@flusys/ng-iam 9.1.0-rc.1 → 9.1.1

package/types/flusys-ng-iam.d.ts

@@ -1,316 +1,303 @@
-import { IBaseEntity, ILogicNode, ApiResourceService, ISingleResponse, ICompanyBasicInfo, IBranchBasicInfo, TranslateService, IActionProvider, IActionBasicInfo, IProfilePermissionProvider, IProfileRoleInfo, IProfileActionInfo } from '@flusys/ng-shared';
-import * as _angular_core from '@angular/core';
-import { Provider } from '@angular/core';
-import { Observable } from 'rxjs';
-import { BaseApiService } from '@flusys/ng-core';
-export { PermissionMode } from '@flusys/ng-core';
-import * as _flusys_ng_ui from '@flusys/ng-ui';
-import { ConfirmationService } from '@flusys/ng-ui';
-import { Routes } from '@angular/router';
-
-interface ICompany {
-    id: string;
-    name: string;
-    slug?: string;
-}
-
-interface IUser {
-    id: string;
-    name: string;
-    email: string;
-}
-interface IBranch {
-    id: string;
-    name: string;
-    companyId: string;
-}
-
-interface IRole extends IBaseEntity {
-    readOnly: boolean;
-    name: string;
-    description: string | null;
-    companyId: string | null;
-    isActive: boolean;
-    serial: number | null;
-}
-interface ICreateRoleDto {
-    name: string;
-    description?: string;
-    companyId?: string;
-    isActive?: boolean;
-    serial?: number;
-}
-interface IUpdateRoleDto extends Partial<ICreateRoleDto> {
-    id: string;
-}
-interface IRoleQueryDto {
-    companyId?: string;
-    isActive?: boolean;
+import { ActionScope, ApiResourceService, IActionBasicInfo, IActionProvider, IBaseEntity, IBranchBasicInfo, ICompanyBasicInfo, ILogicNode, IProfileActionInfo, IProfilePermissionProvider, IProfileRoleInfo, ISingleResponse, TranslateService } from "@flusys/ng-shared";
+import { BaseApiService, PermissionMode } from "@flusys/ng-core";
+import * as i0 from "@angular/core";
+import { Provider } from "@angular/core";
+import { Observable } from "rxjs";
+import { ConfirmationService } from "@flusys/ng-ui";
+import { Routes } from "@angular/router";
+export interface ICompany {
+  id: string;
+  name: string;
+  slug?: string;
+}
+export interface IUser {
+  id: string;
+  name: string;
+  email: string;
+}
+export interface IBranch {
+  id: string;
+  name: string;
+  companyId: string;
+  parentId?: string | null;
+  serial?: number | null;
+  displayParentId?: string | null;
+}
+export interface IRole extends IBaseEntity {
+  readOnly: boolean;
+  name: string;
+  description: string | null;
+  companyId: string | null;
+  isActive: boolean;
+  serial: number | null;
+}
+export interface ICreateRoleDto {
+  name: string;
+  description?: string;
+  companyId?: string;
+  isActive?: boolean;
+  serial?: number;
+}
+export interface IUpdateRoleDto extends Partial<ICreateRoleDto> {
+  id: string;
+}
+export interface IRoleQueryDto {
+  companyId?: string;
+  isActive?: boolean;
 }
-
 /** Must match backend ActionType enum */
-declare enum ActionType {
-    BACKEND = "backend",
-    FRONTEND = "frontend",
-    BOTH = "both"
-}
-interface IAction extends IBaseEntity {
-    readOnly: boolean;
+export declare enum ActionType {
+  BACKEND = "backend",
+  FRONTEND = "frontend",
+  BOTH = "both"
+}
+export interface IAction extends IBaseEntity {
+  readOnly: boolean;
+  name: string;
+  description: string | null;
+  code: string | null;
+  actionType: ActionType;
+  permissionLogic: ILogicNode | null;
+  parentId: string | null;
+  serial: number | null;
+  isActive: boolean;
+}
+export interface IActionTreeDto extends IAction {
+  children: IActionTreeDto[];
+}
+export interface ICreateActionDto {
+  name: string;
+  description?: string;
+  code?: string;
+  actionType?: ActionType;
+  permissionLogic?: ILogicNode;
+  parentId?: string;
+  serial?: number;
+  isActive?: boolean;
+}
+export interface IUpdateActionDto extends Partial<ICreateActionDto> {
+  id: string;
+}
+export type PermissionAction = 'add' | 'remove';
+export interface IPermissionItemDto {
+  id: string;
+  action: PermissionAction;
+}
+export interface IAssignUserActionsDto {
+  userId: string;
+  companyId?: string;
+  branchId?: string;
+  items: IPermissionItemDto[];
+}
+export interface IAssignCompanyActionsDto {
+  companyId: string;
+  items: IPermissionItemDto[];
+}
+export interface IAssignRoleActionsDto {
+  roleId: string;
+  items: IPermissionItemDto[];
+}
+export interface IAssignUserRolesDto {
+  userId: string;
+  companyId?: string;
+  branchId?: string;
+  items: IPermissionItemDto[];
+}
+export interface IUserActionResponseDto {
+  id: string;
+  userId: string;
+  actionId: string;
+  actionCode: string;
+  actionName: string;
+  branchId: string | null;
+  createdAt: Date;
+}
+export interface IRoleActionResponseDto {
+  id: string;
+  roleId: string;
+  actionId: string;
+  actionCode: string;
+  actionName: string;
+  createdAt: Date;
+}
+export interface ICompanyActionResponseDto {
+  id: string;
+  companyId: string;
+  actionId: string;
+  actionCode: string;
+  actionName: string;
+  createdAt: Date;
+}
+export interface IUserRoleResponseDto {
+  id: string;
+  userId: string;
+  roleId: string;
+  roleName: string;
+  branchId: string | null;
+  createdAt: Date;
+}
+export interface IRoleUserResponseDto {
+  id: string;
+  userId: string;
+  companyId: string | null;
+  branchId: string | null;
+  createdAt: Date;
+}
+export interface IActionUserResponseDto {
+  id: string;
+  userId: string;
+  companyId: string | null;
+  branchId: string | null;
+  createdAt: Date;
+}
+export interface IMyPermissionsResponseDto {
+  frontendActions: Array<{
+    code: string;
     name: string;
     description: string | null;
-    code: string | null;
-    actionType: ActionType;
-    permissionLogic: ILogicNode | null;
-    parentId: string | null;
-    serial: number | null;
-    isActive: boolean;
-}
-interface IActionTreeDto extends IAction {
-    children: IActionTreeDto[];
-}
-interface ICreateActionDto {
-    name: string;
-    description?: string;
-    code?: string;
-    actionType?: ActionType;
-    permissionLogic?: ILogicNode;
-    parentId?: string;
-    serial?: number;
-    isActive?: boolean;
-}
-interface IUpdateActionDto extends Partial<ICreateActionDto> {
-    id: string;
-}
-
-type PermissionAction = 'add' | 'remove';
-interface IPermissionItemDto {
-    id: string;
-    action: PermissionAction;
-}
-interface IAssignUserActionsDto {
-    userId: string;
-    companyId?: string;
-    branchId?: string;
-    items: IPermissionItemDto[];
-}
-interface IAssignCompanyActionsDto {
-    companyId: string;
-    items: IPermissionItemDto[];
-}
-interface IAssignRoleActionsDto {
-    roleId: string;
-    items: IPermissionItemDto[];
-}
-interface IAssignUserRolesDto {
-    userId: string;
-    companyId?: string;
-    branchId?: string;
-    items: IPermissionItemDto[];
-}
-interface IUserActionResponseDto {
-    id: string;
-    userId: string;
-    actionId: string;
-    actionCode: string;
-    actionName: string;
-    branchId: string | null;
-    createdAt: Date;
-}
-interface IRoleActionResponseDto {
-    id: string;
-    roleId: string;
-    actionId: string;
-    actionCode: string;
-    actionName: string;
-    createdAt: Date;
+  }>;
+  cachedEndpoints: number;
