
-     * @param missingActions - Actions that are missing
-     * @param allActions - All available actions
-     * @param currentSelection - Current selection map for accurate status
-     * @returns HTML formatted logic tree
-     */
-    buildLogicMessage(logic, missingActions, allActions, currentSelection) {
-        const selectedIds = currentSelection
-            ? new Set(Object.keys(currentSelection).filter((id) => currentSelection[id]))
-            : new Set();
+    /** Build dynamic logic tree message with AND/OR operators and nesting */
+    buildLogicMessage(logic, _missingActions, allActions, currentSelection) {
+        const selectedIds = currentSelection ? this.getSelectedIds(currentSelection) : new Set();
         const actionMap = new Map(allActions.map((a) => [a.id, a]));
         return this.formatLogicNode(logic, selectedIds, actionMap, 0);
     }
-    // ==================== Private Methods ====================
+    /** Extract selected action IDs from selection map */
+    getSelectedIds(currentSelection) {
+        return new Set(Object.keys(currentSelection).filter((id) => currentSelection[id]));
+    }
     sanitizeHtml(text) {
         return text
             .replace(/&/g, '&')
@@ -467,24 +271,7 @@ class ActionPermissionLogicService {
             .replace(/"/g, '"')
             .replace(/'/g, ''');
     }
-    /**
-     * Recursively collect ALL missing prerequisites at all dependency levels
-     *
-     * This prevents cascading prerequisite dialogs by finding the complete
-     * dependency chain upfront.
-     *
-     * **Example:**
-     * - Action 4 requires Action 3
-     * - Action 3 requires Action 2
-     * - Action 2 requires Action 1
-     *
-     * Instead of showing 3 separate dialogs, this returns: [Action 3, Action 2, Action 1]
-     *
-     * @param action - Starting action to check
-     * @param currentSelection - Current selection map
-     * @param allActions - All available actions
-     * @returns Complete set of missing prerequisites across all levels
-     */
+    /** Recursively collect ALL missing prerequisites at all dependency levels */
     getAllMissingPrerequisitesRecursive(action, currentSelection, allActions) {
         if (!action.id)
             return [];
@@ -504,7 +291,7 @@ class ActionPermissionLogicService {
             }
             visited.add(targetAction.id);
             stack.add(targetAction.id);
-            const selectedActionIds = new Set(Object.keys(currentSelection).filter((id) => currentSelection[id]));
+            const selectedActionIds = this.getSelectedIds(currentSelection);
             const result = validateActionPrerequisites(targetAction, selectedActionIds, allActions);
             if (!result.valid) {
                 result.missingActions.forEach((missingAction) => {
@@ -565,7 +352,7 @@ class ActionPermissionLogicService {
             },
         });
     }
-    showDependencyDialog(action, affectedActions, currentSelection, allActions, onUpdate) {
+    showDependencyDialog(action, affectedActions, currentSelection, _allActions, onUpdate) {
         if (!action.id)
             return;
         const alternatives = this.findAlternatives(action.id, affectedActions, currentSelection);
@@ -688,7 +475,7 @@ class ActionPermissionLogicService {
     calculateSmartSelection(logic, missingActions, currentSelection, allActions) {
         const missingIds = new Set(missingActions.map((a) => a.id));
         const actionMap = new Map(allActions.map((a) => [a.id, a]));
-        const selectedIds = new Set(Object.keys(currentSelection).filter((id) => currentSelection[id]));
+        const selectedIds = this.getSelectedIds(currentSelection);
         const requiredIds = this.findRequiredActionIds(logic, missingIds, selectedIds);
         return Array.from(requiredIds)
             .map((id) => actionMap.get(id))
@@ -761,12 +548,10 @@ class ActionPermissionLogicService {
         }
         return `${indent}<em style="color: #9ca3af;">Invalid logic node</em>`;
     }
-    /**
-     * Build clean text-based logic tree for tooltips
-     */
+    /** Build clean text-based logic tree for tooltips */
     buildTooltipLogicTree(node, currentSelection, allActions, depth) {
         const indent = '  '.repeat(depth);
-        const selectedIds = new Set(Object.keys(currentSelection).filter((id) => currentSelection[id]));
+        const selectedIds = this.getSelectedIds(currentSelection);
         const actionMap = new Map(allActions.map((a) => [a.id, a]));
         if (node.type === 'action' && node.actionId) {
             const action = actionMap.get(node.actionId);
@@ -796,107 +581,48 @@ class ActionPermissionLogicService {
         }
         return `${indent}(invalid)`;
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: ActionPermissionLogicService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: ActionPermissionLogicService, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: ActionPermissionLogicService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: ActionPermissionLogicService, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: ActionPermissionLogicService, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: ActionPermissionLogicService, decorators: [{
             type: Injectable,
-            args: [{
-                    providedIn: 'root',
-                }]
+            args: [{ providedIn: 'root' }]
         }] });
 
-/**
- * Consolidated Permission API Service
- * Handles all permission-related operations in one service
- * Supports:
- * - User → Action (direct permissions)
- * - User → Role (role assignments)
- * - Role → Action (role permissions)
- * - Company → Action (company whitelisting)
- *
- * Endpoint: POST /permissions/*
- */
 class PermissionApiService extends BaseApiService {
     constructor() {
         super('iam');
     }
-    // =============================================================================
-    // User → Action (Direct Permissions)
-    // =============================================================================
-    /**
-     * Assign/remove actions directly to/from user
-     * POST /permissions/user-actions/assign
-     */
     assignUserActions(data) {
         return this.http.post(this.getUrl('permissions/user-actions/assign'), data);
     }
-    /**
-     * Get user's direct action permissions
-     * POST /iam/permissions/get-user-actions
-     */
     getUserActions(userId, query) {
         return this.http.post(this.getUrl('permissions/get-user-actions'), { userId, branchId: query?.branchId });
     }
-    // =============================================================================
-    // User → Role (Role Assignments)
-    // =============================================================================
-    /**
-     * Assign/remove roles to/from user
-     * POST /permissions/user-roles/assign
-     */
     assignUserRoles(data) {
         return this.http.post(this.getUrl('permissions/user-roles/assign'), data);
     }
-    /**
-     * Get user's role assignments
-     * POST /iam/permissions/get-user-roles
-     */
     getUserRoles(userId, query) {
         return this.http.post(this.getUrl('permissions/get-user-roles'), { userId, branchId: query?.branchId });
     }
-    // =============================================================================
-    // Role → Action (Role Permissions)
-    // =============================================================================
-    /**
-     * Assign/remove actions to/from role
-     * POST /permissions/role-actions/assign
-     */
     assignRoleActions(data) {
         return this.http.post(this.getUrl('permissions/role-actions/assign'), data);
     }
-    /**
-     * Get role's action permissions
-     * POST /iam/permissions/get-role-actions
-     */
-    getRoleActions(roleId, query) {
+    getRoleActions(roleId) {
         return this.http.post(this.getUrl('permissions/get-role-actions'), { roleId });
     }
-    // =============================================================================
-    // Company → Action (Company Whitelisting)
-    // =============================================================================
-    /**
-     * Assign/remove actions to/from company (whitelisting)
-     * POST /permissions/company-actions/assign
-     */
     assignCompanyActions(data) {
         return this.http.post(this.getUrl('permissions/company-actions/assign'), data);
     }
-    /**
-     * Get company's whitelisted actions
-     * POST /iam/permissions/get-company-actions
-     */
     getCompanyActions(companyId) {
         return this.http.post(this.getUrl('permissions/get-company-actions'), { companyId });
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: PermissionApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: PermissionApiService, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: PermissionApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: PermissionApiService, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: PermissionApiService, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: PermissionApiService, decorators: [{
             type: Injectable,
-            args: [{
-                    providedIn: 'root',
-                }]
+            args: [{ providedIn: 'root' }]
         }], ctorParameters: () => [] });
 
 /**
@@ -908,10 +634,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImpor
 class MyPermissionsApiService {
     http = inject(HttpClient);
     appConfig = inject(APP_CONFIG);
-    baseUrl;
-    constructor() {
-        this.baseUrl = `${this.appConfig.apiBaseUrl}/iam/permissions`;
-    }
+    baseUrl = `${getServiceUrl(this.appConfig, 'iam')}/permissions`;
     /**
      * Get current user's complete permissions
      * POST /iam/permissions/my-permissions
@@ -921,57 +644,28 @@ class MyPermissionsApiService {
     getMyPermissions(dto = {}) {
         return this.http.post(`${this.baseUrl}/my-permissions`, dto);
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: MyPermissionsApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: MyPermissionsApiService, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: MyPermissionsApiService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: MyPermissionsApiService, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: MyPermissionsApiService, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: MyPermissionsApiService, decorators: [{
             type: Injectable,
             args: [{
                     providedIn: 'root',
                 }]
-        }], ctorParameters: () => [] });
+        }] });
 
-/**
- * Permission State Service
- * Manages user permissions state and provides permission checking methods
- *
- * Uses shared PermissionValidatorService for centralized permission checking.
