@flusys/ng-iam 1.1.0 → 1.2.0-rc.1

package/types/flusys-ng-iam.d.ts

@@ -1,10 +1,10 @@
-import { IBaseEntity, ILogicNode, ApiResourceService, ISingleResponse, IProfilePermissionProvider, IProfileRoleInfo, IProfileActionInfo } from '@flusys/ng-shared';
+import { IBaseEntity, ILogicNode, ApiResourceService, ISingleResponse, TranslateService, IProfilePermissionProvider, IProfileRoleInfo, IProfileActionInfo } from '@flusys/ng-shared';
 import * as _angular_core from '@angular/core';
 import { Provider } from '@angular/core';
 import { Observable } from 'rxjs';
 import { BaseApiService } from '@flusys/ng-core';
 export { PermissionMode } from '@flusys/ng-core';
-import * as primeng_api from 'primeng/api';
+import * as __________flusys_ng_ui_types_flusys_ng_ui from '../../@flusys/ng-ui/types/flusys-ng-ui';
 import { Routes } from '@angular/router';
 
 /**
@@ -43,7 +43,6 @@ interface IRole extends IBaseEntity {
     companyId: string | null;
     isActive: boolean;
     serial: number | null;
-    metadata: Record<string, unknown> | null;
 }
 interface ICreateRoleDto {
     name: string;
@@ -51,7 +50,6 @@ interface ICreateRoleDto {
     companyId?: string;
     isActive?: boolean;
     serial?: number;
-    metadata?: Record<string, unknown>;
 }
 interface IUpdateRoleDto extends Partial<ICreateRoleDto> {
     id: string;
@@ -77,7 +75,6 @@ interface IAction extends IBaseEntity {
     parentId: string | null;
     serial: number | null;
     isActive: boolean;
-    metadata: Record<string, unknown> | null;
 }
 interface IActionTreeDto extends IAction {
     children: IActionTreeDto[];
@@ -91,7 +88,6 @@ interface ICreateActionDto {
     parentId?: string;
     serial?: number;
     isActive?: boolean;
-    metadata?: Record<string, unknown>;
 }
 interface IUpdateActionDto extends Partial<ICreateActionDto> {
     id: string;
@@ -151,7 +147,6 @@ interface IUserRoleResponseDto {
     id: string;
     userId: string;
     roleId: string;
-    roleCode: string;
     roleName: string;
     branchId: string | null;
     createdAt: Date;
@@ -181,6 +176,7 @@ interface IPermissionOperationResultDto {
     added: number;
     removed: number;
     message: string;
+    messageKey?: string;
     prerequisiteErrors?: IPrerequisiteValidationError[];
 }
 interface IGetUserActionsDto {
@@ -198,6 +194,8 @@ interface IGetMyPermissionsDto {
 /** Maximum items for dropdown lists (companies, roles, users, branches) */
 declare const MAX_DROPDOWN_ITEMS = 100;
 
+declare const IAM_MESSAGES: Record<string, string>;
+
 declare class RoleApiService extends ApiResourceService<IUpdateRoleDto, IRole> {
     constructor();
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<RoleApiService, never>;
@@ -219,6 +217,8 @@ declare class ActionApiService extends ApiResourceService<IUpdateActionDto, IAct
 declare class ActionPermissionLogicService {
     private readonly confirmationService;
     private readonly messageService;
+    private readonly translateAdapter;
+    private t;
     /** Handle checking an action with prerequisite validation (recursive deep scan) */
     handleCheck(action: IAction, currentSelection: Record<string, boolean>, allActions: IAction[], onUpdate: (newSelection: Record<string, boolean>) => void, onCancel: (previousState: Record<string, boolean>) => void): void;
     /** Handle unchecking an action with dependency detection */
@@ -338,64 +338,20 @@ declare class LogicBuilderComponent {
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<LogicBuilderComponent, "lib-logic-builder", never, { "logic": { "alias": "logic"; "required": false; "isSignal": true; }; "actions": { "alias": "actions"; "required": false; "isSignal": true; }; }, { "logicChange": "logicChange"; }, never, never, true, never>;
 }
 
-/**
- * Role-Action Selector Component
- *
- * Manages role action permissions with hierarchical tree view and intelligent dependency management.
