@flusys/ng-shared 5.0.3 → 5.0.4

package/fesm2022/flusys-ng-shared.mjs

@@ -1,12 +1,14 @@
 import * as i0 from '@angular/core';
 import { inject, PLATFORM_ID, Injectable, DOCUMENT, REQUEST, signal, computed, ElementRef, input, effect, Directive, TemplateRef, ViewContainerRef, output, Pipe, Injector, isDevMode, NgModule, resource, model, runInInjectionContext, untracked, forwardRef, InjectionToken, Component, DestroyRef, ApplicationRef, viewChild, afterNextRender, ViewEncapsulation } from '@angular/core';
-import { isPlatformServer, CommonModule, NgOptimizedImage, NgComponentOutlet, DatePipe, DOCUMENT as DOCUMENT$1 } from '@angular/common';
-import { HttpClient, HttpHeaders, HttpParams } from '@angular/common/http';
-import { APP_CONFIG, getServiceUrl, TRANSLATE_ADAPTER, FALLBACK_MESSAGES_REGISTRY } from '@flusys/ng-core';
-import { of, firstValueFrom, map as map$1, from } from 'rxjs';
+import { isPlatformServer, isPlatformBrowser, CommonModule, NgOptimizedImage, NgComponentOutlet, DatePipe, DOCUMENT as DOCUMENT$1 } from '@angular/common';
+import { HttpClient, HttpContextToken, HttpHeaders, HttpParams } from '@angular/common/http';
+import { APP_CONFIG, getServiceUrl, LOCALIZATION_STATE_SERVICE, LOCALIZATION_API_SERVICE, FALLBACK_MESSAGES_REGISTRY } from '@flusys/ng-core';
+import { of, catchError as catchError$1, throwError, firstValueFrom, map as map$1, from } from 'rxjs';
 import { map, tap, catchError } from 'rxjs/operators';
 import * as i1$1 from '@angular/forms';
 import { NgControl, FormsModule, ReactiveFormsModule, NG_VALUE_ACCESSOR } from '@angular/forms';
+import * as i3 from 'primeng/api';
+import { MessageService, ConfirmationService } from 'primeng/api';
 import { RouterOutlet, RouterLink, RouterLinkActive, Router, ActivatedRoute } from '@angular/router';
 import { AutoCompleteModule } from 'primeng/autocomplete';
 import { AvatarModule } from 'primeng/avatar';
@@ -56,8 +58,6 @@ import { TooltipModule } from 'primeng/tooltip';
 import { TreeTableModule } from 'primeng/treetable';
 import { ProgressSpinnerModule } from 'primeng/progressspinner';
 import { ColorPickerModule } from 'primeng/colorpicker';
-import * as i3 from 'primeng/api';
-import { MessageService, ConfirmationService } from 'primeng/api';
 import { toSignal, takeUntilDestroyed } from '@angular/core/rxjs-interop';
 
 const SHARED_MESSAGES = {
@@ -309,6 +309,7 @@ const SHARED_MESSAGES = {
     'primeng.country.placeholder': 'Choose a country',
 };
 
+// ==================== AUTH MODULE ====================
 const USER_PERMISSIONS = {
     CREATE: 'user.create',
     READ: 'user.read',
@@ -327,6 +328,7 @@ const BRANCH_PERMISSIONS = {
     UPDATE: 'branch.update',
     DELETE: 'branch.delete',
 };
+// ==================== IAM MODULE ====================
 const ACTION_PERMISSIONS = {
     CREATE: 'action.create',
     READ: 'action.read',
@@ -355,6 +357,7 @@ const COMPANY_ACTION_PERMISSIONS = {
     READ: 'company-action.read',
     ASSIGN: 'company-action.assign',
 };
+// ==================== STORAGE MODULE ====================
 const FILE_PERMISSIONS = {
     CREATE: 'file.create',
     READ: 'file.read',
@@ -373,6 +376,10 @@ const STORAGE_CONFIG_PERMISSIONS = {
     UPDATE: 'storage-config.update',
     DELETE: 'storage-config.delete',
 };
+const UPLOAD_CONFIG_PERMISSIONS = {
+    DELETE: 'upload-config.delete',
+};
+// ==================== EMAIL MODULE ====================
 const EMAIL_CONFIG_PERMISSIONS = {
     CREATE: 'email-config.create',
     READ: 'email-config.read',
@@ -385,30 +392,34 @@ const EMAIL_TEMPLATE_PERMISSIONS = {
     UPDATE: 'email-template.update',
     DELETE: 'email-template.delete',
 };
+// ==================== FORM BUILDER MODULE ====================
 const FORM_PERMISSIONS = {
     CREATE: 'form.create',
     READ: 'form.read',
     UPDATE: 'form.update',
     DELETE: 'form.delete',
 };
+const FORM_RESULT_PERMISSIONS = {
+    CREATE: 'form-result.create',
+    READ: 'form-result.read',
+    UPDATE: 'form-result.update',
+    DELETE: 'form-result.delete',
+};
+// ==================== EVENT MANAGER MODULE ====================
 const EVENT_PERMISSIONS = {
     CREATE: 'event.create',
     READ: 'event.read',
     UPDATE: 'event.update',
     DELETE: 'event.delete',
 };
-const EVENT_PARTICIPANT_PERMISSIONS = {
-    CREATE: 'event-participant.create',
-    READ: 'event-participant.read',
-    UPDATE: 'event-participant.update',
-    DELETE: 'event-participant.delete',
-};
+// ==================== NOTIFICATION MODULE ====================
 const NOTIFICATION_PERMISSIONS = {
     CREATE: 'notification.create',
     READ: 'notification.read',
     UPDATE: 'notification.update',
     DELETE: 'notification.delete',
 };
+// ==================== LOCALIZATION MODULE ====================
 const LANGUAGE_PERMISSIONS = {
     CREATE: 'language.create',
     READ: 'language.read',
@@ -427,10 +438,48 @@ const TRANSLATION_PERMISSIONS = {
     UPDATE: 'translation.update',
     DELETE: 'translation.delete',
 };
+// ==================== AGGREGATED EXPORTS ====================
+const PERMISSIONS = {
+    // Auth
+    USER: USER_PERMISSIONS,
+    COMPANY: COMPANY_PERMISSIONS,
+    BRANCH: BRANCH_PERMISSIONS,
+    // IAM
+    ACTION: ACTION_PERMISSIONS,
+    ROLE: ROLE_PERMISSIONS,
