@fiado/type-kit 3.111.0 → 3.112.0

package/_test_/unit/platformRbac/enums/__snapshots__/permissionBits.test.ts.snap

@@ -1,6 +1,6 @@
 // Jest Snapshot v1, https://jestjs.io/docs/snapshot-testing
 
-exports[`PERMISSION_BIT_ORDER PERMS_VERSION es número estable 1`] = `785870733`;
+exports[`PERMISSION_BIT_ORDER PERMS_VERSION es número estable 1`] = `488222087`;
 
 exports[`PERMISSION_BIT_ORDER append-only: snapshot del ORDEN COMPLETO (rompe ante cualquier reorden/inserción) 1`] = `
 [
@@ -123,5 +123,6 @@ exports[`PERMISSION_BIT_ORDER append-only: snapshot del ORDEN COMPLETO (rompe an
   "platform.tenant.userfields.manage",
   "agents.app.access",
   "platform.user.create.lateral",
+  "platform.application.manage",
 ]
 `;

package/bin/platformRbac/dtos/CreateTenantRequest.d.ts

@@ -19,4 +19,6 @@ export declare class CreateTenantRequest {
     tokenValidationMode?: TokenValidationMode;
     /** Tipo de tenant a crear. Si se omite, el onboarding aplica su default (hoy: retail). */
     tenantType?: TenantType;
+    /** DEC-RBAC-034: aplicación (plantilla) de la que se crea el tenant; opcional, fallback a tenantType (back-compat). */
+    applicationId?: string;
 }

package/bin/platformRbac/dtos/CreateTenantRequest.js

@@ -80,3 +80,9 @@ __decorate([
     (0, class_validator_1.IsEnum)(tenantTypes_1.TenantType),
     __metadata("design:type", String)
 ], CreateTenantRequest.prototype, "tenantType", void 0);
+__decorate([
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], CreateTenantRequest.prototype, "applicationId", void 0);

package/bin/platformRbac/enums/Permission.d.ts

@@ -53,6 +53,7 @@ export declare enum Permission {
     PLATFORM_ROLE_DELETE = "platform.role.delete",
     PLATFORM_AUDIT_VIEW = "platform.audit.view",
     PLATFORM_TENANT_USERFIELDS_MANAGE = "platform.tenant.userfields.manage",
+    PLATFORM_APPLICATION_MANAGE = "platform.application.manage",
     TENANT_USER_CREATE = "tenant.user.create",
     TENANT_USER_CREATE_LATERAL = "tenant.user.create.lateral",
     TENANT_USER_READ = "tenant.user.read",

package/bin/platformRbac/enums/Permission.js

@@ -68,6 +68,8 @@ var Permission;
     Permission["PLATFORM_ROLE_DELETE"] = "platform.role.delete";
     Permission["PLATFORM_AUDIT_VIEW"] = "platform.audit.view";
     Permission["PLATFORM_TENANT_USERFIELDS_MANAGE"] = "platform.tenant.userfields.manage";
+    // DEC-RBAC-036: gestión de aplicaciones (plantillas) — reemplaza el reuso de rbac.catalog.manage en /applications.
+    Permission["PLATFORM_APPLICATION_MANAGE"] = "platform.application.manage";
     // ====================================================
     // TENANT — operaciones dentro del silo de un tenant
     // ====================================================
@@ -339,6 +341,9 @@ exports.PERMISSION_BIT_ORDER = [
     // Append-only 2026-06-19: lateral platform (platform_super_admin asigna roles scope PLATFORM).
     // Al FINAL para no correr bits existentes (PERMS_VERSION cambia, índices previos se conservan).
     Permission.PLATFORM_USER_CREATE_LATERAL,
+    // Append-only 2026-06-24 (DEC-RBAC-036): gate dedicada de gestión de aplicaciones (plantillas).
+    // Al FINAL para no correr bits existentes (PERMS_VERSION cambia, índices previos se conservan).
+    Permission.PLATFORM_APPLICATION_MANAGE,
 ];
 function djb2(input) {
     let h = 5381;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/type-kit",
-  "version": "3.111.0",
+  "version": "3.112.0",
   "description": "",
   "main": "bin/index.js",
   "types": "bin/index.d.ts",

package/src/platformRbac/dtos/CreateTenantRequest.ts

@@ -22,4 +22,6 @@ export class CreateTenantRequest {
     @Expose() @IsOptional() @IsEnum(TokenValidationMode) tokenValidationMode?: TokenValidationMode;
     /** Tipo de tenant a crear. Si se omite, el onboarding aplica su default (hoy: retail). */
     @Expose() @IsOptional() @IsEnum(TenantType) tenantType?: TenantType;
+    /** DEC-RBAC-034: aplicación (plantilla) de la que se crea el tenant; opcional, fallback a tenantType (back-compat). */
+    @Expose() @IsOptional() @IsString() applicationId?: string;
 }

package/src/platformRbac/enums/Permission.ts

@@ -63,6 +63,8 @@ export enum Permission {
     PLATFORM_ROLE_DELETE = 'platform.role.delete',
     PLATFORM_AUDIT_VIEW = 'platform.audit.view',
     PLATFORM_TENANT_USERFIELDS_MANAGE = 'platform.tenant.userfields.manage',
+    // DEC-RBAC-036: gestión de aplicaciones (plantillas) — reemplaza el reuso de rbac.catalog.manage en /applications.
+    PLATFORM_APPLICATION_MANAGE = 'platform.application.manage',
 
     // ====================================================
     // TENANT — operaciones dentro del silo de un tenant
@@ -341,6 +343,9 @@ export const PERMISSION_BIT_ORDER: readonly Permission[] = [
     // Append-only 2026-06-19: lateral platform (platform_super_admin asigna roles scope PLATFORM).
     // Al FINAL para no correr bits existentes (PERMS_VERSION cambia, índices previos se conservan).
     Permission.PLATFORM_USER_CREATE_LATERAL,
+    // Append-only 2026-06-24 (DEC-RBAC-036): gate dedicada de gestión de aplicaciones (plantillas).
+    // Al FINAL para no correr bits existentes (PERMS_VERSION cambia, índices previos se conservan).
+    Permission.PLATFORM_APPLICATION_MANAGE,
 ] as const;
 
 function djb2(input: string): number {