- *
- * @example
- * ```typescript
- * // In component
- * readonly permissionState = inject(PermissionStateService);
- *
- * ngOnInit() {
- *   this.permissionState.loadPermissions();
- * }
- *
- * // Check permission
- * if (this.permissionState.hasAction('user.create')) {
- *   // Show create button
- * }
- * ```
- */
 class PermissionStateService {
     permissionApi = inject(MyPermissionsApiService);
     permissionValidator = inject(PermissionValidatorService);
-    // Permission state
     _permissions = signal(null, ...(ngDevMode ? [{ debugName: "_permissions" }] : []));
     permissions = this._permissions.asReadonly();
-    // Loading state
     _isLoading = signal(false, ...(ngDevMode ? [{ debugName: "_isLoading" }] : []));
     isLoading = this._isLoading.asReadonly();
-    /**
-     * Load current user's permissions from API
-     * Call this on app initialization or after login
-     * Returns Observable for reactive composition
-     */
     loadPermissions(dto) {
         this._isLoading.set(true);
         return this.permissionApi.getMyPermissions(dto).pipe(tap((response) => {
             this._permissions.set(response.data ?? null);
             this._isLoading.set(false);
-            // Update shared permission validator
             const actionCodes = response.data?.frontendActions.map((a) => a.code) ?? [];
             this.permissionValidator.setPermissions(actionCodes);
         }), catchError(() => {
@@ -981,19 +675,13 @@ class PermissionStateService {
             return of(void 0);
         }), map(() => void 0));
     }
-    /**
-     * Check if permissions are loaded
-     *
-     * @returns true if permissions are loaded
-     */
     isLoaded() {
-        return (this._permissions() !== null &&
-            this.permissionValidator.isPermissionsLoaded());
+        return this._permissions() !== null && this.permissionValidator.isPermissionsLoaded();
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: PermissionStateService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: PermissionStateService, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: PermissionStateService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: PermissionStateService, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: PermissionStateService, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: PermissionStateService, decorators: [{
             type: Injectable,
             args: [{ providedIn: 'root' }]
         }] });
@@ -1012,26 +700,28 @@ function toLogicNode(node) {
 }
 function toBuilderNode(node) {
     if (node.type === 'action') {
-        return { id: crypto.randomUUID(), type: 'action', actionId: node.actionId };
+        return createActionNode(node.actionId);
     }
     return {
-        id: crypto.randomUUID(),
-        type: 'group',
-        operator: node.operator,
+        ...createGroupNode(node.operator),
         children: node.children?.map(toBuilderNode) ?? [],
     };
 }
+function createGroupNode(operator = 'AND') {
+    return { id: crypto.randomUUID(), type: 'group', operator, children: [] };
+}
+function createActionNode(actionId = '') {
+    return { id: crypto.randomUUID(), type: 'action', actionId };
+}
 /** Visual builder for AND/OR permission logic trees */
 class LogicBuilderComponent {
     logic = input(null, ...(ngDevMode ? [{ debugName: "logic" }] : []));
     actions = input([], ...(ngDevMode ? [{ debugName: "actions" }] : []));
     logicChange = output();
-    availableActions = computed(() => this.actions(), ...(ngDevMode ? [{ debugName: "availableActions" }] : []));
     /** Internal builder tree state (private writable + public readonly pattern) */
     _builderTree = signal(null, ...(ngDevMode ? [{ debugName: "_builderTree" }] : []));
     builderLogic = this._builderTree.asReadonly();
     constructor() {
-        // Sync builderTree with logic input changes
         effect(() => {
             const logic = this.logic();
             if (!logic) {
@@ -1043,40 +733,24 @@ class LogicBuilderComponent {
         }, { allowSignalWrites: true });
     }
     initializeLogic() {
-        this._builderTree.set({
-            id: crypto.randomUUID(),
-            type: 'group',
-            operator: 'AND',
-            children: [],
-        });
-        this.emitChange();
+        this.updateTreeAndEmit(createGroupNode());
     }
     clearLogic() {
         this._builderTree.set(null);
         this.logicChange.emit(null);
     }
     toggleOperator(nodeId) {
-        const tree = this._builderTree();
-        if (!tree)
-            return;
-        this._builderTree.set(this.updateNodeInTree(tree, nodeId, (node) => ({
+        this.updateNode(nodeId, (node) => ({
             ...node,
             operator: node.operator === 'AND' ? 'OR' : 'AND',
-        })));
-        this.emitChange();
+        }));
     }
     addChildNode(parentId, type) {
-        const tree = this._builderTree();
-        if (!tree)
-            return;
-        const newNode = type === 'group'
-            ? { id: crypto.randomUUID(), type: 'group', operator: 'AND', children: [] }
-            : { id: crypto.randomUUID(), type: 'action', actionId: '' };
-        this._builderTree.set(this.updateNodeInTree(tree, parentId, (node) => ({
+        const newNode = type === 'group' ? createGroupNode() : createActionNode();
+        this.updateNode(parentId, (node) => ({
             ...node,
             children: [...(node.children || []), newNode],
-        })));
-        this.emitChange();
+        }));
     }
     removeNode(nodeId) {
         const tree = this._builderTree();
@@ -1086,51 +760,45 @@ class LogicBuilderComponent {
             this.clearLogic();
             return;
         }
-        this._builderTree.set(this.removeNodeFromTree(tree, nodeId));
-        this.emitChange();
+        this.updateTreeAndEmit(this.removeNodeFromTree(tree, nodeId));
     }
     updateActionId(nodeId, actionId) {
+        this.updateNode(nodeId, (node) => ({ ...node, actionId }));
+    }
+    /** Updates a node in the tree and emits the change */
+    updateNode(nodeId, updater) {
         const tree = this._builderTree();
         if (!tree)
             return;
-        this._builderTree.set(this.updateNodeInTree(tree, nodeId, (node) => ({
-            ...node,
-            actionId,
-        })));
-        this.emitChange();
+        this.updateTreeAndEmit(this.updateNodeInTree(tree, nodeId, updater));
     }
-    emitChange() {
-        const tree = this._builderTree();
-        if (!tree) {
-            this.logicChange.emit(null);
-            return;
-        }
+    /** Sets the tree and emits the change */
+    updateTreeAndEmit(tree) {
+        this._builderTree.set(tree);
         this.logicChange.emit(toLogicNode(tree));
     }
     updateNodeInTree(node, targetId, updater) {
         if (node.id === targetId)
             return updater(node);
-        if (node.children) {
-            return {
-                ...node,
-                children: node.children.map((child) => this.updateNodeInTree(child, targetId, updater)),
-            };
-        }
-        return node;
+        if (!node.children)
+            return node;
+        return {
+            ...node,
+            children: node.children.map((child) => this.updateNodeInTree(child, targetId, updater)),
+        };
     }
     removeNodeFromTree(node, targetId) {
-        if (node.children) {
-            return {
-                ...node,
-                children: node.children
-                    .filter((child) => child.id !== targetId)
-                    .map((child) => this.removeNodeFromTree(child, targetId)),
-            };
-        }
-        return node;
+        if (!node.children)
+            return node;
+        return {
+            ...node,
+            children: node.children
+                .filter((child) => child.id !== targetId)
+                .map((child) => this.removeNodeFromTree(child, targetId)),
+        };
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: LogicBuilderComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.1.3", type: LogicBuilderComponent, isStandalone: true, selector: "lib-logic-builder", inputs: { logic: { classPropertyName: "logic", publicName: "logic", isSignal: true, isRequired: false, transformFunction: null }, actions: { classPropertyName: "actions", publicName: "actions", isSignal: true, isRequired: false, transformFunction: null } }, outputs: { logicChange: "logicChange" }, ngImport: i0, template: `
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: LogicBuilderComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.1.5", type: LogicBuilderComponent, isStandalone: true, selector: "lib-logic-builder", inputs: { logic: { classPropertyName: "logic", publicName: "logic", isSignal: true, isRequired: false, transformFunction: null }, actions: { classPropertyName: "actions", publicName: "actions", isSignal: true, isRequired: false, transformFunction: null } }, outputs: { logicChange: "logicChange" }, ngImport: i0, template: `
     <div class="logic-builder">
       <div class="flex justify-between items-center mb-3">
         <h4 class="text-sm font-semibold m-0">Permission Logic</h4>
@@ -1190,8 +858,8 @@ class LogicBuilderComponent {
                 class="action-select flex-1 p-2 border border-surface rounded text-sm"
                 [ngModel]="node.actionId"
                 (ngModelChange)="updateActionId(node.id, $event)">
-                <option [value]="null">Select Action... ({{ availableActions().length }} available)</option>
-                @for (action of availableActions(); track action.id) {
+                <option [value]="null">Select Action... ({{ actions().length }} available)</option>
+                @for (action of actions(); track action.id) {
                   <option [ngValue]="action.id">{{ action.name }}</option>
                 }
               </select>
@@ -1243,9 +911,9 @@ class LogicBuilderComponent {
     </ng-template>
   `, isInline: true, styles: [":host{display:block}.node-type{display:inline-flex;align-items:center;padding:.25rem .5rem;border-radius:.25rem;font-weight:600;font-size:.75rem;text-transform:uppercase}.node-type.group{background-color:var(--p-blue-100, #dbeafe);color:var(--p-blue-700, #1e40af)}.node-type.action{background-color:var(--p-green-100, #d1fae5);color:var(--p-green-700, #065f46)}:host-context(.p-dark) .node-type.group{background-color:#3b82f633;color:var(--p-blue-400, #60a5fa)}:host-context(.p-dark) .node-type.action{background-color:#22c55e33;color:var(--p-green-400, #4ade80)}.operator-badge{display:inline-flex;align-items:center;padding:.125rem .5rem;border-radius:9999px;font-weight:600;font-size:.75rem;cursor:pointer;transition:opacity .2s}.operator-badge.and{background-color:var(--p-yellow-100, #fef3c7);color:var(--p-yellow-700, #92400e)}.operator-badge.or{background-color:var(--p-indigo-100, #e0e7ff);color:var(--p-indigo-700, #3730a3)}:host-context(.p-dark) .operator-badge.and{background-color:#eab30833;color:var(--p-yellow-400, #facc15)}:host-context(.p-dark) .operator-badge.or{background-color:#6366f133;color:var(--p-indigo-400, #818cf8)}.operator-badge:hover{opacity:.8}.action-select{background-color:var(--p-surface-0, #ffffff);color:var(--p-text-color, #1f2937)}:host-context(.p-dark) .action-select{background-color:var(--p-surface-900, #1f2937);color:var(--p-text-color, #f9fafb)}.action-select:focus{outline:none;border-color:var(--p-primary-color, #3b82f6)}\n"], dependencies: [{ kind: "ngmodule", type: AngularModule }, { kind: "directive", type: i1.NgClass, selector: "[ngClass]", inputs: ["class", "ngClass"] }, { kind: "directive", type: i1.NgTemplateOutlet, selector: "[ngTemplateOutlet]", inputs: ["ngTemplateOutletContext", "ngTemplateOutlet", "ngTemplateOutletInjector"] }, { kind: "directive", type: i1$1.NgSelectOption, selector: "option", inputs: ["ngValue", "value"] }, { kind: "directive", type: i1$1.ɵNgSelectMultipleOption, selector: "option", inputs: ["ngValue", "value"] }, { kind: "directive", type: i1$1.SelectControlValueAccessor, selector: "select:not([multiple])[formControlName],select:not([multiple])[formControl],select:not([multiple])[ngModel]", inputs: ["compareWith"] }, { kind: "directive", type: i1$1.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i1$1.NgModel, selector: "[ngModel]:not([formControlName]):not([formControl])", inputs: ["name", "disabled", "ngModel", "ngModelOptions"], outputs: ["ngModelChange"], exportAs: ["ngModel"] }, { kind: "ngmodule", type: PrimeModule }, { kind: "component", type: i2.Button, selector: "p-button", inputs: ["hostName", "type", "badge", "disabled", "raised", "rounded", "text", "plain", "outlined", "link", "tabindex", "size", "variant", "style", "styleClass", "badgeClass", "badgeSeverity", "ariaLabel", "autofocus", "iconPos", "icon", "label", "loading", "loadingIcon", "severity", "buttonProps", "fluid"], outputs: ["onClick", "onFocus", "onBlur"] }, { kind: "directive", type: i6.Tooltip, selector: "[pTooltip]", inputs: ["tooltipPosition", "tooltipEvent", "positionStyle", "tooltipStyleClass", "tooltipZIndex", "escape", "showDelay", "hideDelay", "life", "positionTop", "positionLeft", "autoHide", "fitContent", "hideOnEscape", "showOnEllipsis", "pTooltip", "tooltipDisabled", "tooltipOptions", "appendTo", "ptTooltip", "pTooltipPT", "pTooltipUnstyled"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: LogicBuilderComponent, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: LogicBuilderComponent, decorators: [{
             type: Component,
-            args: [{ selector: 'lib-logic-builder', standalone: true, imports: [AngularModule, PrimeModule], changeDetection: ChangeDetectionStrategy.OnPush, template: `
+            args: [{ selector: 'lib-logic-builder', imports: [AngularModule, PrimeModule], changeDetection: ChangeDetectionStrategy.OnPush, template: `
     <div class="logic-builder">
       <div class="flex justify-between items-center mb-3">
         <h4 class="text-sm font-semibold m-0">Permission Logic</h4>
@@ -1305,8 +973,8 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImpor
                 class="action-select flex-1 p-2 border border-surface rounded text-sm"
                 [ngModel]="node.actionId"
                 (ngModelChange)="updateActionId(node.id, $event)">
-                <option [value]="null">Select Action... ({{ availableActions().length }} available)</option>
-                @for (action of availableActions(); track action.id) {
+                <option [value]="null">Select Action... ({{ actions().length }} available)</option>
+                @for (action of actions(); track action.id) {
                   <option [ngValue]="action.id">{{ action.name }}</option>
                 }
               </select>
@@ -1359,102 +1027,29 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImpor
   `, styles: [":host{display:block}.node-type{display:inline-flex;align-items:center;padding:.25rem .5rem;border-radius:.25rem;font-weight:600;font-size:.75rem;text-transform:uppercase}.node-type.group{background-color:var(--p-blue-100, #dbeafe);color:var(--p-blue-700, #1e40af)}.node-type.action{background-color:var(--p-green-100, #d1fae5);color:var(--p-green-700, #065f46)}:host-context(.p-dark) .node-type.group{background-color:#3b82f633;color:var(--p-blue-400, #60a5fa)}:host-context(.p-dark) .node-type.action{background-color:#22c55e33;color:var(--p-green-400, #4ade80)}.operator-badge{display:inline-flex;align-items:center;padding:.125rem .5rem;border-radius:9999px;font-weight:600;font-size:.75rem;cursor:pointer;transition:opacity .2s}.operator-badge.and{background-color:var(--p-yellow-100, #fef3c7);color:var(--p-yellow-700, #92400e)}.operator-badge.or{background-color:var(--p-indigo-100, #e0e7ff);color:var(--p-indigo-700, #3730a3)}:host-context(.p-dark) .operator-badge.and{background-color:#eab30833;color:var(--p-yellow-400, #facc15)}:host-context(.p-dark) .operator-badge.or{background-color:#6366f133;color:var(--p-indigo-400, #818cf8)}.operator-badge:hover{opacity:.8}.action-select{background-color:var(--p-surface-0, #ffffff);color:var(--p-text-color, #1f2937)}:host-context(.p-dark) .action-select{background-color:var(--p-surface-900, #1f2937);color:var(--p-text-color, #f9fafb)}.action-select:focus{outline:none;border-color:var(--p-primary-color, #3b82f6)}\n"] }]
         }], ctorParameters: () => [], propDecorators: { logic: [{ type: i0.Input, args: [{ isSignal: true, alias: "logic", required: false }] }], actions: [{ type: i0.Input, args: [{ isSignal: true, alias: "actions", required: false }] }], logicChange: [{ type: i0.Output, args: ["logicChange"] }] } });
 
-/**
- * Tree Utility Functions
- * Shared utilities for working with hierarchical tree structures
- */
-/**
- * Flattens a hierarchical tree structure into a flat array
- *
- * @template T - Type of tree node (must have optional children array)
- * @param tree - Array of tree nodes to flatten
- * @returns Flat array containing all nodes from the tree
- *
- * @example
- * ```typescript
- * const tree = [
- *   { id: '1', name: 'Parent', children: [
- *     { id: '2', name: 'Child 1' },
- *     { id: '3', name: 'Child 2' }
- *   ]}
- * ];
- * const flat = flattenTree(tree);
- * // Returns: [{ id: '1', ... }, { id: '2', ... }, { id: '3', ... }]
- * ```
- */
 function flattenTree(tree) {
-    if (!tree?.length) {
+    if (!tree?.length)
         return [];
-    }
     const result = [];
     const flatten = (nodes) => {
         for (const node of nodes) {
             result.push(node);
-            if (node.children?.length) {
+            if (node.children?.length)
                 flatten(node.children);
-            }
         }
     };
     flatten(tree);
     return result;
 }
-/**
- * Builds a map of items by their ID for quick lookup
- *
- * @template T - Type of item (must have id property)
- * @param items - Array of items to map
- * @returns Map with item IDs as keys and items as values
- *
- * @example
- * ```typescript
- * const actions = [{ id: '1', name: 'Action 1' }, { id: '2', name: 'Action 2' }];
- * const map = buildItemMap(actions);
- * const action = map.get('1'); // { id: '1', name: 'Action 1' }
- * ```
- */
-function buildItemMap(items) {
-    if (!items?.length) {
-        return new Map();
-    }
-    return new Map(items
-        .filter((item) => item?.id !== undefined && item?.id !== null)
-        .map((item) => [String(item.id), item]));
-}
-/**
- * Build tree structure from flat list using parentId
- *
- * Converts flat array with parentId references into hierarchical tree structure.