+    ROLE_ACTION: ROLE_ACTION_PERMISSIONS,
+    USER_ROLE: USER_ROLE_PERMISSIONS,
+    USER_ACTION: USER_ACTION_PERMISSIONS,
+    COMPANY_ACTION: COMPANY_ACTION_PERMISSIONS,
+    // Storage
+    FILE: FILE_PERMISSIONS,
+    FOLDER: FOLDER_PERMISSIONS,
+    STORAGE_CONFIG: STORAGE_CONFIG_PERMISSIONS,
+    // Email
+    EMAIL_CONFIG: EMAIL_CONFIG_PERMISSIONS,
+    EMAIL_TEMPLATE: EMAIL_TEMPLATE_PERMISSIONS,
+    // Form Builder
+    FORM: FORM_PERMISSIONS,
+    FORM_RESULT: FORM_RESULT_PERMISSIONS,
+    // Event Manager
+    EVENT: EVENT_PERMISSIONS,
+    // Notification
+    NOTIFICATION: NOTIFICATION_PERMISSIONS,
+    // Localization
+    LANGUAGE: LANGUAGE_PERMISSIONS,
+    TRANSLATION_KEY: TRANSLATION_KEY_PERMISSIONS,
+    TRANSLATION: TRANSLATION_PERMISSIONS,
+};
 
 // ─── Constants ────────────────────────────────────────────────────────────────
 const FILE_TYPE_FILTERS = {
-    IMAGES: ['image/jpeg', 'image/png', 'image/gif', 'image/webp', 'image/svg+xml'],
+    IMAGES: [
+        'image/jpeg',
+        'image/png',
+        'image/gif',
+        'image/webp',
+        'image/svg+xml',
+    ],
     DOCUMENTS: [
         'application/pdf',
         'application/msword',
@@ -449,7 +498,9 @@ function getAcceptString(contentTypes) {
 function isFileTypeAllowed(file, allowedTypes) {
     if (!allowedTypes.length)
         return true;
-    return allowedTypes.some((type) => type.endsWith('/*') ? file.type.startsWith(type.replace('/*', '/')) : file.type === type);
+    return allowedTypes.some((type) => type.endsWith('/*')
+        ? file.type.startsWith(type.replace('/*', '/'))
+        : file.type === type);
 }
 function getFileIconClass(contentType) {
     if (contentType.startsWith('image/'))
@@ -522,16 +573,6 @@ class FileUrlService {
     appConfig = inject(APP_CONFIG);
     _cache = signal(new Map(), ...(ngDevMode ? [{ debugName: "_cache" }] : []));
     cache = this._cache.asReadonly();
-    /** Get file URL by ID from cache (synchronous) */
-    getFileUrl(fileId) {
-        if (!fileId)
-            return null;
-        return this._cache().get(fileId)?.url ?? null;
-    }
-    /** Get file URL as computed signal */
-    fileUrlSignal(fileId) {
-        return computed(() => this.getFileUrl(fileId));
-    }
     /** Fetch file URLs from backend and update cache */
     fetchFileUrls(fileIds, forceRefresh = false) {
         if (!fileIds.length)
@@ -552,18 +593,6 @@ class FileUrlService {
     fetchSingleFileUrl(fileId, forceRefresh = false) {
         return this.fetchFileUrls([fileId], forceRefresh).pipe(map((files) => files[0] ?? null));
     }
-    /** Clear entire cache */
-    clearCache() {
-        this._cache.set(new Map());
-    }
-    /** Remove specific file from cache */
-    removeFromCache(fileId) {
-        this._cache.update((cache) => {
-            const next = new Map(cache);
-            next.delete(fileId);
-            return next;
-        });
-    }
     addToCache(files) {
         this._cache.update((cache) => {
             const next = new Map(cache);
@@ -670,6 +699,10 @@ class PermissionValidatorService {
     hasPermission(code) {
         return hasPermission(code, this._permissions());
     }
+    /** Check if user has ANY of the specified permissions (OR logic) */
+    hasAnyPermission(code) {
+        return hasAnyPermission(code, this._permissions());
+    }
     isPermissionsLoaded() {
         return this._isLoaded();
     }
@@ -681,6 +714,43 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImpor
             args: [{ providedIn: 'root' }]
         }] });
 
+class TranslateService {
+    localizationState = inject(LOCALIZATION_STATE_SERVICE);
+    translate(key, params) {
+        const translations = this.localizationState.translations();
+        const value = translations[key];
+        if (!value) {
+            return this.getFromFallback(key, params);
+        }
+        return this.interpolate(value, params);
+    }
+    translateSignal(key, params) {
+        return computed(() => {
+            this.localizationState.currentLanguage();
+            return this.translate(key, params);
+        });
+    }
+    getFromFallback(key, params) {
+        const fallbacks = this.localizationState.fallbackMessages();
+        const value = fallbacks[key] ?? key;
+        return this.interpolate(value, params);
+    }
+    interpolate(template, params) {
+        if (!params || !template)
+            return template;
+        return template.replace(/\{\{(\w+)\}\}/g, (match, paramKey) => {
+            const value = params[paramKey];
+            return value !== undefined ? String(value) : match;
+        });
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: TranslateService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: TranslateService, providedIn: 'root' });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: TranslateService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }] });
+
 class EditModeElementChangerDirective {
     el = inject(ElementRef);
     ngControl = inject(NgControl, { optional: true });
@@ -940,38 +1010,13 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImpor
