From 0722a25845532c518ee47bb68db951af9756a4ee Mon Sep 17 00:00:00 2001
From: admin <admin@queo.ru>
Date: Thu, 30 Apr 2026 21:48:30 +0300
Subject: [PATCH] fix(auth): resource key follows Queo convention 'doc.queo.ru'
 (subdomain), not 'doc_manager'

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 packages/shared/src/auth/types.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/packages/shared/src/auth/types.ts b/packages/shared/src/auth/types.ts
index 2ae164f..bf21bab 100644
--- a/packages/shared/src/auth/types.ts
+++ b/packages/shared/src/auth/types.ts
@@ -18,7 +18,8 @@ export const AuthPayload = z.object({
 });
 export type AuthPayload = z.infer<typeof AuthPayload>;
 
-export const DOC_MANAGER_RESOURCE = 'doc_manager' as const;
+// Конвенция Queo: ключ ресурса = поддомен приложения (hall.queo.ru, cloud.queo.ru, doc.queo.ru).
+export const DOC_MANAGER_RESOURCE = 'doc.queo.ru' as const;
 
 // Иерархия ролей: admin ⊃ user ⊃ viewer
 export function hasDocPermission(payload: AuthPayload, required: PermissionRole): boolean {