- *
- * **Architecture:**
- * - Presentation: TreeTable for hierarchical display
- * - Business Logic: Flat action list for selection/validation
- * - State: Signals with computed dependencies
- *
- * **Core Features:**
- * - Role dropdown with async loading
- * - Hierarchical TreeTable with expand/collapse
- * - Action permission assignment (add/remove)
- * - Real-time change tracking
- *
- * **Dependency Management:**
- * - Auto-selection with AND/OR logic
- * - Dependency detection on uncheck
- * - Cascade remove for AND dependencies
- * - Visual warnings for unmet prerequisites
- * - Pre-save validation with auto-fix
- *
- * **Performance:**
- * - OnPush change detection
- * - Computed signals for reactive updates
- * - Memoized prerequisite validation
- * - AbortController for request cancellation
- *
- * @example
- * ```html
- * <flusys-role-action-selector />
- * ```
- */
-declare class RoleActionSelectorComponent {
-    readonly ROLE_ACTION_PERMISSIONS: {
-        readonly READ: "role-action.read";
-        readonly ASSIGN: "role-action.assign";
-    };
-    private readonly destroyRef;
-    private readonly roleApi;
-    private readonly actionApi;
-    private readonly permissionApi;
-    private readonly messageService;
-    private readonly permissionLogic;
-    readonly selectedRoleId: _angular_core.WritableSignal<string | undefined>;
-    readonly roles: _angular_core.WritableSignal<IRole[]>;
+declare abstract class BaseActionSelectorComponent {
+    protected readonly permissionLogic: ActionPermissionLogicService;
+    protected readonly translateAdapter: TranslateService | null;
     readonly loading: _angular_core.WritableSignal<boolean>;
     readonly saving: _angular_core.WritableSignal<boolean>;
-    private readonly _actions;
+    protected readonly _actions: _angular_core.WritableSignal<IAction[]>;
     readonly actions: _angular_core.Signal<IAction[]>;
-    private readonly _actionsTree;
-    private readonly actionsTree;
-    private readonly _selectionMap;
+    protected readonly _actionsTree: _angular_core.WritableSignal<IActionTreeDto[]>;
+    protected readonly actionsTree: _angular_core.Signal<IActionTreeDto[]>;
+    protected readonly _selectionMap: _angular_core.WritableSignal<Record<string, boolean>>;
     readonly selectionMap: _angular_core.Signal<Record<string, boolean>>;
-    private readonly _initialSelection;
-    private readonly initialSelection;
-    readonly treeNodes: _angular_core.Signal<primeng_api.TreeNode<IAction>[]>;
+    protected readonly _initialSelection: _angular_core.WritableSignal<Record<string, boolean>>;
+    protected readonly initialSelection: _angular_core.Signal<Record<string, boolean>>;
+    readonly treeNodes: _angular_core.Signal<__________flusys_ng_ui_types_flusys_ng_ui.TreeNode<IAction>[]>;
     readonly allSelected: _angular_core.Signal<boolean>;
     readonly hasChanges: _angular_core.Signal<boolean>;
     readonly actionsWithUnmetPrerequisites: _angular_core.Signal<Set<string>>;
@@ -403,78 +359,46 @@ declare class RoleActionSelectorComponent {
     readonly pendingAdd: _angular_core.Signal<IAction[]>;
     readonly pendingRemove: _angular_core.Signal<IAction[]>;
     readonly canSave: _angular_core.Signal<boolean>;
-    private loadDataAbortController;
-    constructor();
-    /**
-     * Load roles from API
-     */
-    private loadRoles;
-    /**
-     * Load actions and assignments for selected role
-     */
-    private onRoleChange;
-    /**
-     * Get tooltip for action checkbox
-     */
-    getTooltip(action: IAction): string;
-    /**
-     * Check if action has unmet prerequisites
-     */
+    protected translate(key: string, vars?: Record<string, string | number>): string;
     hasUnmetPrerequisites(action: IAction): boolean;
-    /**
-     * Handle action toggle with dependency management
-     */
+    getTooltip(action: IAction): string;
+    protected abstract getDefaultTooltip(isSelected: boolean): string;
     onActionToggle(action: IAction, newValue: boolean): void;
