@fiado/type-kit 3.65.0 → 3.66.0

package/_test_/unit/platformRbac/tenantTypes.test.ts

@@ -0,0 +1,32 @@
+import { TenantType, levelsOf, tableSuffixForLevel, scopeRankOrder } from '../../../src/platformRbac/tenantTypes';
+import { PermissionScope } from '../../../src/platformRbac/enums/PermissionScope';
+
+describe('tenantTypes', () => {
+    it('retail define RETAILER>STORE', () => {
+        expect(levelsOf(TenantType.RETAIL)).toEqual([PermissionScope.RETAILER, PermissionScope.STORE]);
+    });
+
+    it('scopeRankOrder = [PLATFORM, TENANT, RETAILER, STORE] (retail único tipo hoy)', () => {
+        expect(scopeRankOrder()).toEqual([
+            PermissionScope.PLATFORM,
+            PermissionScope.TENANT,
+            PermissionScope.RETAILER,
+            PermissionScope.STORE,
+        ]);
+    });
+
+    it('tableSuffixForLevel mapea cada nivel de retail a su sufijo de tabla', () => {
+        expect(tableSuffixForLevel(TenantType.RETAIL, PermissionScope.RETAILER)).toBe('SharedRetailer');
+        expect(tableSuffixForLevel(TenantType.RETAIL, PermissionScope.STORE)).toBe('SharedStore');
+    });
+
+    it('tableSuffixForLevel devuelve undefined para un nivel no mapeado (PLATFORM/TENANT son fijos)', () => {
+        expect(tableSuffixForLevel(TenantType.RETAIL, PermissionScope.PLATFORM)).toBeUndefined();
+        expect(tableSuffixForLevel(TenantType.RETAIL, PermissionScope.TENANT)).toBeUndefined();
+    });
+
+    it('scopeRankOrder no produce duplicados', () => {
+        const order = scopeRankOrder();
+        expect(new Set(order).size).toBe(order.length);
+    });
+});

package/bin/platformRbac/index.d.ts

@@ -23,3 +23,4 @@ export * from './dtos/AuthorizeRequest';
 export * from './dtos/AuthorizeResponse';
 export * from './dtos/CreateTenantRequest';
 export type { CreateTenantResponse } from './dtos/CreateTenantResponse';
+export { TenantType, TENANT_TYPES, levelsOf, tableSuffixForLevel, scopeRankOrder } from './tenantTypes';

package/bin/platformRbac/index.js

@@ -23,7 +23,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizeDenyReason = exports.PermissionCategory = exports.PermissionScope = exports.Permission = void 0;
+exports.scopeRankOrder = exports.tableSuffixForLevel = exports.levelsOf = exports.TENANT_TYPES = exports.TenantType = exports.AuthorizeDenyReason = exports.PermissionCategory = exports.PermissionScope = exports.Permission = void 0;
 var Permission_1 = require("./enums/Permission");
 Object.defineProperty(exports, "Permission", { enumerable: true, get: function () { return Permission_1.Permission; } });
 var PermissionScope_1 = require("./enums/PermissionScope");
@@ -54,3 +54,12 @@ __exportStar(require("./dtos/AuthorizeResponse"), exports);
 // F-11 — onboarding de tenant (POST backoffice createTenant). CreateTenantRequest lleva
 // decoradores class-validator → export de valor; CreateTenantResponse es interface → type-only.
 __exportStar(require("./dtos/CreateTenantRequest"), exports);
+// A1 — registro data-driven de tenant-types (niveles debajo de TENANT, por tipo).
+// Consumido por ScopeValidationService._rank vía scopeRankOrder() y por los seeds.
+// Accesible bajo el namespace PlatformRbac (el index raíz hace export * as PlatformRbac).
+var tenantTypes_1 = require("./tenantTypes");
+Object.defineProperty(exports, "TenantType", { enumerable: true, get: function () { return tenantTypes_1.TenantType; } });
+Object.defineProperty(exports, "TENANT_TYPES", { enumerable: true, get: function () { return tenantTypes_1.TENANT_TYPES; } });
+Object.defineProperty(exports, "levelsOf", { enumerable: true, get: function () { return tenantTypes_1.levelsOf; } });
+Object.defineProperty(exports, "tableSuffixForLevel", { enumerable: true, get: function () { return tenantTypes_1.tableSuffixForLevel; } });
+Object.defineProperty(exports, "scopeRankOrder", { enumerable: true, get: function () { return tenantTypes_1.scopeRankOrder; } });

package/bin/platformRbac/tenantTypes.d.ts

@@ -0,0 +1,25 @@
+import { PermissionScope } from './enums/PermissionScope';
+/**
+ * Tipos de tenant soportados por el rbac-business. Cada tipo define su propia
+ * jerarquía de niveles DEBAJO de TENANT (data-driven). Hoy solo existe `retail`.
+ */
+export declare enum TenantType {
+    RETAIL = "retail"
+}
+interface TenantTypeDef {
+    displayName: string;
+    /** Niveles DEBAJO de TENANT, en orden jerárquico (más alto → más bajo). */
+    levels: PermissionScope[];
+    /** Sufijo de tabla DDB por nivel (el prefix del tenant se antepone en runtime). */
+    tableSuffix: Partial<Record<PermissionScope, string>>;
+}
+export declare const TENANT_TYPES: Record<TenantType, TenantTypeDef>;
+export declare function levelsOf(type: TenantType): PermissionScope[];
+export declare function tableSuffixForLevel(type: TenantType, level: PermissionScope): string | undefined;
+/**
+ * Orden global de rank de scopes: PLATFORM, TENANT (fijos) + los niveles de cada tipo en orden.
+ * Las comparaciones de rank nunca cruzan tipos (un actor pertenece a un solo tenant de un solo tipo),
+ * así que un orden global concatenado es seguro. Sin duplicados.
+ */
+export declare function scopeRankOrder(): PermissionScope[];
+export {};