         }], propDecorators: { eventType: [{ type: i0.Input, args: [{ isSignal: true, alias: "eventType", required: false }] }], preventKey: [{ type: i0.Input, args: [{ isSignal: true, alias: "preventKey", required: false }] }], action: [{ type: i0.Output, args: ["action"] }] } });
 
 class TranslatePipe {
-    translateAdapter = inject(TRANSLATE_ADAPTER, { optional: true });
-    fallbackMessages = inject(FALLBACK_MESSAGES_REGISTRY, { optional: true });
+    translateAdapter = inject(TranslateService);
     transform(key, params, fallback) {
         if (!key)
             return fallback ?? '';
-        if (!this.translateAdapter) {
-            const result = this.getFromFallback(key, params ?? undefined);
-            return fallback !== undefined && result === key ? fallback : result;
-        }
-        this.translateAdapter.languageCode();
         const result = this.translateAdapter.translate(key, params ?? undefined);
         return fallback !== undefined && result === key ? fallback : result;
     }
-    getFromFallback(template, params) {
-        // Try to get from fallback messages registry first
-        if (this.fallbackMessages) {
-            const value = this.fallbackMessages[template];
-            if (value) {
-                return this.interpolate(value, params);
-            }
-        }
-        // Fall back to interpolating the key itself
-        return this.interpolate(template, params);
-    }
-    interpolate(template, params) {
-        if (!params)
-            return template;
-        return template.replace(/\{\{(\w+)\}\}/g, (match, paramKey) => {
-            const value = params[paramKey];
-            return value !== undefined ? String(value) : match;
-        });
-    }
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.5", ngImport: i0, type: TranslatePipe, deps: [], target: i0.ɵɵFactoryTarget.Pipe });
     static ɵpipe = i0.ɵɵngDeclarePipe({ minVersion: "14.0.0", version: "21.1.5", ngImport: i0, type: TranslatePipe, isStandalone: true, name: "translate", pure: false });
 }
@@ -983,21 +1028,174 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImpor
                 }]
         }] });
 
-async function tryLoadLocalizationServices(injector) {
-    try {
-        // @ts-ignore - ng-localization is optional and loaded dynamically at runtime
-        const locModule = await import('@flusys/ng-localization');
-        const config = injector.get(locModule.LOCALIZATION_CONFIG, null);
-        if (!config)
-            return null;
-        return {
-            stateService: injector.get(locModule.LocalizationStateService),
-            apiService: injector.get(locModule.LocalizationApiService),
-        };
+/**
+ * HTTP context token to skip global error toast.
+ * Use when component handles error display locally.
+ *
+ * @example
+ * ```typescript
+ * this.http.post(url, data, {
+ *   context: new HttpContext().set(SKIP_ERROR_TOAST, true)
+ * });
+ * ```
+ */
+const SKIP_ERROR_TOAST = new HttpContextToken(() => false);
+/**
+ * Error Catching Interceptor
+ * Displays error messages for failed HTTP requests using backend response.
+ *
+ * Features:
+ * - Uses backend's error title (error.error.error) as summary
+ * - Uses backend's error message (error.error.message) as detail
+ * - Falls back to sensible defaults based on status code
+ * - Skip with SKIP_ERROR_TOAST context token for local handling
+ *
+ * NOTE: This interceptor only handles error display.
+ * For 401 handling and token refresh, use tokenRefreshInterceptor from @flusys/ng-auth.
+ *
+ * @example
+ * ```typescript
+ * // In app.config.ts
+ * provideHttpClient(
+ *   withFetch(),
+ *   withInterceptors([
+ *     authInterceptor,           // from @flusys/ng-auth
+ *     tokenRefreshInterceptor,   // from @flusys/ng-auth
+ *     errorCatchingInterceptor,  // from @flusys/ng-core
+ *     apiLoaderInterceptor,      // from @flusys/ng-core
+ *   ])
+ * )
+ * ```
+ */
+function errorCatchingInterceptor(req, next) {
+    const messageService = inject(MessageService);
+    const platformId = inject(PLATFORM_ID);
+    const translateAdapter = inject(TranslateService, { optional: true });
+    const isBrowser = isPlatformBrowser(platformId);
+    // Skip error display for check-login (expected to fail when not logged in)
+    const isCheckLogin = req.url.includes('/check-login');
+    // Skip if component handles error locally
+    const skipErrorToast = req.context.get(SKIP_ERROR_TOAST);
+    return next(req).pipe(catchError$1((error) => {
+        // Skip 401 errors - handled by tokenRefreshInterceptor in ng-auth
+        // Skip 403 errors - handled by permission denied UI in components
+        // Skip check-login errors - expected behavior
+        // Skip if component handles error locally
+        if (error.status === 401 ||
+            error.status === 403 ||
+            isCheckLogin ||
+            skipErrorToast) {
+            return throwError(() => error);
+        }
+        // Display error message for other errors
+        if (isBrowser) {
+            const { summary, detail } = extractErrorInfo(error, translateAdapter);
+            messageService.add({
+                severity: 'error',
+                summary,
+                detail,
+            });
+        }
+        return throwError(() => error);
+    }));
+}
+/**
+ * Extract error summary and detail from HTTP error response.
