@dudousxd/nestjs-authz-mikro-orm 0.7.1 → 1.0.0

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # @dudousxd/nestjs-authz-mikro-orm
 
+## 1.0.0
+
+### Patch Changes
+
+- Updated dependencies [[`750a6b3`](https://github.com/DavideCarvalho/nestjs-authz/commit/750a6b3f80deea3803dec8df5f9f8cf67a046ac1)]:
+  - @dudousxd/nestjs-authz@0.10.0
+
+## 0.8.0
+
+### Minor Changes
+
+- [#67](https://github.com/DavideCarvalho/nestjs-authz/pull/67) [`32e967f`](https://github.com/DavideCarvalho/nestjs-authz/commit/32e967ffbcd68a97e8effc77af9c16bbbafdc918) Thanks [@DavideCarvalho](https://github.com/DavideCarvalho)! - Run on `@dudousxd/nestjs-authz` 0.9 and `@nestjs/authorization`: persisted roles and
+  permissions now guard routes through the official guard as the core's `RolePolicy` /
+  `PermissionPolicy` (`@Roles('editor')`, `@Permission('posts.publish')`), and the guard and the
+  handler's `Gate` calls share one permission and role fetch per request. The store API
+  (role sources, admin management, tenant-scoped roles where supported) and `AuthzRbacModule`
+  are unchanged. A persisted permission named like a policy ability no longer bypasses that
+  policy (see the core changeset). Requires NestJS 12, `@nestjs/authorization` ^0.1.3 and Node 22+.
+
+### Patch Changes
+
+- [#67](https://github.com/DavideCarvalho/nestjs-authz/pull/67) [`32e967f`](https://github.com/DavideCarvalho/nestjs-authz/commit/32e967ffbcd68a97e8effc77af9c16bbbafdc918) Thanks [@DavideCarvalho](https://github.com/DavideCarvalho)! - Fix packages that could be published without files their `exports` point to. `tsc` builds no longer use a `.tsbuildinfo` that can outlive `dist/` and skip emitting files. A new `check:exports` step (also `prepack`) fails the release if any `exports`/`main`/`types` path is missing.
+
 ## 0.7.1
 
 ### Patch Changes

package/README.md

@@ -1,7 +1,7 @@
 # @dudousxd/nestjs-authz-mikro-orm
 
 MikroORM RBAC persistence for [`@dudousxd/nestjs-authz`](https://github.com/DavideCarvalho/nestjs-authz) —
-roles, permissions, and a Gate seam, with **zero connection ownership** (your app owns the
+roles and permissions for the official `@nestjs/authorization` policies, with **zero connection ownership** (your app owns the
 `EntityManager`; this package never opens a connection).
 
 This is the MikroORM sibling of `@dudousxd/nestjs-authz-typeorm`: identical store surface
@@ -15,7 +15,7 @@ separate `@mikro-orm/decorators` package), so no extra peer is required.
 ## Install
 
 ```bash
-pnpm add @dudousxd/nestjs-authz-mikro-orm @dudousxd/nestjs-authz @mikro-orm/core @mikro-orm/nestjs
+pnpm add @dudousxd/nestjs-authz-mikro-orm @dudousxd/nestjs-authz @nestjs/authorization @mikro-orm/core @mikro-orm/nestjs
 ```
 
 ## Entities
@@ -110,16 +110,30 @@ import { EntityManager } from '@mikro-orm/core';
 export class AppModule {}
 ```
 
-Once wired, the Gate consults persisted RBAC:
+Once wired, persisted roles and permissions guard routes through the official
+`@nestjs/authorization` guard, as the core's `RolePolicy` / `PermissionPolicy`:
 
 ```ts
-await store.givePermissionToRole('editor', 'posts.publish');
+await store.givePermissionToRole('editor', 'posts.*');
 await store.assignRole({ type: 'user', id: 7 }, 'editor');
 
-gate.forUser(user).allows('posts.publish'); // true (PERMISSION_PROVIDER seam, wildcards supported)
-gate.forUser(user).hasRole('editor');       // true (ROLE_PROVIDER seam)
+@Permission('posts.publish')                                  // posts.* grants it
+@Can(PermissionPolicy, 'has', permission('posts.publish'))   // the same, spelled out
+@Roles('editor')                                              // @Can(RolePolicy, 'has', roles('editor'))
 ```
 
+and in services, through the `Gate`:
+
+```ts
+gate.forUser(user).allows('posts.publish');               // true (PERMISSION_PROVIDER seam)
+gate.forUser(user).allows(PermissionPolicy, 'has', 'posts.publish');
+gate.forUser(user).hasRole('editor');                     // true (ROLE_PROVIDER seam)
+```
+
+The user is the one the official guard reads (`AuthorizationModule.forRoot({ getUser })`,
+default `request.user`), mapped to a store ref with `userRefFrom` (default `{ type, id }` or
+`{ id }`).
+
 ## Schema
 
 `autoCreateSchema` (default `true`) runs `ensureAuthzSchema` on `onModuleInit` via MikroORM's

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dudousxd/nestjs-authz-mikro-orm",
-  "version": "0.7.1",
+  "version": "1.0.0",
   "description": "MikroORM RBAC persistence for @dudousxd/nestjs-authz — roles, permissions, and a Gate seam (zero connection ownership).",
   "license": "MIT",
   "repository": {
@@ -38,11 +38,12 @@
     "CHANGELOG.md"
   ],
   "peerDependencies": {
-    "@dudousxd/nestjs-authz": ">=0.8.0",
+    "@dudousxd/nestjs-authz": ">=0.10.0",
     "@mikro-orm/core": "^6.0.0 || ^7.0.0",
     "@mikro-orm/nestjs": "^5.0.0 || ^6.0.0 || ^7.0.0",
-    "@nestjs/common": ">=10.0.0",
-    "@nestjs/core": ">=10.0.0",
+    "@nestjs/authorization": "^0.1.3",
+    "@nestjs/common": "^12.0.0",
+    "@nestjs/core": "^12.0.0",
     "reflect-metadata": ">=0.1.13"
   },
   "peerDependenciesMeta": {
@@ -54,21 +55,22 @@
     "@mikro-orm/better-sqlite": "6.6.16",
     "@mikro-orm/core": "6.6.16",
     "@mikro-orm/nestjs": "6.1.2",
+    "@nestjs/authorization": "0.1.3",
     "@nestjs/common": "12.0.1",
     "@nestjs/core": "12.0.1",
     "@nestjs/testing": "12.0.1",
-    "@types/node": "20.19.43",
+    "@types/node": "22.20.5",
     "reflect-metadata": "0.2.2",
     "rxjs": "7.8.2",
     "typescript": "5.9.3",
     "vitest": "3.2.7",
-    "@dudousxd/nestjs-authz": "^0.8.1"
+    "@dudousxd/nestjs-authz": "^0.10.0"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "tsc -p tsconfig.json --incremental false",
     "test": "vitest run --passWithNoTests",
     "test:watch": "vitest",
     "typecheck": "tsc -p tsconfig.json --noEmit"