@rchemist/listgrid 0.2.10 → 0.2.12

package/dist/listgrid/components/fields/CustomOptionField.d.ts

@@ -9,7 +9,15 @@ interface CustomOptionFieldProps extends OptionalFieldProps {
 export declare class CustomOptionField extends OptionalField<CustomOptionField> {
     alias: string;
     multiple?: boolean | undefined;
+    private fetchUrlOverride?;
+    private bulkFetchUrlOverride?;
     constructor(name: string, order: number, alias: string, multiple?: boolean);
+    /** Override the single-alias fetch URL for this field instance. */
+    withFetchUrl(url: string): this;
+    /** Override the bulk-alias fetch URL for this field instance. */
+    withBulkFetchUrl(url: string): this;
+    getFetchUrl(): string;
+    getBulkFetchUrl(): string;
     /**
      * CustomOptionField 핵심 렌더링 로직
      */

package/dist/listgrid/components/fields/CustomOptionField.js

@@ -8,18 +8,32 @@ import { getExternalApiDataWithError, isEmpty, isEquals } from '../../misc';
 import { CheckBox } from '../../ui';
 import { isTrue } from '../../utils/BooleanUtil';
 import { MultiSelectBox } from '../../ui';
-const customOptionFetchUrl = '/option/by-alias';
-const customOptionBulkFetchUrl = '/option/by-aliases';
+import { getEndpoint } from '../../config/RuntimeConfig';
 // alias별 options 캐시 (동일 페이지 내에서 공유)
 const customOptionCache = new Map();
 export class CustomOptionField extends OptionalField {
     constructor(name, order, alias, multiple) {
         super(name, order, 'custom');
         this.alias = alias;
-        // this.tooltip = <div>이 선택 옵션은 <a href='/academic/system/option'>시스템 옵션</a> 에서 시스템 ID <span style={{ fontWeight: `bold`, marginRight: `4px` }}>{alias}</span> 로 등록된 옵션값 입니다.</div>;
         this.multiple = multiple ?? false;
         this.layout = 'half';
     }
+    /** Override the single-alias fetch URL for this field instance. */
+    withFetchUrl(url) {
+        this.fetchUrlOverride = url;
+        return this;
+    }
+    /** Override the bulk-alias fetch URL for this field instance. */
+    withBulkFetchUrl(url) {
+        this.bulkFetchUrlOverride = url;
+        return this;
+    }
+    getFetchUrl() {
+        return this.fetchUrlOverride ?? getEndpoint('customOptionByAlias');
+    }
+    getBulkFetchUrl() {
+        return this.bulkFetchUrlOverride ?? getEndpoint('customOptionByAliases');
+    }
     /**
      * CustomOptionField 핵심 렌더링 로직
      */
@@ -127,7 +141,7 @@ export async function getCustomOptionValues(alias) {
         return customOptionCache.get(alias);
     }
     const response = await getExternalApiDataWithError({
-        url: `${customOptionFetchUrl}/${alias}`,
+        url: `${getEndpoint('customOptionByAlias')}/${alias}`,
         method: 'GET',
     });
     // 데이터가 정상적으로 들어왔다면 옵션 데이터를 생성해 반환한다. 오류가 발생했다면(alias 가 없거나 하는 경우) 빈 배열을 반환한다.
@@ -153,7 +167,7 @@ export async function prefetchCustomOptions(aliases) {
     const params = new URLSearchParams();
     uncachedAliases.forEach((alias) => params.append('aliases', alias));
     const response = await getExternalApiDataWithError({
-        url: `${customOptionBulkFetchUrl}?${params.toString()}`,
+        url: `${getEndpoint('customOptionByAliases')}?${params.toString()}`,
         method: 'GET',
     });
     if (response.data && Array.isArray(response.data)) {

package/dist/listgrid/components/fields/ImageField.js

@@ -5,6 +5,7 @@ import { getInputRendererParameters } from '../helper/FieldRendererHelper';
 import { isEmpty } from '../../utils';
 import { getAccessableAssetUrl } from '../../misc';
 import { TextInput } from '../../ui';
+import { getEndpoint } from '../../config/RuntimeConfig';
 export class ImageField extends ListableFormField {
     constructor(name, order, config) {
         super(name, order, 'file');
@@ -107,15 +108,15 @@ export class ImageField extends ListableFormField {
                     const imgUrl = getAccessableAssetUrl(file.existFiles[0].url);
                     return {
                         result: (_jsx("div", { className: "rcm-image-field-cell", children: _jsxs("div", { className: "rcm-image-field-hover-group", children: [_jsx("img", { className: "rcm-image-field-thumb", src: `${imgUrl}`, onError: (event) => {
-                                            event.currentTarget.src = '/assets/images/no-image.png';
+                                            event.currentTarget.src = getEndpoint('noImageFallback');
                                         }, alt: "primary image" }), _jsx("div", { className: "rcm-image-field-preview-wrap", children: _jsx("img", { className: "rcm-image-field-preview", src: `${imgUrl}`, onError: (event) => {
-                                                event.currentTarget.src = '/assets/images/no-image.png';
+                                                event.currentTarget.src = getEndpoint('noImageFallback');
                                             }, alt: "enlarged image" }) })] }) })),
                     };
                 }
             }
             return {
-                result: (_jsx("div", { className: "rcm-image-field-cell", children: _jsx("img", { className: "rcm-image-field-thumb rcm-image-field-thumb-placeholder", src: `/assets/images/no-image.png`, alt: "no image" }) })),
+                result: (_jsx("div", { className: "rcm-image-field-cell", children: _jsx("img", { className: "rcm-image-field-thumb rcm-image-field-thumb-placeholder", src: getEndpoint('noImageFallback'), alt: "no image" }) })),
             };
         })();
     }

