@flusys/ng-shared 3.0.0-rc → 3.0.0

package/README.md

@@ -9,6 +9,7 @@
 ## Package Information
 
 - **Package:** `@flusys/ng-shared`
+- **Version:** 3.0.0
 - **Dependencies:** ng-core
 - **Dependents:** ng-layout, ng-auth, ng-iam, ng-storage, flusysng
 - **Build Command:** `npm run build:ng-shared`
@@ -74,7 +75,11 @@ interface IPagination {
 }
 
 interface ISort { [key: string]: 'ASC' | 'DESC' }
-interface IFilter { [key: string]: any }
+
+// Filter supports primitives and arrays for multi-value filtering
+interface IFilter {
+  [key: string]: string | number | boolean | null | undefined | string[] | number[];
+}
 
 interface IFilterData {
   filter?: IFilter;
@@ -86,6 +91,8 @@ interface IFilterData {
 }
 ```
 
+**Note:** `IFilter` supports array values (`string[]`, `number[]`) for multi-value filtering (e.g., filtering by multiple status values or IDs).
+
 #### IDeleteData
 
 Delete request payload matching backend DeleteDto.
@@ -144,6 +151,7 @@ interface IFileUploadOptions {
 }
 
 interface IUploadedFile {
+  id?: string;         // File manager ID (UUID) - available when registered
   name: string;
   key: string;
   size: number;
@@ -267,6 +275,14 @@ interface IFileData {
   thumbnailUrl?: string;
   createdAt: Date;
 }
+
+// File URL service response DTO
+interface FilesResponseDto {
+  id: string;
+  name: string;
+  contentType: string;
+  url: string | null;
+}
 ```
 
 ### Permission Interfaces
@@ -310,11 +326,56 @@ enum IconTypeEnum {
 
 ---
 
-## 3. Services
+## 3. Constants
+
+### Permission Constants
+
+Centralized permission codes for type-safe permission checks. Single source of truth to prevent typos.
+
+```typescript
+import { PERMISSIONS, USER_PERMISSIONS, ROLE_PERMISSIONS } from '@flusys/ng-shared';
+
+// Use constants instead of strings
+*hasPermission="PERMISSIONS.USER.READ"
+
+// Individual permission groups available:
+USER_PERMISSIONS     // { CREATE, READ, UPDATE, DELETE }
+COMPANY_PERMISSIONS  // { CREATE, READ, UPDATE, DELETE }
+BRANCH_PERMISSIONS   // { CREATE, READ, UPDATE, DELETE }
+ACTION_PERMISSIONS   // { CREATE, READ, UPDATE, DELETE }
+ROLE_PERMISSIONS     // { CREATE, READ, UPDATE, DELETE }
+ROLE_ACTION_PERMISSIONS   // { READ, ASSIGN }
+USER_ROLE_PERMISSIONS     // { READ, ASSIGN }
+USER_ACTION_PERMISSIONS   // { READ, ASSIGN }
+COMPANY_ACTION_PERMISSIONS // { READ, ASSIGN }
+FILE_PERMISSIONS     // { CREATE, READ, UPDATE, DELETE }
+FOLDER_PERMISSIONS   // { CREATE, READ, UPDATE, DELETE }
+STORAGE_CONFIG_PERMISSIONS  // { CREATE, READ, UPDATE, DELETE }
+EMAIL_CONFIG_PERMISSIONS    // { CREATE, READ, UPDATE, DELETE }
+EMAIL_TEMPLATE_PERMISSIONS  // { CREATE, READ, UPDATE, DELETE }
+FORM_PERMISSIONS     // { CREATE, READ, UPDATE, DELETE }
+
+// Aggregated object with all permissions
+PERMISSIONS.USER.READ     // 'user.read'
+PERMISSIONS.ROLE.CREATE   // 'role.create'
+PERMISSIONS.FILE.DELETE   // 'file.delete'
+```
+
+**Type:** `PermissionCode` - Union type of all valid permission code strings.
+
+---
+
+## 4. Services
 