+}
+export interface IPrerequisiteActionDto {
+  actionId: string;
+  actionCode: string;
+  actionName: string;
+}
+export interface IPrerequisiteValidationError {
+  actionId: string;
+  actionCode: string;
+  actionName: string;
+  requiredActions: IPrerequisiteActionDto[];
+}
+export interface IPermissionOperationResultDto {
+  success: boolean;
+  added: number;
+  removed: number;
+  message: string;
+  messageKey?: string;
+  prerequisiteErrors?: IPrerequisiteValidationError[];
+}
+export interface IGetUserActionsDto {
+  companyId?: string;
+  branchId?: string;
+}
+export interface IGetUserRolesDto {
+  branchId?: string;
+}
+export interface IGetMyPermissionsDto {
+  parentCodes?: string[];
 }
-interface ICompanyActionResponseDto {
-    id: string;
-    companyId: string;
-    actionId: string;
-    actionCode: string;
-    actionName: string;
-    createdAt: Date;
-}
-interface IUserRoleResponseDto {
-    id: string;
-    userId: string;
-    roleId: string;
-    roleName: string;
-    branchId: string | null;
-    createdAt: Date;
-}
-interface IRoleUserResponseDto {
-    id: string;
-    userId: string;
-    companyId: string | null;
-    branchId: string | null;
-    createdAt: Date;
-}
-interface IActionUserResponseDto {
-    id: string;
-    userId: string;
-    companyId: string | null;
-    branchId: string | null;
-    createdAt: Date;
-}
-interface IMyPermissionsResponseDto {
-    frontendActions: Array<{
-        code: string;
-        name: string;
-        description: string | null;
-    }>;
-    cachedEndpoints: number;
-}
-interface IPrerequisiteActionDto {
-    actionId: string;
-    actionCode: string;
-    actionName: string;
-}
-interface IPrerequisiteValidationError {
-    actionId: string;
-    actionCode: string;
-    actionName: string;
-    requiredActions: IPrerequisiteActionDto[];
-}
-interface IPermissionOperationResultDto {
-    success: boolean;
-    added: number;
-    removed: number;
-    message: string;
-    messageKey?: string;
-    prerequisiteErrors?: IPrerequisiteValidationError[];
-}
-interface IGetUserActionsDto {
-    companyId?: string;
-    branchId?: string;
-}
-interface IGetUserRolesDto {
-    branchId?: string;
-}
-interface IGetMyPermissionsDto {
-    parentCodes?: string[];
-}
-
 /** Maximum items for dropdown lists (companies, roles, users, branches) */
-declare const MAX_DROPDOWN_ITEMS = 100;
-
-declare const IAM_MESSAGES: Record<string, string>;
-
-declare class RoleApiService extends ApiResourceService<IUpdateRoleDto, IRole> {
-    constructor();
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<RoleApiService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<RoleApiService>;
-}
-
-declare class ActionApiService extends ApiResourceService<IUpdateActionDto, IAction> {
-    private readonly appConfig;
-    constructor();
-    /** Get actions filtered by company whitelist for permission assignment */
-    getActionsForPermission(companyId?: string): Observable<ISingleResponse<IActionTreeDto[]>>;
-    /** Get actions in hierarchical tree structure */
-    getTree(search?: string, isActive?: boolean, withDeleted?: boolean): Observable<ISingleResponse<IActionTreeDto[]>>;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<ActionApiService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<ActionApiService>;
-}
-
+export declare const MAX_DROPDOWN_ITEMS = 100;
+export declare const IAM_MESSAGES: Record<string, string>;
+export declare class RoleApiService extends ApiResourceService<IUpdateRoleDto, IRole> {
+  constructor();
+  static ɵfac: i0.ɵɵFactoryDeclaration<RoleApiService, never>;
+  static ɵprov: i0.ɵɵInjectableDeclaration<any>;
+}
+export declare class ActionApiService extends ApiResourceService<IUpdateActionDto, IAction> {
+  private readonly appConfig;
+  constructor();
+  /** Get actions filtered by company whitelist for permission assignment */
+  getActionsForPermission(companyId?: string): Observable<ISingleResponse<IActionTreeDto[]>>;
+  /** Get actions in hierarchical tree structure */
+  getTree(search?: string, isActive?: boolean, withDeleted?: boolean): Observable<ISingleResponse<IActionTreeDto[]>>;
+  static ɵfac: i0.ɵɵFactoryDeclaration<ActionApiService, never>;
+  static ɵprov: i0.ɵɵInjectableDeclaration<any>;
+}
 /** Shared service for smart dependency management across action selectors */
-declare class ActionPermissionLogicService {
-    private readonly confirmationService;
-    private readonly messageService;
-    private readonly translateAdapter;
-    private t;
-    /** Handle checking an action with prerequisite validation (recursive deep scan) */
-    handleCheck(action: IAction, currentSelection: Record<string, boolean>, allActions: IAction[], onUpdate: (newSelection: Record<string, boolean>) => void, onCancel: (previousState: Record<string, boolean>) => void): void;
-    /** Handle unchecking an action with dependency detection */
-    handleUncheck(action: IAction, currentSelection: Record<string, boolean>, allActions: IAction[], onUpdate: (newSelection: Record<string, boolean>) => void): void;
-    /** Check if an action has unmet prerequisites */
-    hasUnmetPrerequisites(action: IAction, currentSelection: Record<string, boolean>, allActions: IAction[]): boolean;
-    /** Get all selected actions that have unmet prerequisites */
-    getActionsWithUnmetPrerequisites(currentSelection: Record<string, boolean>, allActions: IAction[]): IAction[];
-    /** Show validation error dialog with auto-fix options */
-    showValidationErrorDialog(invalidActions: IAction[], currentSelection: Record<string, boolean>, allActions: IAction[], onUpdate: (newSelection: Record<string, boolean>) => void): void;
-    /** Get prerequisite description for tooltip display */
-    getPrerequisiteTooltip(action: IAction, currentSelection: Record<string, boolean>, allActions: IAction[]): string;
-    /** Build dynamic logic tree message with AND/OR operators and nesting */
-    buildLogicMessage(logic: ILogicNode, _missingActions: IAction[], allActions: IAction[], currentSelection?: Record<string, boolean>): string;
-    /** Extract selected action IDs from selection map */
-    private getSelectedIds;
-    private sanitizeHtml;
-    /** Recursively collect ALL missing prerequisites at all dependency levels */
-    private getAllMissingPrerequisitesRecursive;
-    private showPrerequisiteDialog;
-    private showDependencyDialog;
-    private findActionsDependingOn;
-    private doesLogicDependOn;
-    private findAlternatives;
-    private findAlternativeInLogic;
-    private calculateSmartSelection;
-    private findRequiredActionIds;
-    private buildSimpleMessage;
-    private formatLogicNode;
-    /** Build clean text-based logic tree for tooltips */
-    private buildTooltipLogicTree;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<ActionPermissionLogicService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<ActionPermissionLogicService>;
-}
-
-declare class PermissionApiService extends BaseApiService {
-    constructor();
-    assignUserActions(data: IAssignUserActionsDto): Observable<ISingleResponse<IPermissionOperationResultDto>>;
