tychat-contracts 1.6.9 → 1.6.12

package/dist/index.d.ts

@@ -20,4 +20,5 @@ export * from './cashback';
 export * from './filters';
 export * from './anamneses';
 export * from './legal-terms';
+export * from './panel-rbac';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,MAAM,CAAC;AACrB,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,MAAM,CAAC;AACrB,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -36,3 +36,4 @@ __exportStar(require("./cashback"), exports);
 __exportStar(require("./filters"), exports);
 __exportStar(require("./anamneses"), exports);
 __exportStar(require("./legal-terms"), exports);
+__exportStar(require("./panel-rbac"), exports);

package/dist/panel-rbac/access-permission-item.dto.d.ts

@@ -0,0 +1,6 @@
+import { type PanelResource } from './panel-permission-keys';
+export declare class AccessPermissionItemDto {
+    resource: PanelResource;
+    action: string;
+}
+//# sourceMappingURL=access-permission-item.dto.d.ts.map

package/dist/panel-rbac/access-permission-item.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-permission-item.dto.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/access-permission-item.dto.ts"],"names":[],"mappings":"AAEA,OAAO,EAA0B,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAIrF,qBAAa,uBAAuB;IAIlC,QAAQ,EAAE,aAAa,CAAC;IAQxB,MAAM,EAAE,MAAM,CAAC;CAChB"}

package/dist/panel-rbac/access-permission-item.dto.js

@@ -0,0 +1,36 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessPermissionItemDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+const panel_permission_keys_1 = require("./panel-permission-keys");
+const RESOURCES = Object.keys(panel_permission_keys_1.PANEL_RESOURCE_ACTIONS);
+class AccessPermissionItemDto {
+    resource;
+    action;
+}
+exports.AccessPermissionItemDto = AccessPermissionItemDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: RESOURCES }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsIn)(RESOURCES),
+    __metadata("design:type", String)
+], AccessPermissionItemDto.prototype, "resource", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Ação permitida para o recurso',
+        example: 'view',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(80),
+    __metadata("design:type", String)
+], AccessPermissionItemDto.prototype, "action", void 0);

package/dist/panel-rbac/create-access-level.dto.d.ts

@@ -0,0 +1,6 @@
+export declare class CreateAccessLevelDto {
+    name: string;
+    description?: string;
+    isActive?: boolean;
+}
+//# sourceMappingURL=create-access-level.dto.d.ts.map

package/dist/panel-rbac/create-access-level.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-access-level.dto.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/create-access-level.dto.ts"],"names":[],"mappings":"AAGA,qBAAa,oBAAoB;IAI/B,IAAI,EAAE,MAAM,CAAC;IAMb,WAAW,CAAC,EAAE,MAAM,CAAC;IAKrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB"}

package/dist/panel-rbac/create-access-level.dto.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateAccessLevelDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class CreateAccessLevelDto {
+    name;
+    description;
+    isActive;
+}
+exports.CreateAccessLevelDto = CreateAccessLevelDto;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(120),
+    __metadata("design:type", String)
+], CreateAccessLevelDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(500),
+    __metadata("design:type", String)
+], CreateAccessLevelDto.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ default: true }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], CreateAccessLevelDto.prototype, "isActive", void 0);