- * Used when backend returns flat list but tree structure is needed for display.
- *
- * @template T - Type of node (must have id and optional parentId)
- * @param flatList - Flat array of nodes with parentId references
- * @returns Hierarchical tree with children arrays
- *
- * @example
- * ```typescript
- * const flat = [
- *   { id: '1', name: 'Parent', parentId: null },
- *   { id: '2', name: 'Child 1', parentId: '1' },
- *   { id: '3', name: 'Child 2', parentId: '1' }
- * ];
- * const tree = buildTreeFromFlat(flat);
- * // Returns: [{ id: '1', name: 'Parent', children: [child1, child2] }]
- * ```
- */
 function buildTreeFromFlat(flatList) {
-    if (!flatList?.length) {
+    if (!flatList?.length)
         return [];
-    }
-    // Create map for O(1) lookup
     const itemMap = new Map();
     const rootItems = [];
-    // First pass: Create all nodes with empty children arrays
     flatList.forEach((item) => {
-        if (item.id) {
+        if (item.id)
             itemMap.set(item.id, { ...item, children: [] });
-        }
     });
-    // Second pass: Build parent-child relationships
     flatList.forEach((item) => {
         if (!item.id)
             return;
@@ -1462,51 +1057,23 @@ function buildTreeFromFlat(flatList) {
         if (!node)
             return;
         if (!item.parentId) {
-            // Root level item
             rootItems.push(node);
         }
         else {
-            // Child item - add to parent's children
             const parent = itemMap.get(item.parentId);
             if (parent) {
                 parent.children.push(node);
             }
             else {
-                // Parent not found - treat as root
                 rootItems.push(node);
             }
         }
     });
     return rootItems;
 }
-/**
- * Convert ActionTreeDto to PrimeNG TreeNode format
- *
- * Transforms hierarchical action data from backend into PrimeNG TreeTable format.
- * Recursively processes children and sets leaf/expanded properties.
- *
- * @param actions - Array of action tree DTOs from backend
- * @returns Array of TreeNodes for PrimeNG TreeTable
- *
- * @example
- * ```typescript
- * const actionsTree = [
- *   {
- *     id: '1',
- *     name: 'User Management',
- *     children: [
- *       { id: '2', name: 'Create User', children: [] }
- *     ]
- *   }
- * ];
- * const treeNodes = convertActionToTreeNode(actionsTree);
- * // Use with: <p-treeTable [value]="treeNodes">
- * ```
- */
 function convertActionToTreeNode(actions) {
-    if (!actions?.length) {
+    if (!actions?.length)
         return [];
-    }
     const convert = (action) => {
         const { children, ...actionData } = action;
         return {
@@ -1606,17 +1173,14 @@ class RoleActionSelectorComponent {
         const selMap = this.selectionMap();
         const allActions = this.actions();
         const unmetSet = new Set();
-        allActions.forEach((action) => {
-            if (action.id &&
-                this.permissionLogic.hasUnmetPrerequisites(action, selMap, allActions)) {
+        for (const action of allActions) {
+            if (action.id && this.permissionLogic.hasUnmetPrerequisites(action, selMap, allActions)) {
                 unmetSet.add(action.id);
             }
-        });
+        }
         return unmetSet;
     }, ...(ngDevMode ? [{ debugName: "actionsWithUnmetPrerequisites" }] : []));
-    invalidActionsCount = computed(() => {
-        return this.actionsWithUnmetPrerequisites().size;
-    }, ...(ngDevMode ? [{ debugName: "invalidActionsCount" }] : []));
+    invalidActionsCount = computed(() => this.actionsWithUnmetPrerequisites().size, ...(ngDevMode ? [{ debugName: "invalidActionsCount" }] : []));
     // Computed - Pending Changes
     pendingAdd = computed(() => {
         const current = this.selectionMap();
@@ -1701,13 +1265,12 @@ class RoleActionSelectorComponent {
             const assignedIds = new Set((assignedResponse?.data || []).map((a) => a.actionId));
             // Build selection map
             const selMap = {};
-            flatActions.forEach((action) => {
+            for (const action of flatActions) {
                 if (action.id) {
                     selMap[action.id] = assignedIds.has(action.id);
                 }
-            });
-            this._selectionMap.set(selMap);
-            this._initialSelection.set({ ...selMap });
+            }
+            this.applySelection(selMap);
         }
         finally {
             if (!signal.aborted) {
@@ -1756,35 +1319,20 @@ class RoleActionSelectorComponent {
             this.permissionLogic.handleCheck(action, this.selectionMap(), this.actions(), (newMap) => this._selectionMap.set(newMap), (previousState) => this._selectionMap.set(previousState));
         }
     }
-    /**
-     * Toggle all actions
-     */
     toggleAll() {
-        const newValue = !this.allSelected();
-        const selMap = {};
-        this.actions().forEach((action) => {
-            selMap[action.id] = newValue;
-        });
-        this._selectionMap.set(selMap);
+        this.setAllSelection(!this.allSelected());
     }
-    /**
-     * Select all actions
-     */
     selectAll() {
-        const selMap = {};
-        this.actions().forEach((action) => {
-            selMap[action.id] = true;
-        });
-        this._selectionMap.set(selMap);
+        this.setAllSelection(true);
     }
-    /**
-     * Deselect all actions
-     */
     deselectAll() {
+        this.setAllSelection(false);
+    }
+    setAllSelection(value) {
         const selMap = {};
-        this.actions().forEach((action) => {
-            selMap[action.id] = false;
-        });
+        for (const action of this.actions()) {
+            selMap[action.id] = value;
+        }
         this._selectionMap.set(selMap);
     }
     /**
@@ -1801,19 +1349,7 @@ class RoleActionSelectorComponent {
             return;
         }
         // Build payload
-        const items = [];
-        this.pendingAdd().forEach((action) => {
-            items.push({
-                id: action.id,
-                action: 'add',
-            });
-        });
-        this.pendingRemove().forEach((action) => {
-            items.push({
-                id: action.id,
-                action: 'remove',
-            });
-        });
+        const items = this.buildPayloadItems();
         if (items.length === 0)
             return;
         this.saving.set(true);
@@ -1837,17 +1373,28 @@ class RoleActionSelectorComponent {
             this.saving.set(false);
         }
     }
-    /**
-     * Reset component state
-     */
+    applySelection(selMap) {
+        this._selectionMap.set(selMap);
+        this._initialSelection.set({ ...selMap });
+    }
+    buildPayloadItems() {
+        const items = [];
+        for (const action of this.pendingAdd()) {
+            items.push({ id: action.id, action: 'add' });
+        }
+        for (const action of this.pendingRemove()) {
+            items.push({ id: action.id, action: 'remove' });
+        }
+        return items;
+    }
     resetState() {
         this._actionsTree.set([]);
         this._actions.set([]);
         this._selectionMap.set({});
         this._initialSelection.set({});
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: RoleActionSelectorComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.1.3", type: RoleActionSelectorComponent, isStandalone: true, selector: "flusys-role-action-selector", ngImport: i0, template: `
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: RoleActionSelectorComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.1.5", type: RoleActionSelectorComponent, isStandalone: true, selector: "flusys-role-action-selector", ngImport: i0, template: `
     <div class="role-action-selector">
       <!-- Role Selector -->
       <div class="mb-4">
@@ -2070,9 +1617,9 @@ class RoleActionSelectorComponent {
     </div>
   `, isInline: true, styles: [":host{display:block}.validation-warning{background-color:var(--p-yellow-50, #fefce8);border-left:4px solid var(--p-yellow-500, #eab308);color:var(--p-yellow-700, #a16207)}:host-context(.p-dark) .validation-warning{background-color:#eab3081a;color:var(--p-yellow-400, #facc15)}:host ::ng-deep tr.highlight-warning{background-color:var(--p-red-50, rgba(239, 68, 68, .1))!important}:host-context(.p-dark) ::ng-deep tr.highlight-warning{background-color:#ef444426!important}\n"], dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i1$1.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i1$1.NgModel, selector: "[ngModel]:not([formControlName]):not([formControl])", inputs: ["name", "disabled", "ngModel", "ngModelOptions"], outputs: ["ngModelChange"], exportAs: ["ngModel"] }, { kind: "ngmodule", type: PrimeModule }, { kind: "component", type: i2.Button, selector: "p-button", inputs: ["hostName", "type", "badge", "disabled", "raised", "rounded", "text", "plain", "outlined", "link", "tabindex", "size", "variant", "style", "styleClass", "badgeClass", "badgeSeverity", "ariaLabel", "autofocus", "iconPos", "icon", "label", "loading", "loadingIcon", "severity", "buttonProps", "fluid"], outputs: ["onClick", "onFocus", "onBlur"] }, { kind: "component", type: i3.Checkbox, selector: "p-checkbox, p-checkBox, p-check-box", inputs: ["hostName", "value", "binary", "ariaLabelledBy", "ariaLabel", "tabindex", "inputId", "inputStyle", "styleClass", "inputClass", "indeterminate", "formControl", "checkboxIcon", "readonly", "autofocus", "trueValue", "falseValue", "variant", "size"], outputs: ["onChange", "onFocus", "onBlur"] }, { kind: "component", type: i4.Select, selector: "p-select", inputs: ["id", "scrollHeight", "filter", "panelStyle", "styleClass", "panelStyleClass", "readonly", "editable", "tabindex", "placeholder", "loadingIcon", "filterPlaceholder", "filterLocale", "inputId", "dataKey", "filterBy", "filterFields", "autofocus", "resetFilterOnHide", "checkmark", "dropdownIcon", "loading", "optionLabel", "optionValue", "optionDisabled", "optionGroupLabel", "optionGroupChildren", "group", "showClear", "emptyFilterMessage", "emptyMessage", "lazy", "virtualScroll", "virtualScrollItemSize", "virtualScrollOptions", "overlayOptions", "ariaFilterLabel", "ariaLabel", "ariaLabelledBy", "filterMatchMode", "tooltip", "tooltipPosition", "tooltipPositionStyle", "tooltipStyleClass", "focusOnHover", "selectOnFocus", "autoOptionFocus", "autofocusFilter", "filterValue", "options", "appendTo", "motionOptions"], outputs: ["onChange", "onFilter", "onFocus", "onBlur", "onClick", "onShow", "onHide", "onClear", "onLazyLoad"] }, { kind: "component", type: i5.Tag, selector: "p-tag", inputs: ["styleClass", "severity", "value", "icon", "rounded"] }, { kind: "directive", type: i6.Tooltip, selector: "[pTooltip]", inputs: ["tooltipPosition", "tooltipEvent", "positionStyle", "tooltipStyleClass", "tooltipZIndex", "escape", "showDelay", "hideDelay", "life", "positionTop", "positionLeft", "autoHide", "fitContent", "hideOnEscape", "showOnEllipsis", "pTooltip", "tooltipDisabled", "tooltipOptions", "appendTo", "ptTooltip", "pTooltipPT", "pTooltipUnstyled"] }, { kind: "component", type: i7.TreeTable, selector: "p-treeTable, p-treetable, p-tree-table", inputs: ["columns", "styleClass", "tableStyle", "tableStyleClass", "autoLayout", "lazy", "lazyLoadOnInit", "paginator", "rows", "first", "pageLinks", "rowsPerPageOptions", "alwaysShowPaginator", "paginatorPosition", "paginatorStyleClass", "paginatorDropdownAppendTo", "currentPageReportTemplate", "showCurrentPageReport", "showJumpToPageDropdown", "showFirstLastIcon", "showPageLinks", "defaultSortOrder", "sortMode", "resetPageOnSort", "customSort", "selectionMode", "contextMenuSelection", "contextMenuSelectionMode", "dataKey", "metaKeySelection", "compareSelectionBy", "rowHover", "loading", "loadingIcon", "showLoader", "scrollable", "scrollHeight", "virtualScroll", "virtualScrollItemSize", "virtualScrollOptions", "virtualScrollDelay", "frozenWidth", "frozenColumns", "resizableColumns", "columnResizeMode", "reorderableColumns", "contextMenu", "rowTrackBy", "filters", "globalFilterFields", "filterDelay", "filterMode", "filterLocale", "paginatorLocale", "totalRecords", "sortField", "sortOrder", "multiSortMeta", "selection", "value", "virtualRowHeight", "selectionKeys", "showGridlines"], outputs: ["selectionChange", "contextMenuSelectionChange", "onFilter", "onNodeExpand", "onNodeCollapse", "onPage", "onSort", "onLazyLoad", "sortFunction", "onColResize", "onColReorder", "onNodeSelect", "onNodeUnselect", "onContextMenuSelect", "onHeaderCheckboxToggle", "onEditInit", "onEditComplete", "onEditCancel", "selectionKeysChange"] }, { kind: "component", type: i7.TreeTableToggler, selector: "p-treeTableToggler, p-treetabletoggler, p-treetable-toggler", inputs: ["rowNode"] }, { kind: "directive", type: HasPermissionDirective, selector: "[hasPermission]", inputs: ["hasPermission"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: RoleActionSelectorComponent, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: RoleActionSelectorComponent, decorators: [{
