tychat-contracts 1.6.8 → 1.6.11

package/.github/workflows/publish-npm.yml

@@ -1,25 +1,25 @@
-name: Publish packages
-
-on:
-  workflow_dispatch:
-  push:
-    tags:
-      - 'v*.*.*'
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      id-token: write
-    steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
-        with:
-          node-version: '20'
-          registry-url: 'https://registry.npmjs.org'
-          cache: npm
-      - run: npm ci
-      - run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+name: Publish packages
+
+on:
+  workflow_dispatch:
+  push:
+    tags:
+      - 'v*.*.*'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
+          cache: npm
+      - run: npm ci
+      - run: npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package/dist/index.d.ts

@@ -20,4 +20,5 @@ export * from './cashback';
 export * from './filters';
 export * from './anamneses';
 export * from './legal-terms';
+export * from './panel-rbac';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,MAAM,CAAC;AACrB,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,MAAM,CAAC;AACrB,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -36,3 +36,4 @@ __exportStar(require("./cashback"), exports);
 __exportStar(require("./filters"), exports);
 __exportStar(require("./anamneses"), exports);
 __exportStar(require("./legal-terms"), exports);
+__exportStar(require("./panel-rbac"), exports);

package/dist/legal-terms/legal-term-dispatch.dto.d.ts

@@ -1,7 +1,13 @@
 /** Status do registro de envio na clínica (WhatsApp / fluxo). */
 export type LegalTermDispatchStatusValue = 'created' | 'sent' | 'failed';
 /** Status do documento na Clicksign (signature-service). */
-export type SignatureDocumentStatusValue = 'pending' | 'signed' | 'refused' | 'cancelled' | 'expired';
+export type SignatureDocumentStatusValue = 'pending' | 'signed' | 'refused' | 'cancelled' | 'expired'
+/** Fluxo impresso: aguardando upload da digitalização assinada (sem registro em signature-service). */
+ | 'upload_required';
+/** Método de assinatura escolhido no envio do termo. */
+export type LegalTermSignatureMethodValue = 'digital' | 'printed';
+/** Política por tenant (admin): quais métodos o produto oferece. */
+export type LegalTermSignaturePolicyValue = 'printed_only' | 'printed_and_integrations';
 /** Item agregado para a ficha do paciente (API: clinic + signature). */
 export type PatientLegalTermDispatchItemDto = {
     id: string;
@@ -10,6 +16,7 @@ export type PatientLegalTermDispatchItemDto = {
     procedure_names: string[];
     dispatch_status: LegalTermDispatchStatusValue;
     error_code: string | null;
+    signature_method: LegalTermSignatureMethodValue;
     signature_document_id: string | null;
     signature_status: SignatureDocumentStatusValue | null;
     signed_at: string | null;

package/dist/legal-terms/legal-term-dispatch.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"legal-term-dispatch.dto.d.ts","sourceRoot":"","sources":["../../src/legal-terms/legal-term-dispatch.dto.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,MAAM,MAAM,4BAA4B,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEzE,4DAA4D;AAC5D,MAAM,MAAM,4BAA4B,GACpC,SAAS,GACT,QAAQ,GACR,SAAS,GACT,WAAW,GACX,SAAS,CAAC;AAEd,wEAAwE;AACxE,MAAM,MAAM,+BAA+B,GAAG;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,4BAA4B,CAAC;IAC9C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,gBAAgB,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACtD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,qCAAqC,GAAG;IAClD,KAAK,EAAE,+BAA+B,EAAE,CAAC;CAC1C,CAAC"}
+{"version":3,"file":"legal-term-dispatch.dto.d.ts","sourceRoot":"","sources":["../../src/legal-terms/legal-term-dispatch.dto.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,MAAM,MAAM,4BAA4B,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEzE,4DAA4D;AAC5D,MAAM,MAAM,4BAA4B,GACpC,SAAS,GACT,QAAQ,GACR,SAAS,GACT,WAAW,GACX,SAAS;AACX,uGAAuG;GACrG,iBAAiB,CAAC;AAEtB,wDAAwD;AACxD,MAAM,MAAM,6BAA6B,GAAG,SAAS,GAAG,SAAS,CAAC;AAElE,oEAAoE;AACpE,MAAM,MAAM,6BAA6B,GACrC,cAAc,GACd,0BAA0B,CAAC;AAE/B,wEAAwE;AACxE,MAAM,MAAM,+BAA+B,GAAG;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,4BAA4B,CAAC;IAC9C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,6BAA6B,CAAC;IAChD,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,gBAAgB,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACtD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,qCAAqC,GAAG;IAClD,KAAK,EAAE,+BAA+B,EAAE,CAAC;CAC1C,CAAC"}