+ * Uses backend response format: { message, messageKey, messageVariables, error, statusCode }
+ * If messageKey is present and translate adapter is available, translates the message.
+ */
+function extractErrorInfo(error, translateAdapter) {
+    // Check if we have a messageKey for translation
+    const messageKey = error.error?.messageKey;
+    const messageVariables = error.error?.messageVariables;
+    let detail;
+    if (messageKey && translateAdapter) {
+        // Use translated message if available
+        detail = translateAdapter.translate(messageKey, messageVariables);
+    }
+    else if (typeof error.error?.message === 'string') {
+        detail = error.error.message;
+    }
+    else if (Array.isArray(error.error?.message)) {
+        // NestJS validation errors come as array
+        detail = error.error.message[0];
+    }
+    else if (error.message) {
+        detail = error.message;
+    }
+    else {
+        detail = translateAdapter
+            ? translateAdapter.translate('shared.unexpected.error')
+            : 'shared.unexpected.error';
+    }
+    // Extract summary/title from backend response or use default based on status
+    let summary;
+    if (typeof error.error?.error === 'string') {
+        // Backend sends error type (e.g., "Not Found", "Bad Request", "Validation Error")
+        summary = error.error.error;
+    }
+    else {
+        // Fallback to status-based title
+        summary = getDefaultSummary(error.status, translateAdapter);
+    }
+    return { summary, detail };
+}
+/**
+ * Get default error summary based on HTTP status code.
+ */
+function getDefaultSummary(status, translateAdapter) {
+    const keyMap = {
+        400: 'shared.error.bad.request',
+        404: 'shared.error.not.found',
+        409: 'shared.error.conflict',
+        422: 'shared.error.validation.error',
+        500: 'shared.error.server.error',
+        502: 'shared.error.service.unavailable',
+        503: 'shared.error.service.unavailable',
+        504: 'shared.error.service.unavailable',
+    };
+    const key = keyMap[status] || 'shared.error';
+    if (translateAdapter) {
+        return translateAdapter.translate(key);
     }
-    catch {
+    // Fallback to key when no translator available
+    return key;
+}
+
+/**
+ * Resolver to load translations for specific modules.
+ * Works with or without @flusys/ng-localization provider.
+ *
+ * When localization provider is enabled:
+ * - Registers fallback messages in state
+ * - Fetches translations from API
+ * - Merges them into state
+ *
+ * When localization provider is not enabled:
+ * - Registers fallback messages in FALLBACK_MESSAGES_REGISTRY
+ * - TranslatePipe uses registry for translations
+ * - No API calls
+ *
+ * @param config - Module config with modules array and optional fallback messages
+ * @returns ResolveFn that loads translations before route activation
+ *
+ * @example
+ * // With fallback messages (recommended)
+ * { resolve: { t: resolveTranslationModule({ modules: ['auth'], fallbackMessages: AUTH_MESSAGES }) } }
+ *
+ * @example
+ * // Without fallback (API translations only, requires localization provider)
+ * { resolve: { t: resolveTranslationModule({ modules: ['auth', 'iam'] }) } }
+ */
+async function tryLoadLocalizationServices(injector) {
+    const stateService = injector.get(LOCALIZATION_STATE_SERVICE, null);
+    const apiService = injector.get(LOCALIZATION_API_SERVICE, null);
+    if (!stateService || !apiService)
         return null;
-    }
+    return {
+        stateService,
+        apiService,
+    };
 }
 function resolveTranslationModule(config) {
     return async () => {
@@ -1019,6 +1217,10 @@ function resolveTranslationModule(config) {
                 if (registry) {
                     Object.assign(registry, fallbackMessages);
                 }
+                else if (isDevMode()) {
+                    console.warn('resolveTranslationModule: FALLBACK_MESSAGES_REGISTRY not provided. ' +
+                        'Add provideFallbackMessagesRegistry() to your app providers.');
+                }
             }
         }
         if (!locServices)
@@ -1236,19 +1438,27 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImpor
                 }]
         }] });
 
+// ── Separate default filter into a named constant so it's sharable/testable ──
+const DEFAULT_FILTER = {
+    pagination: { currentPage: 0, pageSize: 10 },
+    filter: {},
+    select: [],
+    sort: {},
+};
 class ApiResourceService {
+    // ── Injected once via `inject()` ──────────────────────────────────────────
+    http = inject(HttpClient);
+    _config = inject(APP_CONFIG);
     baseUrl;
-    http;
     moduleApiName;
+    // ── Public writable signals ───────────────────────────────────────────────
     searchTerm = signal('', ...(ngDevMode ? [{ debugName: "searchTerm" }] : []));
-    filterData = signal({
-        pagination: { currentPage: 0, pageSize: 10 },
-        filter: {},
-        select: [],
-        sort: {},
-    }, ...(ngDevMode ? [{ debugName: "filterData" }] : []));
+    filterData = signal({ ...DEFAULT_FILTER }, ...(ngDevMode ? [{ debugName: "filterData" }] : []));
+    // ── Private activation gate: avoids an initial fetch before fetchList() ──
     _active = signal(false, ...(ngDevMode ? [{ debugName: "_active" }] : []));
+    // ── Resource (reactive list fetching with abort support) ──────────────────
     listResource;
+    // ── Derived/computed signals (pure reads, no side-effects) ────────────────
     isLoading = computed(() => this.listResource.isLoading(), ...(ngDevMode ? [{ debugName: "isLoading" }] : []));
     data = computed(() => this.listResource.value()?.data ?? [], ...(ngDevMode ? [{ debugName: "data" }] : []));
     total = computed(() => this.listResource.value()?.meta?.total ?? 0, ...(ngDevMode ? [{ debugName: "total" }] : []));
@@ -1261,52 +1471,64 @@ class ApiResourceService {
     }, ...(ngDevMode ? [{ debugName: "hasMore" }] : []));