package/dist/panel-rbac/dashboard-layout.dto.d.ts

@@ -0,0 +1,27 @@
+/** Tipos de visualização permitidos no painel (determinísticos). */
+export declare const DASHBOARD_CHART_TYPES: readonly ["stat", "card", "bar", "line", "area", "pie", "radial", "table"];
+export type DashboardChartType = (typeof DASHBOARD_CHART_TYPES)[number];
+/**
+ * Módulos de dados agregados do dashboard (cada um mapeia a permissões e a fatia do summary).
+ * Manter alinhado ao `Frontend/.../lib/dashboard-data-modules.ts`.
+ */
+export declare const DASHBOARD_DATA_MODULE_KEYS: readonly ["overview.clients_total", "overview.clients_active_inactive", "overview.units_total", "overview.revenue_totals", "overview.revenue_growth", "overview.invoice_counts", "billing.revenue_by_status", "billing.invoice_counts", "billing.recent_invoices", "billing.payment_links", "tenants.client_list", "tenants.plan_per_client", "tenants.legal_term_policy", "tenants.whatsapp_provider", "tenants.scheduled_deletion", "tenants.hostnames", "tenants.storage_usage", "limits.per_client", "limits.session_policy", "limits.extra_storage", "plans.stats", "plans.list", "ia.tokens_per_tenant", "ia.agents_per_tenant", "ia.tool_policies", "ia.models_availability", "evolution.configs_summary", "evolution.instances_totals", "evolution.connection_state", "global.platform_config", "team.panel_admins", "audit.recent_events", "audit.outcome_counts", "security.device_sessions", "security.totp_status"];
+export type DashboardDataModuleKey = (typeof DASHBOARD_DATA_MODULE_KEYS)[number];
+export declare function isDashboardDataModuleKey(v: string): v is DashboardDataModuleKey;
+export declare class DashboardWidgetDto {
+    id: string;
+    dataModule: DashboardDataModuleKey;
+    chartType: DashboardChartType;
+    /** Coluna inicial (grelha 12 colunas). */
+    x: number;
+    /** Largura em colunas (1–12). */
+    w: number;
+    /** Ordem de leitura (menor = primeiro). */
+    order: number;
+    title?: string;
+}
+export declare class DashboardLayoutDto {
+    version: number;
+    widgets: DashboardWidgetDto[];
+}
+//# sourceMappingURL=dashboard-layout.dto.d.ts.map

package/dist/panel-rbac/dashboard-layout.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-layout.dto.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/dashboard-layout.dto.ts"],"names":[],"mappings":"AAgBA,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,4EASxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,0BAA0B,i4BAoC7B,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,sBAAsB,CAE/E;AAED,qBAAa,kBAAkB;IAG7B,EAAE,EAAE,MAAM,CAAC;IAKX,UAAU,EAAE,sBAAsB,CAAC;IAKnC,SAAS,EAAE,kBAAkB,CAAC;IAE9B,0CAA0C;IAK1C,CAAC,EAAE,MAAM,CAAC;IAEV,iCAAiC;IAKjC,CAAC,EAAE,MAAM,CAAC;IAEV,2CAA2C;IAI3C,KAAK,EAAE,MAAM,CAAC;IAMd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,kBAAkB;IAK7B,OAAO,EAAE,MAAM,CAAC;IAOhB,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B"}

package/dist/panel-rbac/dashboard-layout.dto.js

@@ -0,0 +1,148 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DashboardLayoutDto = exports.DashboardWidgetDto = exports.DASHBOARD_DATA_MODULE_KEYS = exports.DASHBOARD_CHART_TYPES = void 0;
+exports.isDashboardDataModuleKey = isDashboardDataModuleKey;
+const swagger_1 = require("@nestjs/swagger");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+/** Tipos de visualização permitidos no painel (determinísticos). */
+exports.DASHBOARD_CHART_TYPES = [
+    'stat',
+    'card',
+    'bar',
+    'line',
+    'area',
+    'pie',
+    'radial',
+    'table',
+];
+/**
+ * Módulos de dados agregados do dashboard (cada um mapeia a permissões e a fatia do summary).
+ * Manter alinhado ao `Frontend/.../lib/dashboard-data-modules.ts`.
+ */
+exports.DASHBOARD_DATA_MODULE_KEYS = [
+    'overview.clients_total',
+    'overview.clients_active_inactive',
+    'overview.units_total',
+    'overview.revenue_totals',
+    'overview.revenue_growth',
+    'overview.invoice_counts',
+    'billing.revenue_by_status',
+    'billing.invoice_counts',
+    'billing.recent_invoices',
+    'billing.payment_links',
+    'tenants.client_list',
+    'tenants.plan_per_client',
+    'tenants.legal_term_policy',
+    'tenants.whatsapp_provider',
+    'tenants.scheduled_deletion',
+    'tenants.hostnames',
+    'tenants.storage_usage',
+    'limits.per_client',
+    'limits.session_policy',
+    'limits.extra_storage',
+    'plans.stats',
+    'plans.list',
+    'ia.tokens_per_tenant',
+    'ia.agents_per_tenant',
+    'ia.tool_policies',
+    'ia.models_availability',
+    'evolution.configs_summary',
+    'evolution.instances_totals',
+    'evolution.connection_state',
+    'global.platform_config',
+    'team.panel_admins',
+    'audit.recent_events',
+    'audit.outcome_counts',
+    'security.device_sessions',
+    'security.totp_status',
+];
+function isDashboardDataModuleKey(v) {
+    return exports.DASHBOARD_DATA_MODULE_KEYS.includes(v);
+}
+class DashboardWidgetDto {
+    id;
+    dataModule;
+    chartType;
+    /** Coluna inicial (grelha 12 colunas). */
+    x;
+    /** Largura em colunas (1–12). */
+    w;
+    /** Ordem de leitura (menor = primeiro). */
+    order;
+    title;
+}
+exports.DashboardWidgetDto = DashboardWidgetDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ format: 'uuid' }),
+    (0, class_validator_1.IsUUID)('4'),
+    __metadata("design:type", String)
+], DashboardWidgetDto.prototype, "id", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: exports.DASHBOARD_DATA_MODULE_KEYS }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsIn)([...exports.DASHBOARD_DATA_MODULE_KEYS]),
+    __metadata("design:type", String)
+], DashboardWidgetDto.prototype, "dataModule", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: exports.DASHBOARD_CHART_TYPES }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsIn)([...exports.DASHBOARD_CHART_TYPES]),
+    __metadata("design:type", String)
+], DashboardWidgetDto.prototype, "chartType", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ minimum: 0, maximum: 11 }),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(0),
+    (0, class_validator_1.Max)(11),
+    __metadata("design:type", Number)
+], DashboardWidgetDto.prototype, "x", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ minimum: 1, maximum: 12 }),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    (0, class_validator_1.Max)(12),
+    __metadata("design:type", Number)
+], DashboardWidgetDto.prototype, "w", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(0),
+    __metadata("design:type", Number)
+], DashboardWidgetDto.prototype, "order", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Título opcional no painel' }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(120),
+    __metadata("design:type", String)
+], DashboardWidgetDto.prototype, "title", void 0);
+class DashboardLayoutDto {
+    version;
+    widgets;
+}
+exports.DashboardLayoutDto = DashboardLayoutDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ default: 1 }),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    (0, class_validator_1.Max)(1),
+    __metadata("design:type", Number)
+], DashboardLayoutDto.prototype, "version", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: [DashboardWidgetDto] }),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(80),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => DashboardWidgetDto),
+    __metadata("design:type", Array)
+], DashboardLayoutDto.prototype, "widgets", void 0);