-    getUserActions(userId: string, query?: IGetUserActionsDto): Observable<ISingleResponse<IUserActionResponseDto[]>>;
-    assignUserRoles(data: IAssignUserRolesDto): Observable<ISingleResponse<IPermissionOperationResultDto>>;
-    getUserRoles(userId: string, query?: IGetUserRolesDto): Observable<ISingleResponse<IUserRoleResponseDto[]>>;
-    assignRoleActions(data: IAssignRoleActionsDto): Observable<ISingleResponse<IPermissionOperationResultDto>>;
-    getRoleActions(roleId: string): Observable<ISingleResponse<IRoleActionResponseDto[]>>;
-    /** Reverse lookup: users assigned to a role */
-    getRoleUsers(roleId: string): Observable<ISingleResponse<IRoleUserResponseDto[]>>;
-    /** Reverse lookup: users directly assigned an action */
-    getActionUsers(actionId: string): Observable<ISingleResponse<IActionUserResponseDto[]>>;
-    assignCompanyActions(data: IAssignCompanyActionsDto): Observable<ISingleResponse<IPermissionOperationResultDto>>;
-    getCompanyActions(companyId: string): Observable<ISingleResponse<ICompanyActionResponseDto[]>>;
-    /** Effective roles for the authenticated user — merges company-wide and login-branch-specific assignments */
-    getMyRoles(): Observable<ISingleResponse<IUserRoleResponseDto[]>>;
-    /** Effective direct actions for the authenticated user — merges company-wide and login-branch-specific assignments */
-    getMyActions(): Observable<ISingleResponse<IUserActionResponseDto[]>>;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<PermissionApiService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<PermissionApiService>;
-}
-
+export declare class ActionPermissionLogicService {
+  private readonly confirmationService;
+  private readonly messageService;
+  private readonly translateAdapter;
+  private t;
+  /** Handle checking an action with prerequisite validation (recursive deep scan) */
+  handleCheck(action: IAction, currentSelection: Record<string, boolean>, allActions: IAction[], onUpdate: (newSelection: Record<string, boolean>) => void, onCancel: (previousState: Record<string, boolean>) => void): void;
+  /** Handle unchecking an action with dependency detection */
+  handleUncheck(action: IAction, currentSelection: Record<string, boolean>, allActions: IAction[], onUpdate: (newSelection: Record<string, boolean>) => void): void;
+  /** Check if an action has unmet prerequisites */
+  hasUnmetPrerequisites(action: IAction, currentSelection: Record<string, boolean>, allActions: IAction[]): boolean;
+  /** Get all selected actions that have unmet prerequisites */
+  getActionsWithUnmetPrerequisites(currentSelection: Record<string, boolean>, allActions: IAction[]): IAction[];
+  /** Show validation error dialog with auto-fix options */
+  showValidationErrorDialog(invalidActions: IAction[], currentSelection: Record<string, boolean>, allActions: IAction[], onUpdate: (newSelection: Record<string, boolean>) => void): void;
+  /** Get prerequisite description for tooltip display */
+  getPrerequisiteTooltip(action: IAction, currentSelection: Record<string, boolean>, allActions: IAction[]): string;
+  /** Build dynamic logic tree message with AND/OR operators and nesting */
+  buildLogicMessage(logic: ILogicNode, _missingActions: IAction[], allActions: IAction[], currentSelection?: Record<string, boolean>): string;
+  /** Extract selected action IDs from selection map */
+  private getSelectedIds;
+  private sanitizeHtml;
+  /** Recursively collect ALL missing prerequisites at all dependency levels */
+  private getAllMissingPrerequisitesRecursive;
+  private showPrerequisiteDialog;
+  private showDependencyDialog;
+  private findActionsDependingOn;
+  private doesLogicDependOn;
+  private findAlternatives;
+  private findAlternativeInLogic;
+  private calculateSmartSelection;
+  private findRequiredActionIds;
+  private buildSimpleMessage;
+  private formatLogicNode;
+  /** Build clean text-based logic tree for tooltips */
+  private buildTooltipLogicTree;
+  static ɵfac: i0.ɵɵFactoryDeclaration<ActionPermissionLogicService, never>;
+  static ɵprov: i0.ɵɵInjectableDeclaration<any>;
+}
+export declare class PermissionApiService extends BaseApiService {
+  constructor();
+  assignUserActions(data: IAssignUserActionsDto): Observable<ISingleResponse<IPermissionOperationResultDto>>;
+  getUserActions(userId: string, query?: IGetUserActionsDto): Observable<ISingleResponse<IUserActionResponseDto[]>>;
+  assignUserRoles(data: IAssignUserRolesDto): Observable<ISingleResponse<IPermissionOperationResultDto>>;
+  getUserRoles(userId: string, query?: IGetUserRolesDto): Observable<ISingleResponse<IUserRoleResponseDto[]>>;
+  assignRoleActions(data: IAssignRoleActionsDto): Observable<ISingleResponse<IPermissionOperationResultDto>>;
+  getRoleActions(roleId: string): Observable<ISingleResponse<IRoleActionResponseDto[]>>;
+  /** Reverse lookup: users assigned to a role */
+  getRoleUsers(roleId: string): Observable<ISingleResponse<IRoleUserResponseDto[]>>;
+  /** Reverse lookup: users directly assigned an action */
+  getActionUsers(actionId: string): Observable<ISingleResponse<IActionUserResponseDto[]>>;
+  assignCompanyActions(data: IAssignCompanyActionsDto): Observable<ISingleResponse<IPermissionOperationResultDto>>;
+  getCompanyActions(companyId: string): Observable<ISingleResponse<ICompanyActionResponseDto[]>>;
+  /** Effective roles for the authenticated user — merges company-wide and login-branch-specific assignments */
+  getMyRoles(): Observable<ISingleResponse<IUserRoleResponseDto[]>>;
+  /** Effective direct actions for the authenticated user — merges company-wide and login-branch-specific assignments */
+  getMyActions(): Observable<ISingleResponse<IUserActionResponseDto[]>>;
+  static ɵfac: i0.ɵɵFactoryDeclaration<PermissionApiService, never>;
+  static ɵprov: i0.ɵɵInjectableDeclaration<any>;
+}
 /**
  * My Permissions API Service
  * Get current user's complete permissions
  * Endpoint: POST /iam/permissions/my-permissions
  * Always enabled
  */
-declare class MyPermissionsApiService {
-    private readonly http;
-    private readonly appConfig;
-    private readonly baseUrl;
-    /**
-     * Get current user's complete permissions
-     * POST /iam/permissions/my-permissions
-     * Returns menus, frontend actions, and cached endpoint count
-     * @param dto Optional filter by parent codes (only affects frontend actions)
-     */
-    getMyPermissions(dto?: IGetMyPermissionsDto): Observable<ISingleResponse<IMyPermissionsResponseDto>>;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<MyPermissionsApiService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<MyPermissionsApiService>;
-}
-
-declare class PermissionStateService {
-    private readonly permissionApi;
-    private readonly permissionValidator;
-    private readonly _permissions;
-    readonly permissions: _angular_core.Signal<IMyPermissionsResponseDto | null>;
-    private readonly _isLoading;
-    readonly isLoading: _angular_core.Signal<boolean>;
-    loadPermissions(dto?: IGetMyPermissionsDto): Observable<void>;
-    isLoaded(): boolean;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<PermissionStateService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<PermissionStateService>;
-}
-