package/dist/listgrid/components/fields/MultipleAssetField.js

@@ -12,6 +12,7 @@ import { IconPhotoPlus, IconTrash } from '@tabler/icons-react';
 import { MultipleAssetUpload } from './view/MultipleAssetUpload';
 import { getAccessableAssetUrl } from '../../misc';
 import { RegexLowerEnglishNumber } from '../../misc';
+import { getEndpoint } from '../../config/RuntimeConfig';
 import { isTrue } from '../../utils/BooleanUtil';
 import { ViewHelpText } from '../form/ui/ViewHelpText';
 import { Tooltip } from '../../ui';
@@ -135,7 +136,7 @@ const MultipleAssetFieldView = (props) => {
                                                                     else {
                                                                         const imgUrl = getAccessableAssetUrl(value.assets[index].url);
                                                                         return (_jsx("img", { className: "rcm-asset-img", alt: `${value?.assets?.[index]?.description ?? ''}`, onError: (event) => {
-                                                                                event.currentTarget.src = '/assets/images/no-image.png';
+                                                                                event.currentTarget.src = getEndpoint('noImageFallback');
                                                                             }, src: `${imgUrl}` }));
                                                                     }
                                                                 })() }) }) }, `td-${index}`) }) })] }) }, `asset${index}`));

package/dist/listgrid/components/fields/PhoneNumberField.d.ts

@@ -4,16 +4,24 @@ import { Validation } from '../../validations/Validation';
 import { FieldRenderParameters } from '../../config/EntityField';
 import { RenderType } from '../../config/Config';
 import { EntityForm } from '../../config/EntityForm';
+import type { Session } from '../../auth/types';
 interface PhoneNumberFieldProps extends ListableFormFieldProps {
     enableSms?: boolean;
 }
 export declare class PhoneNumberField extends ListableFormField<PhoneNumberField> {
     enableSms?: boolean;
+    private smsPermissionOverride?;
     constructor(name: string, order: number, validations?: Validation[], enableSms?: boolean);
     /**
      * Enable SMS functionality
      */
     withSms(enabled?: boolean): this;
+    /**
+     * Override the SMS send permission predicate for this field instance.
+     * If not set, RuntimeConfig.permissions.canSendSms is used (library default: always true).
+     */
+    withSmsPermission(predicate: (session?: Session) => boolean): this;
+    private resolveCanSendSms;
     /**
      * PhoneNumberField 핵심 렌더링 로직
      */

package/dist/listgrid/components/fields/PhoneNumberField.js

@@ -7,6 +7,7 @@ import { getInputRendererParameters } from '../helper/FieldRendererHelper';
 import { formatPhoneNumber, removePhoneNumberHyphens } from '../../utils/PhoneUtil';
 import { PhoneNumberFieldView } from './view/PhoneNumberFieldView';
 import { PhoneNumberListView } from './view/PhoneNumberListView';
+import { getPermission } from '../../config/RuntimeConfig';
 export class PhoneNumberField extends ListableFormField {
     constructor(name, order, validations, enableSms) {
         super(name, order, 'phone');
@@ -21,6 +22,18 @@ export class PhoneNumberField extends ListableFormField {
         this.enableSms = enabled;
         return this;
     }
+    /**
+     * Override the SMS send permission predicate for this field instance.
+     * If not set, RuntimeConfig.permissions.canSendSms is used (library default: always true).
+     */
+    withSmsPermission(predicate) {
+        this.smsPermissionOverride = predicate;
+        return this;
+    }
+    resolveCanSendSms(session) {
+        const fn = this.smsPermissionOverride ?? getPermission('canSendSms');
+        return fn(session);
+    }
     /**
      * PhoneNumberField 핵심 렌더링 로직
      */
@@ -38,7 +51,7 @@ export class PhoneNumberField extends ListableFormField {
                     };
                 }
             }
-            return (_jsx(PhoneNumberFieldView, { name: inputParams.name, value: inputParams.value, onChange: inputParams.onChange, onError: inputParams.onError, readonly: inputParams.readonly, placeHolder: inputParams.placeHolder, regex: regex, enableSms: this.enableSms, session: params.entityForm.session, renderType: params.entityForm.getRenderType() }));
+            return (_jsx(PhoneNumberFieldView, { name: inputParams.name, value: inputParams.value, onChange: inputParams.onChange, onError: inputParams.onError, readonly: inputParams.readonly, placeHolder: inputParams.placeHolder, regex: regex, enableSms: this.enableSms, session: params.entityForm.session, renderType: params.entityForm.getRenderType(), canSendSmsByPermission: this.resolveCanSendSms(params.entityForm.session) }));
         })();
     }
     /**
@@ -72,7 +85,7 @@ export class PhoneNumberField extends ListableFormField {
         // If SMS is enabled and we have a value, use PhoneNumberListView
         if (this.enableSms && value) {
             return Promise.resolve({
-                result: (_jsx(PhoneNumberListView, { phoneNumber: value, formattedValue: formatted, enableSms: this.enableSms, session: props.entityForm.session })),
+                result: (_jsx(PhoneNumberListView, { phoneNumber: value, formattedValue: formatted, enableSms: this.enableSms, session: props.entityForm.session, canSendSmsByPermission: this.resolveCanSendSms(props.entityForm.session) })),
                 linkOnCell: true, // Prevent row click from triggering when clicking the dropdown
             });
         }
@@ -82,7 +95,11 @@ export class PhoneNumberField extends ListableFormField {
      * PhoneNumberField 인스턴스 생성
      */
     createInstance(name, order) {
-        return new PhoneNumberField(name, order, this.validations, this.enableSms);
+        const cloned = new PhoneNumberField(name, order, this.validations, this.enableSms);
+        if (this.smsPermissionOverride) {
+            cloned.smsPermissionOverride = this.smsPermissionOverride;
+        }
+        return cloned;
     }
     static create(props) {
         const field = new PhoneNumberField(props.name, props.order, props.validations, props.enableSms);