package/dist/panel-rbac/index.d.ts

@@ -0,0 +1,8 @@
+export * from './panel-permission-keys';
+export * from './create-access-level.dto';
+export * from './update-access-level.dto';
+export * from './access-permission-item.dto';
+export * from './replace-access-permissions.dto';
+export * from './panel-context-response.dto';
+export * from './dashboard-layout.dto';
+//# sourceMappingURL=index.d.ts.map

package/dist/panel-rbac/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kCAAkC,CAAC;AACjD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC"}

package/dist/panel-rbac/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./panel-permission-keys"), exports);
+__exportStar(require("./create-access-level.dto"), exports);
+__exportStar(require("./update-access-level.dto"), exports);
+__exportStar(require("./access-permission-item.dto"), exports);
+__exportStar(require("./replace-access-permissions.dto"), exports);
+__exportStar(require("./panel-context-response.dto"), exports);
+__exportStar(require("./dashboard-layout.dto"), exports);

package/dist/panel-rbac/panel-context-response.dto.d.ts

@@ -0,0 +1,12 @@
+import type { PanelPermissionKey } from './panel-permission-keys';
+import { DashboardLayoutDto } from './dashboard-layout.dto';
+/**
+ * Resposta de GET /auth/me/panel-context (tenant-service).
+ */
+export declare class PanelContextResponseDto {
+    is_master: boolean;
+    access_level_id: string | null;
+    permissions: PanelPermissionKey[] | null;
+    dashboard_layout: DashboardLayoutDto | null;
+}
+//# sourceMappingURL=panel-context-response.dto.d.ts.map

package/dist/panel-rbac/panel-context-response.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"panel-context-response.dto.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/panel-context-response.dto.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D;;GAEG;AACH,qBAAa,uBAAuB;IAElC,SAAS,EAAE,OAAO,CAAC;IAGnB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAO/B,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAOzC,gBAAgB,EAAE,kBAAkB,GAAG,IAAI,CAAC;CAC7C"}