 ### ApiResourceService
 
-Signal-based CRUD service using Angular 21 `resource()` API. All endpoints use POST (RPC-style).
+Signal-based CRUD service using Angular 21 `resource()` API with **lazy initialization**. All endpoints use POST (RPC-style).
+
+**ServiceName Type:**
+
+```typescript
+type ServiceName = 'auth' | 'administration' | 'iam' | 'storage' | 'formBuilder' | 'email';
+```
 
 **Define a service:**
 
@@ -326,11 +387,56 @@ import { ApiResourceService } from '@flusys/ng-shared';
 @Injectable({ providedIn: 'root' })
 export class UserService extends ApiResourceService<UserDto, IUser> {
   constructor(http: HttpClient) {
-    super('users', http); // Base URL: APP_CONFIG.apiBaseUrl + '/users'
+    // Option 1: Use global apiBaseUrl (default)
+    super('users', http);
+    // Base URL: APP_CONFIG.apiBaseUrl + '/users'
+
+    // Option 2: Use feature-specific service URL (recommended)
+    super('users', http, 'administration');
+    // Base URL: APP_CONFIG.services.administration.baseUrl + '/users'
   }
 }
 ```
 
+**Constructor Parameters:**
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `moduleApiName` | `string` | Yes | API path segment (e.g., 'users', 'file-manager') |
+| `http` | `HttpClient` | Yes | Angular HttpClient instance |
+| `serviceName` | `ServiceName` | No | Feature service name for URL resolution |
+
+**Service URL Resolution:**
+- If `serviceName` is provided, uses `getServiceUrl(config, serviceName)` to resolve the base URL
+- Falls back to `APP_CONFIG.apiBaseUrl` if service not found or `serviceName` not provided
+
+**Lazy Initialization:**
+
+The list resource is **lazy-initialized** to avoid unnecessary HTTP requests on service construction. The resource is only created when first needed:
+
+```typescript
+// Resource is NOT created until one of these is called:
+userService.fetchList('', { pagination: { currentPage: 0, pageSize: 10 } });
+// OR
+userService.initListResource(); // Explicit initialization
+```
+
+**Internal resource structure:**
+
+```typescript
+private _listResource: ResourceRef<IListResponse<InterfaceT> | undefined> | null = null;
+private _resourceInitialized = false;
+private readonly _resourceInitSignal = signal(false);
+
+// Initialize the list resource (called automatically by fetchList)
+initListResource(): void {
+  if (this._resourceInitialized) return;
+  this._resourceInitialized = true;
+  this._resourceInitSignal.set(true);
+  // Creates the resource with linkedSignal for data, isLoading, etc.
+}
+```
+
 **Endpoint mapping:**
 
 | Method         | HTTP | Endpoint                  | Response                 |
@@ -435,7 +541,7 @@ export class ProductComponent {
 
 ### PermissionValidatorService
 
-Signal-based permission state management. Used by `HasPermissionDirective`, permission guards, and IAM.
+Signal-based permission state management. Used by `HasPermissionDirective`, permission guards, and IAM. Supports **wildcard permissions**.
 
 ```typescript
 import { PermissionValidatorService } from '@flusys/ng-shared';
@@ -453,8 +559,8 @@ export class MyComponent {
       // User has permission
     }
 
-    // Check loaded state
-    if (this.permissionValidator.isPermissionsLoaded()) {
+    // Check loaded state (signal-based)
+    if (this.permissionValidator.isLoaded()) {
       // Permissions have been loaded
     }
   }
@@ -467,14 +573,30 @@ export class MyComponent {
 | ---------------------------- | --------- | ---------------------------------- |
 | `setPermissions(codes[])`    | `void`    | Replace all permissions            |
 | `clearPermissions()`         | `void`    | Clear all permissions              |
-| `hasPermission(code)`        | `boolean` | Check single permission            |
-| `isPermissionsLoaded()`      | `boolean` | Whether permissions have been set  |
+| `hasPermission(code)`        | `boolean` | Check single permission (supports wildcards) |
+| `isPermissionsLoaded()`      | `boolean` | **Deprecated** - Use `isLoaded()` signal |
 