+export declare class MyPermissionsApiService {
+  private readonly http;
+  private readonly appConfig;
+  private readonly baseUrl;
+  /**
+   * Get current user's complete permissions
+   * POST /iam/permissions/my-permissions
+   * Returns menus, frontend actions, and cached endpoint count
+   * @param dto Optional filter by parent codes (only affects frontend actions)
+   */
+  getMyPermissions(dto?: IGetMyPermissionsDto): Observable<ISingleResponse<IMyPermissionsResponseDto>>;
+  static ɵfac: i0.ɵɵFactoryDeclaration<MyPermissionsApiService, never>;
+  static ɵprov: i0.ɵɵInjectableDeclaration<any>;
+}
+export declare class PermissionStateService {
+  private readonly permissionApi;
+  private readonly permissionValidator;
+  private readonly _permissions;
+  readonly permissions: import("@angular/core").Signal<IMyPermissionsResponseDto | null>;
+  private readonly _isLoading;
+  readonly isLoading: import("@angular/core").Signal<boolean>;
+  loadPermissions(dto?: IGetMyPermissionsDto): Observable<void>;
+  isLoaded(): boolean;
+  static ɵfac: i0.ɵɵFactoryDeclaration<PermissionStateService, never>;
+  static ɵprov: i0.ɵɵInjectableDeclaration<any>;
+}
 /**
  * Shared resolver for the company/branch display info behind an IAM permission
  * grant's scope (`companyId`/`branchId`). Used by the read-only permitted-users
@@ -323,234 +310,242 @@ declare class PermissionStateService {
  * a `Map` (empty when ids are empty, the provider doesn't implement the
  * method, or the request fails) and fall back to displaying the raw ID.
  */
-declare class PermissionScopeResolverService {
-    private readonly companyProvider;
-    resolveCompanyInfo(companyIds: string[]): Promise<Map<string, ICompanyBasicInfo>>;
-    resolveBranchInfo(branchIds: string[]): Promise<Map<string, IBranchBasicInfo>>;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<PermissionScopeResolverService, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<PermissionScopeResolverService>;
-}
-
+export declare class PermissionScopeResolverService {
+  private readonly companyProvider;
+  resolveCompanyInfo(companyIds: string[]): Promise<Map<string, ICompanyBasicInfo>>;
+  resolveBranchInfo(branchIds: string[]): Promise<Map<string, IBranchBasicInfo>>;
+  static ɵfac: i0.ɵɵFactoryDeclaration<PermissionScopeResolverService, never>;
+  static ɵprov: i0.ɵɵInjectableDeclaration<any>;
+}
 interface IBuilderNode {
+  id: string;
+  type: 'group' | 'action';
+  operator?: 'AND' | 'OR';
+  actionId?: string;
+  children?: IBuilderNode[];
+}
+export declare class LogicBuilderComponent {
+  readonly logic: import("@angular/core").InputSignal<ILogicNode | null>;
+  readonly actions: import("@angular/core").InputSignal<{
     id: string;
-    type: 'group' | 'action';
-    operator?: 'AND' | 'OR';
-    actionId?: string;
-    children?: IBuilderNode[];
-}
-declare class LogicBuilderComponent {
-    readonly logic: _angular_core.InputSignal<ILogicNode | null>;
-    readonly actions: _angular_core.InputSignal<{
-        id: string;
-        name: string;
-    }[]>;
-    readonly logicChange: _angular_core.OutputEmitterRef<ILogicNode | null>;
-    private readonly _builderTree;
-    readonly builderLogic: _angular_core.Signal<IBuilderNode | null>;
-    constructor();
-    initializeLogic(): void;
-    clearLogic(): void;
-    toggleOperator(nodeId: string): void;
-    addChildNode(parentId: string, type: 'group' | 'action'): void;
-    removeNode(nodeId: string): void;
-    updateActionId(nodeId: string, actionId: string): void;
-    private updateNode;
-    private updateTreeAndEmit;
-    private updateNodeInTree;
-    private removeNodeFromTree;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<LogicBuilderComponent, never>;
-    static ɵcmp: _angular_core.ɵɵComponentDeclaration<LogicBuilderComponent, "lib-logic-builder", never, { "logic": { "alias": "logic"; "required": false; "isSignal": true; }; "actions": { "alias": "actions"; "required": false; "isSignal": true; }; }, { "logicChange": "logicChange"; }, never, never, true, never>;
-}
-
-declare abstract class BaseActionSelectorComponent {
-    protected readonly permissionLogic: ActionPermissionLogicService;
-    protected readonly confirmationService: ConfirmationService;
-    protected readonly translateAdapter: TranslateService | null;
-    readonly loading: _angular_core.WritableSignal<boolean>;
-    readonly saving: _angular_core.WritableSignal<boolean>;
-    protected readonly _actions: _angular_core.WritableSignal<IAction[]>;
-    readonly actions: _angular_core.Signal<IAction[]>;
-    protected readonly _actionsTree: _angular_core.WritableSignal<IActionTreeDto[]>;
-    protected readonly actionsTree: _angular_core.Signal<IActionTreeDto[]>;
-    protected readonly _selectionMap: _angular_core.WritableSignal<Record<string, boolean>>;
-    readonly selectionMap: _angular_core.Signal<Record<string, boolean>>;
-    protected readonly _initialSelection: _angular_core.WritableSignal<Record<string, boolean>>;
-    protected readonly initialSelection: _angular_core.Signal<Record<string, boolean>>;
-    readonly treeNodes: _angular_core.Signal<_flusys_ng_ui.TreeNode<IAction>[]>;
-    readonly allSelected: _angular_core.Signal<boolean>;
-    readonly hasChanges: _angular_core.Signal<boolean>;
-    readonly actionsWithUnmetPrerequisites: _angular_core.Signal<Set<string>>;
-    readonly invalidActionsCount: _angular_core.Signal<number>;
-    readonly pendingAdd: _angular_core.Signal<IAction[]>;
-    readonly pendingRemove: _angular_core.Signal<IAction[]>;
-    readonly canSave: _angular_core.Signal<boolean>;
-    protected translate(key: string, vars?: Record<string, string | number>): string;
-    protected confirmSelectionChange(onAccept: () => void, onReject: () => void): void;
-    hasUnmetPrerequisites(action: IAction): boolean;
-    getTooltip(action: IAction): string;
-    protected abstract getDefaultTooltip(isSelected: boolean): string;
-    onActionToggle(action: IAction, newValue: boolean): void;
-    toggleAll(): void;
-    protected setAllSelection(value: boolean): void;
-    protected buildSelectionMap(actions: IAction[], predicate: (action: IAction) => boolean): Record<string, boolean>;
-    protected buildPayloadItems(): Array<{
-        id: string;
-        action: PermissionAction;
-    }>;
-    protected resetState(): void;
-}
-
-declare class RoleActionSelectorComponent extends BaseActionSelectorComponent {
-    readonly ROLE_ACTION_PERMISSIONS: {
-        readonly READ: "role-action.read";
-        readonly ASSIGN: "role-action.assign";
+    name: string;
+  }[]>;
+  readonly logicChange: import("@angular/core").OutputEmitterRef<ILogicNode | null>;
+  private readonly _builderTree;
+  readonly builderLogic: import("@angular/core").Signal<IBuilderNode | null>;
+  constructor();
+  initializeLogic(): void;
+  clearLogic(): void;
+  toggleOperator(nodeId: string): void;
+  addChildNode(parentId: string, type: 'group' | 'action'): void;
+  removeNode(nodeId: string): void;
+  updateActionId(nodeId: string, actionId: string): void;
+  private updateNode;
+  private updateTreeAndEmit;
+  private updateNodeInTree;
+  private removeNodeFromTree;
+  static ɵfac: i0.ɵɵFactoryDeclaration<LogicBuilderComponent, never>;
