@bearei/nest 0.0.0-stage → 2.0.0-dev.2

package/dist/external/external.module.js

@@ -0,0 +1,24 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalModule = void 0;
+const axios_1 = require("@nestjs/axios");
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const jwt_1 = require("../jwt");
+const external_service_1 = require("./external.service");
+let ExternalModule = class ExternalModule {
+};
+exports.ExternalModule = ExternalModule;
+exports.ExternalModule = ExternalModule = __decorate([
+    (0, common_1.Module)({
+        exports: [external_service_1.ExternalService],
+        imports: [config_1.ConfigModule, axios_1.HttpModule.register({ maxRedirects: 3, timeout: 20000 }), jwt_1.JwtModule],
+        providers: [external_service_1.ExternalService]
+    })
+], ExternalModule);

package/dist/external/external.service.d.ts

@@ -0,0 +1,15 @@
+import { HttpService } from '@nestjs/axios';
+import { ConfigService } from '@nestjs/config';
+import type { PaginatedResult, RequestHeaders } from '../common.interface';
+import type { FindUserPermissionsOptions, FindUserSubscriptionFeaturesOptions, ExternalCreateActionLogOptions, ExternalRequestOptions, PermissionResult, SubscriptionFeatureResult } from './external.interface';
+import { JwtService } from '../jwt';
+export declare class ExternalService {
+    private readonly configService;
+    private readonly httpService;
+    private readonly jwtService;
+    constructor(configService: ConfigService, httpService: HttpService, jwtService: JwtService);
+    findUserPermissions(headers: RequestHeaders, userId: string, options: Omit<FindUserPermissionsOptions, 'userId'>): Promise<PaginatedResult<PermissionResult>>;
+    findUserSubscriptionFeatures(headers: RequestHeaders, userId: string, options: Omit<FindUserSubscriptionFeaturesOptions, 'userId'>): Promise<PaginatedResult<SubscriptionFeatureResult>>;
+    createActionLog(headers: RequestHeaders, { action, serviceName, ...restOptions }: ExternalCreateActionLogOptions): Promise<any>;
+    request({ baseURL, headers, isAsyncInvocation, method, params: rawParams, path, serviceName, timeout, version, ...restOptions }: ExternalRequestOptions): Promise<any>;
+}