 **Signals:**
 
 | Signal        | Type               | Description                    |
 | ------------- | ------------------ | ------------------------------ |
 | `permissions` | `Signal<string[]>` | Readonly current permissions   |
+| `isLoaded`    | `Signal<boolean>`  | Whether permissions have been set |
+
+**Wildcard Support:**
+
+The `hasPermission()` method uses the permission evaluator utility which supports wildcards:
+
+```typescript
+// Exact match
+hasPermission('user.read')  // true if permissions include 'user.read'
+
+// Global wildcard
+hasPermission('user.read')  // true if permissions include '*'
+
+// Module wildcard
+hasPermission('user.read')  // true if permissions include 'user.*'
+```
 
 ### CookieService
 
@@ -501,7 +623,7 @@ if (!platform.isServer) {
 
 ---
 
-## 4. Components
+## 5. Components
 
 ### IconComponent
 
@@ -782,7 +904,7 @@ export class MyComponent {
 
 ---
 
-## 5. Directives
+## 6. Directives
 
 ### HasPermissionDirective
 
@@ -856,7 +978,7 @@ Prevents default browser behavior on specified events and emits the event.
 
 ---
 
-## 6. Guards
+## 7. Guards
 
 Route-level guards for permission-based access control. All guards deny access when permissions are not loaded (fail-closed).
 
@@ -904,16 +1026,21 @@ AND logic - allows access only if user has ALL specified permissions.
 
 ---
 
-## 7. Utilities
+## 8. Utilities
 
 ### Permission Evaluator
 
-Pure functions for permission logic evaluation. Used internally by `HasPermissionDirective` and guards.
+Pure functions for permission logic evaluation. Used internally by `HasPermissionDirective` and guards. **Supports wildcard permissions.**
 
 ```typescript
-import { evaluatePermission, evaluateLogicNode, hasAnyPermission, hasAllPermissions } from '@flusys/ng-shared';
+import { evaluatePermission, evaluateLogicNode, hasAnyPermission, hasAllPermissions, hasPermission } from '@flusys/ng-shared';
 
-const userPermissions = ['user.view', 'user.create'];
+const userPermissions = ['user.view', 'user.create', 'admin.*'];
+
+// Low-level hasPermission check with wildcard support
+hasPermission('user.view', userPermissions);     // true (exact match)
+hasPermission('admin.manage', userPermissions);  // true (matches 'admin.*')
+hasPermission('settings.view', ['*']);           // true (global wildcard)
 
 // Evaluate string or ILogicNode
 evaluatePermission('user.view', userPermissions);     // true
@@ -922,14 +1049,70 @@ evaluatePermission(null, userPermissions);             // false
 // Evaluate ILogicNode tree recursively
 evaluateLogicNode(logicNode, userPermissions);
 
-// Simple OR/AND checks
+// Simple OR/AND checks (also support wildcards)
 hasAnyPermission(['user.view', 'user.delete'], userPermissions);  // true (has user.view)
 hasAllPermissions(['user.view', 'user.delete'], userPermissions); // false (missing user.delete)
 ```
 
+**Wildcard Rules:**
+
+| Pattern | Matches |
+|---------|---------|
+| `*` | All permissions (global wildcard) |
+| `module.*` | All permissions starting with `module.` |
+| `user.read` | Exact match only |
+
+**Implementation Details:**
+
+```typescript
+export function hasPermission(requiredPermission: string, userPermissions: string[]): boolean {
+  // Exact match
+  if (userPermissions.includes(requiredPermission)) return true;
+
+  // Wildcard matching
+  for (const permission of userPermissions) {
+    // Global wildcard
+    if (permission === '*') return true;
+
+    // Module wildcard (e.g., 'user.*' matches 'user.read')
+    if (permission.endsWith('.*')) {
+      const prefix = permission.slice(0, -1); // 'user.'
+      if (requiredPermission.startsWith(prefix)) return true;
+    }
+  }
+
+  return false;
+}
+```
+
+### Scroll Pagination
+
+Utility for lazy-loading dropdowns with scroll detection.
+
+```typescript
+import { checkScrollPagination, ScrollPaginationConfig } from '@flusys/ng-shared';
+
+// In a component
+onScroll(event: Event): void {
+  const nextPagination = checkScrollPagination(event, {
+    pagination: this.pagination(),
+    total: this.total(),
+    isLoading: this.isLoading(),
+    threshold: 50, // pixels from bottom (default: 50)
+  });
+  if (nextPagination) {
+    this.onPagination.emit(nextPagination);
+  }
+}
+```
+
+**Interface:** `ScrollPaginationConfig` - `{ threshold?, pagination, total, isLoading }`
+
+**Returns:** `IPagination | null` - Next page pagination or null if not needed.
+
 ---
 