     error = computed(() => this.listResource.error(), ...(ngDevMode ? [{ debugName: "error" }] : []));
     status = computed(() => this.listResource.status(), ...(ngDevMode ? [{ debugName: "status" }] : []));
-    constructor(moduleApiName, http, serviceName) {
-        this.moduleApiName = moduleApiName || serviceName || 'api';
-        const config = inject(APP_CONFIG);
-        const serviceBaseUrl = serviceName ? getServiceUrl(config, serviceName) : config.apiBaseUrl;
-        this.baseUrl = moduleApiName ? `${serviceBaseUrl}/${moduleApiName}` : serviceBaseUrl;
-        this.http = http;
+    constructor(moduleApiName, serviceName) {
+        this.moduleApiName = moduleApiName;
+        // ── Resolve base URL once at construction, not per-request ───────────────
+        const serviceBaseUrl = serviceName
+            ? getServiceUrl(this._config, serviceName)
+            : this._config.apiBaseUrl;
+        this.baseUrl = moduleApiName
+            ? `${serviceBaseUrl}/${moduleApiName}`
+            : serviceBaseUrl;
         this.listResource = resource({ ...(ngDevMode ? { debugName: "listResource" } : {}), params: () => {
+                // Short-circuit: skip the loader entirely when not yet activated
                 if (!this._active())
                     return undefined;
                 return { search: this.searchTerm(), filter: this.filterData() };
             },
-            loader: ({ params, abortSignal }) => {
-                const obs = this._getAllObs(params.filter, params.search);
-                return new Promise((resolve, reject) => {
-                    const sub = obs.subscribe({ next: resolve, error: reject });
-                    abortSignal.addEventListener('abort', () => sub.unsubscribe());
+            loader: ({ params, abortSignal }) => 
+            // ── Inline promise keeps the closure tight; no temp variable needed ─
+            new Promise((resolve, reject) => {
+                const sub = this._getAllObs(params.filter, params.search).subscribe({
+                    next: resolve,
+                    error: reject,
                 });
-            } });
+                abortSignal.addEventListener('abort', () => sub.unsubscribe());
+            }) });
     }
+    // ── Single, memoised header builder – avoids object churn per call ────────
     getHttpOptions(endpoint, params) {
         return {
-            headers: new HttpHeaders({ 'x-loader-tag': `${this.moduleApiName}/${endpoint}` }),
+            headers: new HttpHeaders({
+                'x-loader-tag': `${this.moduleApiName}/${endpoint}`,
+            }),
             ...(params ? { params } : {}),
         };
     }
+    // ── Private observable – shared by the resource loader and the public getAll() ──
     _getAllObs(filter, search = '') {
-        let params = new HttpParams();
-        if (search)
-            params = params.append('q', search);
+        const params = search ? new HttpParams().append('q', search) : undefined;
         return this.http.post(`${this.baseUrl}/get-all`, filter, this.getHttpOptions('get-all', params));
     }
+    // ── Activate guard: all list-management helpers call this first ───────────
+    _activate() {
+        this._active.set(true);
+    }
     // ==========================================================================
-    // List Management
+    // List management
     // ==========================================================================
     fetchList(search = '', filter) {
         this.searchTerm.set(search);
         if (filter)
             this.filterData.update((prev) => ({ ...prev, ...filter }));
-        this._active.set(true);
+        this._activate();
     }
     setPagination(pagination) {
-        this._active.set(true);
+        this._activate();
         this.filterData.update((prev) => ({ ...prev, pagination }));
     }
     nextPage() {
-        this._active.set(true);
+        this._activate();
         this.filterData.update((prev) => ({
             ...prev,
             pagination: {
@@ -1316,7 +1538,7 @@ class ApiResourceService {
         }));
     }
     resetPagination() {
-        this._active.set(true);
+        this._activate();
         this.filterData.update((prev) => ({
             ...prev,
             pagination: { currentPage: 0, pageSize: prev.pagination?.pageSize ?? 10 },
@@ -1326,131 +1548,107 @@ class ApiResourceService {
         this.listResource.reload();
     }
     // ==========================================================================
-    // Promise API (IApiService)
+    // Promise API  (IApiService implementation)
     // ==========================================================================
+    // ── DRY helper: all promise methods are one-liners via this ───────────────
+    _post(endpoint, body, params) {
+        return firstValueFrom(this.http.post(`${this.baseUrl}/${endpoint}`, body, this.getHttpOptions(endpoint, params)));
+    }
     insert(dto) {
-        return firstValueFrom(this.http.post(`${this.baseUrl}/insert`, dto, this.getHttpOptions('insert')));
+        return this._post('insert', dto);
     }
     insertMany(dtos) {
-        return firstValueFrom(this.http.post(`${this.baseUrl}/insert-many`, dtos, this.getHttpOptions('insert-many')));
+        return this._post('insert-many', dtos);
     }
     findById(id, select) {
-        return firstValueFrom(this.http.post(`${this.baseUrl}/get/${id}`, { select }, this.getHttpOptions(`get/${id}`)));
+        return this._post(`get/${id}`, { select });
     }
     getAll(filter, search = '') {
         return firstValueFrom(this._getAllObs(filter, search));
     }
     update(dto) {
-        return firstValueFrom(this.http.post(`${this.baseUrl}/update`, dto, this.getHttpOptions('update')));
+        return this._post('update', dto);
     }
     updateMany(dtos) {
-        return firstValueFrom(this.http.post(`${this.baseUrl}/update-many`, dtos, this.getHttpOptions('update-many')));