package/dist/external/external.service.js

@@ -0,0 +1,160 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalService = void 0;
+const axios_1 = require("@nestjs/axios");
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const rxjs_1 = require("rxjs");
+const exception_1 = require("../exception");
+const jwt_1 = require("../jwt");
+const utils_1 = require("../utils");
+const NETWORK_ERROR_CODES = new Set(['ECONNREFUSED', 'ECONNRESET', 'ENOTFOUND', 'ERR_NETWORK', 'UND_ERR_SOCKET']);
+const TIMEOUT_ERROR_CODES = new Set(['ECONNABORTED', 'ETIMEDOUT']);
+const serializeQueryParams = (params) => {
+    const serializedParams = {};
+    for (const [key, value] of Object.entries(params)) {
+        if (Array.isArray(value)) {
+            if (value.length) {
+                serializedParams[key] = value.join(',');
+            }
+            continue;
+        }
+        if (typeof value !== 'undefined') {
+            serializedParams[key] = value;
+        }
+    }
+    return serializedParams;
+};
+let ExternalService = class ExternalService {
+    configService;
+    httpService;
+    jwtService;
+    constructor(configService, httpService, jwtService) {
+        this.configService = configService;
+        this.httpService = httpService;
+        this.jwtService = jwtService;
+    }
+    findUserPermissions(headers, userId, options) {
+        return this.request({
+            headers,
+            method: 'GET',
+            params: options,
+            path: `/users/${encodeURIComponent(userId)}/permissions`,
+            serviceName: 'bearei-permission'
+        });
+    }
+    findUserSubscriptionFeatures(headers, userId, options) {
+        return this.request({
+            headers,
+            method: 'GET',
+            params: options,
+            path: `/users/${encodeURIComponent(userId)}/features`,
+            serviceName: 'bearei-subscription'
+        });
+    }
+    createActionLog(headers, { action, serviceName, ...restOptions }) {
+        return this.request({
+            data: {
+                ...restOptions,
+                action,
+                apiName: `${action}:${serviceName}`,
+                client: headers['x-bearei-client'],
+                domainId: headers['x-bearei-domain-id'],
+                ip: headers['x-bearei-ip'],
+                serviceName: this.configService.get('service.name'),
+                userAgent: headers['user-agent'],
+                userId: headers['x-bearei-subject']
+            },
+            headers,
+            isAsyncInvocation: true,
+            method: 'POST',
+            path: '/action-logs',
+            serviceName: 'bearei-log'
+        });
+    }
+    async request({ baseURL, headers, isAsyncInvocation = false, method = 'GET', params: rawParams, path = '/', serviceName, timeout, version, ...restOptions }) {
+        const secret = `${this.configService.get('service.accessKey')}:${this.configService.get('service.secretKey')}`;
+        const subject = (0, utils_1.createHmacSignature)(secret, { serviceName });
+        const token = await this.jwtService.signAsync({
+            audience: `internal:${this.configService.get('service.name')}`,
+            issuer: `${this.configService.get('service.name')}:${headers['x-bearei-domain-id']}`
+        }, subject, { expiresIn: '3m' });
+        const url = `/${serviceName}/${version ?? this.configService.get('apiService.version') ?? 'v1'}${path}`;
+        const requestConfig = {
+            ...restOptions,
+            ...(rawParams && { params: serializeQueryParams(rawParams) }),
+            adapter: 'fetch',
+            baseURL: baseURL ?? this.configService.get('apiService.url'),
+            headers: {
+                ...(isAsyncInvocation && { 'x-fc-invocation-type': 'Async' }),
+                authorization: headers['authorization'],
+                'x-bearei-client': headers['x-bearei-client'],
+                'x-bearei-domain-id': headers['x-bearei-domain-id'],
+                'x-bearei-internal-authorization': `Bearer ${token}`,
+                'x-bearei-ip': headers['x-bearei-ip'],
+                'x-bearei-subject': headers['x-bearei-subject']
+            },
+            method,
+            timeout: timeout ?? this.configService.get('apiService.timeout'),
+            url
+        };
+        const processRequestError = (error) => {
+            const response = error.response;
+            const service = `${method}:${url}`;
+            const errorCode = error.code === undefined ? undefined : String(error.code);
+            if (errorCode && TIMEOUT_ERROR_CODES.has(errorCode)) {
+                (0, exception_1.throwHttpException)(exception_1.HTTP_EXCEPTION.REQUEST_TIMEOUT, {
+                    code: exception_1.HTTP_EXCEPTION_CODE.INTERNAL_SERVER_REQUEST_TIMEOUT,
+                    message: 'Internal service request timeout.',
+                    service
+                });
+            }
+            if (errorCode && NETWORK_ERROR_CODES.has(errorCode)) {
+                (0, exception_1.throwHttpException)(exception_1.HTTP_EXCEPTION.BAD_GATEWAY, {
+                    code: exception_1.HTTP_EXCEPTION_CODE.BAD_GATEWAY,
+                    message: 'Internal service network error.',
+                    service
+                });
+            }
+            const status = response ? response.status : error.status;
+            if (status) {
+                const responseData = response ? response.data : undefined;
+                (0, exception_1.throwHttpException)(exception_1.HTTP_EXCEPTION.GENERIC, {
+                    code: responseData && typeof responseData.code !== 'undefined' ?
+                        responseData.code
+                        : Number(`${status}999`),
+                    message: responseData && responseData.message ? responseData.message : error.message,
+                    service,
+                    status
+                });
+            }
+            throw error;
+        };
+        return (0, rxjs_1.firstValueFrom)(this.httpService.request(requestConfig).pipe((0, rxjs_1.catchError)(processRequestError))).then((response) => {
+            const data = response.data;
+            if (data && (data.errorMessage || data.Code)) {
+                (0, exception_1.throwHttpException)(exception_1.HTTP_EXCEPTION.BAD_GATEWAY, {
+                    message: data.errorMessage ? data.errorMessage : data.Code,
+                    service: `ALI-FC:${serviceName}`
+                });
+            }
+            return data;
+        });
+    }
+};
+exports.ExternalService = ExternalService;
+exports.ExternalService = ExternalService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [config_1.ConfigService,
+        axios_1.HttpService,
+        jwt_1.JwtService])
+], ExternalService);

package/dist/external/index.d.ts

@@ -0,0 +1,3 @@
+export * from './external.interface';
+export * from './external.module';
+export * from './external.service';

package/dist/external/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./external.interface"), exports);
+__exportStar(require("./external.module"), exports);
+__exportStar(require("./external.service"), exports);