     toggleAll(): void;
     selectAll(): void;
     deselectAll(): void;
-    private setAllSelection;
-    /**
-     * Save changes to backend
-     */
+    protected setAllSelection(value: boolean): void;
+    protected buildSelectionMap(actions: IAction[], predicate: (action: IAction) => boolean): Record<string, boolean>;
+    protected buildPayloadItems(): Array<{
+        id: string;
+        action: PermissionAction;
+    }>;
+    protected resetState(): void;
+}
+
+declare class RoleActionSelectorComponent extends BaseActionSelectorComponent {
+    readonly ROLE_ACTION_PERMISSIONS: {
+        readonly READ: "role-action.read";
+        readonly ASSIGN: "role-action.assign";
+    };
+    private readonly destroyRef;
+    private readonly roleApi;
+    private readonly actionApi;
+    private readonly permissionApi;
+    private readonly messageService;
+    readonly selectedRoleId: _angular_core.WritableSignal<string | undefined>;
+    readonly roles: _angular_core.WritableSignal<IRole[]>;
+    private loadDataAbortController;
+    constructor();
+    protected getDefaultTooltip(isSelected: boolean): string;
+    private loadRoles;
+    private onRoleChange;
     saveChanges(): Promise<void>;
-    private applySelection;
-    private buildPayloadItems;
-    private resetState;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<RoleActionSelectorComponent, never>;
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<RoleActionSelectorComponent, "flusys-role-action-selector", never, {}, {}, never, never, true, never>;
 }
 
-/**
- * Company-Action Selector Component
- *
- * Manages company action whitelisting with hierarchical tree view and intelligent dependency management.
- *
- * **Architecture:**
- * - Presentation: TreeTable for hierarchical display
- * - Business Logic: Flat action list for selection/validation
- * - State: Signals with computed dependencies
- *
- * **Core Features:**
- * - Company dropdown with async loading
- * - Hierarchical TreeTable with expand/collapse
- * - Action whitelist management (add/remove)
- * - Real-time change tracking
- *
- * **Dependency Management:**
- * - Auto-selection with AND/OR logic
- * - Dependency detection on uncheck
- * - Cascade remove for AND dependencies
- * - Visual warnings for unmet prerequisites
- * - Pre-save validation with auto-fix
- *
- * **Performance:**
- * - OnPush change detection
- * - Computed signals for reactive updates
- * - Memoized prerequisite validation
- * - AbortController for request cancellation
- *
- * @example
- * ```html
- * <flusys-company-action-selector />
- * ```
- */
-declare class CompanyActionSelectorComponent {
+declare class CompanyActionSelectorComponent extends BaseActionSelectorComponent {
     readonly COMPANY_ACTION_PERMISSIONS: {
         readonly READ: "company-action.read";
         readonly ASSIGN: "company-action.assign";
@@ -484,66 +408,16 @@ declare class CompanyActionSelectorComponent {
     private readonly permissionApi;
     private readonly messageService;
     private readonly confirmationService;
-    private readonly permissionLogic;
     private readonly destroyRef;
     readonly selectedCompanyId: _angular_core.WritableSignal<string | undefined>;
     readonly companies: _angular_core.WritableSignal<ICompany[]>;
-    readonly loading: _angular_core.WritableSignal<boolean>;
-    readonly saving: _angular_core.WritableSignal<boolean>;
-    private readonly _actions;
-    readonly actions: _angular_core.Signal<IAction[]>;
-    private readonly _actionsTree;
-    private readonly actionsTree;
-    private readonly _selectionMap;
-    readonly selectionMap: _angular_core.Signal<Record<string, boolean>>;
-    private readonly _initialSelection;
-    private readonly initialSelection;
-    readonly treeNodes: _angular_core.Signal<primeng_api.TreeNode<IAction>[]>;
-    readonly allSelected: _angular_core.Signal<boolean>;
-    readonly hasChanges: _angular_core.Signal<boolean>;
