@oondemand/oon-core-front 0.3.9 → 0.3.11

package/dist/index.d.ts

@@ -40,6 +40,7 @@ interface MenuMeta {
     section?: string;
     order?: number;
     permissions?: string[];
+    capabilities?: string[];
     children?: OonMenuItem[];
     badge?: string | number;
     external?: boolean;
@@ -99,8 +100,22 @@ interface OonUser {
     tipo: string;
     nome: string;
     email: string;
+    capabilities?: string[];
+    permissoes?: {
+        capabilities?: string[];
+        [extra: string]: unknown;
+    };
+    aplicativo?: {
+        capabilities?: string[];
+        permissoes?: {
+            capabilities?: string[];
+            [extra: string]: unknown;
+        };
+        [extra: string]: unknown;
+    };
     [extra: string]: unknown;
 }
+type OonAppKind = "root-central" | "member-central" | "portal-cockpit";
 interface OonAppConfig {
     id: string;
     name: string;
@@ -108,6 +123,13 @@ interface OonAppConfig {
     logo?: string;
     favicon?: string;
     version?: string;
+    /**
+     * Perfil arquitetural da aplicação no Ecossistema Oon.
+     * - root-central: Central de Ativações.
+     * - member-central: Central publicada para tenant/licença/ambiente.
+     * - portal-cockpit: Portal/Cockpit como Meus Apps.
+     */
+    kind?: OonAppKind;
 }
 interface OonApiConfig {
     baseUrl: string;
@@ -117,8 +139,9 @@ interface OonApiConfig {
     versionPrefix?: string;
     timeout?: number;
 }
+type OonAuthMode = "bearer" | "cookie" | "external-sso" | "central-instance" | "central-client";
 interface OonAuthConfig {
-    mode?: "bearer" | "cookie" | "external-sso";
+    mode?: OonAuthMode;
     /** URL de login externo (Meus Apps) para redirect quando sem token. */
     loginUrl?: string;
     /** Nome do query param que carrega o token na volta do SSO. Default: "code". */
@@ -159,6 +182,7 @@ interface OonRoute {
     /** rota pública não passa pelo RouteGuard. */
     public?: boolean;
     permissions?: string[];
+    capabilities?: string[];
 }
 interface OonMenuItem {
     label: string;
@@ -167,6 +191,7 @@ interface OonMenuItem {
     section?: string;
     order?: number;
     permissions?: string[];
+    capabilities?: string[];
     children?: OonMenuItem[];
     badge?: string | number;
     external?: boolean;
@@ -219,6 +244,7 @@ interface OonColumnDef {
     width?: number;
     renderer?: string;
     permissions?: string[];
+    capabilities?: string[];
 }
 interface OonFormFieldDef {
     field: string;
@@ -230,6 +256,7 @@ interface OonFormFieldDef {
     ref?: string;
     renderer?: string;
     permissions?: string[];
+    capabilities?: string[];
 }
 /** Definição de uma coleção nas três formas da Seção 4.4. */
 interface OonActionDef {
@@ -237,6 +264,7 @@ interface OonActionDef {
     label?: string;
     renderer?: string;
     permissions?: string[];
+    capabilities?: string[];
     action?: string;
 }
 interface CollectionViewDef {
@@ -259,6 +287,7 @@ interface CollectionViewDef {
     cardRenderer?: string;
     actions?: OonActionDef[];
     permissions?: string[];
+    capabilities?: string[];
 }
 interface DocumentViewDef {
     type: "document";
@@ -271,6 +300,7 @@ interface DocumentViewDef {
     approval?: boolean;
     attachments?: boolean;
     permissions?: string[];
+    capabilities?: string[];
 }
 interface PipelineViewDef {
     type: "pipeline";
@@ -289,6 +319,7 @@ interface PipelineViewDef {
         label: string;
     }>;
     permissions?: string[];
+    capabilities?: string[];
 }
 interface DashboardViewDef {
     type: "dashboard";
@@ -298,6 +329,8 @@ interface DashboardViewDef {
     icon?: ReactNode;
     section?: string;
     widgets?: DashboardWidgetDef[];
+    permissions?: string[];
+    capabilities?: string[];
 }
 type OonPageLayout = "default" | "content-only" | "portal";
 interface OonPageDef {
@@ -311,6 +344,7 @@ interface OonPageDef {
     blocks?: OonBlockDef[];