package/dist/panel-rbac/panel-context-response.dto.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PanelContextResponseDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const dashboard_layout_dto_1 = require("./dashboard-layout.dto");
+/**
+ * Resposta de GET /auth/me/panel-context (tenant-service).
+ */
+class PanelContextResponseDto {
+    is_master;
+    access_level_id;
+    permissions;
+    dashboard_layout;
+}
+exports.PanelContextResponseDto = PanelContextResponseDto;
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", Boolean)
+], PanelContextResponseDto.prototype, "is_master", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ nullable: true }),
+    __metadata("design:type", Object)
+], PanelContextResponseDto.prototype, "access_level_id", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        nullable: true,
+        description: 'null = master (todas as permissões); array = chaves canônicas',
+        type: [String],
+    }),
+    __metadata("design:type", Object)
+], PanelContextResponseDto.prototype, "permissions", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        nullable: true,
+        description: 'Layout guardado para o nível; null no master ou sem layout.',
+        type: dashboard_layout_dto_1.DashboardLayoutDto,
+    }),
+    __metadata("design:type", Object)
+], PanelContextResponseDto.prototype, "dashboard_layout", void 0);

package/dist/panel-rbac/panel-permission-keys.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Chaves canônicas de permissão do painel administrativo (resource.action).
+ */
+export declare const PANEL_RESOURCE_ACTIONS: {
+    readonly dashboard: readonly ["view"];
+    readonly tenants: readonly ["view", "create", "update", "delete"];
+    readonly tenant_users: readonly ["view", "create", "update", "delete", "device_sessions_view", "device_sessions_revoke", "totp_clear"];
+    readonly tenant_units: readonly ["view", "create", "update", "delete"];
+    readonly tenant_billings: readonly ["view", "create", "update", "delete"];
+    readonly tenant_connections: readonly ["view", "update"];
+    readonly tenant_ai_tokens: readonly ["view", "update"];
+    readonly audit_logs: readonly ["view"];
+    readonly plans: readonly ["view", "create", "update"];
+    readonly configurations: readonly ["view", "update"];
+    readonly evogo_configs: readonly ["view", "create"];
+    readonly app_modules: readonly ["view", "update"];
+    readonly ai_tools: readonly ["view", "update"];
+    readonly admin_notifications: readonly ["push"];
+    readonly admin_users: readonly ["view", "create", "update", "delete"];
+    readonly access_levels: readonly ["view", "create", "update", "delete"];
+    readonly conversation: readonly ["execute"];
+};
+export type PanelResource = keyof typeof PANEL_RESOURCE_ACTIONS;
+export type PanelAction<R extends PanelResource> = (typeof PANEL_RESOURCE_ACTIONS)[R][number];
+export declare const PANEL_PERMISSION_KEYS: readonly string[];
+export type PanelPermissionKey = (typeof PANEL_PERMISSION_KEYS)[number];
+export declare function isPanelPermissionKey(value: string): value is PanelPermissionKey;
+export declare function panelPermissionKey(resource: PanelResource, action: PanelAction<PanelResource>): PanelPermissionKey;
+//# sourceMappingURL=panel-permission-keys.d.ts.map

package/dist/panel-rbac/panel-permission-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"panel-permission-keys.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/panel-permission-keys.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;CA0BzB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,sBAAsB,CAAC;AAEhE,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,aAAa,IAC7C,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAS7C,eAAO,MAAM,qBAAqB,EAAW,SAAS,MAAM,EAAE,CAAC;AAE/D,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAE/E;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,GACjC,kBAAkB,CAEpB"}

package/dist/panel-rbac/panel-permission-keys.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PANEL_PERMISSION_KEYS = exports.PANEL_RESOURCE_ACTIONS = void 0;
+exports.isPanelPermissionKey = isPanelPermissionKey;
+exports.panelPermissionKey = panelPermissionKey;
+/**
+ * Chaves canônicas de permissão do painel administrativo (resource.action).
+ */
+exports.PANEL_RESOURCE_ACTIONS = {
+    dashboard: ['view'],
+    tenants: ['view', 'create', 'update', 'delete'],
+    tenant_users: [
+        'view',
+        'create',
+        'update',
+        'delete',
+        'device_sessions_view',
+        'device_sessions_revoke',
+        'totp_clear',
+    ],
+    tenant_units: ['view', 'create', 'update', 'delete'],
+    tenant_billings: ['view', 'create', 'update', 'delete'],
+    tenant_connections: ['view', 'update'],
+    tenant_ai_tokens: ['view', 'update'],
+    audit_logs: ['view'],
+    plans: ['view', 'create', 'update'],
+    configurations: ['view', 'update'],
+    evogo_configs: ['view', 'create'],
+    app_modules: ['view', 'update'],
+    ai_tools: ['view', 'update'],
+    admin_notifications: ['push'],
+    admin_users: ['view', 'create', 'update', 'delete'],
+    access_levels: ['view', 'create', 'update', 'delete'],
+    conversation: ['execute'],
+};
+const keys = [];
+for (const [resource, actions] of Object.entries(exports.PANEL_RESOURCE_ACTIONS)) {
+    for (const action of actions) {
+        keys.push(`${resource}.${action}`);
+    }
+}
+exports.PANEL_PERMISSION_KEYS = keys;
+function isPanelPermissionKey(value) {
+    return exports.PANEL_PERMISSION_KEYS.includes(value);
+}
+function panelPermissionKey(resource, action) {
+    return `${resource}.${action}`;
+}

