wu-framework 2.5.0 → 2.6.0

package/dist/index.d.cts

@@ -373,6 +373,16 @@ export class WuCore {
   }): Promise<void>;
   mount(appName: string, containerSelector: string): Promise<void>;
   unmount(appName: string, options?: { force?: boolean; keepAlive?: boolean }): Promise<void>;
+  /**
+   * RBAC (v2.6+): fija el principal actual. Las apps que declaran `roles` (en su
+   * config de `init` o en su manifest `wu.roles`) solo se montan si el principal
+   * está autorizado; un `mount()` no autorizado rechaza con `code:'WU_ACCESS_DENIED'`
+   * y emite `wu:access:denied` (DOM) + `access:denied` (bus).
+   */
+  setPrincipal(principal: WuPrincipal | null): WuPrincipal | null;
+  getPrincipal(): WuPrincipal | null;
+  /** ¿El principal actual puede montar/acceder a `appName`? Apps sin `roles` → true. */
+  can(appName: string): boolean;
   /**
    * Push new props into an already-mounted app without remounting (v2.2+).
    * Resolves `true` if the app's adapter supports live props; resolves `false`
@@ -666,6 +676,16 @@ export default wu;
 export function init(apps: WuAppConfig[]): Promise<void>;
 export function mount(name: string, container: string): Promise<void>;
 export function unmount(name: string, opts?: any): Promise<void>;
+/** RBAC (v2.6+): principal actual (rol/permisos de quien usa el sistema). */
+export interface WuPrincipal {
+  role?: string;
+  roles?: string[];
+  permissions?: string[];
+  [k: string]: unknown;
+}
+export function setPrincipal(principal: WuPrincipal | null): WuPrincipal | null;
+export function getPrincipal(): WuPrincipal | null;
+export function can(appName: string): boolean;
 export function define(name: string, lifecycle: WuLifecycle): void;
 export function app(name: string, config: Partial<WuAppConfig>): WuApp;
 export function destroy(): Promise<void>;

package/dist/index.d.ts

@@ -373,6 +373,16 @@ export class WuCore {
   }): Promise<void>;
   mount(appName: string, containerSelector: string): Promise<void>;
   unmount(appName: string, options?: { force?: boolean; keepAlive?: boolean }): Promise<void>;
+  /**
+   * RBAC (v2.6+): fija el principal actual. Las apps que declaran `roles` (en su
+   * config de `init` o en su manifest `wu.roles`) solo se montan si el principal
+   * está autorizado; un `mount()` no autorizado rechaza con `code:'WU_ACCESS_DENIED'`
+   * y emite `wu:access:denied` (DOM) + `access:denied` (bus).
+   */
+  setPrincipal(principal: WuPrincipal | null): WuPrincipal | null;
+  getPrincipal(): WuPrincipal | null;
+  /** ¿El principal actual puede montar/acceder a `appName`? Apps sin `roles` → true. */
+  can(appName: string): boolean;
   /**
    * Push new props into an already-mounted app without remounting (v2.2+).
    * Resolves `true` if the app's adapter supports live props; resolves `false`
@@ -666,6 +676,16 @@ export default wu;
 export function init(apps: WuAppConfig[]): Promise<void>;
 export function mount(name: string, container: string): Promise<void>;
 export function unmount(name: string, opts?: any): Promise<void>;
+/** RBAC (v2.6+): principal actual (rol/permisos de quien usa el sistema). */
+export interface WuPrincipal {
+  role?: string;
+  roles?: string[];
+  permissions?: string[];
+  [k: string]: unknown;
+}
+export function setPrincipal(principal: WuPrincipal | null): WuPrincipal | null;
+export function getPrincipal(): WuPrincipal | null;
+export function can(appName: string): boolean;
 export function define(name: string, lifecycle: WuLifecycle): void;
 export function app(name: string, config: Partial<WuAppConfig>): WuApp;
 export function destroy(): Promise<void>;