-## 8. Classes
+## 9. Classes
 
 ### BaseFormControl
 
@@ -965,9 +1148,78 @@ export class MySelectComponent extends BaseFormControl<string | null> {
 
 **Helper:** `provideValueAccessor(ComponentClass)` - Factory for `NG_VALUE_ACCESSOR` provider
 
+### BaseFormPage
+
+Abstract directive for form page components (create/edit).
+
+```typescript
+import { BaseFormPage } from '@flusys/ng-shared';
+
+@Component({ ... })
+export class ProductFormComponent extends BaseFormPage<IProduct, IProductFormModel> {
+  private readonly productService = inject(ProductApiService);
+  private readonly _formModel = signal<IProductFormModel>({ name: '', price: 0 });
+  readonly formModel = this._formModel.asReadonly();
+
+  getFormModel(): Signal<IProductFormModel> { return this.formModel; }
+  getResourceRoute(): string { return '/products'; }
+  getResourceName(): string { return 'Product'; }
+  isFormValid(): boolean { return this.formModel().name.trim().length > 0; }
+
+  loadItem(id: string): void {
+    this.productService.findById(id).subscribe(res => {
+      if (res.success && res.data) {
+        this.existingItem.set(res.data);
+        this._formModel.set({ name: res.data.name, price: res.data.price });
+      }
+    });
+  }
+
+  createItem(model: IProductFormModel): Observable<unknown> {
+    return this.productService.insert(model);
+  }
+
+  updateItem(model: IProductFormModel): Observable<unknown> {
+    return this.productService.update({ id: this.existingItem()!.id, ...model });
+  }
+}
+```
+
+**Signals:** `isLoading`, `existingItem`, `isEditMode` (computed)
+
+**Methods:** `onSubmit()`, `onCancel()`, `showSuccess()`, `showError()`, `showValidationError()`
+
+### BaseListPage
+
+Abstract directive for list page components with pagination and CRUD operations.
+
+```typescript
+import { BaseListPage } from '@flusys/ng-shared';
+
+@Component({ ... })
+export class UserListComponent extends BaseListPage<IUser> {
+  private readonly userService = inject(UserApiService);
+
+  getResourceRoute(): string { return '/users'; }
+  getDeleteConfirmMessage(user: IUser): string { return `Delete "${user.name}"?`; }
+
+  async loadData(): Promise<void> {
+    this.isLoading.set(true);
+    const res = await this.userService.findByIdAsync(...);
+    this.items.set(res.data ?? []);
+    this.total.set(res.meta?.total ?? 0);
+    this.isLoading.set(false);
+  }
+}
+```
+
+**Signals:** `items`, `isLoading`, `total`, `pageSize`, `first`, `currentPage` (computed), `showCompanyInfo` (computed)
+
+**Methods:** `onCreate()`, `onEdit(id)`, `onPageChange(event)`, `onDelete()`, `onDeleteAsync()`, `showSuccess()`, `showError()`, `showInfo()`, `showWarn()`
+
 ---
 
-## 9. Modules
+## 10. Modules
 
 ### AngularModule
 
@@ -975,7 +1227,8 @@ Re-exports common Angular modules for convenience.
 
 ```typescript
 import { AngularModule } from '@flusys/ng-shared';
-// Includes: CommonModule, FormsModule, ReactiveFormsModule, RouterLink, RouterOutlet, + directives
+// Includes: CommonModule, FormsModule, ReactiveFormsModule, RouterLink, RouterOutlet,
+// RouterLinkActive, NgOptimizedImage, NgComponentOutlet, + directives (IsEmptyImageDirective, PreventDefaultDirective)
 // Providers: DatePipe
 ```
 