package/dist/legal-terms/legal-term-preview.dto.d.ts

@@ -1,4 +1,6 @@
 import { type LegalTermBodyFormat } from './legal-term-body-format';
+declare const LEGAL_TERM_SIGNATURE_METHODS: readonly ["digital", "printed"];
+export type LegalTermSignatureMethodDto = (typeof LEGAL_TERM_SIGNATURE_METHODS)[number];
 /** Valores explícitos para substituição na pré-visualização (sem inferência heurística). */
 export declare class LegalTermPreviewRequestDto {
     body_html?: string;
@@ -10,6 +12,7 @@ export declare class LegalTermPreviewRequestDto {
     data_hora_iso?: string;
 }
 export declare class LegalTermSendDto {
+    signatureMethod?: LegalTermSignatureMethodDto;
     procedureIds: string[];
     whatsappMessage: string;
     signerEmail?: string;
@@ -21,4 +24,5 @@ export declare class LegalTermSendDto {
     tenantSignerDocumentation?: string;
     tenantSignerPhone?: string;
 }
+export {};
 //# sourceMappingURL=legal-term-preview.dto.d.ts.map

package/dist/legal-terms/legal-term-preview.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"legal-term-preview.dto.d.ts","sourceRoot":"","sources":["../../src/legal-terms/legal-term-preview.dto.ts"],"names":[],"mappings":"AAcA,OAAO,EAA2B,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE7F,4FAA4F;AAC5F,qBAAa,0BAA0B;IAQrC,SAAS,CAAC,EAAE,MAAM,CAAC;IAQnB,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAMlC,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAU9B,+BAA+B,CAAC,EAAE,MAAM,EAAE,CAAC;IAM3C,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,gBAAgB;IAI3B,YAAY,EAAE,MAAM,EAAE,CAAC;IASvB,eAAe,EAAE,MAAM,CAAC;IAMxB,WAAW,CAAC,EAAE,MAAM,CAAC;IASrB,WAAW,CAAC,EAAE,MAAM,CAAC;IAQrB,cAAc,CAAC,EAAE,OAAO,CAAC;IAMzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAK1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAO3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAM9B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAWnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B"}
+{"version":3,"file":"legal-term-preview.dto.d.ts","sourceRoot":"","sources":["../../src/legal-terms/legal-term-preview.dto.ts"],"names":[],"mappings":"AAcA,OAAO,EAA2B,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE7F,QAAA,MAAM,4BAA4B,iCAAkC,CAAC;AACrE,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAExF,4FAA4F;AAC5F,qBAAa,0BAA0B;IAQrC,SAAS,CAAC,EAAE,MAAM,CAAC;IAQnB,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAMlC,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAU9B,+BAA+B,CAAC,EAAE,MAAM,EAAE,CAAC;IAM3C,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,gBAAgB;IAS3B,eAAe,CAAC,EAAE,2BAA2B,CAAC;IAK9C,YAAY,EAAE,MAAM,EAAE,CAAC;IAUvB,eAAe,EAAE,MAAM,CAAC;IAMxB,WAAW,CAAC,EAAE,MAAM,CAAC;IASrB,WAAW,CAAC,EAAE,MAAM,CAAC;IAQrB,cAAc,CAAC,EAAE,OAAO,CAAC;IAMzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAK1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAO3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAM9B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAWnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B"}