package/dist/listgrid/components/fields/view/MultipleAssetUpload.js

@@ -1,13 +1,10 @@
 'use client';
 'use client';
 import { jsx as _jsx } from "react/jsx-runtime";
-import { ASSET_SERVER_URL, removeAssetServerPrefix } from '../../../misc';
+import { removeAssetServerPrefix } from '../../../misc';
 import { getTranslation } from '../../../utils/i18n';
 import { FileFieldValue, FileUploadInput } from '../../../ui';
 import { useEffect, useState } from 'react';
-const assetProcessUrl = '/asset/upload-file';
-const assetServerUrl = ASSET_SERVER_URL;
-const ASSET_PREFIX = '/static-resource/';
 export const MultipleAssetUpload = (props) => {
     const maxFiles = 1;
     const [fileValue, setFileValue] = useState(FileFieldValue.create());

package/dist/listgrid/components/fields/view/PhoneNumberFieldView.d.ts

@@ -14,6 +14,8 @@ interface PhoneNumberFieldViewProps {
     enableSms?: boolean | undefined;
     session?: Session | undefined;
     renderType?: RenderType | undefined;
+    /** Permission to send SMS, resolved by PhoneNumberField at render time. */
+    canSendSmsByPermission?: boolean | undefined;
 }
-export declare const PhoneNumberFieldView: ({ name, value, onChange, onError, readonly, placeHolder, regex, enableSms, session, renderType, }: PhoneNumberFieldViewProps) => import("react/jsx-runtime").JSX.Element;
+export declare const PhoneNumberFieldView: ({ name, value, onChange, onError, readonly, placeHolder, regex, enableSms, session, renderType, canSendSmsByPermission, }: PhoneNumberFieldViewProps) => import("react/jsx-runtime").JSX.Element;
 export {};

package/dist/listgrid/components/fields/view/PhoneNumberFieldView.js

@@ -8,7 +8,7 @@ import { showToast } from '../../../message';
 import { readonlyClass } from '../../../ui';
 import { formatPhoneNumber, removePhoneNumberHyphens } from '../../../utils/PhoneUtil';
 import { SmsModal } from './SmsModal';
-export const PhoneNumberFieldView = ({ name, value, onChange, onError, readonly = false, placeHolder, regex, enableSms, session, renderType, }) => {
+export const PhoneNumberFieldView = ({ name, value, onChange, onError, readonly = false, placeHolder, regex, enableSms, session, renderType, canSendSmsByPermission, }) => {
     const { openModal, closeModal } = useModalManagerStore();
     const [displayValue, setDisplayValue] = useState('');
     // Sync displayValue when external value changes
@@ -21,11 +21,10 @@ export const PhoneNumberFieldView = ({ name, value, onChange, onError, readonly
             setDisplayValue('');
         }
     }, [value]);
-    // Check if user has admin role
-    const roles = session?.authentication?.roles ?? session?.roles ?? [];
-    const isAdmin = roles.includes('ROLE_ADMIN');
-    // SMS can be sent if: admin + enableSms + phoneNumber + update mode
-    const canSendSms = isAdmin && enableSms && displayValue && renderType === 'update';
+    // SMS can be sent if: permitted + enableSms + phoneNumber + update mode
+    // `canSendSmsByPermission` is evaluated and injected by PhoneNumberField
+    // (either field-level withSmsPermission override or RuntimeConfig.permissions.canSendSms).
+    const canSendSms = canSendSmsByPermission && enableSms && displayValue && renderType === 'update';
     // Copy is always available when there's a phone number
     const canCopy = !!displayValue;
     const handleChange = (e) => {

package/dist/listgrid/components/fields/view/PhoneNumberListView.d.ts

@@ -4,6 +4,8 @@ interface PhoneNumberListViewProps {
     formattedValue: string;
     enableSms?: boolean | undefined;
     session?: Session | undefined;
+    /** Permission to send SMS, resolved by PhoneNumberField at render time. */
+    canSendSmsByPermission?: boolean | undefined;
 }
-export declare const PhoneNumberListView: ({ phoneNumber, formattedValue, enableSms, session, }: PhoneNumberListViewProps) => import("react/jsx-runtime").JSX.Element;
+export declare const PhoneNumberListView: ({ phoneNumber, formattedValue, enableSms, canSendSmsByPermission, }: PhoneNumberListViewProps) => import("react/jsx-runtime").JSX.Element;
 export {};