package/dist/panel-rbac/panel-permission-keys.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=panel-permission-keys.spec.d.ts.map

package/dist/panel-rbac/panel-permission-keys.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"panel-permission-keys.spec.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/panel-permission-keys.spec.ts"],"names":[],"mappings":""}

package/dist/panel-rbac/panel-permission-keys.spec.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const panel_permission_keys_1 = require("./panel-permission-keys");
+describe("panel-permission-keys", () => {
+    it("expõe chaves estáveis para cada recurso/ação", () => {
+        let expected = 0;
+        for (const [, actions] of Object.entries(panel_permission_keys_1.PANEL_RESOURCE_ACTIONS)) {
+            expected += actions.length;
+        }
+        expect(panel_permission_keys_1.PANEL_PERMISSION_KEYS.length).toBe(expected);
+    });
+    it("isPanelPermissionKey valida chaves canónicas", () => {
+        expect((0, panel_permission_keys_1.isPanelPermissionKey)("tenants.view")).toBe(true);
+        expect((0, panel_permission_keys_1.isPanelPermissionKey)("invalid.key")).toBe(false);
+    });
+});

package/dist/panel-rbac/replace-access-permissions.dto.d.ts

@@ -0,0 +1,5 @@
+import { AccessPermissionItemDto } from './access-permission-item.dto';
+export declare class ReplaceAccessPermissionsDto {
+    items: AccessPermissionItemDto[];
+}
+//# sourceMappingURL=replace-access-permissions.dto.d.ts.map

package/dist/panel-rbac/replace-access-permissions.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replace-access-permissions.dto.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/replace-access-permissions.dto.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,qBAAa,2BAA2B;IAMtC,KAAK,EAAE,uBAAuB,EAAE,CAAC;CAClC"}

package/dist/panel-rbac/replace-access-permissions.dto.js

@@ -0,0 +1,28 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ReplaceAccessPermissionsDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const access_permission_item_dto_1 = require("./access-permission-item.dto");
+class ReplaceAccessPermissionsDto {
+    items;
+}
+exports.ReplaceAccessPermissionsDto = ReplaceAccessPermissionsDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: [access_permission_item_dto_1.AccessPermissionItemDto] }),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMinSize)(0),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => access_permission_item_dto_1.AccessPermissionItemDto),
+    __metadata("design:type", Array)
+], ReplaceAccessPermissionsDto.prototype, "items", void 0);

package/dist/panel-rbac/update-access-level.dto.d.ts

@@ -0,0 +1,8 @@
+import { DashboardLayoutDto } from './dashboard-layout.dto';
+export declare class UpdateAccessLevelDto {
+    name?: string;
+    description?: string | null;
+    isActive?: boolean;
+    dashboardLayout?: DashboardLayoutDto | null;
+}
+//# sourceMappingURL=update-access-level.dto.d.ts.map

package/dist/panel-rbac/update-access-level.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-access-level.dto.d.ts","sourceRoot":"","sources":["../../src/panel-rbac/update-access-level.dto.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,qBAAa,oBAAoB;IAM/B,IAAI,CAAC,EAAE,MAAM,CAAC;IAMd,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IASnB,eAAe,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CAC7C"}

package/dist/panel-rbac/update-access-level.dto.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateAccessLevelDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const dashboard_layout_dto_1 = require("./dashboard-layout.dto");
+class UpdateAccessLevelDto {
+    name;
+    description;
+    isActive;
+    dashboardLayout;
+}
+exports.UpdateAccessLevelDto = UpdateAccessLevelDto;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(120),
+    __metadata("design:type", String)
+], UpdateAccessLevelDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(500),
+    __metadata("design:type", Object)
+], UpdateAccessLevelDto.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], UpdateAccessLevelDto.prototype, "isActive", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Layout do dashboard para utilizadores deste nível (master).',
+        type: dashboard_layout_dto_1.DashboardLayoutDto,
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => dashboard_layout_dto_1.DashboardLayoutDto),
+    __metadata("design:type", Object)
+], UpdateAccessLevelDto.prototype, "dashboardLayout", void 0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tychat-contracts",
-  "version": "1.6.9",
+  "version": "1.6.12",
   "description": "DTOs compartilhados com class-validator (API e microserviços)",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/index.ts