             type: Component,
-            args: [{ selector: 'flusys-role-action-selector', standalone: true, changeDetection: ChangeDetectionStrategy.OnPush, imports: [CommonModule, FormsModule, PrimeModule, HasPermissionDirective], template: `
+            args: [{ selector: 'flusys-role-action-selector', changeDetection: ChangeDetectionStrategy.OnPush, imports: [CommonModule, FormsModule, PrimeModule, HasPermissionDirective], template: `
     <div class="role-action-selector">
       <!-- Role Selector -->
       <div class="mb-4">
@@ -2384,17 +1931,14 @@ class CompanyActionSelectorComponent {
         const selMap = this.selectionMap();
         const allActions = this.actions();
         const unmetSet = new Set();
-        allActions.forEach((action) => {
-            if (action.id &&
-                this.permissionLogic.hasUnmetPrerequisites(action, selMap, allActions)) {
+        for (const action of allActions) {
+            if (action.id && this.permissionLogic.hasUnmetPrerequisites(action, selMap, allActions)) {
                 unmetSet.add(action.id);
             }
-        });
+        }
         return unmetSet;
     }, ...(ngDevMode ? [{ debugName: "actionsWithUnmetPrerequisites" }] : []));
-    invalidActionsCount = computed(() => {
-        return this.actionsWithUnmetPrerequisites().size;
-    }, ...(ngDevMode ? [{ debugName: "invalidActionsCount" }] : []));
+    invalidActionsCount = computed(() => this.actionsWithUnmetPrerequisites().size, ...(ngDevMode ? [{ debugName: "invalidActionsCount" }] : []));
     // Computed - Pending Changes
     pendingAdd = computed(() => {
         const current = this.selectionMap();
@@ -2478,13 +2022,7 @@ class CompanyActionSelectorComponent {
             if (signal.aborted)
                 return;
             const assignedIds = new Set((assignedResponse?.data || []).map((a) => a.actionId));
-            // Build selection map
-            const selMap = {};
-            actionsList.forEach((action) => {
-                if (action.id) {
-                    selMap[action.id] = assignedIds.has(action.id);
-                }
-            });
+            const selMap = this.buildSelectionMap(actionsList, (action) => assignedIds.has(action.id));
             this._selectionMap.set(selMap);
             this._initialSelection.set({ ...selMap });
         }
@@ -2535,36 +2073,17 @@ class CompanyActionSelectorComponent {
             this.permissionLogic.handleCheck(action, this.selectionMap(), this.actions(), (newMap) => this._selectionMap.set(newMap), (previousState) => this._selectionMap.set(previousState));
         }
     }
-    /**
-     * Toggle all actions
-     */
     toggleAll() {
-        const newValue = !this.allSelected();
-        const selMap = {};
-        this.actions().forEach((action) => {
-            selMap[action.id] = newValue;
-        });
-        this._selectionMap.set(selMap);
+        this.setAllSelection(!this.allSelected());
     }
-    /**
-     * Select all actions
-     */
     selectAll() {
-        const selMap = {};
-        this.actions().forEach((action) => {
-            selMap[action.id] = true;
-        });
-        this._selectionMap.set(selMap);
+        this.setAllSelection(true);
     }
-    /**
-     * Deselect all actions
-     */
     deselectAll() {
-        const selMap = {};
-        this.actions().forEach((action) => {
-            selMap[action.id] = false;
-        });
-        this._selectionMap.set(selMap);
+        this.setAllSelection(false);
+    }
+    setAllSelection(value) {
+        this._selectionMap.set(this.buildSelectionMap(this.actions(), () => value));
     }
     /**
      * Save changes to backend
@@ -2579,20 +2098,7 @@ class CompanyActionSelectorComponent {
             this.permissionLogic.showValidationErrorDialog(invalidActions, this.selectionMap(), this.actions(), (newMap) => this._selectionMap.set(newMap));
             return;
         }
-        // Build payload
-        const items = [];
-        this.pendingAdd().forEach((action) => {
-            items.push({
-                id: action.id,
-                action: 'add',
-            });
-        });
-        this.pendingRemove().forEach((action) => {
-            items.push({
-                id: action.id,
-                action: 'remove',
-            });
-        });
+        const items = this.buildPayloadItems();
         if (items.length === 0)
             return;
         this.saving.set(true);
@@ -2670,17 +2176,31 @@ class CompanyActionSelectorComponent {
             },
         });
     }
-    /**
-     * Reset component state
-     */
     resetState() {
         this._actionsTree.set([]);
         this._actions.set([]);
         this._selectionMap.set({});
         this._initialSelection.set({});
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: CompanyActionSelectorComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.1.3", type: CompanyActionSelectorComponent, isStandalone: true, selector: "flusys-company-action-selector", ngImport: i0, template: `
+    buildSelectionMap(actions, predicate) {
+        const selMap = {};
+        for (const action of actions) {
+            selMap[action.id] = predicate(action);
+        }
+        return selMap;
+    }
+    buildPayloadItems() {
+        const items = [];
+        for (const action of this.pendingAdd()) {
+            items.push({ id: action.id, action: 'add' });
+        }
+        for (const action of this.pendingRemove()) {
+            items.push({ id: action.id, action: 'remove' });
+        }
+        return items;
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: CompanyActionSelectorComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.1.5", type: CompanyActionSelectorComponent, isStandalone: true, selector: "flusys-company-action-selector", ngImport: i0, template: `
     <div class="company-action-selector">
       <!-- Company Selector -->
       <div class="mb-4">
@@ -2897,9 +2417,9 @@ class CompanyActionSelectorComponent {
     </div>
   `, isInline: true, styles: [":host{display:block}.validation-warning{background-color:var(--p-yellow-50, #fefce8);border-left:4px solid var(--p-yellow-500, #eab308);color:var(--p-yellow-700, #a16207)}:host-context(.p-dark) .validation-warning{background-color:#eab3081a;color:var(--p-yellow-400, #facc15)}:host ::ng-deep tr.highlight-warning{background-color:var(--p-red-50, rgba(239, 68, 68, .1))!important}:host-context(.p-dark) ::ng-deep tr.highlight-warning{background-color:#ef444426!important}\n"], dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i1$1.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i1$1.NgModel, selector: "[ngModel]:not([formControlName]):not([formControl])", inputs: ["name", "disabled", "ngModel", "ngModelOptions"], outputs: ["ngModelChange"], exportAs: ["ngModel"] }, { kind: "ngmodule", type: PrimeModule }, { kind: "component", type: i2.Button, selector: "p-button", inputs: ["hostName", "type", "badge", "disabled", "raised", "rounded", "text", "plain", "outlined", "link", "tabindex", "size", "variant", "style", "styleClass", "badgeClass", "badgeSeverity", "ariaLabel", "autofocus", "iconPos", "icon", "label", "loading", "loadingIcon", "severity", "buttonProps", "fluid"], outputs: ["onClick", "onFocus", "onBlur"] }, { kind: "component", type: i3.Checkbox, selector: "p-checkbox, p-checkBox, p-check-box", inputs: ["hostName", "value", "binary", "ariaLabelledBy", "ariaLabel", "tabindex", "inputId", "inputStyle", "styleClass", "inputClass", "indeterminate", "formControl", "checkboxIcon", "readonly", "autofocus", "trueValue", "falseValue", "variant", "size"], outputs: ["onChange", "onFocus", "onBlur"] }, { kind: "component", type: i4.Select, selector: "p-select", inputs: ["id", "scrollHeight", "filter", "panelStyle", "styleClass", "panelStyleClass", "readonly", "editable", "tabindex", "placeholder", "loadingIcon", "filterPlaceholder", "filterLocale", "inputId", "dataKey", "filterBy", "filterFields", "autofocus", "resetFilterOnHide", "checkmark", "dropdownIcon", "loading", "optionLabel", "optionValue", "optionDisabled", "optionGroupLabel", "optionGroupChildren", "group", "showClear", "emptyFilterMessage", "emptyMessage", "lazy", "virtualScroll", "virtualScrollItemSize", "virtualScrollOptions", "overlayOptions", "ariaFilterLabel", "ariaLabel", "ariaLabelledBy", "filterMatchMode", "tooltip", "tooltipPosition", "tooltipPositionStyle", "tooltipStyleClass", "focusOnHover", "selectOnFocus", "autoOptionFocus", "autofocusFilter", "filterValue", "options", "appendTo", "motionOptions"], outputs: ["onChange", "onFilter", "onFocus", "onBlur", "onClick", "onShow", "onHide", "onClear", "onLazyLoad"] }, { kind: "component", type: i5.Tag, selector: "p-tag", inputs: ["styleClass", "severity", "value", "icon", "rounded"] }, { kind: "directive", type: i6.Tooltip, selector: "[pTooltip]", inputs: ["tooltipPosition", "tooltipEvent", "positionStyle", "tooltipStyleClass", "tooltipZIndex", "escape", "showDelay", "hideDelay", "life", "positionTop", "positionLeft", "autoHide", "fitContent", "hideOnEscape", "showOnEllipsis", "pTooltip", "tooltipDisabled", "tooltipOptions", "appendTo", "ptTooltip", "pTooltipPT", "pTooltipUnstyled"] }, { kind: "component", type: i7.TreeTable, selector: "p-treeTable, p-treetable, p-tree-table", inputs: ["columns", "styleClass", "tableStyle", "tableStyleClass", "autoLayout", "lazy", "lazyLoadOnInit", "paginator", "rows", "first", "pageLinks", "rowsPerPageOptions", "alwaysShowPaginator", "paginatorPosition", "paginatorStyleClass", "paginatorDropdownAppendTo", "currentPageReportTemplate", "showCurrentPageReport", "showJumpToPageDropdown", "showFirstLastIcon", "showPageLinks", "defaultSortOrder", "sortMode", "resetPageOnSort", "customSort", "selectionMode", "contextMenuSelection", "contextMenuSelectionMode", "dataKey", "metaKeySelection", "compareSelectionBy", "rowHover", "loading", "loadingIcon", "showLoader", "scrollable", "scrollHeight", "virtualScroll", "virtualScrollItemSize", "virtualScrollOptions", "virtualScrollDelay", "frozenWidth", "frozenColumns", "resizableColumns", "columnResizeMode", "reorderableColumns", "contextMenu", "rowTrackBy", "filters", "globalFilterFields", "filterDelay", "filterMode", "filterLocale", "paginatorLocale", "totalRecords", "sortField", "sortOrder", "multiSortMeta", "selection", "value", "virtualRowHeight", "selectionKeys", "showGridlines"], outputs: ["selectionChange", "contextMenuSelectionChange", "onFilter", "onNodeExpand", "onNodeCollapse", "onPage", "onSort", "onLazyLoad", "sortFunction", "onColResize", "onColReorder", "onNodeSelect", "onNodeUnselect", "onContextMenuSelect", "onHeaderCheckboxToggle", "onEditInit", "onEditComplete", "onEditCancel", "selectionKeysChange"] }, { kind: "component", type: i7.TreeTableToggler, selector: "p-treeTableToggler, p-treetabletoggler, p-treetable-toggler", inputs: ["rowNode"] }, { kind: "directive", type: HasPermissionDirective, selector: "[hasPermission]", inputs: ["hasPermission"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: CompanyActionSelectorComponent, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: CompanyActionSelectorComponent, decorators: [{