+  static ɵcmp: i0.ɵɵComponentDeclaration<LogicBuilderComponent, "lib-logic-builder", never, {
+    "logic": {
+      "alias": "logic";
+      "required": false;
+      "isSignal": true;
     };
-    private readonly destroyRef;
-    private readonly roleApi;
-    private readonly actionApi;
-    private readonly permissionApi;
-    private readonly messageService;
-    readonly selectedRoleId: _angular_core.WritableSignal<string | undefined>;
-    readonly roles: _angular_core.WritableSignal<IRole[]>;
-    private readonly roleSelectRef;
-    private loadDataAbortController;
-    constructor();
-    onRoleSelect(roleId: string | undefined): void;
-    protected getDefaultTooltip(isSelected: boolean): string;
-    private loadRoles;
-    private onRoleChange;
-    saveChanges(): Promise<void>;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<RoleActionSelectorComponent, never>;
-    static ɵcmp: _angular_core.ɵɵComponentDeclaration<RoleActionSelectorComponent, "flusys-role-action-selector", never, {}, {}, never, never, true, never>;
-}
-
-declare class CompanyActionSelectorComponent extends BaseActionSelectorComponent {
-    readonly COMPANY_ACTION_PERMISSIONS: {
-        readonly READ: "company-action.read";
-        readonly ASSIGN: "company-action.assign";
+    "actions": {
+      "alias": "actions";
+      "required": false;
+      "isSignal": true;
     };
-    private readonly companyApiProvider;
-    private readonly actionApi;
-    private readonly permissionApi;
-    private readonly messageService;
-    private readonly destroyRef;
-    readonly selectedCompanyId: _angular_core.WritableSignal<string | undefined>;
-    readonly companies: _angular_core.WritableSignal<ICompany[]>;
-    private readonly companySelectRef;
-    private loadDataAbortController;
-    constructor();
-    onCompanyChange(companyId: string | undefined): void;
-    protected getDefaultTooltip(isSelected: boolean): string;
-    private loadCompanies;
-    private loadData;
-    saveChanges(): Promise<void>;
-    private handleBackendPrerequisiteErrors;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<CompanyActionSelectorComponent, never>;
-    static ɵcmp: _angular_core.ɵɵComponentDeclaration<CompanyActionSelectorComponent, "flusys-company-action-selector", never, {}, {}, never, never, true, never>;
-}
-
+  }, {
+    "logicChange": "logicChange";
+  }, never, never, true, never>;
+}
+declare abstract class BaseActionSelectorComponent {
+  protected readonly permissionLogic: ActionPermissionLogicService;
+  protected readonly confirmationService: ConfirmationService;
+  protected readonly translateAdapter: TranslateService | null;
+  readonly loading: import("@angular/core").WritableSignal<boolean>;
+  readonly saving: import("@angular/core").WritableSignal<boolean>;
+  protected readonly _actions: import("@angular/core").WritableSignal<IAction[]>;
+  readonly actions: import("@angular/core").Signal<IAction[]>;
+  protected readonly _actionsTree: import("@angular/core").WritableSignal<IActionTreeDto[]>;
+  protected readonly actionsTree: import("@angular/core").Signal<IActionTreeDto[]>;
+  protected readonly _selectionMap: import("@angular/core").WritableSignal<Record<string, boolean>>;
+  readonly selectionMap: import("@angular/core").Signal<Record<string, boolean>>;
+  protected readonly _initialSelection: import("@angular/core").WritableSignal<Record<string, boolean>>;
+  protected readonly initialSelection: import("@angular/core").Signal<Record<string, boolean>>;
+  readonly treeNodes: import("@angular/core").Signal<import("@flusys/ng-ui").TreeNode<IAction>[]>;
+  readonly allSelected: import("@angular/core").Signal<boolean>;
+  readonly hasChanges: import("@angular/core").Signal<boolean>;
+  readonly actionsWithUnmetPrerequisites: import("@angular/core").Signal<Set<string>>;
+  readonly invalidActionsCount: import("@angular/core").Signal<number>;
+  readonly pendingAdd: import("@angular/core").Signal<IAction[]>;
+  readonly pendingRemove: import("@angular/core").Signal<IAction[]>;
+  readonly canSave: import("@angular/core").Signal<boolean>;
+  protected translate(key: string, vars?: Record<string, string | number>): string;
+  protected confirmSelectionChange(onAccept: () => void, onReject: () => void): void;
+  hasUnmetPrerequisites(action: IAction): boolean;
+  getTooltip(action: IAction): string;
+  protected abstract getDefaultTooltip(isSelected: boolean): string;
+  onActionToggle(action: IAction, newValue: boolean): void;
+  toggleAll(): void;
+  protected setAllSelection(value: boolean): void;
+  protected buildSelectionMap(actions: IAction[], predicate: (action: IAction) => boolean): Record<string, boolean>;
+  protected buildPayloadItems(): Array<{
+    id: string;
+    action: PermissionAction;
+  }>;
+  protected resetState(): void;
+}
+export declare class RoleActionSelectorComponent extends BaseActionSelectorComponent {
+  readonly ROLE_ACTION_PERMISSIONS: {
+    readonly READ: "role-action.read";
+    readonly ASSIGN: "role-action.assign";
+  };
+  private readonly destroyRef;
+  private readonly roleApi;
+  private readonly actionApi;
+  private readonly permissionApi;
+  private readonly messageService;
+  readonly selectedRoleId: import("@angular/core").WritableSignal<string | undefined>;
+  readonly roles: import("@angular/core").WritableSignal<IRole[]>;
+  private readonly roleSelectRef;
+  private loadDataAbortController;
+  constructor();
+  onRoleSelect(roleId: string | undefined): void;
+  protected getDefaultTooltip(isSelected: boolean): string;
+  private loadRoles;
+  private onRoleChange;
+  saveChanges(): Promise<void>;
+  static ɵfac: i0.ɵɵFactoryDeclaration<RoleActionSelectorComponent, never>;
+  static ɵcmp: i0.ɵɵComponentDeclaration<RoleActionSelectorComponent, "flusys-role-action-selector", never, {}, {}, never, never, true, never>;
+}
+export declare class CompanyActionSelectorComponent extends BaseActionSelectorComponent {
+  readonly COMPANY_ACTION_PERMISSIONS: {
+    readonly READ: "company-action.read";
+    readonly ASSIGN: "company-action.assign";
+  };
+  private readonly companyApiProvider;
+  private readonly actionApi;
+  private readonly permissionApi;
+  private readonly messageService;
+  private readonly destroyRef;
+  readonly selectedCompanyId: import("@angular/core").WritableSignal<string | undefined>;
+  readonly companies: import("@angular/core").WritableSignal<ICompany[]>;
+  private readonly companySelectRef;
+  private loadDataAbortController;
+  constructor();
+  onCompanyChange(companyId: string | undefined): void;
+  protected getDefaultTooltip(isSelected: boolean): string;
+  private loadCompanies;
+  private loadData;
+  saveChanges(): Promise<void>;
+  private handleBackendPrerequisiteErrors;
+  static ɵfac: i0.ɵɵFactoryDeclaration<CompanyActionSelectorComponent, never>;
+  static ɵcmp: i0.ɵɵComponentDeclaration<CompanyActionSelectorComponent, "flusys-company-action-selector", never, {}, {}, never, never, true, never>;
+}
 /**
  * Manages user role assignments with branch-level granularity:
  * `branchId === undefined` means a company-wide assignment, a set value
  * scopes the assignment to that specific branch.