@@ -20,3 +20,4 @@ export * from './cashback';
 export * from './filters';
 export * from './anamneses';
 export * from './legal-terms';
+export * from './panel-rbac';

package/src/panel-rbac/access-permission-item.dto.ts

@@ -0,0 +1,20 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsIn, IsString, MaxLength } from 'class-validator';
+import { PANEL_RESOURCE_ACTIONS, type PanelResource } from './panel-permission-keys';
+
+const RESOURCES = Object.keys(PANEL_RESOURCE_ACTIONS) as PanelResource[];
+
+export class AccessPermissionItemDto {
+  @ApiProperty({ enum: RESOURCES })
+  @IsString()
+  @IsIn(RESOURCES)
+  resource: PanelResource;
+
+  @ApiProperty({
+    description: 'Ação permitida para o recurso',
+    example: 'view',
+  })
+  @IsString()
+  @MaxLength(80)
+  action: string;
+}

package/src/panel-rbac/create-access-level.dto.ts

@@ -0,0 +1,20 @@
+import { ApiPropertyOptional } from '@nestjs/swagger';
+import { IsBoolean, IsOptional, IsString, MaxLength, MinLength } from 'class-validator';
+
+export class CreateAccessLevelDto {
+  @IsString()
+  @MinLength(1)
+  @MaxLength(120)
+  name: string;
+
+  @ApiPropertyOptional()
+  @IsOptional()
+  @IsString()
+  @MaxLength(500)
+  description?: string;
+
+  @ApiPropertyOptional({ default: true })
+  @IsOptional()
+  @IsBoolean()
+  isActive?: boolean;
+}