             type: Component,
-            args: [{ selector: 'flusys-company-action-selector', standalone: true, changeDetection: ChangeDetectionStrategy.OnPush, imports: [CommonModule, FormsModule, PrimeModule, HasPermissionDirective], template: `
+            args: [{ selector: 'flusys-company-action-selector', changeDetection: ChangeDetectionStrategy.OnPush, imports: [CommonModule, FormsModule, PrimeModule, HasPermissionDirective], template: `
     <div class="company-action-selector">
       <!-- Company Selector -->
       <div class="mb-4">
@@ -3157,9 +2677,6 @@ class UserRoleSelectorComponent {
     roleApi = inject(RoleApiService);
     permissionApi = inject(PermissionApiService);
     messageService = inject(MessageService);
-    destroyRef = inject(DestroyRef);
-    // AbortController for data loading
-    loadDataAbortController = null;
     // State - User/Branch Selection
     selectedUserId = signal(null, ...(ngDevMode ? [{ debugName: "selectedUserId" }] : []));
     selectedBranchId = signal(undefined, ...(ngDevMode ? [{ debugName: "selectedBranchId" }] : []));
@@ -3220,10 +2737,6 @@ class UserRoleSelectorComponent {
         return this.hasChanges() && !this.saving();
     }, ...(ngDevMode ? [{ debugName: "canSave" }] : []));
     constructor() {
-        // Cleanup on destroy
-        this.destroyRef.onDestroy(() => {
-            this.loadDataAbortController?.abort();
-        });
         // Effect: Load user branches and data when user changes
         effect(() => {
             const userId = this.selectedUserId();
@@ -3260,9 +2773,7 @@ class UserRoleSelectorComponent {
                 this.branches.set([]);
                 return;
             }
-            const response = await this.userPermissionProvider
-                .getUserBranchPermissions(userId)
-                .toPromise();
+            const response = await firstValueFrom(this.userPermissionProvider.getUserBranchPermissions(userId));
             const userBranches = response?.data?.map((ub) => ({
                 id: ub.branchId,
                 name: ub.branchName,
@@ -3285,20 +2796,16 @@ class UserRoleSelectorComponent {
         this.loading.set(true);
         try {
             // Load all roles
-            const rolesResponse = await this.roleApi
-                .getAll('', {
+            const rolesResponse = await firstValueFrom(this.roleApi.getAll('', {
                 pagination: { currentPage: 0, pageSize: MAX_DROPDOWN_ITEMS },
-            })
-                .toPromise();
+            }));
             const rolesList = rolesResponse?.data ?? [];
             this._roles.set(rolesList);
             // Load existing user-role assignments
             const query = isCompanyFeatureEnabled(this.appConfig) && branchId
                 ? { branchId }
                 : undefined;
-            const assignedResponse = await this.permissionApi
-                .getUserRoles(userId, query)
-                .toPromise();
+            const assignedResponse = await firstValueFrom(this.permissionApi.getUserRoles(userId, query));
             const assignedIds = new Set((assignedResponse?.data || []).map((r) => r.roleId));
             // Build selection map
             const selMap = {};
@@ -3338,30 +2845,27 @@ class UserRoleSelectorComponent {
      * Toggle all roles
      */
     toggleAll() {
-        const newValue = !this.allSelected();
-        const selMap = {};
-        this.roles().forEach((role) => {
-            selMap[role.id] = newValue;
-        });
-        this._selectionMap.set(selMap);
+        this.setAllSelections(!this.allSelected());
     }
     /**
      * Select all roles
      */
     selectAll() {
-        const selMap = {};
-        this.roles().forEach((role) => {
-            selMap[role.id] = true;
-        });
-        this._selectionMap.set(selMap);
+        this.setAllSelections(true);
     }
     /**
      * Deselect all roles
      */
     deselectAll() {
+        this.setAllSelections(false);
+    }
+    /**
+     * Set all role selections to a given value
+     */
+    setAllSelections(value) {
         const selMap = {};
         this.roles().forEach((role) => {
-            selMap[role.id] = false;
+            selMap[role.id] = value;
         });
         this._selectionMap.set(selMap);
     }
@@ -3404,9 +2908,7 @@ class UserRoleSelectorComponent {
                     payload.branchId = branchId;
                 }
             }
-            const response = await this.permissionApi
-                .assignUserRoles(payload)
-                .toPromise();
+            const response = await firstValueFrom(this.permissionApi.assignUserRoles(payload));
             this.messageService.add({
                 severity: 'success',
                 summary: 'Success',
@@ -3431,8 +2933,8 @@ class UserRoleSelectorComponent {
         this._selectionMap.set({});
         this._initialSelection.set({});
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: UserRoleSelectorComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.1.3", type: UserRoleSelectorComponent, isStandalone: true, selector: "flusys-user-role-selector", ngImport: i0, template: `
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: UserRoleSelectorComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.1.5", type: UserRoleSelectorComponent, isStandalone: true, selector: "flusys-user-role-selector", ngImport: i0, template: `
     <div class="user-role-selector">
       <!-- User and Branch Selectors -->
       <div class="surface-card p-4 rounded-border mb-4 shadow-sm">
@@ -3654,11 +3156,11 @@ class UserRoleSelectorComponent {
         }
       }
     </div>
-  `, isInline: true, styles: [":host{display:block}\n"], dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i1$1.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i1$1.NgModel, selector: "[ngModel]:not([formControlName]):not([formControl])", inputs: ["name", "disabled", "ngModel", "ngModelOptions"], outputs: ["ngModelChange"], exportAs: ["ngModel"] }, { kind: "ngmodule", type: PrimeModule }, { kind: "component", type: i2.Button, selector: "p-button", inputs: ["hostName", "type", "badge", "disabled", "raised", "rounded", "text", "plain", "outlined", "link", "tabindex", "size", "variant", "style", "styleClass", "badgeClass", "badgeSeverity", "ariaLabel", "autofocus", "iconPos", "icon", "label", "loading", "loadingIcon", "severity", "buttonProps", "fluid"], outputs: ["onClick", "onFocus", "onBlur"] }, { kind: "component", type: i3.Checkbox, selector: "p-checkbox, p-checkBox, p-check-box", inputs: ["hostName", "value", "binary", "ariaLabelledBy", "ariaLabel", "tabindex", "inputId", "inputStyle", "styleClass", "inputClass", "indeterminate", "formControl", "checkboxIcon", "readonly", "autofocus", "trueValue", "falseValue", "variant", "size"], outputs: ["onChange", "onFocus", "onBlur"] }, { kind: "component", type: i4.Select, selector: "p-select", inputs: ["id", "scrollHeight", "filter", "panelStyle", "styleClass", "panelStyleClass", "readonly", "editable", "tabindex", "placeholder", "loadingIcon", "filterPlaceholder", "filterLocale", "inputId", "dataKey", "filterBy", "filterFields", "autofocus", "resetFilterOnHide", "checkmark", "dropdownIcon", "loading", "optionLabel", "optionValue", "optionDisabled", "optionGroupLabel", "optionGroupChildren", "group", "showClear", "emptyFilterMessage", "emptyMessage", "lazy", "virtualScroll", "virtualScrollItemSize", "virtualScrollOptions", "overlayOptions", "ariaFilterLabel", "ariaLabel", "ariaLabelledBy", "filterMatchMode", "tooltip", "tooltipPosition", "tooltipPositionStyle", "tooltipStyleClass", "focusOnHover", "selectOnFocus", "autoOptionFocus", "autofocusFilter", "filterValue", "options", "appendTo", "motionOptions"], outputs: ["onChange", "onFilter", "onFocus", "onBlur", "onClick", "onShow", "onHide", "onClear", "onLazyLoad"] }, { kind: "component", type: i5$1.Table, selector: "p-table", inputs: ["frozenColumns", "frozenValue", "styleClass", "tableStyle", "tableStyleClass", "paginator", "pageLinks", "rowsPerPageOptions", "alwaysShowPaginator", "paginatorPosition", "paginatorStyleClass", "paginatorDropdownAppendTo", "paginatorDropdownScrollHeight", "currentPageReportTemplate", "showCurrentPageReport", "showJumpToPageDropdown", "showJumpToPageInput", "showFirstLastIcon", "showPageLinks", "defaultSortOrder", "sortMode", "resetPageOnSort", "selectionMode", "selectionPageOnly", "contextMenuSelection", "contextMenuSelectionMode", "dataKey", "metaKeySelection", "rowSelectable", "rowTrackBy", "lazy", "lazyLoadOnInit", "compareSelectionBy", "csvSeparator", "exportFilename", "filters", "globalFilterFields", "filterDelay", "filterLocale", "expandedRowKeys", "editingRowKeys", "rowExpandMode", "scrollable", "rowGroupMode", "scrollHeight", "virtualScroll", "virtualScrollItemSize", "virtualScrollOptions", "virtualScrollDelay", "frozenWidth", "contextMenu", "resizableColumns", "columnResizeMode", "reorderableColumns", "loading", "loadingIcon", "showLoader", "rowHover", "customSort", "showInitialSortBadge", "exportFunction", "exportHeader", "stateKey", "stateStorage", "editMode", "groupRowsBy", "size", "showGridlines", "stripedRows", "groupRowsByOrder", "responsiveLayout", "breakpoint", "paginatorLocale", "value", "columns", "first", "rows", "totalRecords", "sortField", "sortOrder", "multiSortMeta", "selection", "selectAll"], outputs: ["contextMenuSelectionChange", "selectAllChange", "selectionChange", "onRowSelect", "onRowUnselect", "onPage", "onSort", "onFilter", "onLazyLoad", "onRowExpand", "onRowCollapse", "onContextMenuSelect", "onColResize", "onColReorder", "onRowReorder", "onEditInit", "onEditComplete", "onEditCancel", "onHeaderCheckboxToggle", "sortFunction", "firstChange", "rowsChange", "onStateSave", "onStateRestore"] }, { kind: "directive", type: i6.Tooltip, selector: "[pTooltip]", inputs: ["tooltipPosition", "tooltipEvent", "positionStyle", "tooltipStyleClass", "tooltipZIndex", "escape", "showDelay", "hideDelay", "life", "positionTop", "positionLeft", "autoHide", "fitContent", "hideOnEscape", "showOnEllipsis", "pTooltip", "tooltipDisabled", "tooltipOptions", "appendTo", "ptTooltip", "pTooltipPT", "pTooltipUnstyled"] }, { kind: "directive", type: HasPermissionDirective, selector: "[hasPermission]", inputs: ["hasPermission"] }, { kind: "component", type: UserSelectComponent, selector: "lib-user-select", inputs: ["loadUsers", "placeHolder", "isEditMode", "filterActive", "additionalFilters", "pageSize", "value"], outputs: ["valueChange", "userSelected", "onError"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+  `, isInline: true, styles: [":host{display:block}\n"], dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i1$1.