package/dist/listgrid/components/fields/view/PhoneNumberListView.js

@@ -7,13 +7,11 @@ import { getOverlayZIndex, POPOVER_Z_INDEX, useModalManagerStore } from '../../.
 import { showToast } from '../../../message';
 import { SmsModal } from './SmsModal';
 import { formatPhoneNumber } from '../../../utils/PhoneUtil';
-export const PhoneNumberListView = ({ phoneNumber, formattedValue, enableSms, session, }) => {
+export const PhoneNumberListView = ({ phoneNumber, formattedValue, enableSms, canSendSmsByPermission, }) => {
     const { openModal, closeModal } = useModalManagerStore();
-    // Check if user has admin role
-    const roles = session?.authentication?.roles ?? session?.roles ?? [];
-    const isAdmin = roles.includes('ROLE_ADMIN');
-    // SMS can be sent if: admin + enableSms + phoneNumber
-    const canSendSms = isAdmin && enableSms && phoneNumber;
+    // SMS can be sent if: permitted + enableSms + phoneNumber
+    // `canSendSmsByPermission` is evaluated and injected by PhoneNumberField.
+    const canSendSms = canSendSmsByPermission && enableSms && phoneNumber;
     const handleCopy = async (e) => {
         e.stopPropagation();
         try {

package/dist/listgrid/components/fields/view/SmsModal.js

@@ -3,6 +3,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useState } from 'react';
 import { RequestUtil } from '../../../misc';
 import { showAlert, showSuccess } from '../../../message';
+import { getEndpoint } from '../../../config/RuntimeConfig';
 export const SmsModal = ({ phoneNumber, onClose }) => {
     const [senderAddress, setSenderAddress] = useState('');
     const [content, setContent] = useState('');
@@ -34,7 +35,7 @@ export const SmsModal = ({ phoneNumber, onClose }) => {
             setLoadingSenderList(true);
             try {
                 const response = await RequestUtil.getExternalApiDataWithError({
-                    url: '/api/v1/sms-sender/list',
+                    url: getEndpoint('smsSenderList'),
                     method: 'GET',
                 });
                 const senderCache = response.data;
@@ -86,7 +87,7 @@ export const SmsModal = ({ phoneNumber, onClose }) => {
                 toList: [{ address: phoneNumber }],
             };
             const response = await RequestUtil.getExternalApiDataWithError({
-                url: '/notification/send',
+                url: getEndpoint('smsNotificationSend'),
                 method: 'POST',
                 formData: notificationQueue,
             });

package/dist/listgrid/components/fields/view/XrefAvailableDateMappingView.js

@@ -141,7 +141,11 @@ export const XrefAvailableDateMappingView = ({ entityForm, ...props }) => {
             return { entityForm: form.withErrors(fieldErrors), errors: ['입력 값이 올바르지 않습니다.'] };
         }
         const formData = await form.getSubmitFormData();
-        const target = formData.data['mapping'];
+        // processManyToOneField stores the ManyToOneField value as `${name}Id` on formData.data,
+        // so the inner 'mapping' field is read as 'mappingId'. Reading 'mapping' here would yield
+        // undefined and cause the outer view to query the backend with an empty `IN []` filter,
+        // which the backend treats as "no filter" and returns the entire list.
+        const target = formData.data['mappingId'];
         if (!isEmpty(mappingValue.mapped)) {
             let duplicated = false;
             for (const item of mappingValue.mapped) {

package/dist/listgrid/components/fields/view/XrefPreferMappingView.js

@@ -119,7 +119,11 @@ export const XrefPreferMappingView = ({ entityForm, ...props }) => {
             return { entityForm: form.withErrors(fieldErrors), errors: ['입력 값이 올바르지 않습니다.'] };
         }
         const formData = await form.getSubmitFormData();
-        const target = formData.data['mapping'];
+        // processManyToOneField stores the ManyToOneField value as `${name}Id` on formData.data,
+        // so the inner 'mapping' field is read as 'mappingId'. Reading 'mapping' here would yield
+        // undefined and cause the outer view to query the backend with an empty `IN []` filter,
+        // which the backend treats as "no filter" and returns the entire list.
+        const target = formData.data['mappingId'];
         if (!isEmpty(mappingValue.mapped)) {
             let duplicated = false;
             for (const item of mappingValue.mapped) {

package/dist/listgrid/components/list/ViewListGrid.js

@@ -17,7 +17,8 @@ import { useListGridLogic } from './hooks/useListGridLogic';
 import { ShowNotifications } from '../helper/ShowNotifications';
 import { Stack } from '../../ui';
 import { SubCollectionViewModal } from './ui/SubCollectionViewModal';
-import { hasAnyRole, useSession } from '../../auth';
+import { useSession } from '../../auth';
+import { getPermission } from '../../config/RuntimeConfig';
 import { perfLog } from './utils/performanceLogger';
 import { getListGridThemeByVariant, ListGridThemeProvider, useListGridTheme, } from './context/ListGridThemeContext';
 import { EntityFormScopeProvider, useEntityFormScope } from './context/EntityFormScopeContext';
@@ -96,13 +97,14 @@ export const ViewListGrid = (props) => {
     // Hook은 조건문 전에 호출되어야 함
     const sessionFromHook = useSession();
     const session = props.session ?? entityForm.getSession() ?? sessionFromHook;
-    // 관리자 권한 체크 (새창 열기 버튼 표시용)
-    // 기존 session 변수를 사용하여 불필요한 API 호출 방지
+    // "새 창 열기" 버튼 표시 권한.
+    // 라이브러리 자체는 role 을 모르며, RuntimeConfig.permissions.canOpenInNewWindow 에
+    // 주입된 predicate 가 판정한다. 호스트가 설정하지 않으면 항상 true.
+    //
+    // TODO: ListGrid 단위 override (withOpenInNewWindowPermission) 를 추가할 수도 있지만,
+    // 현재는 전역 predicate 만 사용한다 — 필요 시 listGrid prop 으로 확장.
     const isAdmin = React.useMemo(() => {
-        if (session) {
-            return hasAnyRole(session, 'ROLE_SUPER_ADMIN', 'ROLE_ADMIN', 'ROLE_STAFF');
-        }
-        return false;
+        return getPermission('canOpenInNewWindow')(session ?? undefined);
     }, [session]);
     // QuickSearch 필드명 Set 생성 (헤더 필터 비활성화용)
     // Note: 이 hook은 early return 이전에 있어야 hooks 순서가 일정함