package/dist/legal-terms/legal-term-preview.dto.js

@@ -13,6 +13,7 @@ exports.LegalTermSendDto = exports.LegalTermPreviewRequestDto = void 0;
 const swagger_1 = require("@nestjs/swagger");
 const class_validator_1 = require("class-validator");
 const legal_term_body_format_1 = require("./legal-term-body-format");
+const LEGAL_TERM_SIGNATURE_METHODS = ['digital', 'printed'];
 /** Valores explícitos para substituição na pré-visualização (sem inferência heurística). */
 class LegalTermPreviewRequestDto {
     body_html;
@@ -82,6 +83,7 @@ __decorate([
     __metadata("design:type", String)
 ], LegalTermPreviewRequestDto.prototype, "data_hora_iso", void 0);
 class LegalTermSendDto {
+    signatureMethod;
     procedureIds;
     whatsappMessage;
     signerEmail;
@@ -94,6 +96,16 @@ class LegalTermSendDto {
     tenantSignerPhone;
 }
 exports.LegalTermSendDto = LegalTermSendDto;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        enum: LEGAL_TERM_SIGNATURE_METHODS,
+        description: 'Método de assinatura: digital (Clicksign + link no WhatsApp) ou printed (PDF para impressão, sem Clicksign). Padrão: digital.',
+        default: 'digital',
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(LEGAL_TERM_SIGNATURE_METHODS),
+    __metadata("design:type", String)
+], LegalTermSendDto.prototype, "signatureMethod", void 0);
 __decorate([
     (0, swagger_1.ApiProperty)({ type: [String], format: 'uuid' }),
     (0, class_validator_1.IsArray)(),
@@ -102,7 +114,7 @@ __decorate([
 ], LegalTermSendDto.prototype, "procedureIds", void 0);
 __decorate([
     (0, swagger_1.ApiProperty)({
-        description: 'Mensagem WhatsApp; deve conter exatamente {{ link_termo_juridico }}',
+        description: 'Mensagem WhatsApp. Com signatureMethod digital (padrão), deve conter exatamente {{ link_termo_juridico }}. Com printed, qualquer texto (sem esse placeholder).',
         example: 'Olá, assine seu termo: {{ link_termo_juridico }}',
     }),
     (0, class_validator_1.IsString)(),

package/dist/panel-rbac/access-permission-item.dto.d.ts

@@ -0,0 +1,6 @@
+import { type PanelResource } from './panel-permission-keys';
+export declare class AccessPermissionItemDto {
+    resource: PanelResource;
+    action: string;
+}
+//# sourceMappingURL=access-permission-item.dto.d.ts.map

package/dist/panel-rbac/access-permission-item.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-permission-item.dto.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/access-permission-item.dto.ts"],"names":[],"mappings":"AAEA,OAAO,EAA0B,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAIrF,qBAAa,uBAAuB;IAIlC,QAAQ,EAAE,aAAa,CAAC;IAQxB,MAAM,EAAE,MAAM,CAAC;CAChB"}

package/dist/panel-rbac/access-permission-item.dto.js

@@ -0,0 +1,36 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessPermissionItemDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+const panel_permission_keys_1 = require("./panel-permission-keys");
+const RESOURCES = Object.keys(panel_permission_keys_1.PANEL_RESOURCE_ACTIONS);
+class AccessPermissionItemDto {
+    resource;
+    action;
+}
+exports.AccessPermissionItemDto = AccessPermissionItemDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: RESOURCES }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsIn)(RESOURCES),
+    __metadata("design:type", String)
+], AccessPermissionItemDto.prototype, "resource", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Ação permitida para o recurso',
+        example: 'view',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(80),
+    __metadata("design:type", String)
+], AccessPermissionItemDto.prototype, "action", void 0);

package/dist/panel-rbac/create-access-level.dto.d.ts

@@ -0,0 +1,6 @@
+export declare class CreateAccessLevelDto {
+    name: string;
+    description?: string;
+    isActive?: boolean;
+}
+//# sourceMappingURL=create-access-level.dto.d.ts.map