-    readonly actionsWithUnmetPrerequisites: _angular_core.Signal<Set<string>>;
-    readonly invalidActionsCount: _angular_core.Signal<number>;
-    readonly pendingAdd: _angular_core.Signal<IAction[]>;
-    readonly pendingRemove: _angular_core.Signal<IAction[]>;
-    readonly canSave: _angular_core.Signal<boolean>;
     private loadDataAbortController;
     constructor();
-    /**
-     * Load companies from API
-     */
+    protected getDefaultTooltip(isSelected: boolean): string;
     private loadCompanies;
-    /**
-     * Load actions and assignments for selected company
-     */
     private loadData;
-    /**
-     * Check if action has unmet prerequisites
-     */
-    hasUnmetPrerequisites(action: IAction): boolean;
-    /**
-     * Get tooltip for action checkbox
-     */
-    getTooltip(action: IAction): string;
-    /**
-     * Handle action checkbox toggle
-     */
-    onActionToggle(action: IAction, newValue: boolean): void;
-    toggleAll(): void;
-    selectAll(): void;
-    deselectAll(): void;
-    private setAllSelection;
-    /**
-     * Save changes to backend
-     */
     saveChanges(): Promise<void>;
-    /**
-     * Handle backend prerequisite validation errors
-     * Shows confirmation dialog with auto-fix option
-     */
     private handleBackendPrerequisiteErrors;
-    private resetState;
-    private buildSelectionMap;
-    private buildPayloadItems;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<CompanyActionSelectorComponent, never>;
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<CompanyActionSelectorComponent, "flusys-company-action-selector", never, {}, {}, never, never, true, never>;
 }
@@ -569,7 +443,6 @@ declare class CompanyActionSelectorComponent {
  * - Branch-specific: branchId = selected value
  *
  * **Performance:**
- * - OnPush change detection
  * - Computed signals for reactive updates
  * - Branch filtering on company context change
  *
@@ -589,6 +462,8 @@ declare class UserRoleSelectorComponent {
     private readonly roleApi;
     private readonly permissionApi;
     private readonly messageService;
+    private readonly translateAdapter;
+    private translate;
     readonly selectedUserId: _angular_core.WritableSignal<string | null>;
     readonly selectedBranchId: _angular_core.WritableSignal<string | undefined>;
     readonly branches: _angular_core.WritableSignal<IBranch[]>;
@@ -652,38 +527,7 @@ declare class UserRoleSelectorComponent {
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<UserRoleSelectorComponent, "flusys-user-role-selector", never, {}, {}, never, never, true, never>;
 }
 
-/**
- * User-Action Selector Component
- *
- * Manages direct user action permissions with hierarchical tree view.
- *
- * **Architecture:**
- * - Presentation: TreeTable for hierarchical display
- * - Business Logic: Flat action list for selection/validation
- * - State: Signals with computed dependencies
- *
- * **Core Features:**
- * - User dropdown with async loading
- * - Branch selector (if company feature enabled)
- * - Hierarchical TreeTable with expand/collapse
- * - Direct user-action permission assignment (bypassing roles)
- * - Real-time change tracking
- *
- * **Granularity:**
- * - Company-wide: branchId = undefined
- * - Branch-specific: branchId = selected value
- *
- * **Performance:**
- * - OnPush change detection
- * - Computed signals for reactive updates
- * - Branch filtering on company context change
- *
- * @example
- * ```html
- * <flusys-user-action-selector />
- * ```
- */
-declare class UserActionSelectorComponent {
+declare class UserActionSelectorComponent extends BaseActionSelectorComponent {
     readonly USER_ACTION_PERMISSIONS: {
         readonly READ: "user-action.read";
         readonly ASSIGN: "user-action.assign";
@@ -693,61 +537,18 @@ declare class UserActionSelectorComponent {
     private readonly userPermissionProvider;
     private readonly actionApi;
     private readonly permissionApi;
-    private readonly permissionLogic;