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+export * from './action-log';
+export * from './authentication';
+export * from './authorization';
+export * from './base-service';
+export * from './common.dto';
+export * from './common.entity';
+export * from './common.enum';
+export * from './common.interface';
+export * from './database';
+export * from './decorators';
+export * from './exception';
+export * from './external';
+export * from './jwt';
+export * from './permission';
+export * from './redis';
+export * from './subscription-feature';
+export * from './utils';

package/dist/index.js

@@ -0,0 +1,39 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./action-log"), exports);
+__exportStar(require("./authentication"), exports);
+__exportStar(require("./authorization"), exports);
+__exportStar(require("./base-service"), exports);
+__exportStar(require("./common.dto"), exports);
+__exportStar(require("./common.entity"), exports);
+__exportStar(require("./common.enum"), exports);
+__exportStar(require("./common.interface"), exports);
+__exportStar(require("./database"), exports);
+__exportStar(require("./decorators"), exports);
+__exportStar(require("./exception"), exports);
+__exportStar(require("./external"), exports);
+__exportStar(require("./jwt"), exports);
+__exportStar(require("./permission"), exports);
+__exportStar(require("./redis"), exports);
+__exportStar(require("./subscription-feature"), exports);
+__exportStar(require("./utils"), exports);
+const dayjs_1 = __importDefault(require("dayjs"));
+const utc_1 = __importDefault(require("dayjs/plugin/utc"));
+dayjs_1.default.extend(utc_1.default);

package/dist/jwt/index.d.ts

@@ -0,0 +1,3 @@
+export * from './jwt.interface';
+export * from './jwt.module';
+export * from './jwt.service';

package/dist/jwt/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./jwt.interface"), exports);
+__exportStar(require("./jwt.module"), exports);
+__exportStar(require("./jwt.service"), exports);

package/dist/jwt/jwt.interface.d.ts

@@ -0,0 +1,15 @@
+export interface JwtSignPayloadOptions {
+    audience: string;
+    issuer: string;
+    jwtId?: string;
+    notBefore?: number;
+}
+export type JwtPayload = {
+    aud: string;
+    exp: number;
+    iat: number;
+    iss: string;
+    jti?: string;
+    nbf?: number;
+    sub: string;
+};

package/dist/jwt/jwt.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/jwt/jwt.module.d.ts

@@ -0,0 +1,2 @@
+export declare class JwtModule {
+}

package/dist/jwt/jwt.module.js

@@ -0,0 +1,43 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtModule = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const jwt_1 = require("@nestjs/jwt");
+const crypto_1 = __importDefault(require("crypto"));
+const jwt_service_1 = require("./jwt.service");
+let JwtModule = class JwtModule {
+};
+exports.JwtModule = JwtModule;
+exports.JwtModule = JwtModule = __decorate([
+    (0, common_1.Module)({
+        exports: [jwt_service_1.JwtService],
+        imports: [
+            jwt_1.JwtModule.registerAsync({
+                imports: [config_1.ConfigModule],
+                inject: [config_1.ConfigService],
+                useFactory: async (configService) => {
+                    const rawJwk = configService.get('jwt.privateKey');
+                    const jwk = typeof rawJwk === 'string' ? JSON.parse(rawJwk) : rawJwk;
+                    const privateKey = crypto_1.default.createPrivateKey({ format: 'jwk', key: jwk });
+                    const publicKey = crypto_1.default.createPublicKey({ format: 'jwk', key: jwk });
+                    return {
+                        privateKey: privateKey.export({ format: 'pem', type: 'pkcs8' }),
+                        publicKey: publicKey.export({ format: 'pem', type: 'spki' }),
+                        signOptions: { algorithm: 'RS256', expiresIn: configService.get('jwt.expiresIn') }
+                    };
+                }
+            })
+        ],
+        providers: [jwt_service_1.JwtService]
+    })
+], JwtModule);

package/dist/jwt/jwt.service.d.ts

@@ -0,0 +1,10 @@
+import type { JwtSignOptions } from '@nestjs/jwt';
+import { JwtService as NestJwtService } from '@nestjs/jwt';
+import type { JwtSignPayloadOptions } from './jwt.interface';
+export declare class JwtService {
+    private readonly jwtService;
+    private readonly logger;
+    constructor(jwtService: NestJwtService);
+    signAsync({ audience, issuer, jwtId, notBefore }: JwtSignPayloadOptions, subject: string, jwtSignOptions?: JwtSignOptions): Promise<string>;
+    verifyAsync(token: string): Promise<any>;
+}