@@ -985,13 +1238,21 @@ Re-exports PrimeNG component modules for convenience.
 
 ```typescript
 import { PrimeModule } from '@flusys/ng-shared';
-// Includes: Button, Table, Card, Dialog, InputText, Select, MultiSelect,
-// DatePicker, Checkbox, FileUpload, Image, Tag, Tabs, TreeTable, and more (27 modules)
+// Includes 30 modules:
+// - Layout: AccordionModule, CardModule, DividerModule, PanelModule, SplitterModule, TabsModule, ToolbarModule
+// - Form: AutoCompleteModule, CheckboxModule, DatePickerModule, InputTextModule, InputTextareaModule,
+//         MultiSelectModule, RadioButtonModule, SelectModule, ToggleSwitchModule
+// - Button: ButtonModule, SpeedDialModule, SplitButtonModule
+// - Data: PaginatorModule, TableModule, TreeTableModule
+// - Overlay: DialogModule, DrawerModule, PopoverModule, TooltipModule
+// - File: FileUploadModule
+// - Media: ImageModule
+// - Misc: BadgeModule, TagModule
 ```
 
 ---
 
-## 10. Provider Interfaces (Package Independence)
+## 11. Provider Interfaces (Package Independence)
 
 ng-shared defines **provider interfaces** to enable feature packages (ng-iam, ng-storage) to access auth functionality without direct dependencies.
 
@@ -1022,6 +1283,8 @@ interface IUserProvider {
 }
 ```
 
+**Token Error Message:** `'USER_PROVIDER not configured. Please provide an implementation in app.config.ts'`
+
 #### ICompanyApiProvider / `COMPANY_API_PROVIDER`
 
 Company list access for IAM company selection.
@@ -1036,19 +1299,29 @@ interface ICompanyApiProvider {
 }
 ```
 
+**Token Error Message:** `'COMPANY_API_PROVIDER not configured. Please provide an implementation in app.config.ts'`
+
 #### IUserPermissionProvider / `USER_PERMISSION_PROVIDER`
 
 User permission queries for IAM.
 
 ```typescript
+interface IUserBranchPermission {
+  branchId: string;
+  branchName: string;
+  permissions: string[];
+}
+
 interface IUserPermissionProvider {
-  getUserBranchPermissions(userId: string): Observable<ISingleResponse<any>>;
+  getUserBranchPermissions(userId: string): Observable<ISingleResponse<IUserBranchPermission[]>>;
 }
 ```
 
+**Token Error Message:** `'USER_PERMISSION_PROVIDER not configured. Please provide an implementation in app.config.ts'`
+
 #### IProfileUploadProvider / `PROFILE_UPLOAD_PROVIDER`
 
-Profile picture upload for ng-auth profile page. Implemented by ng-storage.
+Profile picture upload for ng-auth profile page. Implemented by ng-storage. **Optional token** - use with `inject(..., { optional: true })`.
 
 ```typescript
 interface IProfileUploadResult {
@@ -1076,7 +1349,7 @@ interface IProfileUploadProvider {
 
 #### IProfilePermissionProvider / `PROFILE_PERMISSION_PROVIDER`
 
-User permission queries for ng-auth profile page. Implemented by ng-iam.
+User permission queries for ng-auth profile page. Implemented by ng-iam. **Optional token** - use with `inject(..., { optional: true })`.
 
 ```typescript
 interface IProfileRoleInfo {
@@ -1112,6 +1385,8 @@ interface IAuthStateProvider {
 }
 ```
 
+**Token Error Message:** `'AUTH_STATE_PROVIDER not configured. Please provide an implementation in app.config.ts'`
+
 **Usage:**
 