     private readonly messageService;
     readonly selectedUserId: _angular_core.WritableSignal<string | null>;
     readonly selectedBranchId: _angular_core.WritableSignal<string | undefined>;
     readonly branches: _angular_core.WritableSignal<IBranch[]>;
-    readonly loading: _angular_core.WritableSignal<boolean>;
-    readonly saving: _angular_core.WritableSignal<boolean>;
-    private readonly _actions;
-    readonly actions: _angular_core.Signal<IAction[]>;
-    private readonly _actionsTree;
-    private readonly actionsTree;
-    private readonly _selectionMap;
-    readonly selectionMap: _angular_core.Signal<Record<string, boolean>>;
-    private readonly _initialSelection;
-    private readonly initialSelection;
     private readonly isCompanyFeatureActive;
     readonly showBranchSelector: _angular_core.Signal<boolean>;
     readonly filteredBranches: _angular_core.Signal<IBranch[]>;
-    readonly treeNodes: _angular_core.Signal<primeng_api.TreeNode<IAction>[]>;
-    readonly allSelected: _angular_core.Signal<boolean>;
-    readonly hasChanges: _angular_core.Signal<boolean>;
-    readonly actionsWithUnmetPrerequisites: _angular_core.Signal<Set<string>>;
-    readonly invalidActionsCount: _angular_core.Signal<number>;
-    readonly pendingAdd: _angular_core.Signal<IAction[]>;
-    readonly pendingRemove: _angular_core.Signal<IAction[]>;
-    readonly canSave: _angular_core.Signal<boolean>;
     constructor();
-    /**
-     * Load user's permitted branches
-     */
+    protected getDefaultTooltip(isSelected: boolean): string;
     private loadUserBranches;
-    /**
-     * Load actions and assignments for selected user
-     */
     private loadData;
-    /**
-     * Get tooltip for action checkbox
-     */
-    getTooltip(action: IAction): string;
-    /**
-     * Check if action has unmet prerequisites
-     */
-    hasUnmetPrerequisites(action: IAction): boolean;
-    /**
-     * Handle action toggle with dependency management
-     */
-    onActionToggle(action: IAction, newValue: boolean): void;
-    toggleAll(): void;
-    selectAll(): void;
-    deselectAll(): void;
-    private setAllActions;
     saveChanges(): Promise<void>;
-    private resetState;
-    private buildSelectionMap;
-    private buildPermissionItems;
     static ɵfac: _angular_core.ɵɵFactoryDeclaration<UserActionSelectorComponent, never>;
     static ɵcmp: _angular_core.ɵɵComponentDeclaration<UserActionSelectorComponent, "flusys-user-action-selector", never, {}, {}, never, never, true, never>;
 }
@@ -789,5 +590,5 @@ declare function provideIamProviders(): Provider[];
  */
 declare const IAM_ROUTES: Routes;
 
-export { ActionApiService, ActionPermissionLogicService, ActionType, CompanyActionSelectorComponent, IAM_ROUTES, LogicBuilderComponent, MAX_DROPDOWN_ITEMS, MyPermissionsApiService, PermissionApiService, PermissionStateService, ProfilePermissionProviderAdapter, RoleActionSelectorComponent, RoleApiService, UserActionSelectorComponent, UserRoleSelectorComponent, provideIamProviders };
+export { ActionApiService, ActionPermissionLogicService, ActionType, CompanyActionSelectorComponent, IAM_MESSAGES, IAM_ROUTES, LogicBuilderComponent, MAX_DROPDOWN_ITEMS, MyPermissionsApiService, PermissionApiService, PermissionStateService, ProfilePermissionProviderAdapter, RoleActionSelectorComponent, RoleApiService, UserActionSelectorComponent, UserRoleSelectorComponent, provideIamProviders };
 export type { IAction, IActionTreeDto, IAssignCompanyActionsDto, IAssignRoleActionsDto, IAssignUserActionsDto, IAssignUserRolesDto, IBranch, ICompany, ICompanyActionResponseDto, ICreateActionDto, ICreateRoleDto, IGetMyPermissionsDto, IGetRoleActionsDto, IGetUserActionsDto, IGetUserRolesDto, IMyPermissionsResponseDto, IPermissionItemDto, IPermissionOperationResultDto, IPrerequisiteActionDto, IPrerequisiteValidationError, IRole, IRoleActionResponseDto, IRoleQueryDto, IUpdateActionDto, IUpdateRoleDto, IUser, IUserActionResponseDto, IUserRoleResponseDto, PermissionAction };