  */
-declare class UserRoleSelectorComponent {
-    readonly USER_ROLE_PERMISSIONS: {
-        readonly READ: "user-role.read";
-        readonly ASSIGN: "user-role.assign";
-    };
-    private readonly appConfig;
-    private readonly companyContext;
-    private readonly userPermissionProvider;
-    private readonly roleApi;
-    private readonly permissionApi;
-    private readonly messageService;
-    private readonly confirmationService;
-    private readonly translateAdapter;
-    private readonly userSelectRef;
-    private translate;
-    onUserChange(userId: string | null): void;
-    readonly selectedUserId: _angular_core.WritableSignal<string | null>;
-    readonly selectedBranchId: _angular_core.WritableSignal<string | undefined>;
-    readonly branches: _angular_core.WritableSignal<IBranch[]>;
-    readonly loading: _angular_core.WritableSignal<boolean>;
-    readonly saving: _angular_core.WritableSignal<boolean>;
-    private readonly _roles;
-    readonly roles: _angular_core.Signal<IRole[]>;
-    private readonly _selectionMap;
-    readonly selectionMap: _angular_core.Signal<Record<string, boolean>>;
-    private readonly _initialSelection;
-    private readonly initialSelection;
-    readonly showBranchSelector: _angular_core.Signal<boolean>;
-    readonly filteredBranches: _angular_core.Signal<IBranch[]>;
-    readonly allSelected: _angular_core.Signal<boolean>;
-    readonly hasChanges: _angular_core.Signal<boolean>;
-    readonly pendingAdd: _angular_core.Signal<IRole[]>;
-    readonly pendingRemove: _angular_core.Signal<IRole[]>;
-    readonly canSave: _angular_core.Signal<boolean>;
-    constructor();
-    private loadUserBranches;
-    private loadData;
-    getTooltip(role: IRole): string;
-    onRoleToggle(role: IRole, newValue: boolean): void;
-    toggleAll(): void;
-    protected setAllSelections(value: boolean): void;
-    saveChanges(): Promise<void>;
-    private resetState;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<UserRoleSelectorComponent, never>;
-    static ɵcmp: _angular_core.ɵɵComponentDeclaration<UserRoleSelectorComponent, "flusys-user-role-selector", never, {}, {}, never, never, true, never>;
-}
-
-declare class UserActionSelectorComponent extends BaseActionSelectorComponent {
-    readonly USER_ACTION_PERMISSIONS: {
-        readonly READ: "user-action.read";
-        readonly ASSIGN: "user-action.assign";
-    };
-    private readonly appConfig;
-    private readonly companyContext;
-    private readonly userPermissionProvider;
-    private readonly actionApi;
-    private readonly permissionApi;
-    private readonly messageService;
-    private readonly userSelectRef;
-    private readonly _selectedUserId;
-    readonly selectedUserId: _angular_core.Signal<string | null>;
-    private readonly _selectedBranchId;
-    readonly selectedBranchId: _angular_core.Signal<string | undefined>;
-    private readonly _selectedCompanyId;
-    readonly selectedCompanyId: _angular_core.Signal<string | undefined>;
-    private readonly _branches;
-    readonly branches: _angular_core.Signal<IBranch[]>;
-    private readonly _companies;
-    readonly companies: _angular_core.Signal<ICompany[]>;
-    private readonly isCompanyFeatureActive;
-    readonly showCompanySelector: _angular_core.Signal<boolean>;
-    readonly showBranchSelector: _angular_core.Signal<boolean>;
-    readonly filteredBranches: _angular_core.Signal<IBranch[]>;
-    constructor();
-    onUserSelect(userId: string | null): void;
-    onBranchChange(branchId: string | undefined): void;
-    onCompanyChange(companyId: string | undefined): void;
-    private selectUser;
-    private applyCompanySelection;
-    private loadUserCompanies;
-    protected getDefaultTooltip(isSelected: boolean): string;
-    private loadUserBranches;
-    private loadData;
-    saveChanges(): Promise<void>;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<UserActionSelectorComponent, never>;
-    static ɵcmp: _angular_core.ɵɵComponentDeclaration<UserActionSelectorComponent, "flusys-user-action-selector", never, {}, {}, never, never, true, never>;
-}
-
+export declare class UserRoleSelectorComponent {
+  readonly USER_ROLE_PERMISSIONS: {
+    readonly READ: "user-role.read";
+    readonly ASSIGN: "user-role.assign";
+  };
+  private readonly appConfig;
+  private readonly companyContext;
+  private readonly userPermissionProvider;
+  private readonly roleApi;
+  private readonly permissionApi;
+  private readonly messageService;
+  private readonly confirmationService;
+  private readonly translateAdapter;
+  private readonly userSelectRef;
+  private translate;
+  onUserChange(userId: string | null): void;
+  readonly selectedUserId: import("@angular/core").WritableSignal<string | null>;
+  readonly selectedBranchId: import("@angular/core").WritableSignal<string | undefined>;
+  private readonly _branches;
+  readonly branches: import("@angular/core").Signal<IBranch[]>;
+  readonly loading: import("@angular/core").WritableSignal<boolean>;
+  readonly saving: import("@angular/core").WritableSignal<boolean>;
+  private readonly _roles;
+  readonly roles: import("@angular/core").Signal<IRole[]>;
+  private readonly _selectionMap;
+  readonly selectionMap: import("@angular/core").Signal<Record<string, boolean>>;
+  private readonly _initialSelection;
+  private readonly initialSelection;
+  readonly showBranchSelector: import("@angular/core").Signal<boolean>;
+  readonly branchTreeNodes: import("@angular/core").Signal<import("@flusys/ng-ui").TreeNode<IBranch>[]>;
+  readonly allSelected: import("@angular/core").Signal<boolean>;
+  readonly hasChanges: import("@angular/core").Signal<boolean>;
+  readonly pendingAdd: import("@angular/core").Signal<IRole[]>;
+  readonly pendingRemove: import("@angular/core").Signal<IRole[]>;
+  readonly canSave: import("@angular/core").Signal<boolean>;
+  constructor();
+  private loadUserBranches;
+  private loadData;
+  getTooltip(role: IRole): string;
+  onRoleToggle(role: IRole, newValue: boolean): void;
+  toggleAll(): void;
+  protected setAllSelections(value: boolean): void;
+  saveChanges(): Promise<void>;
+  private resetState;
+  static ɵfac: i0.ɵɵFactoryDeclaration<UserRoleSelectorComponent, never>;
+  static ɵcmp: i0.ɵɵComponentDeclaration<UserRoleSelectorComponent, "flusys-user-role-selector", never, {}, {}, never, never, true, never>;
+}