package/dist/panel-rbac/create-access-level.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-access-level.dto.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/create-access-level.dto.ts"],"names":[],"mappings":"AAGA,qBAAa,oBAAoB;IAI/B,IAAI,EAAE,MAAM,CAAC;IAMb,WAAW,CAAC,EAAE,MAAM,CAAC;IAKrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB"}

package/dist/panel-rbac/create-access-level.dto.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateAccessLevelDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class CreateAccessLevelDto {
+    name;
+    description;
+    isActive;
+}
+exports.CreateAccessLevelDto = CreateAccessLevelDto;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(120),
+    __metadata("design:type", String)
+], CreateAccessLevelDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(500),
+    __metadata("design:type", String)
+], CreateAccessLevelDto.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ default: true }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], CreateAccessLevelDto.prototype, "isActive", void 0);

package/dist/panel-rbac/dashboard-layout.dto.d.ts

@@ -0,0 +1,27 @@
+/** Tipos de visualização permitidos no painel (determinísticos). */
+export declare const DASHBOARD_CHART_TYPES: readonly ["stat", "card", "bar", "line", "area", "pie", "radial", "table"];
+export type DashboardChartType = (typeof DASHBOARD_CHART_TYPES)[number];
+/**
+ * Módulos de dados agregados do dashboard (cada um mapeia a permissões e a fatia do summary).
+ * Manter alinhado ao `Frontend/.../lib/dashboard-data-modules.ts`.
+ */
+export declare const DASHBOARD_DATA_MODULE_KEYS: readonly ["overview.clients_total", "overview.clients_active_inactive", "overview.units_total", "overview.revenue_totals", "overview.revenue_growth", "overview.invoice_counts", "billing.revenue_by_status", "billing.invoice_counts", "billing.recent_invoices", "billing.payment_links", "tenants.client_list", "tenants.plan_per_client", "tenants.legal_term_policy", "tenants.whatsapp_provider", "tenants.scheduled_deletion", "tenants.hostnames", "tenants.storage_usage", "limits.per_client", "limits.session_policy", "limits.extra_storage", "plans.stats", "plans.list", "ia.tokens_per_tenant", "ia.agents_per_tenant", "ia.tool_policies", "ia.models_availability", "evolution.configs_summary", "evolution.instances_totals", "evolution.connection_state", "global.platform_config", "team.panel_admins", "audit.recent_events", "audit.outcome_counts", "security.device_sessions", "security.totp_status"];
+export type DashboardDataModuleKey = (typeof DASHBOARD_DATA_MODULE_KEYS)[number];
+export declare function isDashboardDataModuleKey(v: string): v is DashboardDataModuleKey;
+export declare class DashboardWidgetDto {
+    id: string;
+    dataModule: DashboardDataModuleKey;
+    chartType: DashboardChartType;
+    /** Coluna inicial (grelha 12 colunas). */
+    x: number;
+    /** Largura em colunas (1–12). */
+    w: number;
+    /** Ordem de leitura (menor = primeiro). */
+    order: number;
+    title?: string;
+}
+export declare class DashboardLayoutDto {
+    version: number;
+    widgets: DashboardWidgetDto[];
+}
+//# sourceMappingURL=dashboard-layout.dto.d.ts.map

package/dist/panel-rbac/dashboard-layout.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-layout.dto.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/dashboard-layout.dto.ts"],"names":[],"mappings":"AAeA,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,4EASxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,0BAA0B,i4BAoC7B,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,sBAAsB,CAE/E;AAED,qBAAa,kBAAkB;IAG7B,EAAE,EAAE,MAAM,CAAC;IAKX,UAAU,EAAE,sBAAsB,CAAC;IAKnC,SAAS,EAAE,kBAAkB,CAAC;IAE9B,0CAA0C;IAK1C,CAAC,EAAE,MAAM,CAAC;IAEV,iCAAiC;IAKjC,CAAC,EAAE,MAAM,CAAC;IAEV,2CAA2C;IAI3C,KAAK,EAAE,MAAM,CAAC;IAMd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,kBAAkB;IAK7B,OAAO,EAAE,MAAM,CAAC;IAOhB,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B"}