     component?: string;
     permissions?: string[];
+    capabilities?: string[];
     hidden?: boolean;
     order?: number;
 }
@@ -319,6 +353,7 @@ interface OonBaseBlockDef {
     id?: string;
     title?: string;
     permissions?: string[];
+    capabilities?: string[];
     hidden?: boolean;
 }
 interface OonCustomBlockDef extends OonBaseBlockDef {
@@ -399,6 +434,10 @@ interface CentralUiManifest {
         metadataUrl?: string;
     };
     schemaVersion?: 1 | 2;
+    /** Perfil arquitetural: root-central, member-central ou portal-cockpit. */
+    appKind?: OonAppKind;
+    /** Configuração declarativa de autenticação. Segredos nunca entram aqui. */
+    auth?: Pick<OonAuthConfig, "mode" | "loginUrl" | "tokenParam">;
     layout?: OonLayoutConfig;
     registry?: OonComponentRegistry;
     navigation?: OonNavigationConfig;
@@ -429,7 +468,7 @@ interface CentralUiManifest {
         attachments?: boolean;
     }>;
 }
-/** Dados de runtime que o `central.ui.json` não carrega (vêm do .env). */
+/** Dados de runtime que o `central.ui.json` não carrega (vêm do .env/código). */
 interface ManifestRuntime {
     apiBaseUrl: string;
     meusAppsUrl?: string;
@@ -437,6 +476,14 @@ interface ManifestRuntime {
     versionPrefix?: string;
     /** Token local enviado ao backend somente quando o consumidor o configurar. */
     devToken?: string;
+    /** Registry de componentes React, registrado em código TypeScript. */
+    registry?: OonComponentRegistry;
+    /** Atalho para registrar páginas/componentes custom sem reescrever o frontend. */
+    customComponents?: OonComponentRegistry["pageComponents"];
+    /** Overrides de autenticação vindos do runtime/env. */
+    auth?: Partial<OonAuthConfig>;
+    /** Override do perfil arquitetural da aplicação. */
+    appKind?: OonAppKind;
 }
 /** Converte o manifesto declarativo + runtime em config do Core. */
 declare function manifestToConfig(manifest: CentralUiManifest, runtime: ManifestRuntime): OonCoreFrontConfig;
@@ -607,6 +654,7 @@ type AuthStatus = "loading" | "authenticated" | "unauthenticated" | "forbidden"
 interface AuthContextValue {
     user: OonUser | null;
     roles: string[];
+    capabilities: string[];
     status: AuthStatus;
     isAuthenticated: boolean;
     hasPermission: (permission?: string | string[]) => boolean;
@@ -686,4 +734,4 @@ declare function useCoreMetadata(): _tanstack_react_query.UseQueryResult<NoInfer
 /** Descrição de uma model específica — base do modo "dynamic". */
 declare function useModelSchema(name: string): _tanstack_react_query.UseQueryResult<NoInfer<ModelSummary>, Error>;
 
-export { type CentralUiManifest, type CollectionMode, type CollectionViewDef, CoreActions, CoreAssistant, CoreCards, CoreCollection, CoreCurrency, CoreDashboard, CoreDataGrid, CoreDocument, CoreEmptyState, CoreField, CoreForm, CoreIntegration, CoreLoadingState, type CoreMetadata, CorePage, CorePageHeader, CorePipeline, CoreRelationField, CoreToolbar, type DashboardViewDef, type DashboardWidgetDef, type DocumentViewDef, type FieldKind, type FieldMeta, type ListParams, type ManifestRuntime, type ModelSummary, type OonActionDef, type OonApiConfig, type OonAppConfig, type OonAuthConfig, type OonBlockDef, type OonColumnDef, type OonComponentRegistry, type OonCoreFrontConfig, type OonError, type OonFormFieldDef, type OonLayoutConfig, type OonMenuItem, type OonModule, type OonNavigationConfig, type OonNavigationMode, type OonPageDef, type OonRoute, type OonSchemaVersion, type OonSecurityConfig, type OonUiManifest, type OonUser, type OonViewDefinition, type PaginatedResult, type Pagination, PermissionGate, type PipelineViewDef, defineCollectionView, defineDashboard, defineDocumentView, defineOonModule, definePipelineView, manifestToConfig, oonCoreFront, start, startFromManifest, useCoreMetadata, useModelSchema, useOonApi, useOonAuth, useOonResource };