package/dist/listgrid/components/revision/RevisionField.d.ts

@@ -4,8 +4,12 @@ import { FieldRenderParameters, FilterRenderParameters } from '../../config/Enti
 interface RevisionFieldProps extends FormFieldProps {
 }
 export declare class RevisionField extends FormField<RevisionField> {
+    private apiUrlOverride?;
     constructor(name: string, order: number);
     protected createInstance(name: string, order: number): RevisionField;
+    /** Override the revision API URL for this field instance. */
+    withApiUrl(url: string): this;
+    getApiUrl(): string;
     protected renderInstance(params: FieldRenderParameters): Promise<React.ReactNode | null>;
     protected renderListFilterInstance(params: FilterRenderParameters): Promise<React.ReactNode | null>;
     static create(props: RevisionFieldProps): RevisionField;

package/dist/listgrid/components/revision/RevisionField.js

@@ -11,7 +11,7 @@ import { IconHistory } from '@tabler/icons-react';
 import { fDateTime } from '../../misc';
 import { Pagination } from '../../ui';
 import { getTranslation } from '../../utils/i18n';
-const revisionApiUrl = '/revision';
+import { getEndpoint } from '../../config/RuntimeConfig';
 // Audit/timestamp fields excluded from diff (always change on every update)
 const AUDIT_FIELD_NAMES = new Set([
     'updatedAt',
@@ -66,6 +66,14 @@ export class RevisionField extends FormField {
     createInstance(name, order) {
         return new RevisionField(name, order);
     }
+    /** Override the revision API URL for this field instance. */
+    withApiUrl(url) {
+        this.apiUrlOverride = url;
+        return this;
+    }
+    getApiUrl() {
+        return this.apiUrlOverride ?? getEndpoint('revisionApi');
+    }
     async renderInstance(params) {
         const { entityForm, subCollectionEntity } = params;
         // subCollectionEntity인 경우 렌더링하지 않음
@@ -76,7 +84,7 @@ export class RevisionField extends FormField {
         if (entityForm.getRenderType() === 'create') {
             return null;
         }
-        return _jsx(RevisionFieldRenderer, { entityForm: entityForm });
+        return _jsx(RevisionFieldRenderer, { entityForm: entityForm, apiUrl: this.getApiUrl() });
     }
     renderListFilterInstance(params) {
         // 리스트 필터에서는 지원하지 않음
@@ -86,7 +94,7 @@ export class RevisionField extends FormField {
         return new RevisionField(props.name, props.order).copyFields(props, true);
     }
 }
-const RevisionFieldRenderer = ({ entityForm }) => {
+const RevisionFieldRenderer = ({ entityForm, apiUrl }) => {
     const [revisions, setRevisions] = useState([]);
     const [loading, setLoading] = useState(false);
     const [totalPage, setTotalPage] = useState(0);
@@ -108,7 +116,7 @@ const RevisionFieldRenderer = ({ entityForm }) => {
                 .withSort('createdAt', 'DESC')
                 .withPage(page)
                 .withPageSize(10);
-            const searchResult = await PageResult.fetchListData(revisionApiUrl, searchForm);
+            const searchResult = await PageResult.fetchListData(apiUrl, searchForm);
             if (searchResult && searchResult.list) {
                 setRevisions(searchResult.list);
                 setTotalPage(searchResult.totalPage);

