@goplusvn/core 0.1.0 → 0.1.2

package/src/auth/index.ts

@@ -0,0 +1,266 @@
+// @goerp/core/auth
+// Authentication and RBAC utilities for GoERP
+
+import type { Session } from "next-auth";
+
+export * from "./auth-service";
+
+// ============================================================================
+// Types
+// ============================================================================
+
+export interface Permission {
+  resourceCode: string;
+  actionCode: string;
+}
+
+export interface ExtendedUser {
+  id: string;
+  name?: string | null;
+  email?: string | null;
+  image?: string | null;
+  roles?: string[];
+  permissions?: Permission[];
+}
+
+export interface UserSession {
+  user: ExtendedUser;
+}
+
+export interface CrudPermissionResult {
+  create: boolean;
+  view: boolean;
+  update: boolean;
+  delete: boolean;
+  export: boolean;
+  import: boolean;
+  approve: boolean;
+  reject: boolean;
+}
+
+// ============================================================================
+// Constants
+// ============================================================================
+
+const ADMIN_ROLE_CODE = "admin";
+const BYPASS_AUTH =
+  process.env.BYPASS_AUTH === "true" || process.env.BYPASS_AUTH === "1";
+
+// Action code mapping
+const ACTION_CODES: Record<string, string> = {
+  create: "create",
+  view: "view",
+  update: "update",
+  delete: "delete",
+  export: "export",
+  import: "import",
+  approve: "approve",
+  reject: "reject",
+};
+
+/**
+ * Get action code from action name
+ */
+export function getActionCode(action: string): string {
+  return ACTION_CODES[action] || action;
+}
+
+// ============================================================================
+// Permission Functions
+// ============================================================================
+
+/**
+ * Get all permissions from session
+ */
+export function getUserPermissions(session: Session | null): Permission[] {
+  if (!session?.user) return [];
+  const user = session.user as ExtendedUser;
+
+  if (!user.permissions) {
+    return [];
+  }
+  return user.permissions;
+}
+
+/**
+ * Get CRUD permissions from session for a specific entity
+ */
+export function getCrudPermissionsFromSession(
+  session: Session | null,
+  entity: string,
+): CrudPermissionResult {
+  // TEMPORARY: Return all permissions as true if bypass is enabled
+  if (BYPASS_AUTH) {
+    return {
+      create: true,
+      view: true,
+      update: true,
+      delete: true,
+      export: true,
+      import: true,
+      approve: true,
+      reject: true,
+    };
+  }
+
+  if (!session?.user) {
+    return {
+      create: false,
+      view: false,
+      update: false,
+      delete: false,
+      export: false,
+      import: false,
+      approve: false,
+      reject: false,
+    };
+  }
+
+  const user = session.user as ExtendedUser;
+
+  if (!user.id) {
+    return {
+      create: false,
+      view: false,
+      update: false,
+      delete: false,
+      export: false,
+      import: false,
+      approve: false,
+      reject: false,
+    };
+  }
+
+  // Check admin role first (fastest check)
+  const isAdmin =
+    user.roles?.includes(ADMIN_ROLE_CODE) ||
+    user.roles?.includes("SUPER_ADMIN");
+  if (isAdmin) {
+    return {
+      create: true,
+      view: true,
+      update: true,
+      delete: true,
+      export: true,
+      import: true,
+      approve: true,
+      reject: true,
+    };
+  }
+
+  // Pre-compute permission keys for fast lookup
+  const permissions = user.permissions || [];
+  const permissionKeys = new Set(
+    permissions.map((p) => `${p.resourceCode}:${p.actionCode}`),
+  );
+
+  const hasPermission = (action: string) => {
+    const key = `${entity}:${action}`;
+    return permissionKeys.has(key);
+  };
+
+  return {
+    create: hasPermission(getActionCode("create")),
+    view: hasPermission(getActionCode("view")),
+    update: hasPermission(getActionCode("update")),
+    delete: hasPermission(getActionCode("delete")),
+    export: hasPermission(getActionCode("export")),
+    import: hasPermission(getActionCode("import")),
+    approve: hasPermission(getActionCode("approve")),
+    reject: hasPermission(getActionCode("reject")),
+  };
+}
+
+/**
+ * Check if user has a specific permission
+ */
+export function checkPermission(
+  session: Session | null,
+  resourceCode: string,
+  actionCode: string,
+): boolean {
+  if (BYPASS_AUTH) {
+    return true;
+  }
+
+  if (!session?.user) return false;
+  const user = session.user as ExtendedUser;
+
+  if (!user.permissions || user.permissions.length === 0) {
+    return false;
+  }
+
+  // Admin role bypass
+  if (
+    user.roles?.includes(ADMIN_ROLE_CODE) ||
+    user.roles?.includes("SUPER_ADMIN")
+  ) {
+    return true;
+  }
+
+  return user.permissions.some(
+    (p) => p.resourceCode === resourceCode && p.actionCode === actionCode,
+  );
+}
+
+/**
+ * Alias for checkPermission
+ */
+export function hasPermission(
+  session: Session | null,
+  resourceCode: string,
+  actionCode: string,
+): boolean {
+  return checkPermission(session, resourceCode, actionCode);
+}
+
+/**
+ * Require permission - throw error if not authorized
+ */
+export function requirePermission(
+  session: Session | null,
+  resourceCode: string,
+  actionCode: string,
+): void {
+  if (!checkPermission(session, resourceCode, actionCode)) {
+    throw new Error(
+      `Unauthorized: User does not have permission ${actionCode} on ${resourceCode}`,
+    );
+  }
+}
+
+/**
+ * Check if user has a specific role
+ */
+export function hasRole(session: Session | null, roleCode: string): boolean {
+  if (!session?.user) return false;
+  const user = session.user as ExtendedUser;
+
+  if (!user.roles) {
+    return false;
+  }
+  return user.roles.includes(roleCode);
+}
+
+/**
+ * Check if user has any of the specified roles
+ */
+export function hasAnyRole(
+  session: Session | null,
+  roleCodes: string[],
+): boolean {
+  if (!session?.user) return false;
+  const user = session.user as ExtendedUser;
+
+  if (!user.roles) {
+    return false;
+  }
+  return roleCodes.some((role) => user.roles!.includes(role));
+}
+
+/**
+ * Check if user is admin
+ */
+export function isAdmin(session: Session | null): boolean {
+  return hasRole(session, ADMIN_ROLE_CODE);
+}