+        return this._post('update-many', dtos);
     }
-    findByIds(ids, select) {
-        return firstValueFrom(this.http.post(`${this.baseUrl}/get-by-ids`, { ids, select }, this.getHttpOptions('get-by-ids')));
+    delete(deleteDto) {
+        return this._post('delete', deleteDto);
     }
-    bulkUpsert(toInsert, toUpdate) {
-        return firstValueFrom(this.http.post(`${this.baseUrl}/bulk-upsert`, [...toInsert, ...toUpdate], this.getHttpOptions('bulk-upsert'))).then((res) => res.data ?? []);
+    findByIds(ids, select) {
+        return this._post('get-by-ids', { ids, select });
     }
     getByFilter(filter) {
-        return firstValueFrom(this.http.post(`${this.baseUrl}/get-by-filter`, filter, this.getHttpOptions('get-by-filter')));
+        return this._post('get-by-filter', filter);
     }
-    delete(deleteDto) {
-        return firstValueFrom(this.http.post(`${this.baseUrl}/delete`, deleteDto, this.getHttpOptions('delete')));
+    async bulkUpsert(toInsert, toUpdate) {
+        const res = await this._post('bulk-upsert', [
+            ...toInsert,
+            ...toUpdate,
+        ]);
+        return res.data ?? [];
     }
 }
 
-/**
- * Base class for form controls that support ALL Angular form patterns:
- *
- * 1. **Template-driven forms:** `[(value)]="mySignal"` or `[(ngModel)]="myValue"`
- * 2. **Reactive forms:** `[formControl]="ctrl"` or `formControlName="field"`
- * 3. **Signal forms (Angular 21+):** `[formField]="formTree.field"`
- *
- * Implements both `ControlValueAccessor` (reactive forms) and `FormValueControl` (signal forms).
- *
- * @example
- * ```typescript
- * @Component({
- *   providers: [provideValueAccessor(MySelectComponent)]
- * })
- * export class MySelectComponent extends BaseFormControl<string | null> {
- *   override readonly value = model<string | null>(null);
- *
- *   constructor() {
- *     super();
- *     this.initializeFormControl();
- *   }
- * }
- *
- * // Usage:
- * // Template-driven: <my-select [(value)]="selectedId" />
- * // Reactive forms:  <my-select [formControl]="myControl" />
- * // Signal forms:    <my-select [formField]="formTree.myField" />
- * ```
- */
 class BaseFormControl {
     injector = inject(Injector);
-    /**
-     * Disabled state model - bound to form control disabled state.
-     * Using model() to satisfy FormValueControl interface requirements.
-     */
     disabled = model(false, ...(ngDevMode ? [{ debugName: "disabled" }] : []));
-    /**
-     * Touched state model - for validation styling.
-     * Using model() to satisfy FormValueControl interface requirements.
-     */
     touched = model(false, ...(ngDevMode ? [{ debugName: "touched" }] : []));
+    // ── CVA callbacks ─────────────────────────────────────────────────────────
+    // Initialised to no-ops so subclasses never need null-guards
     onChange = () => { };
     onTouched = () => { };
-    isWritingValue = false;
+    // ── Write-guard: prevents echo loop (writeValue → effect → onChange) ──────
+    // Using a counter instead of a boolean handles the (rare) re-entrant case
+    writeDepth = 0;
     /**
-     * Initialize the form control synchronization for ControlValueAccessor.
-     * Must be called in the subclass constructor after super().
+     * Wire up the ControlValueAccessor ↔ signal bridge.
+     * Call once at the end of the subclass constructor.
+     *
+     * Signal-form consumers ([formField]) don't need this — Angular's
+     * FormField directive binds directly to `value`.
      *
-     * Note: For signal forms ([formField]), this is not needed as
-     * the FormField directive binds directly to the value model.
+     * @example
+     * constructor() { super(); this.initializeFormControl(); }
      */
     initializeFormControl() {
         runInInjectionContext(this.injector, () => {
             effect(() => {
-                const currentValue = this.value();
-                if (!this.isWritingValue) {
-                    untracked(() => this.onChange(currentValue));
+                const next = this.value();
+                // Skip propagation while writeValue() is on the call stack
+                if (this.writeDepth === 0) {
+                    untracked(() => this.onChange(next));
                 }
             });
         });
     }
-    // ============================================
-    // ControlValueAccessor Implementation
-    // (For reactive forms: formControl, formControlName)
-    // ============================================
-    /** ControlValueAccessor: Write value from form control to signal */
+    // ==========================================================================
+    // ControlValueAccessor
+    // ==========================================================================
     writeValue(value) {
-        this.isWritingValue = true;
-        this.value.set(value);
-        this.isWritingValue = false;
+        this.writeDepth++;
+        try {
+            this.value.set(value);
+        }
+        finally {
+            // Always decrement — even if set() throws — so the guard never sticks
+            this.writeDepth--;
+        }
     }
-    /** ControlValueAccessor: Register change callback */
     registerOnChange(fn) {
         this.onChange = fn;
     }
-    /** ControlValueAccessor: Register touched callback */
     registerOnTouched(fn) {
         this.onTouched = fn;
     }
-    /** ControlValueAccessor: Set disabled state from form control */
     setDisabledState(isDisabled) {
         this.disabled.set(isDisabled);
     }
-    // ============================================
-    // FormValueControl Implementation
-    // (For signal forms: [formField])
-    // ============================================
-    // The FormValueControl interface only requires:
-    // - value: ModelSignal<T> (already declared as abstract above)
-    // The FormField directive automatically binds to the value model.
