@fiado/type-kit 3.177.0 → 3.179.0

package/bin/platformRbac/application/cascade.d.ts

@@ -1,5 +1,6 @@
 import { PermissionScope } from '../enums/PermissionScope';
 import { ApplicationPermission } from './ApplicationPermission';
+import { SeedRole } from './Application';
 /**
  * DEC-RBAC-092: al actualizar el `scope` de un permiso del catálogo de una app, el backend recalcula
  * en cascada el scope de los roles que lo usan en todos los tenants de esa app y REPORTA (no modifica)
@@ -43,3 +44,28 @@ export interface UpdateApplicationPermissionResponse {
     permission: ApplicationPermission;
     cascade?: CascadeReport;
 }
+/**
+ * DEC-RBAC-106: cascade de los ROLES DE NEGOCIO de una app a todos sus tenants. Al editar los
+ * `seedRoles` de la app (`ApplicationManager.update`), el backend diffea viejo vs nuevo (excluyendo los
+ * ids de rol de sistema canónicos) y propaga el delta a los silos: overwrite (created/updated) o
+ * soft-delete (deleted). Best-effort por silo, mismo criterio que DEC-RBAC-092.
+ */
+/** Delta de `seedRoles` de negocio calculado por el diff (ya sin los ids de sistema canónicos). */
+export interface RoleSeedDiff {
+    created: SeedRole[];
+    updated: SeedRole[];
+    deleted: string[];
+}
+/** Un rol de negocio propagado a un tenant por el cascade (created/updated/softDeleted). */
+export interface RoleCascadeChange {
+    tenantId: string;
+    roleId: string;
+}
+/** Resumen del cascade de roles de negocio (DEC-RBAC-106). Reutiliza los tipos de DEC-RBAC-092. */
+export interface RoleCascadeReport {
+    created: RoleCascadeChange[];
+    updated: RoleCascadeChange[];
+    softDeleted: RoleCascadeChange[];
+    inconsistentAssignments: InconsistentAssignment[];
+    failedTenants: CascadeTenantFailure[];
+}

package/bin/platformRbac/index.d.ts

@@ -44,7 +44,7 @@ export * from './enums/PermissionKind';
 export type { LevelDef, ApplicationSecurityPolicyDefault, ApplicationBrandingDefault, AutoregisterAllowedRole, AutoregisterConfig, ApplicationDefaults, SeedRole, Application, } from './application/Application';
 export type { ApplicationPermission } from './application/ApplicationPermission';
 export type { CreateApplicationRequest, UpdateApplicationRequest, UpsertApplicationPermissionRequest, } from './application/requests';
-export type { RoleScopeRecompute, InconsistentAssignment, CascadeTenantFailure, CascadeReport, UpdateApplicationPermissionResponse, } from './application/cascade';
+export type { RoleScopeRecompute, InconsistentAssignment, CascadeTenantFailure, CascadeReport, UpdateApplicationPermissionResponse, RoleSeedDiff, RoleCascadeChange, RoleCascadeReport, } from './application/cascade';
 export * from './dtos/SelfRegisterStartRequest';
 export * from './dtos/SelfRegisterVerifyOtpRequest';
 export * from './dtos/SelfRegisterCompleteRequest';

package/bin/provider/enums/Provider.d.ts

@@ -9,5 +9,6 @@ export declare enum Provider {
     MULTICOMM_SERVICE_PAYMENT = "MULTICOMM_SERVICE_PAYMENT",
     MULTICENTER_SERVICE_PAYMENT = "MULTICENTER_SERVICE_PAYMENT",
     UNITELLER = "UNITELLER",
-    EQUALITY = "EQUALITY"
+    EQUALITY = "EQUALITY",
+    SYNERGYPAY = "SYNERGYPAY"
 }

package/bin/provider/enums/Provider.js

@@ -14,4 +14,5 @@ var Provider;
     Provider["MULTICENTER_SERVICE_PAYMENT"] = "MULTICENTER_SERVICE_PAYMENT";
     Provider["UNITELLER"] = "UNITELLER";
     Provider["EQUALITY"] = "EQUALITY";
+    Provider["SYNERGYPAY"] = "SYNERGYPAY";
 })(Provider || (exports.Provider = Provider = {}));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/type-kit",
-  "version": "3.177.0",
+  "version": "3.179.0",
   "description": "",
   "main": "bin/index.js",
   "types": "bin/index.d.ts",

package/src/platformRbac/application/cascade.ts

@@ -1,5 +1,6 @@
 import { PermissionScope } from '../enums/PermissionScope';
 import { ApplicationPermission } from './ApplicationPermission';
+import { SeedRole } from './Application';
 
 /**
  * DEC-RBAC-092: al actualizar el `scope` de un permiso del catálogo de una app, el backend recalcula
@@ -49,3 +50,32 @@ export interface UpdateApplicationPermissionResponse {
     permission: ApplicationPermission;
     cascade?: CascadeReport;
 }
+
+/**
+ * DEC-RBAC-106: cascade de los ROLES DE NEGOCIO de una app a todos sus tenants. Al editar los
+ * `seedRoles` de la app (`ApplicationManager.update`), el backend diffea viejo vs nuevo (excluyendo los
+ * ids de rol de sistema canónicos) y propaga el delta a los silos: overwrite (created/updated) o
+ * soft-delete (deleted). Best-effort por silo, mismo criterio que DEC-RBAC-092.
+ */
+
+/** Delta de `seedRoles` de negocio calculado por el diff (ya sin los ids de sistema canónicos). */
+export interface RoleSeedDiff {
+    created: SeedRole[];
+    updated: SeedRole[];
+    deleted: string[]; // roleIds
+}
+
+/** Un rol de negocio propagado a un tenant por el cascade (created/updated/softDeleted). */
+export interface RoleCascadeChange {
+    tenantId: string;
+    roleId: string;
+}
+
+/** Resumen del cascade de roles de negocio (DEC-RBAC-106). Reutiliza los tipos de DEC-RBAC-092. */
+export interface RoleCascadeReport {
+    created: RoleCascadeChange[];
+    updated: RoleCascadeChange[];
+    softDeleted: RoleCascadeChange[];
+    inconsistentAssignments: InconsistentAssignment[];
+    failedTenants: CascadeTenantFailure[];
+}

package/src/platformRbac/index.ts

@@ -112,6 +112,9 @@ export type {
     CascadeTenantFailure,
     CascadeReport,
     UpdateApplicationPermissionResponse,
+    RoleSeedDiff,
+    RoleCascadeChange,
+    RoleCascadeReport,
 } from './application/cascade';
 
 // Autoregistro self-service por tenant (DEC-RBAC-030..034). Los Request llevan decoradores

package/src/provider/enums/Provider.ts

@@ -9,5 +9,6 @@ export enum Provider {
     MULTICOMM_SERVICE_PAYMENT = "MULTICOMM_SERVICE_PAYMENT",
     MULTICENTER_SERVICE_PAYMENT = "MULTICENTER_SERVICE_PAYMENT",
     UNITELLER = "UNITELLER",
-    EQUALITY = "EQUALITY"
+    EQUALITY = "EQUALITY",
+    SYNERGYPAY = "SYNERGYPAY"
 }