+export { type CentralUiManifest, type CollectionMode, type CollectionViewDef, CoreActions, CoreAssistant, CoreCards, CoreCollection, CoreCurrency, CoreDashboard, CoreDataGrid, CoreDocument, CoreEmptyState, CoreField, CoreForm, CoreIntegration, CoreLoadingState, type CoreMetadata, CorePage, CorePageHeader, CorePipeline, CoreRelationField, CoreToolbar, type DashboardViewDef, type DashboardWidgetDef, type DocumentViewDef, type FieldKind, type FieldMeta, type ListParams, type ManifestRuntime, type ModelSummary, type OonActionDef, type OonApiConfig, type OonAppConfig, type OonAppKind, type OonAuthConfig, type OonAuthMode, type OonBlockDef, type OonColumnDef, type OonComponentRegistry, type OonCoreFrontConfig, type OonError, type OonFormFieldDef, type OonLayoutConfig, type OonMenuItem, type OonModule, type OonNavigationConfig, type OonNavigationMode, type OonPageDef, type OonRoute, type OonSchemaVersion, type OonSecurityConfig, type OonUiManifest, type OonUser, type OonViewDefinition, type PaginatedResult, type Pagination, PermissionGate, type PipelineViewDef, defineCollectionView, defineDashboard, defineDocumentView, defineOonModule, definePipelineView, manifestToConfig, oonCoreFront, start, startFromManifest, useCoreMetadata, useModelSchema, useOonApi, useOonAuth, useOonResource };

package/dist/index.js

@@ -15,6 +15,18 @@ function normalizeError(err) {
   if (axios.isAxiosError(err)) {
     const status = err.response?.status;
     const data = err.response?.data;
+    const contentType = String(err.response?.headers?.["content-type"] || "");
+    const isTextPayload = typeof data === "string";
+    const isProbablyHtml = isTextPayload && /<html|<!doctype/i.test(data);
+    if (isTextPayload || contentType && !contentType.includes("json")) {
+      return {
+        code: codeFromStatus(status),
+        message: nonJsonMessage(status, err.config?.url, isProbablyHtml),
+        status,
+        details: isProbablyHtml ? void 0 : data,
+        requestId: err.response?.headers?.["x-request-id"]
+      };
+    }
     const envelope = data?.error;
     return {
       code: envelope?.code || codeFromStatus(status),
@@ -29,6 +41,16 @@ function normalizeError(err) {
   }
   return { code: "UNKNOWN", message: "Erro inesperado." };
 }
+function nonJsonMessage(status, url, html) {
+  const path = url ? ` (${url})` : "";
+  if (status === 404) {
+    return `Rota da API n\xE3o encontrada${path}. Verifique VITE_API_URL, porta do backend e modo da Central.`;
+  }
+  if (html) {
+    return `Backend retornou HTML em vez de JSON${path}. Verifique se o frontend est\xE1 apontando para a API correta.`;
+  }
+  return `Backend retornou resposta n\xE3o JSON${path}. Verifique a configura\xE7\xE3o da API.`;
+}
 function codeFromStatus(status) {
   switch (status) {
     case 400:
@@ -433,6 +455,20 @@ function encodeBasicCredentials(email, password) {
   for (const byte of bytes) binary += String.fromCharCode(byte);
   return window.btoa(binary);
 }
+function normalizeList(value) {
+  if (Array.isArray(value)) return value.map(String).filter(Boolean);
+  if (typeof value === "string") return value.split(/[\s,;]+/).map((item) => item.trim()).filter(Boolean);
+  return [];
+}
+function extractCapabilities(user) {
+  if (!user) return [];
+  return [
+    ...normalizeList(user.capabilities),
+    ...normalizeList(user.permissoes?.capabilities),
+    ...normalizeList(user.aplicativo?.capabilities),
+    ...normalizeList(user.aplicativo?.permissoes?.capabilities)
+  ].filter((item, index, all) => all.indexOf(item) === index);
+}
 function AuthProvider({
   http,
   storage,
@@ -558,6 +594,7 @@ function AuthProvider({
     activation?.status
   ]);
   const roles = user?.tipo ? [user.tipo] : [];
+  const capabilities = extractCapabilities(user);
   const hasPermission = useCallback2(
     (permission) => {
       if (!permission) return true;
@@ -565,14 +602,15 @@ function AuthProvider({
       if (required.length === 0) return true;