package/src/code-generation/index.ts

@@ -0,0 +1,69 @@
+// @goerp/core/code-generation
+// Core Code Generation utilities
+// Consolidated from packages/shared/code-generation
+
+export interface CodeGenerationRule {
+  id: string;
+  entityType: string;
+  ruleName: string;
+  prefix: string;
+  pattern: string;
+  sequenceLength: number;
+  resetDaily: boolean;
+  resetMonthly: boolean;
+  resetYearly: boolean;
+  isActive: boolean;
+  createdAt: Date;
+  updatedAt: Date;
+}
+
+export interface CodeGenerationContext {
+  userId: string;
+  date?: Date;
+}
+
+/**
+ * Parse pattern string and replace placeholders
+ * Example: "{PREFIX}-{SEQ:3}" -> "WA-001"
+ */
+export function parsePattern(
+  pattern: string,
+  placeholders: Record<string, string>,
+): string {
+  let result = pattern;
+
+  // Replace all placeholders
+  for (const [key, value] of Object.entries(placeholders)) {
+    // Support both {KEY} and {KEY:n} format
+    const regex = new RegExp(`\\{${key}(?::\\d+)?\\}`, "g");
+    result = result.replace(regex, value);
+  }
+
+  return result;
+}
+
+/**
+ * Build search pattern based on rule configuration
+ * Used to query DB for latest code
+ */
+export function buildSearchPattern(
+  rule: Partial<CodeGenerationRule>,
+  date: Date,
+): string {
+  const { prefix, resetDaily, resetMonthly, resetYearly } = rule;
+
+  let searchPattern = `${prefix}-`;
+
+  if (resetDaily) {
+    const dateStr = `${date.getFullYear()}${(date.getMonth() + 1).toString().padStart(2, "0")}${date.getDate().toString().padStart(2, "0")}`;
+    searchPattern += `${dateStr}-`;
+  } else if (resetMonthly) {
+    const monthStr = `${date.getFullYear()}${(date.getMonth() + 1).toString().padStart(2, "0")}`;
+    searchPattern += `${monthStr}-`;
+  } else if (resetYearly) {
+    const yearStr = date.getFullYear().toString();
+    searchPattern += `${yearStr}-`;
+  }
+
+  return searchPattern;
+}