package/src/panel-rbac/dashboard-layout.dto.ts

@@ -0,0 +1,134 @@
+import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
+import { Type } from 'class-transformer';
+import {
+  ArrayMaxSize,
+  IsArray,
+  IsIn,
+  IsInt,
+  IsOptional,
+  IsString,
+  IsUUID,
+  Max,
+  MaxLength,
+  Min,
+  ValidateNested,
+} from 'class-validator';
+
+/** Tipos de visualização permitidos no painel (determinísticos). */
+export const DASHBOARD_CHART_TYPES = [
+  'stat',
+  'card',
+  'bar',
+  'line',
+  'area',
+  'pie',
+  'radial',
+  'table',
+] as const;
+
+export type DashboardChartType = (typeof DASHBOARD_CHART_TYPES)[number];
+
+/**
+ * Módulos de dados agregados do dashboard (cada um mapeia a permissões e a fatia do summary).
+ * Manter alinhado ao `Frontend/.../lib/dashboard-data-modules.ts`.
+ */
+export const DASHBOARD_DATA_MODULE_KEYS = [
+  'overview.clients_total',
+  'overview.clients_active_inactive',
+  'overview.units_total',
+  'overview.revenue_totals',
+  'overview.revenue_growth',
+  'overview.invoice_counts',
+  'billing.revenue_by_status',
+  'billing.invoice_counts',
+  'billing.recent_invoices',
+  'billing.payment_links',
+  'tenants.client_list',
+  'tenants.plan_per_client',
+  'tenants.legal_term_policy',
+  'tenants.whatsapp_provider',
+  'tenants.scheduled_deletion',
+  'tenants.hostnames',
+  'tenants.storage_usage',
+  'limits.per_client',
+  'limits.session_policy',
+  'limits.extra_storage',
+  'plans.stats',
+  'plans.list',
+  'ia.tokens_per_tenant',
+  'ia.agents_per_tenant',
+  'ia.tool_policies',
+  'ia.models_availability',
+  'evolution.configs_summary',
+  'evolution.instances_totals',
+  'evolution.connection_state',
+  'global.platform_config',
+  'team.panel_admins',
+  'audit.recent_events',
+  'audit.outcome_counts',
+  'security.device_sessions',
+  'security.totp_status',
+] as const;
+
+export type DashboardDataModuleKey = (typeof DASHBOARD_DATA_MODULE_KEYS)[number];
+
+export function isDashboardDataModuleKey(v: string): v is DashboardDataModuleKey {
+  return (DASHBOARD_DATA_MODULE_KEYS as readonly string[]).includes(v);
+}
+
+export class DashboardWidgetDto {
+  @ApiProperty({ format: 'uuid' })
+  @IsUUID('4')
+  id: string;
+
+  @ApiProperty({ enum: DASHBOARD_DATA_MODULE_KEYS })
+  @IsString()
+  @IsIn([...DASHBOARD_DATA_MODULE_KEYS])
+  dataModule: DashboardDataModuleKey;
+
+  @ApiProperty({ enum: DASHBOARD_CHART_TYPES })
+  @IsString()
+  @IsIn([...DASHBOARD_CHART_TYPES])
+  chartType: DashboardChartType;
+
+  /** Coluna inicial (grelha 12 colunas). */
+  @ApiProperty({ minimum: 0, maximum: 11 })
+  @IsInt()
+  @Min(0)
+  @Max(11)
+  x: number;
+
+  /** Largura em colunas (1–12). */
+  @ApiProperty({ minimum: 1, maximum: 12 })
+  @IsInt()
+  @Min(1)
+  @Max(12)
+  w: number;
+
+  /** Ordem de leitura (menor = primeiro). */
+  @ApiProperty()
+  @IsInt()
+  @Min(0)
+  order: number;
+
+  @ApiPropertyOptional({ description: 'Título opcional no painel' })
+  @IsOptional()
+  @IsString()
+  @MaxLength(120)
+  title?: string;
+}
+
+export class DashboardLayoutDto {
+  @ApiProperty({ default: 1 })
+  @IsInt()
+  @Min(1)
+  @Max(1)
+  version: number;
+
+  @ApiProperty({ type: [DashboardWidgetDto] })
+  @IsArray()
+  @ArrayMaxSize(80)
+  @ValidateNested({ each: true })
+  @Type(() => DashboardWidgetDto)
+  widgets: DashboardWidgetDto[];
+}

package/src/panel-rbac/index.ts

@@ -0,0 +1,7 @@
+export * from './panel-permission-keys';
+export * from './create-access-level.dto';
+export * from './update-access-level.dto';
+export * from './access-permission-item.dto';
+export * from './replace-access-permissions.dto';
+export * from './panel-context-response.dto';
+export * from './dashboard-layout.dto';

package/src/panel-rbac/panel-context-response.dto.ts

@@ -0,0 +1,28 @@
+import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
+import type { PanelPermissionKey } from './panel-permission-keys';
+import { DashboardLayoutDto } from './dashboard-layout.dto';
+
+/**
+ * Resposta de GET /auth/me/panel-context (tenant-service).
+ */
+export class PanelContextResponseDto {
+  @ApiProperty()
+  is_master: boolean;
+
+  @ApiPropertyOptional({ nullable: true })
+  access_level_id: string | null;
+
+  @ApiPropertyOptional({
+    nullable: true,
+    description: 'null = master (todas as permissões); array = chaves canônicas',
+    type: [String],
+  })
+  permissions: PanelPermissionKey[] | null;
+
+  @ApiPropertyOptional({
+    nullable: true,
+    description: 'Layout guardado para o nível; null no master ou sem layout.',
+    type: DashboardLayoutDto,
+  })
+  dashboard_layout: DashboardLayoutDto | null;
+}

package/src/panel-rbac/panel-permission-keys.spec.ts

@@ -0,0 +1,20 @@
+import {
+  PANEL_PERMISSION_KEYS,
+  PANEL_RESOURCE_ACTIONS,
+  isPanelPermissionKey,
+} from "./panel-permission-keys";
+
+describe("panel-permission-keys", () => {
+  it("expõe chaves estáveis para cada recurso/ação", () => {
+    let expected = 0;
+    for (const [, actions] of Object.entries(PANEL_RESOURCE_ACTIONS)) {
+      expected += actions.length;
+    }
+    expect(PANEL_PERMISSION_KEYS.length).toBe(expected);
+  });
+
+  it("isPanelPermissionKey valida chaves canónicas", () => {
+    expect(isPanelPermissionKey("tenants.view")).toBe(true);
+    expect(isPanelPermissionKey("invalid.key")).toBe(false);
+  });
+});