package/dist/listgrid/config/EntityForm.js

@@ -8,8 +8,7 @@ import { delay, entityErrorToString } from './EntityFormMethod';
 import { EntityFormExtensions } from './form/EntityFormExtensions';
 import { ExtensionPoint } from '../extensions/EntityFormExtension.types';
 import { PhoneNumberField } from '../components/fields/PhoneNumberField';
-import { createSmsHistoryField } from '../extensions/FieldExtensions';
-import { hasAnyRole } from '../auth';
+import { createSmsHistoryField, getPhoneNumberSmsHistoryInjectConfig, } from '../extensions/FieldExtensions';
 export class EntityForm extends EntityFormExtensions {
     constructor(name, url) {
         super(name, url);
@@ -169,21 +168,23 @@ export class EntityForm extends EntityFormExtensions {
                 const newField = field.withOptions(options).clone(true);
                 entityForm.fields.set(field.getName(), newField);
             }
-            // PhoneNumberField 가 있다면 sourceType, enableSms 설정
+            // PhoneNumberField 자동 주입: 호스트 앱이 registerPhoneNumberSmsHistoryInject 로
+            // 활성화한 경우에만 SMS 발송 이력 탭을 추가한다. 권한 판정은 호스트가 주입한
+            // predicate 를 사용하며, 라이브러리 자체는 role 문자열을 알지 않는다.
             if (field instanceof PhoneNumberField) {
-                // 만약 이 PhoneNumberField 의 enableSMS 가 true 라면, view 페이지에서 SMS 발송 이력 필드를 자동으로 추가한다.
-                if (isTrue(field.enableSms) &&
-                    hasAnyRole(entityForm.session, 'ROLE_SUPER_ADMIN', 'ROLE_ADMIN', 'ROLE_STAFF')) {
-                    // SMS 발송 이력 탭 정의 (STATUS_TAB_INFO.order - 10 = 999990)
+                const injectConfig = getPhoneNumberSmsHistoryInjectConfig();
+                if (injectConfig.enabled &&
+                    isTrue(field.enableSms) &&
+                    injectConfig.permission(entityForm.session)) {
                     const SMS_HISTORY_TAB = {
-                        id: 'smsHistory',
-                        label: 'SMS 발송 이력',
-                        order: STATUS_TAB_INFO.order - 10,
+                        id: injectConfig.tabId,
+                        label: injectConfig.tabLabel,
+                        order: STATUS_TAB_INFO.order + injectConfig.tabOrderOffset,
                         hidden: false,
                     };
                     const smsHistoryField = createSmsHistoryField(field.getName() + 'SmsHistory', field.getOrder() + 1, field.getName());
                     if (smsHistoryField) {
-                        smsHistoryField.withLabel('SMS 발송 이력').withModifyOnly().withHideLabel(true);
+                        smsHistoryField.withLabel(injectConfig.tabLabel).withModifyOnly().withHideLabel(true);
                         entityForm.addFields({
                             tab: SMS_HISTORY_TAB,
                             items: [smsHistoryField],

package/dist/listgrid/config/RuntimeConfig.d.ts

@@ -1,3 +1,42 @@
+import type { Session } from '../auth/types';
+/**
+ * Named API endpoints used internally by built-in fields and features.
+ * Hosts override at bootstrap via `configureRuntime({ endpoints: { ... } })`.
+ * Individual fields can still override via their own chainable setters.
+ */
+export interface ListGridEndpoints {
+    /** Excel import suffix appended to an entity's base URL. */
+    excelUpload: string;
+    /** Excel download history logging endpoint. */
+    excelDownloadHistory: string;
+    /** Custom option single-alias fetch. */
+    customOptionByAlias: string;
+    /** Custom option bulk-alias fetch. */
+    customOptionByAliases: string;
+    /** Asset upload endpoint (MultipleAssetField, etc.). */
+    assetUpload: string;
+    /** Static resource prefix for asset URLs. */
+    staticResourcePrefix: string;
+    /** SMS sender list endpoint (SMS modal). */
+    smsSenderList: string;
+    /** SMS send endpoint. */
+    smsNotificationSend: string;
+    /** Revision history endpoint. */
+    revisionApi: string;
+    /** Fallback image URL when an asset cannot be loaded. */
+    noImageFallback: string;
+}
+/**
+ * Permission predicate hooks. Each returns `true` when the UI affordance
+ * is allowed for the given session. Library defaults are permissive
+ * (`() => true`); hosts install their own role checks at bootstrap.
+ */
+export interface ListGridPermissions {
+    /** PhoneNumberField "Send SMS" button visibility. */
+    canSendSms: (session?: Session) => boolean;
+    /** ListGrid "Open in new window" button visibility. */
+    canOpenInNewWindow: (session?: Session) => boolean;
+}
 export interface RuntimeConfig {
     /** Enables server-side-rendered list caching hints. */
     cacheControl?: boolean;
@@ -13,6 +52,24 @@ export interface RuntimeConfig {
     kakaoMapAppKey?: string;
     /** simpleCrypt passphrase / secret (replaces NEXT_PUBLIC_CRYPT_KEY). */
     cryptKey?: string;
+    /** Named API endpoints; hosts override any subset. */
+    endpoints?: Partial<ListGridEndpoints>;
+    /** Permission predicates; hosts override any subset. */
+    permissions?: Partial<ListGridPermissions>;
+}
+interface ResolvedRuntimeConfig {
+    cacheControl: boolean;
+    useServerSideCache: boolean;
+    searchFormHashKey: string;
+    debugListGridPerformance: boolean;
+    isDevelopment: boolean;
+    kakaoMapAppKey: string;
+    cryptKey: string;
+    endpoints: ListGridEndpoints;
+    permissions: ListGridPermissions;
 }
 export declare function configureRuntime(config: RuntimeConfig): void;
-export declare function getRuntimeConfig(): Required<RuntimeConfig>;
+export declare function getRuntimeConfig(): ResolvedRuntimeConfig;
+export declare function getEndpoint(name: keyof ListGridEndpoints): string;
+export declare function getPermission(name: keyof ListGridPermissions): (session?: Session) => boolean;
+export {};