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i1$1.NgModel, selector: "[ngModel]:not([formControlName]):not([formControl])", inputs: ["name", "disabled", "ngModel", "ngModelOptions"], outputs: ["ngModelChange"], exportAs: ["ngModel"] }, { kind: "ngmodule", type: PrimeModule }, { kind: "component", type: i2.Button, selector: "p-button", inputs: ["hostName", "type", "badge", "disabled", "raised", "rounded", "text", "plain", "outlined", "link", "tabindex", "size", "variant", "style", "styleClass", "badgeClass", "badgeSeverity", "ariaLabel", "autofocus", "iconPos", "icon", "label", "loading", "loadingIcon", "severity", "buttonProps", "fluid"], outputs: ["onClick", "onFocus", "onBlur"] }, { kind: "component", type: i3.Checkbox, selector: "p-checkbox, p-checkBox, p-check-box", inputs: ["hostName", "value", "binary", "ariaLabelledBy", "ariaLabel", "tabindex", "inputId", "inputStyle", "styleClass", "inputClass", "indeterminate", "formControl", "checkboxIcon", "readonly", "autofocus", "trueValue", "falseValue", "variant", "size"], outputs: ["onChange", "onFocus", "onBlur"] }, { kind: "component", type: i4.Select, selector: "p-select", inputs: ["id", "scrollHeight", "filter", "panelStyle", "styleClass", "panelStyleClass", "readonly", "editable", "tabindex", "placeholder", "loadingIcon", "filterPlaceholder", "filterLocale", "inputId", "dataKey", "filterBy", "filterFields", "autofocus", "resetFilterOnHide", "checkmark", "dropdownIcon", "loading", "optionLabel", "optionValue", "optionDisabled", "optionGroupLabel", "optionGroupChildren", "group", "showClear", "emptyFilterMessage", "emptyMessage", "lazy", "virtualScroll", "virtualScrollItemSize", "virtualScrollOptions", "overlayOptions", "ariaFilterLabel", "ariaLabel", "ariaLabelledBy", "filterMatchMode", "tooltip", "tooltipPosition", "tooltipPositionStyle", "tooltipStyleClass", "focusOnHover", "selectOnFocus", "autoOptionFocus", "autofocusFilter", "filterValue", "options", "appendTo", "motionOptions"], outputs: ["onChange", "onFilter", "onFocus", "onBlur", "onClick", "onShow", "onHide", "onClear", "onLazyLoad"] }, { kind: "component", type: i5$1.Table, selector: "p-table", inputs: ["frozenColumns", "frozenValue", "styleClass", "tableStyle", "tableStyleClass", "paginator", "pageLinks", "rowsPerPageOptions", "alwaysShowPaginator", "paginatorPosition", "paginatorStyleClass", "paginatorDropdownAppendTo", "paginatorDropdownScrollHeight", "currentPageReportTemplate", "showCurrentPageReport", "showJumpToPageDropdown", "showJumpToPageInput", "showFirstLastIcon", "showPageLinks", "defaultSortOrder", "sortMode", "resetPageOnSort", "selectionMode", "selectionPageOnly", "contextMenuSelection", "contextMenuSelectionMode", "dataKey", "metaKeySelection", "rowSelectable", "rowTrackBy", "lazy", "lazyLoadOnInit", "compareSelectionBy", "csvSeparator", "exportFilename", "filters", "globalFilterFields", "filterDelay", "filterLocale", "expandedRowKeys", "editingRowKeys", "rowExpandMode", "scrollable", "rowGroupMode", "scrollHeight", "virtualScroll", "virtualScrollItemSize", "virtualScrollOptions", "virtualScrollDelay", "frozenWidth", "contextMenu", "resizableColumns", "columnResizeMode", "reorderableColumns", "loading", "loadingIcon", "showLoader", "rowHover", "customSort", "showInitialSortBadge", "exportFunction", "exportHeader", "stateKey", "stateStorage", "editMode", "groupRowsBy", "size", "showGridlines", "stripedRows", "groupRowsByOrder", "responsiveLayout", "breakpoint", "paginatorLocale", "value", "columns", "first", "rows", "totalRecords", "sortField", "sortOrder", "multiSortMeta", "selection", "selectAll"], outputs: ["contextMenuSelectionChange", "selectAllChange", "selectionChange", "onRowSelect", "onRowUnselect", "onPage", "onSort", "onFilter", "onLazyLoad", "onRowExpand", "onRowCollapse", "onContextMenuSelect", "onColResize", "onColReorder", "onRowReorder", "onEditInit", "onEditComplete", "onEditCancel", "onHeaderCheckboxToggle", "sortFunction", "firstChange", "rowsChange", "onStateSave", "onStateRestore"] }, { kind: "directive", type: i6.Tooltip, selector: "[pTooltip]", inputs: ["tooltipPosition", "tooltipEvent", "positionStyle", "tooltipStyleClass", "tooltipZIndex", "escape", "showDelay", "hideDelay", "life", "positionTop", "positionLeft", "autoHide", "fitContent", "hideOnEscape", "showOnEllipsis", "pTooltip", "tooltipDisabled", "tooltipOptions", "appendTo", "ptTooltip", "pTooltipPT", "pTooltipUnstyled"] }, { kind: "directive", type: HasPermissionDirective, selector: "[hasPermission]", inputs: ["hasPermission"] }, { kind: "component", type: UserSelectComponent, selector: "lib-user-select", inputs: ["value"], outputs: ["valueChange", "userSelected"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: UserRoleSelectorComponent, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: UserRoleSelectorComponent, decorators: [{
             type: Component,
-            args: [{ selector: 'flusys-user-role-selector', standalone: true, changeDetection: ChangeDetectionStrategy.OnPush, imports: [CommonModule, FormsModule, PrimeModule, HasPermissionDirective, UserSelectComponent], template: `
+            args: [{ selector: 'flusys-user-role-selector', changeDetection: ChangeDetectionStrategy.OnPush, imports: [CommonModule, FormsModule, PrimeModule, HasPermissionDirective, UserSelectComponent], template: `
     <div class="user-role-selector">
       <!-- User and Branch Selectors -->
       <div class="surface-card p-4 rounded-border mb-4 shadow-sm">
@@ -3925,9 +3427,6 @@ class UserActionSelectorComponent {
     permissionApi = inject(PermissionApiService);
     permissionLogic = inject(ActionPermissionLogicService);
     messageService = inject(MessageService);
-    destroyRef = inject(DestroyRef);
-    // AbortController for data loading
-    loadDataAbortController = null;
     // State - User/Branch Selection
     selectedUserId = signal(null, ...(ngDevMode ? [{ debugName: "selectedUserId" }] : []));
     selectedBranchId = signal(undefined, ...(ngDevMode ? [{ debugName: "selectedBranchId" }] : []));
@@ -3946,8 +3445,10 @@ class UserActionSelectorComponent {
     selectionMap = this._selectionMap.asReadonly();
     _initialSelection = signal({}, ...(ngDevMode ? [{ debugName: "_initialSelection" }] : []));
     initialSelection = this._initialSelection.asReadonly();
+    // Computed - Company Feature Flag (cached)
+    isCompanyFeatureActive = computed(() => isCompanyFeatureEnabled(this.appConfig) === true, ...(ngDevMode ? [{ debugName: "isCompanyFeatureActive" }] : []));
     // Computed - UI Flags
-    showBranchSelector = computed(() => isCompanyFeatureEnabled(this.appConfig) === true, ...(ngDevMode ? [{ debugName: "showBranchSelector" }] : []));
+    showBranchSelector = this.isCompanyFeatureActive;
     filteredBranches = computed(() => {
         const currentCompanyId = this.companyContext.currentCompanyInfo()?.id || undefined;
         if (!currentCompanyId)
@@ -4009,15 +3510,11 @@ class UserActionSelectorComponent {
         return (this.hasChanges() && !this.saving() && this.invalidActionsCount() === 0);
     }, ...(ngDevMode ? [{ debugName: "canSave" }] : []));
     constructor() {
-        // Cleanup on destroy
-        this.destroyRef.onDestroy(() => {
-            this.loadDataAbortController?.abort();
-        });
         // Effect: Load user branches and data when user changes
         effect(() => {
             const userId = this.selectedUserId();
             if (userId) {
-                if (isCompanyFeatureEnabled(this.appConfig)) {
+                if (this.isCompanyFeatureActive()) {
                     this.loadUserBranches(userId);
                 }
                 this.loadData();
@@ -4032,9 +3529,7 @@ class UserActionSelectorComponent {
         effect(() => {
             const userId = this.selectedUserId();
             const branchId = this.selectedBranchId();
-            if (isCompanyFeatureEnabled(this.appConfig) &&
-                userId &&
-                branchId !== undefined) {
+            if (this.isCompanyFeatureActive() && userId && branchId !== undefined) {
                 this.loadData();
             }
         });
@@ -4043,15 +3538,13 @@ class UserActionSelectorComponent {
      * Load user's permitted branches
      */
     async loadUserBranches(userId) {
+        const companyId = this.companyContext.currentCompanyInfo()?.id;
+        if (!companyId) {
+            this.branches.set([]);
+            return;
+        }
         try {
-            const companyId = this.companyContext.currentCompanyInfo()?.id || undefined;
-            if (!companyId) {
-                this.branches.set([]);
-                return;
-            }
-            const response = await this.userPermissionProvider
-                .getUserBranchPermissions(userId)
-                .toPromise();
+            const response = await firstValueFrom(this.userPermissionProvider.getUserBranchPermissions(userId));
             const userBranches = response?.data?.map((ub) => ({
                 id: ub.branchId,
                 name: ub.branchName,
@@ -4073,30 +3566,15 @@ class UserActionSelectorComponent {
         const branchId = this.selectedBranchId();
         this.loading.set(true);
         try {
-            // Load actions filtered by company whitelist
-            const actionsResponse = await this.actionApi
-                .getActionsForPermission()
-                .toPromise();
-            // Get flat list (filtered by company if enabled)
+            const actionsResponse = await firstValueFrom(this.actionApi.getActionsForPermission());
             const flatActions = actionsResponse?.data ?? [];
-            // Build tree structure from flat list with parentId
             const actionsTree = buildTreeFromFlat(flatActions);
-            // Store both representations
             this._actionsTree.set(actionsTree);
             this._actions.set(flatActions);
-            // Load existing user-action assignments
-            const query = isCompanyFeatureEnabled(this.appConfig) && branchId
-                ? { branchId }
-                : undefined;
-            const assignedResponse = await this.permissionApi
-                .getUserActions(userId, query)
-                .toPromise();
+            const query = this.isCompanyFeatureActive() && branchId ? { branchId } : undefined;
+            const assignedResponse = await firstValueFrom(this.permissionApi.getUserActions(userId, query));
             const assignedIds = new Set((assignedResponse?.data || []).map((a) => a.actionId));
-            // Build selection map
-            const selMap = {};
-            flatActions.forEach((action) => {
-                selMap[action.id] = assignedIds.has(action.id);
-            });
+            const selMap = this.buildSelectionMap(flatActions, (action) => assignedIds.has(action.id));
             this._selectionMap.set(selMap);
             this._initialSelection.set({ ...selMap });
         }
@@ -4148,48 +3626,25 @@ class UserActionSelectorComponent {
             this.permissionLogic.handleCheck(action, this.selectionMap(), this.actions(), (newMap) => this._selectionMap.set(newMap), (previousState) => this._selectionMap.set(previousState));
         }
     }
-    /**
-     * Toggle all actions
-     */
     toggleAll() {
-        const newValue = !this.allSelected();
-        const selMap = {};
-        this.actions().forEach((action) => {
-            selMap[action.id] = newValue;