package/dist/jwt/jwt.service.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var JwtService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtService = void 0;
+const common_1 = require("@nestjs/common");
+const jwt_1 = require("@nestjs/jwt");
+const dayjs_1 = __importDefault(require("dayjs"));
+const nanoid_1 = require("nanoid");
+const exception_1 = require("../exception");
+let JwtService = JwtService_1 = class JwtService {
+    jwtService;
+    logger = new common_1.Logger(JwtService_1.name);
+    constructor(jwtService) {
+        this.jwtService = jwtService;
+    }
+    async signAsync({ audience, issuer, jwtId, notBefore }, subject, jwtSignOptions) {
+        const payload = {
+            aud: audience,
+            iss: issuer,
+            jti: jwtId ?? (0, nanoid_1.nanoid)(),
+            nbf: notBefore ?? Math.floor(dayjs_1.default.utc().valueOf() / 1000),
+            sub: subject
+        };
+        return this.jwtService.signAsync(payload, jwtSignOptions);
+    }
+    async verifyAsync(token) {
+        return this.jwtService.verifyAsync(token).catch(error => {
+            const reason = error instanceof Error ? `${error.name}: ${error.message}` : String(error);
+            this.logger.warn(`Token verification failed (${reason})`);
+            (0, exception_1.throwHttpException)(exception_1.HTTP_EXCEPTION.UNAUTHORIZED, {
+                message: error instanceof Error ? error.message : 'Token verification failed.'
+            });
+        });
+    }
+};
+exports.JwtService = JwtService;
+exports.JwtService = JwtService = JwtService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [jwt_1.JwtService])
+], JwtService);

package/dist/permission/index.d.ts

@@ -0,0 +1,3 @@
+export * from './permission.enum';
+export * from './permission.guard';
+export * from './permission.interface';

package/dist/permission/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./permission.enum"), exports);
+__exportStar(require("./permission.guard"), exports);
+__exportStar(require("./permission.interface"), exports);