package/dist/panel-rbac/dashboard-layout.dto.js

@@ -0,0 +1,148 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DashboardLayoutDto = exports.DashboardWidgetDto = exports.DASHBOARD_DATA_MODULE_KEYS = exports.DASHBOARD_CHART_TYPES = void 0;
+exports.isDashboardDataModuleKey = isDashboardDataModuleKey;
+const swagger_1 = require("@nestjs/swagger");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+/** Tipos de visualização permitidos no painel (determinísticos). */
+exports.DASHBOARD_CHART_TYPES = [
+    'stat',
+    'card',
+    'bar',
+    'line',
+    'area',
+    'pie',
+    'radial',
+    'table',
+];
+/**
+ * Módulos de dados agregados do dashboard (cada um mapeia a permissões e a fatia do summary).
+ * Manter alinhado ao `Frontend/.../lib/dashboard-data-modules.ts`.
+ */
+exports.DASHBOARD_DATA_MODULE_KEYS = [
+    'overview.clients_total',
+    'overview.clients_active_inactive',
+    'overview.units_total',
+    'overview.revenue_totals',
+    'overview.revenue_growth',
+    'overview.invoice_counts',
+    'billing.revenue_by_status',
+    'billing.invoice_counts',
+    'billing.recent_invoices',
+    'billing.payment_links',
+    'tenants.client_list',
+    'tenants.plan_per_client',
+    'tenants.legal_term_policy',
+    'tenants.whatsapp_provider',
+    'tenants.scheduled_deletion',
+    'tenants.hostnames',
+    'tenants.storage_usage',
+    'limits.per_client',
+    'limits.session_policy',
+    'limits.extra_storage',
+    'plans.stats',
+    'plans.list',
+    'ia.tokens_per_tenant',
+    'ia.agents_per_tenant',
+    'ia.tool_policies',
+    'ia.models_availability',
+    'evolution.configs_summary',
+    'evolution.instances_totals',
+    'evolution.connection_state',
+    'global.platform_config',
+    'team.panel_admins',
+    'audit.recent_events',
+    'audit.outcome_counts',
+    'security.device_sessions',
+    'security.totp_status',
+];
+function isDashboardDataModuleKey(v) {
+    return exports.DASHBOARD_DATA_MODULE_KEYS.includes(v);
+}
+class DashboardWidgetDto {
+    id;
+    dataModule;
+    chartType;
+    /** Coluna inicial (grelha 12 colunas). */
+    x;
+    /** Largura em colunas (1–12). */
+    w;
+    /** Ordem de leitura (menor = primeiro). */
+    order;
+    title;
+}
+exports.DashboardWidgetDto = DashboardWidgetDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ format: 'uuid' }),
+    (0, class_validator_1.IsUUID)('4'),
+    __metadata("design:type", String)
+], DashboardWidgetDto.prototype, "id", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: exports.DASHBOARD_DATA_MODULE_KEYS }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsIn)([...exports.DASHBOARD_DATA_MODULE_KEYS]),
+    __metadata("design:type", String)
+], DashboardWidgetDto.prototype, "dataModule", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: exports.DASHBOARD_CHART_TYPES }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsIn)([...exports.DASHBOARD_CHART_TYPES]),
+    __metadata("design:type", String)
+], DashboardWidgetDto.prototype, "chartType", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ minimum: 0, maximum: 11 }),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(0),
+    (0, class_validator_1.Max)(11),
+    __metadata("design:type", Number)
+], DashboardWidgetDto.prototype, "x", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ minimum: 1, maximum: 12 }),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    (0, class_validator_1.Max)(12),
+    __metadata("design:type", Number)
+], DashboardWidgetDto.prototype, "w", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(0),
+    __metadata("design:type", Number)
+], DashboardWidgetDto.prototype, "order", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Título opcional no painel' }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Max)(120),
+    __metadata("design:type", String)
+], DashboardWidgetDto.prototype, "title", void 0);
+class DashboardLayoutDto {
+    version;
+    widgets;
+}
+exports.DashboardLayoutDto = DashboardLayoutDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ default: 1 }),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    (0, class_validator_1.Max)(1),
+    __metadata("design:type", Number)
+], DashboardLayoutDto.prototype, "version", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: [DashboardWidgetDto] }),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(80),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => DashboardWidgetDto),
+    __metadata("design:type", Array)
+], DashboardLayoutDto.prototype, "widgets", void 0);