 ```typescript
@@ -1133,7 +1408,7 @@ export class PublicFormComponent {
 
 #### IUserListProvider / `USER_LIST_PROVIDER`
 
-Extends user list pages with extra columns, actions, and data enrichment. Optional provider.
+Extends user list pages with extra columns, actions, and data enrichment. **Optional token** - use with `inject(..., { optional: true })`.
 
 ```typescript
 interface IUserListItem {
@@ -1164,6 +1439,16 @@ interface IUserListColumn {
   templateType?: 'text' | 'badge' | 'date' | 'boolean' | 'custom';
 }
 
+interface IUserListFilter {
+  page?: number;
+  pageSize?: number;
+  search?: string;
+  isActive?: boolean;
+  companyId?: string;
+  branchId?: string;
+  [key: string]: unknown;
+}
+
 interface IUserListProvider<T extends IUserListItem = IUserListItem> {
   getExtraColumns?(): IUserListColumn[];
   getExtraRowActions?(): IUserListAction<T>[];
@@ -1236,8 +1521,9 @@ export const appConfig: ApplicationConfig = {
 
 - **Extend `ApiResourceService`** for new services (signal-based)
 - Use reactive signals (`data`, `isLoading`, `total`) in templates
-- Use `fetchList()` to trigger queries, `reload()` to refresh
+- Use `fetchList()` to trigger queries (also initializes resource), `reload()` to refresh
 - Use async methods (`insertAsync`, `updateAsync`) for one-off operations
+- Resource is lazy-initialized - no HTTP requests until first `fetchList()` or `initListResource()`
 
 ### File URLs
 
@@ -1263,6 +1549,7 @@ export const appConfig: ApplicationConfig = {
 - Use permission guards for route-level access control
 - Use `PermissionValidatorService` for programmatic checks in services
 - Permissions follow fail-closed model: no access by default
+- Wildcards supported: `*` (all), `module.*` (module-scoped)
 
 ---
 
@@ -1298,6 +1585,37 @@ export const appConfig: ApplicationConfig = {
 
 **Solution:** ng-shared must NEVER import from ng-layout. Move shared components to ng-shared, layout-specific components to ng-layout.
 
+### Provider Token Errors
+
+**Problem:** `'XXX_PROVIDER not configured'` error at runtime.
+
+**Solution:** Ensure the provider is registered in `app.config.ts`:
+
+```typescript
+// Required providers
+providers: [
+  { provide: USER_PROVIDER, useClass: AuthUserProvider },
+  { provide: COMPANY_API_PROVIDER, useClass: AuthCompanyApiProvider },
+  { provide: USER_PERMISSION_PROVIDER, useClass: AuthUserPermissionProvider },
+  { provide: AUTH_STATE_PROVIDER, useClass: AuthStateProviderAdapter },
+]
+
+// OR use the convenience function
+providers: [
+  ...provideAuthProviders(),
+]
+```
+
+### Permissions Not Working
+
+**Problem:** `hasPermission()` returns false even though user should have access.
+
+**Solution:**
+
+1. Check if permissions are loaded: `permissionValidator.isLoaded()`
+2. Verify permission codes match exactly (case-sensitive)
+3. For wildcard access, ensure user has `*` or `module.*` in their permissions
+
 ---
 
 ## API Reference
@@ -1306,12 +1624,31 @@ export const appConfig: ApplicationConfig = {
 
 | Service                        | Description                           |
 | ------------------------------ | ------------------------------------- |
-| `ApiResourceService<DTO, T>`   | Signal-based CRUD with resource() API |
+| `ApiResourceService<DTO, T>`   | Signal-based CRUD with resource() API (lazy-initialized, accepts optional `serviceName`) |
 | `FileUrlService`               | Cloud storage URL fetching            |
-| `PermissionValidatorService`   | Permission state management           |
+| `PermissionValidatorService`   | Permission state management with wildcards |
 | `CookieService`                | SSR-aware cookie reading              |
 | `PlatformService`              | SSR environment detection             |
 
+### Classes
+
+| Class                    | Description                                  |
+| ------------------------ | -------------------------------------------- |
+| `ApiResourceService`     | Signal-based CRUD base class (alias: `ApiService`) |
+| `BaseFormControl`        | Abstract base for custom form controls       |