-    /** Mark the control as touched (call on blur or panel close) */
+    // ==========================================================================
+    // FormValueControl  (signal forms)
+    // `value: ModelSignal<T>` satisfies the interface — nothing else needed.
+    // ==========================================================================
+    /** Call on blur / panel-close to propagate touched state. */
     markAsTouched() {
         if (!this.touched()) {
             this.touched.set(true);
@@ -1479,7 +1677,7 @@ function provideValueAccessor(component) {
     return {
         provide: NG_VALUE_ACCESSOR,
         useExisting: forwardRef(() => component),
-        multi: true
+        multi: true,
     };
 }
 
@@ -1607,7 +1805,7 @@ function checkScrollPagination(event, config) {
 
 class FileUploaderComponent {
     messageService = inject(MessageService);
-    translateAdapter = inject(TRANSLATE_ADAPTER, {
+    translateAdapter = inject(TranslateService, {
         optional: true,
     });
     fileProvider = inject(FILE_PROVIDER, { optional: true });
@@ -2069,7 +2267,7 @@ const DEFAULT_PAGE_SIZE$1 = 20;
 const DEFAULT_SELECTOR_PAGE_SIZE = 50;
 class FileSelectorDialogComponent {
     destroyRef = inject(DestroyRef);
-    translateAdapter = inject(TRANSLATE_ADAPTER, {
+    translateAdapter = inject(TranslateService, {
         optional: true,
     });
     fileProvider = inject(FILE_PROVIDER, { optional: true });
@@ -2965,7 +3163,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImpor
 class LazyMultiSelectComponent extends BaseFormControl {
     document = inject(DOCUMENT$1);
     appRef = inject(ApplicationRef);
-    translateAdapter = inject(TRANSLATE_ADAPTER, {
+    translateAdapter = inject(TranslateService, {
         optional: true,
     });
     onDocumentClickBound = this.handleDocumentClick.bind(this);
@@ -3171,7 +3369,9 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.5", ngImpor
  */
 class LazySelectComponent extends BaseFormControl {
     destroyRef = inject(DestroyRef);
-    translateAdapter = inject(TRANSLATE_ADAPTER, { optional: true });
+    translateAdapter = inject(TranslateService, {
+        optional: true,
+    });
     onScrollBound = this.onScroll.bind(this);
     scrollTargetEl = null;
     isDestroyed = false;
@@ -3295,9 +3495,7 @@ class BaseUserSelectComponent {
     destroyRef = inject(DestroyRef);
     injector = inject(Injector);
     userProvider = inject(USER_PROVIDER);
-    translateAdapter = inject(TRANSLATE_ADAPTER, {
-        optional: true,
-    });
+    translateAdapter = inject(TranslateService);
     abortController = null;
     // Inputs
     loadUsers = input(...(ngDevMode ? [undefined, { debugName: "loadUsers" }] : []));
@@ -3775,7 +3973,7 @@ class BaseFormPage {
     route = inject(ActivatedRoute);
     messageService = inject(MessageService);
     destroyRef = inject(DestroyRef);
-    translateAdapter = inject(TRANSLATE_ADAPTER, {
+    translateAdapter = inject(TranslateService, {
         optional: true,
     });
     routeParams = toSignal(this.route.paramMap);
@@ -3911,7 +4109,9 @@ class BaseListPage {
     appConfig = inject(APP_CONFIG);
     confirmationService = inject(ConfirmationService);
     destroyRef = inject(DestroyRef);
-    translateAdapter = inject(TRANSLATE_ADAPTER, { optional: true });
+    translateAdapter = inject(TranslateService, {
+        optional: true,
+    });
     /** Items list */
     items = signal([], ...(ngDevMode ? [{ debugName: "items" }] : []));
     /** Loading state */
@@ -3961,25 +4161,41 @@ class BaseListPage {
      * Show success toast message
      */
     showSuccess(detail, summary) {
-        this.messageService.add({ severity: 'success', summary: summary ?? this.t('shared.success'), detail });
+        this.messageService.add({
+            severity: 'success',
+            summary: summary ?? this.t('shared.success'),
+            detail,
+        });
     }
     /**
      * Show error toast message
      */
     showError(detail, summary) {
-        this.messageService.add({ severity: 'error', summary: summary ?? this.t('shared.error'), detail });
+        this.messageService.add({
+            severity: 'error',
+            summary: summary ?? this.t('shared.error'),
+            detail,
+        });
     }
     /**
      * Show info toast message
      */
     showInfo(detail, summary) {
-        this.messageService.add({ severity: 'info', summary: summary ?? this.t('shared.info'), detail });
+        this.messageService.add({
+            severity: 'info',
+            summary: summary ?? this.t('shared.info'),
+            detail,
+        });
     }
     /**
      * Show warning toast message
      */
     showWarn(detail, summary) {
-        this.messageService.add({ severity: 'warn', summary: summary ?? this.t('shared.warning'), detail });
+        this.messageService.add({
+            severity: 'warn',
+            summary: summary ?? this.t('shared.warning'),
+            detail,
+        });
     }
     /**
      * Translate a key using the adapter, fallback to key if not available.