+export declare class UserActionSelectorComponent extends BaseActionSelectorComponent {
+  readonly USER_ACTION_PERMISSIONS: {
+    readonly READ: "user-action.read";
+    readonly ASSIGN: "user-action.assign";
+  };
+  private readonly appConfig;
+  private readonly companyContext;
+  private readonly userPermissionProvider;
+  private readonly actionApi;
+  private readonly permissionApi;
+  private readonly messageService;
+  private readonly userSelectRef;
+  private readonly _selectedUserId;
+  readonly selectedUserId: import("@angular/core").Signal<string | null>;
+  private readonly _selectedBranchId;
+  readonly selectedBranchId: import("@angular/core").Signal<string | undefined>;
+  private readonly _selectedCompanyId;
+  readonly selectedCompanyId: import("@angular/core").Signal<string | undefined>;
+  private readonly _branches;
+  readonly branches: import("@angular/core").Signal<IBranch[]>;
+  private readonly _companies;
+  readonly companies: import("@angular/core").Signal<ICompany[]>;
+  private readonly isCompanyFeatureActive;
+  readonly showCompanySelector: import("@angular/core").Signal<boolean>;
+  readonly showBranchSelector: import("@angular/core").Signal<boolean>;
+  readonly branchTreeNodes: import("@angular/core").Signal<import("@flusys/ng-ui").TreeNode<IBranch>[]>;
+  constructor();
+  onUserSelect(userId: string | null): void;
+  onBranchChange(branchId: string | undefined): void;
+  onCompanyChange(companyId: string | undefined): void;
+  private selectUser;
+  private applyCompanySelection;
+  private loadUserCompanies;
+  protected getDefaultTooltip(isSelected: boolean): string;
+  private loadUserBranches;
+  private isCurrentSelection;
+  private loadData;
+  saveChanges(): Promise<void>;
+  static ɵfac: i0.ɵɵFactoryDeclaration<UserActionSelectorComponent, never>;
+  static ɵcmp: i0.ɵɵComponentDeclaration<UserActionSelectorComponent, "flusys-user-action-selector", never, {}, {}, never, never, true, never>;
+}
 interface RolePermittedUserRow {
-    id: string;
-    userId: string;
-    userName: string;
-    userEmail: string;
-    companyId: string | null;
-    companyName: string | null;
-    branchId: string | null;
-    branchName: string | null;
+  id: string;
+  userId: string;
+  userName: string;
+  userEmail: string;
+  companyId: string | null;
+  companyName: string | null;
+  branchId: string | null;
+  branchName: string | null;
 }
 /**
  * Read-only viewer for users assigned to a role, with a remove-only action
@@ -571,43 +566,55 @@ interface RolePermittedUserRow {
  * `companyId`/`branchId`, not just the user+role pair, since a user can
  * have multiple grants for the same role at different scopes.
  */
-declare class RolePermittedUsersDialogComponent {
-    readonly USER_ROLE_PERMISSIONS: {
-        readonly READ: "user-role.read";
-        readonly ASSIGN: "user-role.assign";
+export declare class RolePermittedUsersDialogComponent {
+  readonly USER_ROLE_PERMISSIONS: {
+    readonly READ: "user-role.read";
+    readonly ASSIGN: "user-role.assign";
+  };
+  private readonly permissionApi;
+  private readonly userProvider;
+  private readonly scopeResolver;
+  private readonly confirmationService;
+  private readonly messageService;
+  private readonly translateAdapter;
+  private t;
+  readonly visible: import("@angular/core").InputSignal<boolean>;
+  readonly role: import("@angular/core").InputSignal<IRole | null>;
+  readonly closed: import("@angular/core").OutputEmitterRef<void>;
+  readonly isLoading: import("@angular/core").WritableSignal<boolean>;
+  readonly isRemoving: import("@angular/core").WritableSignal<boolean>;
+  readonly users: import("@angular/core").WritableSignal<RolePermittedUserRow[]>;
+  readonly showCompanyColumn: import("@angular/core").WritableSignal<boolean>;
+  constructor();
+  private loadUsers;
+  private resolveUserInfo;
+  onRemove(user: RolePermittedUserRow): void;
+  onClose(): void;
+  static ɵfac: i0.ɵɵFactoryDeclaration<RolePermittedUsersDialogComponent, never>;
+  static ɵcmp: i0.ɵɵComponentDeclaration<RolePermittedUsersDialogComponent, "flusys-role-permitted-users-dialog", never, {
+    "visible": {
+      "alias": "visible";
+      "required": true;
+      "isSignal": true;
     };
-    private readonly permissionApi;
-    private readonly userProvider;
-    private readonly scopeResolver;
-    private readonly confirmationService;
-    private readonly messageService;
-    private readonly translateAdapter;
-    private t;
-    readonly visible: _angular_core.InputSignal<boolean>;
-    readonly role: _angular_core.InputSignal<IRole | null>;
-    readonly closed: _angular_core.OutputEmitterRef<void>;
-    readonly isLoading: _angular_core.WritableSignal<boolean>;
-    readonly isRemoving: _angular_core.WritableSignal<boolean>;
-    readonly users: _angular_core.WritableSignal<RolePermittedUserRow[]>;
-    readonly showCompanyColumn: _angular_core.WritableSignal<boolean>;
-    constructor();
-    private loadUsers;
-    private resolveUserInfo;
-    onRemove(user: RolePermittedUserRow): void;
-    onClose(): void;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<RolePermittedUsersDialogComponent, never>;
-    static ɵcmp: _angular_core.ɵɵComponentDeclaration<RolePermittedUsersDialogComponent, "flusys-role-permitted-users-dialog", never, { "visible": { "alias": "visible"; "required": true; "isSignal": true; }; "role": { "alias": "role"; "required": true; "isSignal": true; }; }, { "closed": "closed"; }, never, never, true, never>;
-}
-
+    "role": {
+      "alias": "role";
+      "required": true;
+      "isSignal": true;
+    };
+  }, {
+    "closed": "closed";
+  }, never, never, true, never>;
+}
 interface ActionPermittedUserRow {
-    id: string;
-    userId: string;
-    userName: string;
-    userEmail: string;
-    companyId: string | null;
-    companyName: string | null;
-    branchId: string | null;
-    branchName: string | null;
+  id: string;
+  userId: string;
+  userName: string;
+  userEmail: string;
+  companyId: string | null;
+  companyName: string | null;
+  branchId: string | null;
+  branchName: string | null;
 }
 /**
  * Read-only viewer for users directly assigned an action, with a remove-only
@@ -628,44 +635,58 @@ interface ActionPermittedUserRow {
  * `companyId`/`branchId`, not just the user+action pair, since a user can
  * have multiple grants for the same action at different scopes.