-        });
-        this._selectionMap.set(selMap);
+        this.setAllActions(!this.allSelected());
     }
-    /**
-     * Select all actions
-     */
     selectAll() {
-        const selMap = {};
-        this.actions().forEach((action) => {
-            selMap[action.id] = true;
-        });
-        this._selectionMap.set(selMap);
+        this.setAllActions(true);
     }
-    /**
-     * Deselect all actions
-     */
     deselectAll() {
-        const selMap = {};
-        this.actions().forEach((action) => {
-            selMap[action.id] = false;
-        });
-        this._selectionMap.set(selMap);
+        this.setAllActions(false);
+    }
+    setAllActions(value) {
+        this._selectionMap.set(this.buildSelectionMap(this.actions(), () => value));
     }
-    /**
-     * Save changes to backend
-     */
     async saveChanges() {
         const userId = this.selectedUserId();
         if (!userId)
             return;
         const branchId = this.selectedBranchId();
-        const companyId = this.companyContext.currentCompanyInfo()?.id || undefined;
-        // Validate company context if feature enabled
-        if (isCompanyFeatureEnabled(this.appConfig) && !companyId) {
+        const companyId = this.companyContext.currentCompanyInfo()?.id;
+        if (this.isCompanyFeatureActive() && !companyId) {
             this.messageService.add({
                 severity: 'warn',
                 summary: 'Company Required',
@@ -4197,49 +3652,30 @@ class UserActionSelectorComponent {
             });
             return;
         }
-        // Pre-save validation
         const invalidActions = this.permissionLogic.getActionsWithUnmetPrerequisites(this.selectionMap(), this.actions());
         if (invalidActions.length > 0) {
             this.permissionLogic.showValidationErrorDialog(invalidActions, this.selectionMap(), this.actions(), (newMap) => this._selectionMap.set(newMap));
             return;
         }
-        // Build payload
-        const items = [];
-        this.pendingAdd().forEach((action) => {
-            items.push({
-                id: action.id,
-                action: 'add',
-            });
-        });
-        this.pendingRemove().forEach((action) => {
-            items.push({
-                id: action.id,
-                action: 'remove',
-            });
-        });
+        const items = this.buildPermissionItems();
         if (items.length === 0)
             return;
         this.saving.set(true);
         try {
             const payload = { userId, items };
-            if (isCompanyFeatureEnabled(this.appConfig)) {
-                if (companyId) {
+            if (this.isCompanyFeatureActive()) {
+                if (companyId)
                     payload.companyId = companyId;
-                }
-                if (branchId) {
+                if (branchId)
                     payload.branchId = branchId;
-                }
             }
-            const response = await this.permissionApi
-                .assignUserActions(payload)
-                .toPromise();
+            const response = await firstValueFrom(this.permissionApi.assignUserActions(payload));
             this.messageService.add({
                 severity: 'success',
                 summary: 'Success',
                 detail: response?.data?.message ||
                     'User action permissions updated successfully',
             });
-            // Update baseline
             this._initialSelection.set({ ...this.selectionMap() });
         }
         catch {
@@ -4249,17 +3685,31 @@ class UserActionSelectorComponent {
             this.saving.set(false);
         }
     }
-    /**
-     * Reset component state
-     */
     resetState() {
         this._actionsTree.set([]);
         this._actions.set([]);
         this._selectionMap.set({});
         this._initialSelection.set({});
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: UserActionSelectorComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.1.3", type: UserActionSelectorComponent, isStandalone: true, selector: "flusys-user-action-selector", ngImport: i0, template: `
+    buildSelectionMap(actions, predicate) {
+        const selMap = {};
+        actions.forEach((action) => {
+            selMap[action.id] = predicate(action);
+        });
+        return selMap;
+    }
+    buildPermissionItems() {
+        const items = [];
+        this.pendingAdd().forEach((action) => {
+            items.push({ id: action.id, action: 'add' });
+        });
+        this.pendingRemove().forEach((action) => {
+            items.push({ id: action.id, action: 'remove' });
+        });
+        return items;
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: UserActionSelectorComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.1.5", type: UserActionSelectorComponent, isStandalone: true, selector: "flusys-user-action-selector", ngImport: i0, template: `
     <div class="user-action-selector">
       <!-- User and Branch Selectors -->
       <div class="surface-card p-4 rounded-border mb-4 shadow-sm">
@@ -4513,11 +3963,11 @@ class UserActionSelectorComponent {
         }
       }
     </div>
-  `, isInline: true, styles: [":host{display:block}.validation-warning{background-color:var(--p-yellow-50, #fefce8);border-left:4px solid var(--p-yellow-500, #eab308);color:var(--p-yellow-700, #a16207)}:host-context(.p-dark) .validation-warning{background-color:#eab3081a;color:var(--p-yellow-400, #facc15)}:host ::ng-deep tr.highlight-warning{background-color:var(--p-red-50, rgba(239, 68, 68, .1))!important}:host-context(.p-dark) ::ng-deep tr.highlight-warning{background-color:#ef444426!important}\n"], dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i1$1.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i1$1.NgModel, selector: "[ngModel]:not([formControlName]):not([formControl])", inputs: ["name", "disabled", "ngModel", "ngModelOptions"], outputs: ["ngModelChange"], exportAs: ["ngModel"] }, { kind: "ngmodule", type: PrimeModule }, { kind: "component", type: i2.Button, selector: "p-button", inputs: ["hostName", "type", "badge", "disabled", "raised", "rounded", "text", "plain", "outlined", "link", "tabindex", "size", "variant", "style", "styleClass", "badgeClass", "badgeSeverity", "ariaLabel", "autofocus", "iconPos", "icon", "label", "loading", "loadingIcon", "severity", "buttonProps", "fluid"], outputs: ["onClick", "onFocus", "onBlur"] }, { kind: "component", type: i3.Checkbox, selector: "p-checkbox, p-checkBox, p-check-box", inputs: ["hostName", "value", "binary", "ariaLabelledBy", "ariaLabel", "tabindex", "inputId", "inputStyle", "styleClass", "inputClass", "indeterminate", "formControl", "checkboxIcon", "readonly", "autofocus", "trueValue", "falseValue", "variant", "size"], outputs: ["onChange", "onFocus", "onBlur"] }, { kind: "component", type: i4.Select, selector: "p-select", inputs: ["id", "scrollHeight", "filter", "panelStyle", "styleClass", "panelStyleClass", "readonly", "editable", "tabindex", "placeholder", "loadingIcon", "filterPlaceholder", "filterLocale", "inputId", "dataKey", "filterBy", "filterFields", "autofocus", "resetFilterOnHide", "checkmark", "dropdownIcon", "loading", "optionLabel", "optionValue", "optionDisabled", "optionGroupLabel", "optionGroupChildren", "group", "showClear", "emptyFilterMessage", "emptyMessage", "lazy", "virtualScroll", "virtualScrollItemSize", "virtualScrollOptions", "overlayOptions", "ariaFilterLabel", "ariaLabel", "ariaLabelledBy", "filterMatchMode", "tooltip", "tooltipPosition", "tooltipPositionStyle", "tooltipStyleClass", "focusOnHover", "selectOnFocus", "autoOptionFocus", "autofocusFilter", "filterValue", "options", "appendTo", "motionOptions"], outputs: ["onChange", "onFilter", "onFocus", "onBlur", "onClick", "onShow", "onHide", "onClear", "onLazyLoad"] }, { kind: "component", type: i5.Tag, selector: "p-tag", inputs: ["styleClass", "severity", "value", "icon", "rounded"] }, { kind: "directive", type: i6.Tooltip, selector: "[pTooltip]", inputs: ["tooltipPosition", "tooltipEvent", "positionStyle", "tooltipStyleClass", "tooltipZIndex", "escape", "showDelay", "hideDelay", "life", "positionTop", "positionLeft", "autoHide", "fitContent", "hideOnEscape", "showOnEllipsis", "pTooltip", "tooltipDisabled", "tooltipOptions", "appendTo", "ptTooltip", "pTooltipPT", "pTooltipUnstyled"] }, { kind: "component", type: i7.TreeTable, selector: "p-treeTable, p-treetable, p-tree-table", inputs: ["columns", "styleClass", "tableStyle", "tableStyleClass", "autoLayout", "lazy", "lazyLoadOnInit", "paginator", "rows", "first", "pageLinks", "rowsPerPageOptions", "alwaysShowPaginator", "paginatorPosition", "paginatorStyleClass", "paginatorDropdownAppendTo", "currentPageReportTemplate", "showCurrentPageReport", "showJumpToPageDropdown", "showFirstLastIcon", "showPageLinks", "defaultSortOrder", "sortMode", "resetPageOnSort", "customSort", "selectionMode", "contextMenuSelection", "contextMenuSelectionMode", "dataKey", "metaKeySelection", "compareSelectionBy", "rowHover", "loading", "loadingIcon", "showLoader", "scrollable", "scrollHeight", "virtualScroll", "virtualScrollItemSize", "virtualScrollOptions", "virtualScrollDelay", "frozenWidth", "frozenColumns", "resizableColumns", "columnResizeMode", "reorderableColumns", "contextMenu", "rowTrackBy", "filters", "globalFilterFields", "filterDelay", "filterMode", "filterLocale", "paginatorLocale", "totalRecords", "sortField", "sortOrder", "multiSortMeta", "selection", "value", "virtualRowHeight", "selectionKeys", "showGridlines"], outputs: ["selectionChange", "contextMenuSelectionChange", "onFilter", "onNodeExpand", "onNodeCollapse", "onPage", "onSort", "onLazyLoad", "sortFunction", "onColResize", "onColReorder", "onNodeSelect", "onNodeUnselect", "onContextMenuSelect", "onHeaderCheckboxToggle", "onEditInit", "onEditComplete", "onEditCancel", "selectionKeysChange"] }, { kind: "component", type: i7.TreeTableToggler, selector: "p-treeTableToggler, p-treetabletoggler, p-treetable-toggler", inputs: ["rowNode"] }, { kind: "directive", type: HasPermissionDirective, selector: "[hasPermission]", inputs: ["hasPermission"] }, { kind: "component", type: UserSelectComponent, selector: "lib-user-select", inputs: ["loadUsers", "placeHolder", "isEditMode", "filterActive", "additionalFilters", "pageSize", "value"], outputs: ["valueChange", "userSelected", "onError"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+  `, isInline: true, styles: [":host{display:block}.validation-warning{background-color:var(--p-yellow-50, #fefce8);border-left:4px solid var(--p-yellow-500, #eab308);color:var(--p-yellow-700, #a16207)}:host-context(.p-dark) .validation-warning{background-color:#eab3081a;color:var(--p-yellow-400, #facc15)}:host ::ng-deep tr.highlight-warning{background-color:var(--p-red-50, rgba(239, 68, 68, .1))!important}:host-context(.p-dark) ::ng-deep tr.highlight-warning{background-color:#ef444426!important}\n"], dependencies: [{ kind: "ngmodule", type: CommonModule }, { kind: "ngmodule", type: FormsModule }, { kind: "directive", type: i1$1.