package/dist/listgrid/config/RuntimeConfig.js

@@ -4,6 +4,28 @@
 // framework-agnostic registry. Host apps call `configureRuntime({...})`
 // at bootstrap with their platform-specific values (from Next env vars,
 // Vite import.meta.env, custom config, etc.).
+//
+// Stage 9 (0.3.0) — host-coupling detox.
+// Two registries were added to replace hardcoded project literals:
+//   - `endpoints`: named API paths used by built-in features
+//   - `permissions`: predicate hooks for UI permission gates
+// See docs/REFACTOR_HOST_COUPLING.md for rationale.
+const DEFAULT_ENDPOINTS = {
+    excelUpload: '/excel-upload',
+    excelDownloadHistory: '/excel-download-history/add',
+    customOptionByAlias: '/option/by-alias',
+    customOptionByAliases: '/option/by-aliases',
+    assetUpload: '/asset/upload-file',
+    staticResourcePrefix: '/static-resource/',
+    smsSenderList: '/api/v1/sms-sender/list',
+    smsNotificationSend: '/notification/send',
+    revisionApi: '/revision',
+    noImageFallback: '/assets/images/no-image.png',
+};
+const DEFAULT_PERMISSIONS = {
+    canSendSms: () => true,
+    canOpenInNewWindow: () => true,
+};
 const DEFAULT = {
     cacheControl: false,
     useServerSideCache: false,
@@ -12,11 +34,29 @@ const DEFAULT = {
     isDevelopment: false,
     kakaoMapAppKey: '',
     cryptKey: '',
+    endpoints: { ...DEFAULT_ENDPOINTS },
+    permissions: { ...DEFAULT_PERMISSIONS },
+};
+let _config = {
+    ...DEFAULT,
+    endpoints: { ...DEFAULT_ENDPOINTS },
+    permissions: { ...DEFAULT_PERMISSIONS },
 };
-let _config = { ...DEFAULT };
 export function configureRuntime(config) {
-    _config = { ...DEFAULT, ..._config, ...config };
+    const { endpoints: epOverride, permissions: pmOverride, ...scalarOverrides } = config;
+    _config = {
+        ..._config,
+        ...scalarOverrides,
+        endpoints: { ..._config.endpoints, ...(epOverride ?? {}) },
+        permissions: { ..._config.permissions, ...(pmOverride ?? {}) },
+    };
 }
 export function getRuntimeConfig() {
     return _config;
 }
+export function getEndpoint(name) {
+    return _config.endpoints[name];
+}
+export function getPermission(name) {
+    return _config.permissions[name];
+}

package/dist/listgrid/extensions/FieldExtensions.d.ts

@@ -1,5 +1,30 @@
+import type { Session } from '../auth/types';
 export interface SmsHistoryFieldConstructor {
     new (fieldName: string, order: number, targetFieldName: string): any;
 }
 export declare function registerSmsHistoryField(ctor: SmsHistoryFieldConstructor): void;
 export declare function createSmsHistoryField(fieldName: string, order: number, targetFieldName: string): any | null;
+/**
+ * Auto-injection configuration for the SMS history tab.
+ *
+ * When a `PhoneNumberField` with `enableSms=true` is processed during EntityForm
+ * initialization and this injector is registered with `enabled: true`, the
+ * library adds a "SMS 발송 이력" tab containing an `SmsHistoryField` (obtained
+ * via `createSmsHistoryField`) next to the phone number field.
+ *
+ * The `permission` predicate gates the injection per user session. If unset,
+ * the tab is injected for every session (library default: permissive).
+ *
+ * Default: disabled (opt-in). Hosts must explicitly call
+ * `registerPhoneNumberSmsHistoryInject({ enabled: true, ... })` at bootstrap.
+ */
+export interface PhoneNumberSmsHistoryInjectConfig {
+    enabled: boolean;
+    permission?: (session?: Session) => boolean;
+    tabLabel?: string;
+    tabId?: string;
+    /** Offset applied to STATUS_TAB_INFO.order to position the tab. Default: -10. */
+    tabOrderOffset?: number;
+}
+export declare function registerPhoneNumberSmsHistoryInject(config: PhoneNumberSmsHistoryInjectConfig): void;
+export declare function getPhoneNumberSmsHistoryInjectConfig(): Required<PhoneNumberSmsHistoryInjectConfig>;

package/dist/listgrid/extensions/FieldExtensions.js

@@ -1,12 +1,13 @@
-// Stage 3 — Host-supplied domain field extension registry.
+// Host-supplied domain field extension registry.
 //
-// The original library hard-wired `SmsHistoryField` (an academic-system
-// domain artifact from a separate entities module) directly in EntityForm.tsx. A truly
-// reusable library cannot assume SMS history exists; instead host apps
-// register their own SMS-history-like field implementation here.
+// `@rchemist/listgrid` does not ship a built-in `SmsHistoryField` implementation
+// because the field depends on a host application's SMS history schema.
+// Host apps register their own implementation via `registerSmsHistoryField`
+// (and optionally opt into the auto-injection behaviour via
+// `registerPhoneNumberSmsHistoryInject`).
 //
 // If no host implementation is registered, the SMS history behaviour is
-// silently skipped — callers should check `createSmsHistoryField` for null.
+// silently skipped — callers check `createSmsHistoryField` for null.
 let _smsHistoryFieldCtor;
 export function registerSmsHistoryField(ctor) {
     _smsHistoryFieldCtor = ctor;
@@ -19,3 +20,22 @@ export function createSmsHistoryField(fieldName, order, targetFieldName) {
     }
     return new _smsHistoryFieldCtor(fieldName, order, targetFieldName);
 }
+let _smsHistoryInjectConfig = {
+    enabled: false,
+    permission: () => true,
+    tabLabel: 'SMS 발송 이력',
+    tabId: 'smsHistory',
+    tabOrderOffset: -10,
+};
+export function registerPhoneNumberSmsHistoryInject(config) {
+    _smsHistoryInjectConfig = {
+        enabled: config.enabled,
+        permission: config.permission ?? (() => true),
+        tabLabel: config.tabLabel ?? 'SMS 발송 이력',
+        tabId: config.tabId ?? 'smsHistory',
+        tabOrderOffset: config.tabOrderOffset ?? -10,
+    };
+}
+export function getPhoneNumberSmsHistoryInjectConfig() {
+    return _smsHistoryInjectConfig;
+}