package/bin/platformRbac/tenantTypes.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TENANT_TYPES = exports.TenantType = void 0;
+exports.levelsOf = levelsOf;
+exports.tableSuffixForLevel = tableSuffixForLevel;
+exports.scopeRankOrder = scopeRankOrder;
+const PermissionScope_1 = require("./enums/PermissionScope");
+/**
+ * Tipos de tenant soportados por el rbac-business. Cada tipo define su propia
+ * jerarquía de niveles DEBAJO de TENANT (data-driven). Hoy solo existe `retail`.
+ */
+var TenantType;
+(function (TenantType) {
+    TenantType["RETAIL"] = "retail";
+})(TenantType || (exports.TenantType = TenantType = {}));
+exports.TENANT_TYPES = {
+    [TenantType.RETAIL]: {
+        displayName: 'Retail',
+        levels: [PermissionScope_1.PermissionScope.RETAILER, PermissionScope_1.PermissionScope.STORE],
+        tableSuffix: {
+            [PermissionScope_1.PermissionScope.RETAILER]: 'SharedRetailer',
+            [PermissionScope_1.PermissionScope.STORE]: 'SharedStore',
+        },
+    },
+};
+function levelsOf(type) {
+    return exports.TENANT_TYPES[type].levels;
+}
+function tableSuffixForLevel(type, level) {
+    return exports.TENANT_TYPES[type].tableSuffix[level];
+}
+/**
+ * Orden global de rank de scopes: PLATFORM, TENANT (fijos) + los niveles de cada tipo en orden.
+ * Las comparaciones de rank nunca cruzan tipos (un actor pertenece a un solo tenant de un solo tipo),
+ * así que un orden global concatenado es seguro. Sin duplicados.
+ */
+function scopeRankOrder() {
+    const order = [PermissionScope_1.PermissionScope.PLATFORM, PermissionScope_1.PermissionScope.TENANT];
+    for (const def of Object.values(exports.TENANT_TYPES)) {
+        for (const lvl of def.levels)
+            if (!order.includes(lvl))
+                order.push(lvl);
+    }
+    return order;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fiado/type-kit",
-  "version": "3.65.0",
+  "version": "3.66.0",
   "description": "",
   "main": "bin/index.js",
   "types": "bin/index.d.ts",

package/src/platformRbac/index.ts

@@ -42,3 +42,8 @@ export * from './dtos/AuthorizeResponse';
 // decoradores class-validator → export de valor; CreateTenantResponse es interface → type-only.
 export * from './dtos/CreateTenantRequest';
 export type { CreateTenantResponse } from './dtos/CreateTenantResponse';
+
+// A1 — registro data-driven de tenant-types (niveles debajo de TENANT, por tipo).
+// Consumido por ScopeValidationService._rank vía scopeRankOrder() y por los seeds.
+// Accesible bajo el namespace PlatformRbac (el index raíz hace export * as PlatformRbac).
+export { TenantType, TENANT_TYPES, levelsOf, tableSuffixForLevel, scopeRankOrder } from './tenantTypes';

package/src/platformRbac/tenantTypes.ts

@@ -0,0 +1,49 @@
+import { PermissionScope } from './enums/PermissionScope';
+
+/**
+ * Tipos de tenant soportados por el rbac-business. Cada tipo define su propia
+ * jerarquía de niveles DEBAJO de TENANT (data-driven). Hoy solo existe `retail`.
+ */
+export enum TenantType {
+    RETAIL = 'retail',
+}
+
+interface TenantTypeDef {
+    displayName: string;
+    /** Niveles DEBAJO de TENANT, en orden jerárquico (más alto → más bajo). */
+    levels: PermissionScope[];
+    /** Sufijo de tabla DDB por nivel (el prefix del tenant se antepone en runtime). */
+    tableSuffix: Partial<Record<PermissionScope, string>>;
+}
+
+export const TENANT_TYPES: Record<TenantType, TenantTypeDef> = {
+    [TenantType.RETAIL]: {
+        displayName: 'Retail',
+        levels: [PermissionScope.RETAILER, PermissionScope.STORE],
+        tableSuffix: {
+            [PermissionScope.RETAILER]: 'SharedRetailer',
+            [PermissionScope.STORE]: 'SharedStore',
+        },
+    },
+};
+
+export function levelsOf(type: TenantType): PermissionScope[] {
+    return TENANT_TYPES[type].levels;
+}
+
+export function tableSuffixForLevel(type: TenantType, level: PermissionScope): string | undefined {
+    return TENANT_TYPES[type].tableSuffix[level];
+}
+
+/**
+ * Orden global de rank de scopes: PLATFORM, TENANT (fijos) + los niveles de cada tipo en orden.
+ * Las comparaciones de rank nunca cruzan tipos (un actor pertenece a un solo tenant de un solo tipo),
+ * así que un orden global concatenado es seguro. Sin duplicados.
+ */
+export function scopeRankOrder(): PermissionScope[] {
+    const order: PermissionScope[] = [PermissionScope.PLATFORM, PermissionScope.TENANT];
+    for (const def of Object.values(TENANT_TYPES)) {
+        for (const lvl of def.levels) if (!order.includes(lvl)) order.push(lvl);
+    }
+    return order;
+}