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i1$1.NgModel, selector: "[ngModel]:not([formControlName]):not([formControl])", inputs: ["name", "disabled", "ngModel", "ngModelOptions"], outputs: ["ngModelChange"], exportAs: ["ngModel"] }, { kind: "ngmodule", type: PrimeModule }, { kind: "component", type: i2.Button, selector: "p-button", inputs: ["hostName", "type", "badge", "disabled", "raised", "rounded", "text", "plain", "outlined", "link", "tabindex", "size", "variant", "style", "styleClass", "badgeClass", "badgeSeverity", "ariaLabel", "autofocus", "iconPos", "icon", "label", "loading", "loadingIcon", "severity", "buttonProps", "fluid"], outputs: ["onClick", "onFocus", "onBlur"] }, { kind: "component", type: i3.Checkbox, selector: "p-checkbox, p-checkBox, p-check-box", inputs: ["hostName", "value", "binary", "ariaLabelledBy", "ariaLabel", "tabindex", "inputId", "inputStyle", "styleClass", "inputClass", "indeterminate", "formControl", "checkboxIcon", "readonly", "autofocus", "trueValue", "falseValue", "variant", "size"], outputs: ["onChange", "onFocus", "onBlur"] }, { kind: "component", type: i4.Select, selector: "p-select", inputs: ["id", "scrollHeight", "filter", "panelStyle", "styleClass", "panelStyleClass", "readonly", "editable", "tabindex", "placeholder", "loadingIcon", "filterPlaceholder", "filterLocale", "inputId", "dataKey", "filterBy", "filterFields", "autofocus", "resetFilterOnHide", "checkmark", "dropdownIcon", "loading", "optionLabel", "optionValue", "optionDisabled", "optionGroupLabel", "optionGroupChildren", "group", "showClear", "emptyFilterMessage", "emptyMessage", "lazy", "virtualScroll", "virtualScrollItemSize", "virtualScrollOptions", "overlayOptions", "ariaFilterLabel", "ariaLabel", "ariaLabelledBy", "filterMatchMode", "tooltip", "tooltipPosition", "tooltipPositionStyle", "tooltipStyleClass", "focusOnHover", "selectOnFocus", "autoOptionFocus", "autofocusFilter", "filterValue", "options", "appendTo", "motionOptions"], outputs: ["onChange", "onFilter", "onFocus", "onBlur", "onClick", "onShow", "onHide", "onClear", "onLazyLoad"] }, { kind: "component", type: i5.Tag, selector: "p-tag", inputs: ["styleClass", "severity", "value", "icon", "rounded"] }, { kind: "directive", type: i6.Tooltip, selector: "[pTooltip]", inputs: ["tooltipPosition", "tooltipEvent", "positionStyle", "tooltipStyleClass", "tooltipZIndex", "escape", "showDelay", "hideDelay", "life", "positionTop", "positionLeft", "autoHide", "fitContent", "hideOnEscape", "showOnEllipsis", "pTooltip", "tooltipDisabled", "tooltipOptions", "appendTo", "ptTooltip", "pTooltipPT", "pTooltipUnstyled"] }, { kind: "component", type: i7.TreeTable, selector: "p-treeTable, p-treetable, p-tree-table", inputs: ["columns", "styleClass", "tableStyle", "tableStyleClass", "autoLayout", "lazy", "lazyLoadOnInit", "paginator", "rows", "first", "pageLinks", "rowsPerPageOptions", "alwaysShowPaginator", "paginatorPosition", "paginatorStyleClass", "paginatorDropdownAppendTo", "currentPageReportTemplate", "showCurrentPageReport", "showJumpToPageDropdown", "showFirstLastIcon", "showPageLinks", "defaultSortOrder", "sortMode", "resetPageOnSort", "customSort", "selectionMode", "contextMenuSelection", "contextMenuSelectionMode", "dataKey", "metaKeySelection", "compareSelectionBy", "rowHover", "loading", "loadingIcon", "showLoader", "scrollable", "scrollHeight", "virtualScroll", "virtualScrollItemSize", "virtualScrollOptions", "virtualScrollDelay", "frozenWidth", "frozenColumns", "resizableColumns", "columnResizeMode", "reorderableColumns", "contextMenu", "rowTrackBy", "filters", "globalFilterFields", "filterDelay", "filterMode", "filterLocale", "paginatorLocale", "totalRecords", "sortField", "sortOrder", "multiSortMeta", "selection", "value", "virtualRowHeight", "selectionKeys", "showGridlines"], outputs: ["selectionChange", "contextMenuSelectionChange", "onFilter", "onNodeExpand", "onNodeCollapse", "onPage", "onSort", "onLazyLoad", "sortFunction", "onColResize", "onColReorder", "onNodeSelect", "onNodeUnselect", "onContextMenuSelect", "onHeaderCheckboxToggle", "onEditInit", "onEditComplete", "onEditCancel", "selectionKeysChange"] }, { kind: "component", type: i7.TreeTableToggler, selector: "p-treeTableToggler, p-treetabletoggler, p-treetable-toggler", inputs: ["rowNode"] }, { kind: "directive", type: HasPermissionDirective, selector: "[hasPermission]", inputs: ["hasPermission"] }, { kind: "component", type: UserSelectComponent, selector: "lib-user-select", inputs: ["value"], outputs: ["valueChange", "userSelected"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: UserActionSelectorComponent, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: UserActionSelectorComponent, decorators: [{
             type: Component,
-            args: [{ selector: 'flusys-user-action-selector', standalone: true, changeDetection: ChangeDetectionStrategy.OnPush, imports: [CommonModule, FormsModule, PrimeModule, HasPermissionDirective, UserSelectComponent], template: `
+            args: [{ selector: 'flusys-user-action-selector', changeDetection: ChangeDetectionStrategy.OnPush, imports: [CommonModule, FormsModule, PrimeModule, HasPermissionDirective, UserSelectComponent], template: `
     <div class="user-action-selector">
       <!-- User and Branch Selectors -->
       <div class="surface-card p-4 rounded-border mb-4 shadow-sm">
@@ -4821,97 +4271,83 @@ class ProfilePermissionProviderAdapter {
             })),
         })));
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: ProfilePermissionProviderAdapter, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: ProfilePermissionProviderAdapter });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: ProfilePermissionProviderAdapter, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: ProfilePermissionProviderAdapter });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: ProfilePermissionProviderAdapter, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: ProfilePermissionProviderAdapter, decorators: [{
             type: Injectable
         }] });
 
-/**
- * Provide IAM Provider Adapters
- *
- * Registers IAM implementations for provider interfaces from ng-shared.
- * This allows ng-auth profile page to display permissions without direct dependencies.
- *
- * @example
- * // In app.config.ts
- * import { provideIamProviders } from '@flusys/ng-iam';
- *
- * export const appConfig: ApplicationConfig = {
- *   providers: [
- *     ...provideIamProviders(),
- *     // ... other providers
- *   ]
- * };
- *
- * @returns Array of Angular providers
- */
+/** Registers IAM provider adapters for ng-shared interfaces */
 function provideIamProviders() {
     return [
-        // Profile permission provider (for auth profile page)
-        {
-            provide: PROFILE_PERMISSION_PROVIDER,
-            useClass: ProfilePermissionProviderAdapter,
-        },
+        { provide: PROFILE_PERMISSION_PROVIDER, useClass: ProfilePermissionProviderAdapter },
     ];
 }
 
 /**
  * IAM Routes Configuration
  *
- * Identity and Access Management routing
- * - Actions: Permission actions (always visible)
+ * Identity and Access Management routing with permission guards.
+ * - Actions: Permission actions management
  * - Roles: Role management (conditional on RBAC/FULL mode)
- * - Permissions: User permission assignments (always visible)
- *
- * All routes are protected by permission guards to prevent direct URL access.
+ * - Permissions: User permission assignments
  */
 const IAM_ROUTES = [
     {
         path: '',
-        loadComponent: () => import('./flusys-ng-iam-iam-container.component-Bn4kQtxW.mjs').then((m) => m.IamContainerComponent),
+        loadComponent: () => import('./flusys-ng-iam-iam-container.component-UYJjqYV9.mjs').then((m) => m.IamContainerComponent),
         children: [
             // Actions Management
             {
                 path: 'actions',
+                canActivate: [permissionGuard(ACTION_PERMISSIONS.READ)],
                 children: [
                     {
                         path: '',
-                        loadComponent: () => import('./flusys-ng-iam-action-list-page.component-Daf93zpS.mjs').then((m) => m.ActionListPageComponent),
+                        loadComponent: () => import('./flusys-ng-iam-action-list-page.component-BtJlGcTj.mjs').then((m) => m.ActionListPageComponent),
                     },
                     {
                         path: 'new',
-                        loadComponent: () => import('./flusys-ng-iam-action-form-page.component-C_BRrrWW.mjs').then((m) => m.ActionFormPageComponent),
+                        loadComponent: () => import('./flusys-ng-iam-action-form-page.component-eXpZNJ_H.mjs').then((m) => m.ActionFormPageComponent),
                     },
                     {
                         path: ':id',
-                        loadComponent: () => import('./flusys-ng-iam-action-form-page.component-C_BRrrWW.mjs').then((m) => m.ActionFormPageComponent),
+                        loadComponent: () => import('./flusys-ng-iam-action-form-page.component-eXpZNJ_H.mjs').then((m) => m.ActionFormPageComponent),
                     },
                 ],
             },
             // Roles Management
             {
                 path: 'roles',
+                canActivate: [permissionGuard(ROLE_PERMISSIONS.READ)],
                 children: [
                     {
                         path: '',
-                        loadComponent: () => import('./flusys-ng-iam-role-list-page.component-CFly5KnH.mjs').then((m) => m.RoleListPageComponent),
+                        loadComponent: () => import('./flusys-ng-iam-role-list-page.component-D4J1by6Q.mjs').then((m) => m.RoleListPageComponent),
                     },
                     {
                         path: 'new',
-                        loadComponent: () => import('./flusys-ng-iam-role-form-page.component-ByNueI1a.mjs').then((m) => m.RoleFormPageComponent),
+                        loadComponent: () => import('./flusys-ng-iam-role-form-page.component-D_AAEay2.mjs').then((m) => m.RoleFormPageComponent),
                     },
                     {
                         path: ':id',
-                        loadComponent: () => import('./flusys-ng-iam-role-form-page.component-ByNueI1a.mjs').then((m) => m.RoleFormPageComponent),
+                        loadComponent: () => import('./flusys-ng-iam-role-form-page.component-D_AAEay2.mjs').then((m) => m.RoleFormPageComponent),
                     },
                 ],
             },
-            // Permissions Management (User permission assignment)
+            // Permissions Management (requires any permission tab access)
             {
                 path: 'permissions',
-                loadComponent: () => import('./flusys-ng-iam-permission-page.component-CmxOBJPu.mjs').then((m) => m.PermissionPageComponent),
+                canActivate: [
+                    anyPermissionGuard([
+                        ROLE_ACTION_PERMISSIONS.READ,
+                        USER_ROLE_PERMISSIONS.READ,
+                        USER_ACTION_PERMISSIONS.READ,
+                        COMPANY_ACTION_PERMISSIONS.READ,
+                    ]),
+                ],
+                loadComponent: () => import('./flusys-ng-iam-permission-page.component-DcgT7L3_.mjs').then((m) => m.PermissionPageComponent),
             },
             // Default redirect to actions
             {
@@ -4930,4 +4366,4 @@ const IAM_ROUTES = [
  */
 
 export { ActionApiService as A, CompanyActionSelectorComponent as C, IAM_ROUTES as I, LogicBuilderComponent as L, MAX_DROPDOWN_ITEMS as M, PermissionApiService as P, RoleApiService as R, UserRoleSelectorComponent as U, ActionType as a, RoleActionSelectorComponent as b, convertActionToTreeNode as c, UserActionSelectorComponent as d, ActionPermissionLogicService as e, MyPermissionsApiService as f, PermissionStateService as g, ProfilePermissionProviderAdapter as h, provideIamProviders as p };
-//# sourceMappingURL=flusys-ng-iam-flusys-ng-iam-BPIpfrjN.mjs.map
+//# sourceMappingURL=flusys-ng-iam-flusys-ng-iam-CJAQT60K.mjs.map