package/dist/listgrid/index.d.ts

@@ -11,9 +11,10 @@ export { configureLoading, useLoadingStore } from './loading';
 export type { LoadingStore } from './loading';
 export { useModalManagerStore, configureOverlayZIndex, getOverlayZIndex, POPOVER_Z_INDEX, } from './store';
 export type { ModalOptions } from './store';
-export { registerSmsHistoryField, createSmsHistoryField } from './extensions/FieldExtensions';
-export { configureRuntime, getRuntimeConfig } from './config/RuntimeConfig';
-export type { RuntimeConfig } from './config/RuntimeConfig';
+export { registerSmsHistoryField, createSmsHistoryField, registerPhoneNumberSmsHistoryInject, getPhoneNumberSmsHistoryInjectConfig, } from './extensions/FieldExtensions';
+export type { SmsHistoryFieldConstructor, PhoneNumberSmsHistoryInjectConfig, } from './extensions/FieldExtensions';
+export { configureRuntime, getRuntimeConfig, getEndpoint, getPermission, } from './config/RuntimeConfig';
+export type { RuntimeConfig, ListGridEndpoints, ListGridPermissions, } from './config/RuntimeConfig';
 export { configureTranslator, getTranslation } from './utils/i18n';
 export type { Translator, TranslatorI18n, TranslatorFactory } from './utils/i18n';
 export { registerMenuPermissionChecker, checkAdminMenuPermission, DEFAULT_MENU_ALIAS, } from './menu';

package/dist/listgrid/index.js

@@ -12,10 +12,12 @@ export { configureMessages, showAlert, showConfirm, showError, showSuccess, show
 export { configureLoading, useLoadingStore } from './loading';
 // Modal manager store (zustand-based).
 export { useModalManagerStore, configureOverlayZIndex, getOverlayZIndex, POPOVER_Z_INDEX, } from './store';
-// Field extension registry — host apps register domain-specific field classes.
-export { registerSmsHistoryField, createSmsHistoryField } from './extensions/FieldExtensions';
-// Runtime configuration — replaces hard-coded process.env.NEXT_PUBLIC_* access.
-export { configureRuntime, getRuntimeConfig } from './config/RuntimeConfig';
+// Field extension registry — host apps register domain-specific field classes
+// and opt into domain-specific auto-injection behaviours.
+export { registerSmsHistoryField, createSmsHistoryField, registerPhoneNumberSmsHistoryInject, getPhoneNumberSmsHistoryInjectConfig, } from './extensions/FieldExtensions';
+// Runtime configuration — replaces hard-coded process.env.NEXT_PUBLIC_* access
+// and hosts the endpoint/permission registries for framework-agnostic wiring.
+export { configureRuntime, getRuntimeConfig, getEndpoint, getPermission, } from './config/RuntimeConfig';
 // i18n extension point — host injects a translator factory at bootstrap.
 export { configureTranslator, getTranslation } from './utils/i18n';
 // Menu permission checker — host apps register a real checker that decides

package/dist/listgrid/transfer/Provider/ExcelProvider.js

@@ -2,6 +2,7 @@ import { isTrue } from '../../utils/BooleanUtil';
 import * as FileSaver from 'file-saver';
 import * as XLSX from 'xlsx-js-style';
 import { isDataRowSet } from '../Type';
+import { getEndpoint } from '../../config/RuntimeConfig';
 export async function logExcelDownload(usePassword, condition) {
     try {
         const url = typeof window !== 'undefined' ? window.location.pathname : '';
@@ -9,7 +10,7 @@ export async function logExcelDownload(usePassword, condition) {
         const conditionStr = raw.substring(0, 2000);
         const { callExternalHttpRequest } = await import('../../utils/RequestUtil');
         await callExternalHttpRequest({
-            url: '/excel-download-history/add',
+            url: getEndpoint('excelDownloadHistory'),
             method: 'POST',
             formData: { url, condition: conditionStr, usePassword },
         });

package/dist/listgrid/transfer/Type.js

@@ -1,3 +1,4 @@
+import { getEndpoint } from '../config/RuntimeConfig';
 import { fDate, fDateTime } from '../misc';
 import { isTrue } from '../utils/BooleanUtil';
 import { getPlainText } from '../ui';
@@ -91,8 +92,8 @@ export class DataTransferConfig {
             this.export.url = url;
         }
         if (this.import.url === undefined) {
-            // 엑셀 업로드 기본 경로
-            this.import.url = url + '/excel-upload';
+            // 엑셀 업로드 기본 경로 (RuntimeConfig.endpoints.excelUpload 로 오버라이드 가능)
+            this.import.url = url + getEndpoint('excelUpload');
         }
     }
     isSupportExport() {

package/dist/listgrid/utils/i18n.js

@@ -1,5 +1,5 @@
 // i18n contract: library emits translation keys (e.g. "common.save",
-// "menu.academic.admission.notice"), host maps them to strings.
+// "menu.users"), host maps them to strings.
 //
 // Usage:
 //   import { configureTranslator } from '@rchemist/listgrid';

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rchemist/listgrid",
-    "version": "0.2.10",
+    "version": "0.2.12",
     "private": false,
     "description": "Framework-free React CRUD UI engine — primitive-based design system, data-attr theming, and a full list/form renderer for RCM-framework-style entity backends.",
     "keywords": [