       if (roles.includes("admin") || roles.includes("master")) return true;
       return required.some(
-        (value2) => roles.includes(value2) || roles.some((role) => value2.startsWith(`${role}.`))
+        (value2) => roles.includes(value2) || capabilities.includes(value2) || roles.some((role) => value2.startsWith(`${role}.`))
       );
     },
-    [roles]
+    [roles, capabilities]
   );
   const value = {
     user,
     roles,
+    capabilities,
     status,
     isAuthenticated: status === "authenticated",
     hasPermission,
@@ -1905,6 +1943,10 @@ import { jsx as jsx17, jsxs as jsxs11 } from "react/jsx-runtime";
 function renderMarkdown(content) {
   return content.split(/\n{2,}/).map((paragraph, index) => /* @__PURE__ */ jsx17(Text11, { whiteSpace: "pre-wrap", children: paragraph }, index));
 }
+function requiredAccess(source) {
+  const values = [...source.permissions ?? [], ...source.capabilities ?? []].filter(Boolean);
+  return values.length ? values : void 0;
+}
 function CoreBlock({ block, registry }) {
   if (block.hidden) return null;
   const content = (() => {
@@ -1931,11 +1973,11 @@ function CoreBlock({ block, registry }) {
         return /* @__PURE__ */ jsx17(MissingRenderer, { renderer: block.type });
     }
   })();
-  return /* @__PURE__ */ jsx17(PermissionGate, { permission: block.permissions, children: content });
+  return /* @__PURE__ */ jsx17(PermissionGate, { permission: requiredAccess(block), children: content });
 }
 function CorePage2({ page, registry }) {
   const Component = resolveComponent(registry, page.component, "pageComponents");
-  return /* @__PURE__ */ jsx17(PermissionGate, { permission: page.permissions, children: Component ? /* @__PURE__ */ jsx17(Component, { page }) : /* @__PURE__ */ jsxs11(CorePage, { children: [
+  return /* @__PURE__ */ jsx17(PermissionGate, { permission: requiredAccess(page), children: Component ? /* @__PURE__ */ jsx17(Component, { page }) : /* @__PURE__ */ jsxs11(CorePage, { children: [
     /* @__PURE__ */ jsx17(CorePageHeader, { title: page.title ?? page.label }),
     /* @__PURE__ */ jsx17(Stack6, { gap: 6, children: page.blocks?.map((block, index) => /* @__PURE__ */ jsx17(CoreBlock, { block, registry }, block.id ?? index)) })
   ] }) });
@@ -1946,6 +1988,10 @@ import { jsx as jsx18 } from "react/jsx-runtime";
 function slug(value) {
   return value.normalize("NFD").replace(/[\u0300-\u036f]/g, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
 }
+function requiredAccess2(source) {
+  const values = [...source.permissions ?? [], ...source.capabilities ?? []].filter(Boolean);
+  return values.length ? values : void 0;
+}
 function viewId(view) {
   if (view.id) return view.id;
   if (view.type === "dashboard") return "dashboard";
@@ -2005,15 +2051,15 @@ function viewToRoute(view) {
   return {
     path: viewPath(view),
     element: renderView(view),
-    permissions: "permissions" in view ? view.permissions : void 0
+    permissions: requiredAccess2(view)
   };
 }
 function pageToRoute(page, registry) {
-  return { path: page.path, element: /* @__PURE__ */ jsx18(CorePage2, { page, registry }), permissions: page.permissions };
+  return { path: page.path, element: /* @__PURE__ */ jsx18(CorePage2, { page, registry }), permissions: requiredAccess2(page) };
 }
 function pageToMenu(page) {
   if (page.hidden || !page.label) return null;
-  return { label: page.label, href: page.path, icon: page.icon, section: page.section, permissions: page.permissions, order: page.order };
+  return { label: page.label, href: page.path, icon: page.icon, section: page.section, permissions: requiredAccess2(page), capabilities: page.capabilities, order: page.order };
 }
 function viewToMenu(view) {
   return {
@@ -2021,7 +2067,8 @@ function viewToMenu(view) {
     href: viewPath(view),
     icon: view.icon,
     section: view.section,
-    permissions: "permissions" in view ? view.permissions : void 0