package/dist/panel-rbac/index.d.ts

@@ -0,0 +1,8 @@
+export * from './panel-permission-keys';
+export * from './create-access-level.dto';
+export * from './update-access-level.dto';
+export * from './access-permission-item.dto';
+export * from './replace-access-permissions.dto';
+export * from './panel-context-response.dto';
+export * from './dashboard-layout.dto';
+//# sourceMappingURL=index.d.ts.map

package/dist/panel-rbac/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kCAAkC,CAAC;AACjD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC"}

package/dist/panel-rbac/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./panel-permission-keys"), exports);
+__exportStar(require("./create-access-level.dto"), exports);
+__exportStar(require("./update-access-level.dto"), exports);
+__exportStar(require("./access-permission-item.dto"), exports);
+__exportStar(require("./replace-access-permissions.dto"), exports);
+__exportStar(require("./panel-context-response.dto"), exports);
+__exportStar(require("./dashboard-layout.dto"), exports);

package/dist/panel-rbac/panel-context-response.dto.d.ts

@@ -0,0 +1,12 @@
+import type { PanelPermissionKey } from './panel-permission-keys';
+import { DashboardLayoutDto } from './dashboard-layout.dto';
+/**
+ * Resposta de GET /auth/me/panel-context (tenant-service).
+ */
+export declare class PanelContextResponseDto {
+    is_master: boolean;
+    access_level_id: string | null;
+    permissions: PanelPermissionKey[] | null;
+    dashboard_layout: DashboardLayoutDto | null;
+}
+//# sourceMappingURL=panel-context-response.dto.d.ts.map

package/dist/panel-rbac/panel-context-response.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"panel-context-response.dto.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/panel-context-response.dto.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D;;GAEG;AACH,qBAAa,uBAAuB;IAElC,SAAS,EAAE,OAAO,CAAC;IAGnB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAO/B,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAOzC,gBAAgB,EAAE,kBAAkB,GAAG,IAAI,CAAC;CAC7C"}

package/dist/panel-rbac/panel-context-response.dto.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PanelContextResponseDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const dashboard_layout_dto_1 = require("./dashboard-layout.dto");
+/**
+ * Resposta de GET /auth/me/panel-context (tenant-service).
+ */
+class PanelContextResponseDto {
+    is_master;
+    access_level_id;
+    permissions;
+    dashboard_layout;
+}
+exports.PanelContextResponseDto = PanelContextResponseDto;
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", Boolean)
+], PanelContextResponseDto.prototype, "is_master", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ nullable: true }),
+    __metadata("design:type", Object)
+], PanelContextResponseDto.prototype, "access_level_id", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        nullable: true,
+        description: 'null = master (todas as permissões); array = chaves canônicas',
+        type: [String],
+    }),
+    __metadata("design:type", Object)
+], PanelContextResponseDto.prototype, "permissions", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        nullable: true,
+        description: 'Layout guardado para o nível; null no master ou sem layout.',
+        type: dashboard_layout_dto_1.DashboardLayoutDto,
+    }),
+    __metadata("design:type", Object)
+], PanelContextResponseDto.prototype, "dashboard_layout", void 0);