package/dist/permission/permission.enum.d.ts

@@ -0,0 +1,70 @@
+export declare const PERMISSION: {
+    readonly ACTION_LOG_CREATE: "action-log:create";
+    readonly ACTION_LOG_DELETE: "action-log:delete";
+    readonly ACTION_LOG_READ: "action-log:read";
+    readonly ACTION_LOG_UPDATE: "action-log:update";
+    readonly BOOKMARK_CARTON_CREATE: "bookmark-carton:create";
+    readonly BOOKMARK_CARTON_DELETE: "bookmark-carton:delete";
+    readonly BOOKMARK_CARTON_READ: "bookmark-carton:read";
+    readonly BOOKMARK_CARTON_UPDATE: "bookmark-carton:update";
+    readonly BOOKMARK_CREATE: "bookmark:create";
+    readonly BOOKMARK_DELETE: "bookmark:delete";
+    readonly BOOKMARK_READ: "bookmark:read";
+    readonly BOOKMARK_TAG_CREATE: "bookmark-tag:create";
+    readonly BOOKMARK_TAG_DELETE: "bookmark-tag:delete";
+    readonly BOOKMARK_TAG_READ: "bookmark-tag:read";
+    readonly BOOKMARK_TAG_UPDATE: "bookmark-tag:update";
+    readonly BOOKMARK_UPDATE: "bookmark:update";
+    readonly EMAIL_CAPTCHA_CREATE: "email-captcha:create";
+    readonly EMAIL_CAPTCHA_DELETE: "email-captcha:delete";
+    readonly EMAIL_CAPTCHA_READ: "email-captcha:read";
+    readonly EMAIL_CAPTCHA_UPDATE: "email-captcha:update";
+    readonly EMAIL_CREATE: "email:create";
+    readonly EMAIL_DELETE: "email:delete";
+    readonly EMAIL_READ: "email:read";
+    readonly EMAIL_UPDATE: "email:update";
+    readonly PERMISSION_CREATE: "permission:create";
+    readonly PERMISSION_DELETE: "permission:delete";
+    readonly PERMISSION_PROJECT_CREATE: "permission-project:create";
+    readonly PERMISSION_PROJECT_DELETE: "permission-project:delete";
+    readonly PERMISSION_PROJECT_READ: "permission-project:read";
+    readonly PERMISSION_PROJECT_UPDATE: "permission-project:update";
+    readonly PERMISSION_READ: "permission:read";
+    readonly PERMISSION_RESOURCE_CREATE: "permission-resource:create";
+    readonly PERMISSION_RESOURCE_DELETE: "permission-resource:delete";
+    readonly PERMISSION_RESOURCE_READ: "permission-resource:read";
+    readonly PERMISSION_RESOURCE_UPDATE: "permission-resource:update";
+    readonly PERMISSION_ROLE_CREATE: "permission-role:create";
+    readonly PERMISSION_ROLE_DELETE: "permission-role:delete";
+    readonly PERMISSION_ROLE_GROUP_CREATE: "permission-role-group:create";
+    readonly PERMISSION_ROLE_GROUP_DELETE: "permission-role-group:delete";
+    readonly PERMISSION_ROLE_GROUP_READ: "permission-role-group:read";
+    readonly PERMISSION_ROLE_GROUP_UPDATE: "permission-role-group:update";
+    readonly PERMISSION_ROLE_READ: "permission-role:read";
+    readonly PERMISSION_ROLE_UPDATE: "permission-role:update";
+    readonly PERMISSION_UPDATE: "permission:update";
+    readonly SUBSCRIPTION_CREATE: "subscription:create";
+    readonly SUBSCRIPTION_DELETE: "subscription:delete";
+    readonly SUBSCRIPTION_FEATURE_CREATE: "subscription-feature:create";
+    readonly SUBSCRIPTION_FEATURE_DELETE: "subscription-feature:delete";
+    readonly SUBSCRIPTION_FEATURE_READ: "subscription-feature:read";
+    readonly SUBSCRIPTION_FEATURE_UPDATE: "subscription-feature:update";
+    readonly SUBSCRIPTION_ORDER_CREATE: "subscription-order:create";
+    readonly SUBSCRIPTION_ORDER_DELETE: "subscription-order:delete";
+    readonly SUBSCRIPTION_ORDER_READ: "subscription-order:read";
+    readonly SUBSCRIPTION_ORDER_UPDATE: "subscription-order:update";
+    readonly SUBSCRIPTION_PRODUCT_CREATE: "subscription-product:create";
+    readonly SUBSCRIPTION_PRODUCT_DELETE: "subscription-product:delete";
+    readonly SUBSCRIPTION_PRODUCT_READ: "subscription-product:read";
+    readonly SUBSCRIPTION_PRODUCT_UPDATE: "subscription-product:update";
+    readonly SUBSCRIPTION_READ: "subscription:read";
+    readonly SUBSCRIPTION_UPDATE: "subscription:update";
+    readonly USER_CREATE: "user:create";
+    readonly USER_DELETE: "user:delete";
+    readonly USER_READ: "user:read";
+    readonly USER_UPDATE: "user:update";
+    readonly VERSION_LOG_CREATE: "version-log:create";
+    readonly VERSION_LOG_DELETE: "version-log:delete";
+    readonly VERSION_LOG_READ: "version-log:read";
+    readonly VERSION_LOG_UPDATE: "version-log:update";
+};