+| `BaseFormPage`           | Abstract directive for create/edit pages     |
+| `BaseListPage`           | Abstract directive for list pages            |
+
+### Constants
+
+| Constant       | Description                                   |
+| -------------- | --------------------------------------------- |
+| `PERMISSIONS`  | Aggregated permission codes by module         |
+| `USER_PERMISSIONS` | `{ CREATE, READ, UPDATE, DELETE }` for users |
+| `ROLE_PERMISSIONS` | `{ CREATE, READ, UPDATE, DELETE }` for roles |
+| `FILE_PERMISSIONS` | `{ CREATE, READ, UPDATE, DELETE }` for files |
+| `FILE_TYPE_FILTERS` | Predefined MIME type arrays (IMAGES, DOCUMENTS, etc.) |
+
 ### Components
 
 | Component                  | Selector               | Description               |
@@ -1348,6 +1685,7 @@ export const appConfig: ApplicationConfig = {
 | `IBaseEntity`        | Base entity with ID and timestamps   |
 | `ILoggedUserInfo`    | Current user info with company ctx   |
 | `IFilterData`        | Filter, pagination, sort payload     |
+| `IFilter`            | Filter object (supports arrays)      |
 | `IDeleteData`        | Delete request payload               |
 | `IDropDown`          | Simple label/value pair              |
 | `ISingleResponse<T>` | Single item response                |
@@ -1364,23 +1702,27 @@ export const appConfig: ApplicationConfig = {
 | `IFileSelectFilter` | File select filter params            |
 | `LoadFilesFn`       | File loading function type           |
 | `UploadFileFn`      | File upload function type            |
+| `FilesResponseDto`  | File URL service response            |
 | `IAuthStateProvider`| Auth state provider interface        |
 | `IUserListProvider` | User list extensions provider        |
 | `IUserListItem`     | Base user for list operations        |
 | `IUserListAction`   | User list action definition          |
 | `IUserListColumn`   | Extra column for user list           |
+| `IUserListFilter`   | User list filter parameters          |
+| `IUserBranchPermission` | User permissions per branch      |
+| `ServiceName`       | `'auth' \| 'administration' \| 'iam' \| 'storage' \| 'formBuilder' \| 'email'` |
 
 ### Injection Tokens
 
-| Token                      | Interface                 | Description                  |
-| -------------------------- | ------------------------- | ---------------------------- |
-| `USER_PROVIDER`            | `IUserProvider`           | User list for IAM            |
-| `COMPANY_API_PROVIDER`     | `ICompanyApiProvider`     | Company list for IAM         |
-| `USER_PERMISSION_PROVIDER` | `IUserPermissionProvider` | User permission queries      |
-| `PROFILE_UPLOAD_PROVIDER`  | `IProfileUploadProvider`  | Profile picture upload (ng-storage) |
-| `PROFILE_PERMISSION_PROVIDER` | `IProfilePermissionProvider` | User permissions for profile (ng-iam) |
-| `AUTH_STATE_PROVIDER`      | `IAuthStateProvider`      | Auth state for feature packages |
-| `USER_LIST_PROVIDER`       | `IUserListProvider`       | User list extensions (optional) |
+| Token                      | Interface                 | Optional | Description                  |
+| -------------------------- | ------------------------- | -------- | ---------------------------- |
+| `USER_PROVIDER`            | `IUserProvider`           | No | User list for IAM            |
+| `COMPANY_API_PROVIDER`     | `ICompanyApiProvider`     | No | Company list for IAM         |
+| `USER_PERMISSION_PROVIDER` | `IUserPermissionProvider` | No | User permission queries      |
+| `AUTH_STATE_PROVIDER`      | `IAuthStateProvider`      | No | Auth state for feature packages |
+| `PROFILE_UPLOAD_PROVIDER`  | `IProfileUploadProvider`  | Yes | Profile picture upload (ng-storage) |
+| `PROFILE_PERMISSION_PROVIDER` | `IProfilePermissionProvider` | Yes | User permissions for profile (ng-iam) |
+| `USER_LIST_PROVIDER`       | `IUserListProvider`       | Yes | User list extensions         |
 
 ## See Also
 
@@ -1391,5 +1733,6 @@ export const appConfig: ApplicationConfig = {
 
 ---
 
-**Last Updated:** 2026-02-21
+**Last Updated:** 2026-02-25
+**Version:** 3.0.0
 **Angular Version:** 21