+    permissions: requiredAccess2(view),
+    capabilities: "capabilities" in view ? view.capabilities : void 0
   };
 }
 function resolveRegistry(config) {
@@ -2034,8 +2081,8 @@ function resolveRegistry(config) {
     routes.push(route);
   };
   for (const mod of config.modules ?? []) {
-    for (const route of mod.routes ?? []) pushRoute(route);
-    for (const item of mod.menu ?? []) menu.push(item);
+    for (const route of mod.routes ?? []) pushRoute({ ...route, permissions: requiredAccess2(route) });
+    for (const item of mod.menu ?? []) menu.push({ ...item, permissions: requiredAccess2(item) });
     for (const view of mod.views ?? []) {
       pushRoute(viewToRoute(view));
       menu.push(viewToMenu(view));
@@ -2056,7 +2103,7 @@ function resolveRegistry(config) {
     }
   }
   if (includeManual) {
-    for (const item of config.ui?.navigation?.items ?? []) menu.push(item);
+    for (const item of config.ui?.navigation?.items ?? []) menu.push({ ...item, permissions: requiredAccess2(item) });
   }
   menu.sort((a, b) => (a.order ?? 100) - (b.order ?? 100));
   return { routes, menu };
@@ -3076,6 +3123,18 @@ function start(config) {
 var oonCoreFront = { start };
 
 // src/manifest.ts
+function mergeRegistry(manifestRegistry, runtimeRegistry, customComponents) {
+  if (!manifestRegistry && !runtimeRegistry && !customComponents) return void 0;
+  return {
+    layoutSlots: { ...manifestRegistry?.layoutSlots, ...runtimeRegistry?.layoutSlots },
+    fieldRenderers: { ...manifestRegistry?.fieldRenderers, ...runtimeRegistry?.fieldRenderers },
+    cellRenderers: { ...manifestRegistry?.cellRenderers, ...runtimeRegistry?.cellRenderers },
+    cardRenderers: { ...manifestRegistry?.cardRenderers, ...runtimeRegistry?.cardRenderers },
+    actionRenderers: { ...manifestRegistry?.actionRenderers, ...runtimeRegistry?.actionRenderers },
+    pageComponents: { ...manifestRegistry?.pageComponents, ...runtimeRegistry?.pageComponents, ...customComponents },
+    menuRenderers: { ...manifestRegistry?.menuRenderers, ...runtimeRegistry?.menuRenderers }
+  };
+}
 function manifestToConfig(manifest, runtime) {
   const views = [];
   for (const c of manifest.collections ?? []) {
@@ -3114,11 +3173,19 @@ function manifestToConfig(manifest, runtime) {
     };
     views.push(view);
   }
+  const registry = mergeRegistry(manifest.registry, runtime.registry, runtime.customComponents);
+  const auth = {
+    mode: runtime.auth?.mode ?? manifest.auth?.mode ?? "bearer",
+    loginUrl: runtime.auth?.loginUrl ?? manifest.auth?.loginUrl,
+    tokenParam: runtime.auth?.tokenParam ?? manifest.auth?.tokenParam ?? "code",
+    devToken: runtime.auth?.devToken ?? runtime.devToken
+  };
   return {
     app: {
       id: manifest.slug,
       name: manifest.name,
-      title: manifest.name
+      title: manifest.name,
+      kind: runtime.appKind ?? manifest.appKind
     },
     api: {
       baseUrl: runtime.apiBaseUrl,
@@ -3126,7 +3193,7 @@ function manifestToConfig(manifest, runtime) {
       assistantBaseUrl: runtime.assistantBaseUrl,
       versionPrefix: runtime.versionPrefix ?? ""
     },
-    auth: { mode: "bearer", tokenParam: "code", devToken: runtime.devToken },
+    auth,
     security: {
       enableRouteGuard: true,
       enablePermissionGate: true,
@@ -3134,8 +3201,15 @@ function manifestToConfig(manifest, runtime) {
       disableConsoleInProduction: true
     },
     layout: manifest.layout,
-    registry: manifest.registry,
-    ui: { schemaVersion: manifest.schemaVersion, layout: manifest.layout, registry: manifest.registry, navigation: manifest.navigation, views, pages: manifest.pages }
+    registry,
+    ui: {
+      schemaVersion: manifest.schemaVersion,
+      layout: manifest.layout,
+      registry,
+      navigation: manifest.navigation,
+      views,
+      pages: manifest.pages
+    }
   };
 }
 function startFromManifest(manifest, runtime) {