package/dist/permission/permission.enum.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PERMISSION = void 0;
+exports.PERMISSION = {
+    ACTION_LOG_CREATE: 'action-log:create',
+    ACTION_LOG_DELETE: 'action-log:delete',
+    ACTION_LOG_READ: 'action-log:read',
+    ACTION_LOG_UPDATE: 'action-log:update',
+    BOOKMARK_CARTON_CREATE: 'bookmark-carton:create',
+    BOOKMARK_CARTON_DELETE: 'bookmark-carton:delete',
+    BOOKMARK_CARTON_READ: 'bookmark-carton:read',
+    BOOKMARK_CARTON_UPDATE: 'bookmark-carton:update',
+    BOOKMARK_CREATE: 'bookmark:create',
+    BOOKMARK_DELETE: 'bookmark:delete',
+    BOOKMARK_READ: 'bookmark:read',
+    BOOKMARK_TAG_CREATE: 'bookmark-tag:create',
+    BOOKMARK_TAG_DELETE: 'bookmark-tag:delete',
+    BOOKMARK_TAG_READ: 'bookmark-tag:read',
+    BOOKMARK_TAG_UPDATE: 'bookmark-tag:update',
+    BOOKMARK_UPDATE: 'bookmark:update',
+    EMAIL_CAPTCHA_CREATE: 'email-captcha:create',
+    EMAIL_CAPTCHA_DELETE: 'email-captcha:delete',
+    EMAIL_CAPTCHA_READ: 'email-captcha:read',
+    EMAIL_CAPTCHA_UPDATE: 'email-captcha:update',
+    EMAIL_CREATE: 'email:create',
+    EMAIL_DELETE: 'email:delete',
+    EMAIL_READ: 'email:read',
+    EMAIL_UPDATE: 'email:update',
+    PERMISSION_CREATE: 'permission:create',
+    PERMISSION_DELETE: 'permission:delete',
+    PERMISSION_PROJECT_CREATE: 'permission-project:create',
+    PERMISSION_PROJECT_DELETE: 'permission-project:delete',
+    PERMISSION_PROJECT_READ: 'permission-project:read',
+    PERMISSION_PROJECT_UPDATE: 'permission-project:update',
+    PERMISSION_READ: 'permission:read',
+    PERMISSION_RESOURCE_CREATE: 'permission-resource:create',
+    PERMISSION_RESOURCE_DELETE: 'permission-resource:delete',
+    PERMISSION_RESOURCE_READ: 'permission-resource:read',
+    PERMISSION_RESOURCE_UPDATE: 'permission-resource:update',
+    PERMISSION_ROLE_CREATE: 'permission-role:create',
+    PERMISSION_ROLE_DELETE: 'permission-role:delete',
+    PERMISSION_ROLE_GROUP_CREATE: 'permission-role-group:create',
+    PERMISSION_ROLE_GROUP_DELETE: 'permission-role-group:delete',
+    PERMISSION_ROLE_GROUP_READ: 'permission-role-group:read',
+    PERMISSION_ROLE_GROUP_UPDATE: 'permission-role-group:update',
+    PERMISSION_ROLE_READ: 'permission-role:read',
+    PERMISSION_ROLE_UPDATE: 'permission-role:update',
+    PERMISSION_UPDATE: 'permission:update',
+    SUBSCRIPTION_CREATE: 'subscription:create',
+    SUBSCRIPTION_DELETE: 'subscription:delete',
+    SUBSCRIPTION_FEATURE_CREATE: 'subscription-feature:create',
+    SUBSCRIPTION_FEATURE_DELETE: 'subscription-feature:delete',
+    SUBSCRIPTION_FEATURE_READ: 'subscription-feature:read',
+    SUBSCRIPTION_FEATURE_UPDATE: 'subscription-feature:update',
+    SUBSCRIPTION_ORDER_CREATE: 'subscription-order:create',
+    SUBSCRIPTION_ORDER_DELETE: 'subscription-order:delete',
+    SUBSCRIPTION_ORDER_READ: 'subscription-order:read',
+    SUBSCRIPTION_ORDER_UPDATE: 'subscription-order:update',
+    SUBSCRIPTION_PRODUCT_CREATE: 'subscription-product:create',
+    SUBSCRIPTION_PRODUCT_DELETE: 'subscription-product:delete',
+    SUBSCRIPTION_PRODUCT_READ: 'subscription-product:read',
+    SUBSCRIPTION_PRODUCT_UPDATE: 'subscription-product:update',
+    SUBSCRIPTION_READ: 'subscription:read',
+    SUBSCRIPTION_UPDATE: 'subscription:update',
+    USER_CREATE: 'user:create',
+    USER_DELETE: 'user:delete',
+    USER_READ: 'user:read',
+    USER_UPDATE: 'user:update',
+    VERSION_LOG_CREATE: 'version-log:create',
+    VERSION_LOG_DELETE: 'version-log:delete',
+    VERSION_LOG_READ: 'version-log:read',
+    VERSION_LOG_UPDATE: 'version-log:update'
+};

package/dist/permission/permission.guard.d.ts

@@ -0,0 +1,9 @@
+import type { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { AuthorizationService } from '../authorization';
+export declare class PermissionGuard implements CanActivate {
+    private readonly authorizationService;
+    private readonly reflector;
+    constructor(authorizationService: AuthorizationService, reflector: Reflector);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}