package/src/panel-rbac/panel-permission-keys.ts

@@ -0,0 +1,57 @@
+/**
+ * Chaves canônicas de permissão do painel administrativo (resource.action).
+ */
+export const PANEL_RESOURCE_ACTIONS = {
+  dashboard: ['view'] as const,
+  tenants: ['view', 'create', 'update', 'delete'] as const,
+  tenant_users: [
+    'view',
+    'create',
+    'update',
+    'delete',
+    'device_sessions_view',
+    'device_sessions_revoke',
+    'totp_clear',
+  ] as const,
+  tenant_units: ['view', 'create', 'update', 'delete'] as const,
+  tenant_billings: ['view', 'create', 'update', 'delete'] as const,
+  tenant_connections: ['view', 'update'] as const,
+  tenant_ai_tokens: ['view', 'update'] as const,
+  audit_logs: ['view'] as const,
+  plans: ['view', 'create', 'update'] as const,
+  configurations: ['view', 'update'] as const,
+  evogo_configs: ['view', 'create'] as const,
+  app_modules: ['view', 'update'] as const,
+  ai_tools: ['view', 'update'] as const,
+  admin_notifications: ['push'] as const,
+  admin_users: ['view', 'create', 'update', 'delete'] as const,
+  access_levels: ['view', 'create', 'update', 'delete'] as const,
+  conversation: ['execute'] as const,
+} as const;
+
+export type PanelResource = keyof typeof PANEL_RESOURCE_ACTIONS;
+
+export type PanelAction<R extends PanelResource> =
+  (typeof PANEL_RESOURCE_ACTIONS)[R][number];
+
+const keys: string[] = [];
+for (const [resource, actions] of Object.entries(PANEL_RESOURCE_ACTIONS)) {
+  for (const action of actions) {
+    keys.push(`${resource}.${action}`);
+  }
+}
+
+export const PANEL_PERMISSION_KEYS = keys as readonly string[];
+
+export type PanelPermissionKey = (typeof PANEL_PERMISSION_KEYS)[number];
+
+export function isPanelPermissionKey(value: string): value is PanelPermissionKey {
+  return (PANEL_PERMISSION_KEYS as readonly string[]).includes(value);
+}
+
+export function panelPermissionKey(
+  resource: PanelResource,
+  action: PanelAction<PanelResource>,
+): PanelPermissionKey {
+  return `${resource}.${action}` as PanelPermissionKey;
+}

package/src/panel-rbac/replace-access-permissions.dto.ts

@@ -0,0 +1,13 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { Type } from 'class-transformer';
+import { ArrayMinSize, IsArray, ValidateNested } from 'class-validator';
+import { AccessPermissionItemDto } from './access-permission-item.dto';
+
+export class ReplaceAccessPermissionsDto {
+  @ApiProperty({ type: [AccessPermissionItemDto] })
+  @IsArray()
+  @ArrayMinSize(0)
+  @ValidateNested({ each: true })
+  @Type(() => AccessPermissionItemDto)
+  items: AccessPermissionItemDto[];
+}

package/src/panel-rbac/update-access-level.dto.ts

@@ -0,0 +1,40 @@
+import { ApiPropertyOptional } from '@nestjs/swagger';
+import { Type } from 'class-transformer';
+import {
+  IsBoolean,
+  IsOptional,
+  IsString,
+  MaxLength,
+  MinLength,
+  ValidateNested,
+} from 'class-validator';
+import { DashboardLayoutDto } from './dashboard-layout.dto';
+
+export class UpdateAccessLevelDto {
+  @ApiPropertyOptional()
+  @IsOptional()
+  @IsString()
+  @MinLength(1)
+  @MaxLength(120)
+  name?: string;
+
+  @ApiPropertyOptional()
+  @IsOptional()
+  @IsString()
+  @MaxLength(500)
+  description?: string | null;
+
+  @ApiPropertyOptional()
+  @IsOptional()
+  @IsBoolean()
+  isActive?: boolean;
+
+  @ApiPropertyOptional({
+    description: 'Layout do dashboard para utilizadores deste nível (master).',
+    type: DashboardLayoutDto,
+  })
+  @IsOptional()
+  @ValidateNested()
+  @Type(() => DashboardLayoutDto)
+  dashboardLayout?: DashboardLayoutDto | null;
+}