@@ -4006,7 +4222,9 @@ class BaseListPage {
                     .subscribe({
                     next: (res) => {
                         const r = res;
-                        this.showSuccess(r?.messageKey ? this.t(r.messageKey, r.messageVariables) : (r?.message ?? ''));
+                        this.showSuccess(r?.messageKey
+                            ? this.t(r.messageKey, r.messageVariables)
+                            : (r?.message ?? ''));
                         this.loadData();
                     },
                 });
@@ -4029,7 +4247,9 @@ class BaseListPage {
             accept: async () => {
                 const res = await deleteApiCall(idGetter(item));
                 const r = res;
-                this.showSuccess(r?.messageKey ? this.t(r.messageKey, r.messageVariables) : (r?.message ?? ''));
+                this.showSuccess(r?.messageKey
+                    ? this.t(r.messageKey, r.messageVariables)
+                    : (r?.message ?? ''));
                 await this.loadData();
             },
         });
@@ -4114,5 +4334,5 @@ function getUserTimezone() {
  * Generated bundle index. Do not edit.
  */
 
-export { ACTION_PERMISSIONS, AUTH_STATE_PROVIDER, AngularModule, ApiResourceService, ApiResourceService as ApiService, BRANCH_PERMISSIONS, BaseFormControl, BaseFormPage, BaseListPage, BaseUserSelectComponent, COMPANY_ACTION_PERMISSIONS, COMPANY_API_PROVIDER, COMPANY_PERMISSIONS, CookieService, EMAIL_CONFIG_PERMISSIONS, EMAIL_TEMPLATE_PERMISSIONS, EVENT_PARTICIPANT_PERMISSIONS, EVENT_PERMISSIONS, EditModeElementChangerDirective, FILE_PERMISSIONS, FILE_PROVIDER, FILE_TYPE_FILTERS, FOLDER_PERMISSIONS, FORM_PERMISSIONS, FileSelectorDialogComponent, FileUploaderComponent, FileUrlService, HasPermissionDirective, IconComponent, IconTypeEnum, IsEmptyImageDirective, LANGUAGE_PERMISSIONS, LazyMultiSelectComponent, LazySelectComponent, NOTIFICATION_PERMISSIONS, PROFILE_PERMISSION_PROVIDER, PermissionValidatorService, PlatformService, PreventDefaultDirective, PrimeModule, ROLE_ACTION_PERMISSIONS, ROLE_PERMISSIONS, SHARED_MESSAGES, STORAGE_CONFIG_PERMISSIONS, TRANSLATION_KEY_PERMISSIONS, TRANSLATION_PERMISSIONS, TranslatePipe, USER_ACTION_PERMISSIONS, USER_PERMISSIONS, USER_PERMISSION_PROVIDER, USER_PROVIDER, USER_ROLE_PERMISSIONS, UserMultiSelectComponent, UserSelectComponent, allPermissionsGuard, anyPermissionGuard, checkScrollPagination, evaluateLogicNode, evaluatePermission, formatFileSize, formatInTimezone, getAcceptString, getFileIconClass, getUserTimezone, hasAllPermissions, hasAnyPermission, hasPermission, isFileTypeAllowed, localToUtc, permissionGuard, provideValueAccessor, resolveTranslationModule, utcToLocal };
+export { ACTION_PERMISSIONS, AUTH_STATE_PROVIDER, AngularModule, ApiResourceService, ApiResourceService as ApiService, BRANCH_PERMISSIONS, BaseFormControl, BaseFormPage, BaseListPage, BaseUserSelectComponent, COMPANY_ACTION_PERMISSIONS, COMPANY_API_PROVIDER, COMPANY_PERMISSIONS, CookieService, EMAIL_CONFIG_PERMISSIONS, EMAIL_TEMPLATE_PERMISSIONS, EVENT_PERMISSIONS, EditModeElementChangerDirective, FILE_PERMISSIONS, FILE_PROVIDER, FILE_TYPE_FILTERS, FOLDER_PERMISSIONS, FORM_PERMISSIONS, FORM_RESULT_PERMISSIONS, FileSelectorDialogComponent, FileUploaderComponent, FileUrlService, HasPermissionDirective, IconComponent, IconTypeEnum, IsEmptyImageDirective, LANGUAGE_PERMISSIONS, LazyMultiSelectComponent, LazySelectComponent, NOTIFICATION_PERMISSIONS, PERMISSIONS, PROFILE_PERMISSION_PROVIDER, PermissionValidatorService, PlatformService, PreventDefaultDirective, PrimeModule, ROLE_ACTION_PERMISSIONS, ROLE_PERMISSIONS, SHARED_MESSAGES, SKIP_ERROR_TOAST, STORAGE_CONFIG_PERMISSIONS, TRANSLATION_KEY_PERMISSIONS, TRANSLATION_PERMISSIONS, TranslatePipe, TranslateService, UPLOAD_CONFIG_PERMISSIONS, USER_ACTION_PERMISSIONS, USER_PERMISSIONS, USER_PERMISSION_PROVIDER, USER_PROVIDER, USER_ROLE_PERMISSIONS, UserMultiSelectComponent, UserSelectComponent, allPermissionsGuard, anyPermissionGuard, checkScrollPagination, errorCatchingInterceptor, evaluateLogicNode, evaluatePermission, formatFileSize, formatInTimezone, getAcceptString, getFileIconClass, getUserTimezone, hasAllPermissions, hasAnyPermission, hasPermission, isFileTypeAllowed, localToUtc, permissionGuard, provideValueAccessor, resolveTranslationModule, utcToLocal };
 //# sourceMappingURL=flusys-ng-shared.mjs.map