  */
-declare class ActionPermittedUsersDialogComponent {
-    readonly USER_ACTION_PERMISSIONS: {
-        readonly READ: "user-action.read";
-        readonly ASSIGN: "user-action.assign";
+export declare class ActionPermittedUsersDialogComponent {
+  readonly USER_ACTION_PERMISSIONS: {
+    readonly READ: "user-action.read";
+    readonly ASSIGN: "user-action.assign";
+  };
+  private readonly permissionApi;
+  private readonly userProvider;
+  private readonly scopeResolver;
+  private readonly confirmationService;
+  private readonly messageService;
+  private readonly translateAdapter;
+  private t;
+  readonly visible: import("@angular/core").InputSignal<boolean>;
+  readonly action: import("@angular/core").InputSignal<IAction | null>;
+  readonly closed: import("@angular/core").OutputEmitterRef<void>;
+  readonly isLoading: import("@angular/core").WritableSignal<boolean>;
+  readonly isRemoving: import("@angular/core").WritableSignal<boolean>;
+  readonly users: import("@angular/core").WritableSignal<ActionPermittedUserRow[]>;
+  readonly showCompanyColumn: import("@angular/core").WritableSignal<boolean>;
+  constructor();
+  private loadUsers;
+  private resolveUserInfo;
+  onRemove(user: ActionPermittedUserRow): void;
+  onClose(): void;
+  static ɵfac: i0.ɵɵFactoryDeclaration<ActionPermittedUsersDialogComponent, never>;
+  static ɵcmp: i0.ɵɵComponentDeclaration<ActionPermittedUsersDialogComponent, "flusys-action-permitted-users-dialog", never, {
+    "visible": {
+      "alias": "visible";
+      "required": true;
+      "isSignal": true;
+    };
+    "action": {
+      "alias": "action";
+      "required": true;
+      "isSignal": true;
     };
-    private readonly permissionApi;
-    private readonly userProvider;
-    private readonly scopeResolver;
-    private readonly confirmationService;
-    private readonly messageService;
-    private readonly translateAdapter;
-    private t;
-    readonly visible: _angular_core.InputSignal<boolean>;
-    readonly action: _angular_core.InputSignal<IAction | null>;
-    readonly closed: _angular_core.OutputEmitterRef<void>;
-    readonly isLoading: _angular_core.WritableSignal<boolean>;
-    readonly isRemoving: _angular_core.WritableSignal<boolean>;
-    readonly users: _angular_core.WritableSignal<ActionPermittedUserRow[]>;
-    readonly showCompanyColumn: _angular_core.WritableSignal<boolean>;
-    constructor();
-    private loadUsers;
-    private resolveUserInfo;
-    onRemove(user: ActionPermittedUserRow): void;
-    onClose(): void;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<ActionPermittedUsersDialogComponent, never>;
-    static ɵcmp: _angular_core.ɵɵComponentDeclaration<ActionPermittedUsersDialogComponent, "flusys-action-permitted-users-dialog", never, { "visible": { "alias": "visible"; "required": true; "isSignal": true; }; "action": { "alias": "action"; "required": true; "isSignal": true; }; }, { "closed": "closed"; }, never, never, true, never>;
-}
-
-/** Implements ACTION_PROVIDER with the company-whitelisted active actions (groups included, for the tree) from ng-iam. */
-declare class ActionProviderAdapter implements IActionProvider {
-    private readonly actionApi;
-    private readonly appConfig;
-    isAvailable(): boolean;
-    getActions(): Observable<ISingleResponse<IActionBasicInfo[]>>;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<ActionProviderAdapter, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<ActionProviderAdapter>;
-}
-
+  }, {
+    "closed": "closed";
+  }, never, never, true, never>;
+}
+/**
+ * Implements ACTION_PROVIDER with active actions (groups included, for the tree) from ng-iam:
+ * the company whitelist for the `company` scope, the whole action tree for `all`.
+ */
+export declare class ActionProviderAdapter implements IActionProvider {
+  private readonly actionApi;
+  private readonly appConfig;
+  isAvailable(): boolean;
+  getActions(scope?: ActionScope): Observable<ISingleResponse<IActionBasicInfo[]>>;
+  static ɵfac: i0.ɵɵFactoryDeclaration<ActionProviderAdapter, never>;
+  static ɵprov: i0.ɵɵInjectableDeclaration<any>;
+}
 /**
  * Profile Permission Provider Adapter
  *
@@ -691,17 +712,15 @@ declare class ActionProviderAdapter implements IActionProvider {
  * // In profile component
  * private readonly permissionProvider = inject(PROFILE_PERMISSION_PROVIDER, { optional: true });
  */
-declare class ProfilePermissionProviderAdapter implements IProfilePermissionProvider {
-    private readonly permissionApi;
-    getUserRoles(): Observable<ISingleResponse<IProfileRoleInfo[]>>;
-    getUserActions(): Observable<ISingleResponse<IProfileActionInfo[]>>;
-    static ɵfac: _angular_core.ɵɵFactoryDeclaration<ProfilePermissionProviderAdapter, never>;
-    static ɵprov: _angular_core.ɵɵInjectableDeclaration<ProfilePermissionProviderAdapter>;
-}
-
+export declare class ProfilePermissionProviderAdapter implements IProfilePermissionProvider {
+  private readonly permissionApi;
+  getUserRoles(): Observable<ISingleResponse<IProfileRoleInfo[]>>;
+  getUserActions(): Observable<ISingleResponse<IProfileActionInfo[]>>;
+  static ɵfac: i0.ɵɵFactoryDeclaration<ProfilePermissionProviderAdapter, never>;
+  static ɵprov: i0.ɵɵInjectableDeclaration<any>;
+}
 /** Registers IAM provider adapters for ng-shared interfaces */
-declare function provideIamProviders(): Provider[];
-
+export declare function provideIamProviders(): Provider[];
 /**
  * IAM Routes Configuration
  *
@@ -710,7 +729,5 @@ declare function provideIamProviders(): Provider[];
  * - Roles: Role management (conditional on RBAC/FULL mode)
  * - Permissions: User permission assignments
  */
-declare const IAM_ROUTES: Routes;
-
-export { ActionApiService, ActionPermissionLogicService, ActionPermittedUsersDialogComponent, ActionProviderAdapter, ActionType, CompanyActionSelectorComponent, IAM_MESSAGES, IAM_ROUTES, LogicBuilderComponent, MAX_DROPDOWN_ITEMS, MyPermissionsApiService, PermissionApiService, PermissionScopeResolverService, PermissionStateService, ProfilePermissionProviderAdapter, RoleActionSelectorComponent, RoleApiService, RolePermittedUsersDialogComponent, UserActionSelectorComponent, UserRoleSelectorComponent, provideIamProviders };
-export type { IAction, IActionTreeDto, IActionUserResponseDto, IAssignCompanyActionsDto, IAssignRoleActionsDto, IAssignUserActionsDto, IAssignUserRolesDto, IBranch, ICompany, ICompanyActionResponseDto, ICreateActionDto, ICreateRoleDto, IGetMyPermissionsDto, IGetUserActionsDto, IGetUserRolesDto, IMyPermissionsResponseDto, IPermissionItemDto, IPermissionOperationResultDto, IPrerequisiteActionDto, IPrerequisiteValidationError, IRole, IRoleActionResponseDto, IRoleQueryDto, IRoleUserResponseDto, IUpdateActionDto, IUpdateRoleDto, IUser, IUserActionResponseDto, IUserRoleResponseDto, PermissionAction };
+export declare const IAM_ROUTES: Routes;
+export type { PermissionMode };