package/dist/panel-rbac/panel-permission-keys.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Chaves canônicas de permissão do painel administrativo (resource.action).
+ */
+export declare const PANEL_RESOURCE_ACTIONS: {
+    readonly dashboard: readonly ["view"];
+    readonly tenants: readonly ["view", "create", "update", "delete"];
+    readonly tenant_users: readonly ["view", "create", "update", "delete", "device_sessions_view", "device_sessions_revoke", "totp_clear"];
+    readonly tenant_units: readonly ["view", "create", "update", "delete"];
+    readonly tenant_billings: readonly ["view", "create", "update", "delete"];
+    readonly tenant_connections: readonly ["view", "update"];
+    readonly tenant_ai_tokens: readonly ["view", "update"];
+    readonly audit_logs: readonly ["view"];
+    readonly plans: readonly ["view", "create", "update"];
+    readonly configurations: readonly ["view", "update"];
+    readonly evogo_configs: readonly ["view", "create"];
+    readonly app_modules: readonly ["view", "update"];
+    readonly ai_tools: readonly ["view", "update"];
+    readonly admin_notifications: readonly ["push"];
+    readonly admin_users: readonly ["view", "create", "update", "delete"];
+    readonly access_levels: readonly ["view", "create", "update", "delete"];
+    readonly conversation: readonly ["execute"];
+};
+export type PanelResource = keyof typeof PANEL_RESOURCE_ACTIONS;
+export type PanelAction<R extends PanelResource> = (typeof PANEL_RESOURCE_ACTIONS)[R][number];
+export declare const PANEL_PERMISSION_KEYS: readonly string[];
+export type PanelPermissionKey = (typeof PANEL_PERMISSION_KEYS)[number];
+export declare function isPanelPermissionKey(value: string): value is PanelPermissionKey;
+export declare function panelPermissionKey(resource: PanelResource, action: PanelAction<PanelResource>): PanelPermissionKey;
+//# sourceMappingURL=panel-permission-keys.d.ts.map

package/dist/panel-rbac/panel-permission-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"panel-permission-keys.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/panel-permission-keys.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;CA0BzB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,sBAAsB,CAAC;AAEhE,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,aAAa,IAC7C,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAS7C,eAAO,MAAM,qBAAqB,EAAW,SAAS,MAAM,EAAE,CAAC;AAE/D,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAE/E;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,GACjC,kBAAkB,CAEpB"}

package/dist/panel-rbac/panel-permission-keys.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PANEL_PERMISSION_KEYS = exports.PANEL_RESOURCE_ACTIONS = void 0;
+exports.isPanelPermissionKey = isPanelPermissionKey;
+exports.panelPermissionKey = panelPermissionKey;
+/**
+ * Chaves canônicas de permissão do painel administrativo (resource.action).
+ */
+exports.PANEL_RESOURCE_ACTIONS = {
+    dashboard: ['view'],
+    tenants: ['view', 'create', 'update', 'delete'],
+    tenant_users: [
+        'view',
+        'create',
+        'update',
+        'delete',
+        'device_sessions_view',
+        'device_sessions_revoke',
+        'totp_clear',
+    ],
+    tenant_units: ['view', 'create', 'update', 'delete'],
+    tenant_billings: ['view', 'create', 'update', 'delete'],
+    tenant_connections: ['view', 'update'],
+    tenant_ai_tokens: ['view', 'update'],
+    audit_logs: ['view'],
+    plans: ['view', 'create', 'update'],
+    configurations: ['view', 'update'],
+    evogo_configs: ['view', 'create'],
+    app_modules: ['view', 'update'],
+    ai_tools: ['view', 'update'],
+    admin_notifications: ['push'],
+    admin_users: ['view', 'create', 'update', 'delete'],
+    access_levels: ['view', 'create', 'update', 'delete'],
+    conversation: ['execute'],
+};
+const keys = [];
+for (const [resource, actions] of Object.entries(exports.PANEL_RESOURCE_ACTIONS)) {
+    for (const action of actions) {
+        keys.push(`${resource}.${action}`);
+    }
+}
+exports.PANEL_PERMISSION_KEYS = keys;
+function isPanelPermissionKey(value) {
+    return exports.PANEL_PERMISSION_KEYS.includes(value);
+}
+function panelPermissionKey(resource, action) {
+    return `${resource}.${action}`;
+}