package/src/configs/auth-routes.ts

@@ -0,0 +1,17 @@
+// @goerp/core/configs/auth-routes
+// Auth route configuration
+
+import type { RouteType } from "../types";
+
+export const routeMap = new Map<string, RouteType>([
+  ["/sign-in", { type: "guest" }],
+  ["/register", { type: "guest" }],
+  ["/forgot-password", { type: "guest" }],
+  ["/verify-email", { type: "guest" }],
+  ["/new-password", { type: "guest" }],
+  ["/", { type: "public" }],
+  ["/docs", { type: "public" }],
+  ["/pay", { type: "public" }], // Public payment page - no authentication required
+]);
+
+export const authRoutes = routeMap;

package/src/configs/crud.ts

@@ -0,0 +1,136 @@
+/**
+ * CRUD System Configuration
+ * Reads configuration from environment variables with fallback defaults
+ */
+
+/**
+ * Get CRUD DataLoader cache configuration from environment variables
+ */
+function getCrudDataLoaderConfig() {
+  // Parse CRUD_CACHE_ENABLED (default: true)
+  const cacheEnabled =
+    process.env.CRUD_CACHE_ENABLED === undefined
+      ? true
+      : process.env.CRUD_CACHE_ENABLED === "true" ||
+        process.env.CRUD_CACHE_ENABLED === "1";
+
+  // Parse CRUD_CACHE_TIME_MS (default: 60000 = 1 minutes)
+  const defaultCacheTime = process.env.CRUD_CACHE_TIME_MS
+    ? parseInt(process.env.CRUD_CACHE_TIME_MS, 10)
+    : 60000; // 1 minutes
+
+  // Validate cache time is positive
+  const validatedCacheTime = defaultCacheTime > 0 ? defaultCacheTime : 60000;
+
+  return {
+    cacheEnabled,
+    defaultCacheTime: validatedCacheTime,
+  };
+}
+
+/**
+ * Get CRUD Service cache configuration from environment variables
+ */
+function getCrudServiceConfig() {
+  // Parse CRUD_SERVICE_CACHE_ENABLED (default: false - no cache for data fetching)
+  const cacheEnabled =
+    process.env.CRUD_SERVICE_CACHE_ENABLED === "true" ||
+    process.env.CRUD_SERVICE_CACHE_ENABLED === "1";
+
+  // Parse CRUD_SERVICE_CACHE_BUSTER_ENABLED (default: true - use cache buster)
+  const cacheBusterEnabled =
+    process.env.CRUD_SERVICE_CACHE_BUSTER_ENABLED === undefined
+      ? true
+      : process.env.CRUD_SERVICE_CACHE_BUSTER_ENABLED === "true" ||
+        process.env.CRUD_SERVICE_CACHE_BUSTER_ENABLED === "1";
+
+  return {
+    cacheEnabled,
+    cacheBusterEnabled,
+  };
+}
+
+/**
+ * Get CRUD API route cache configuration from environment variables
+ */
+function getCrudApiRouteConfig() {
+  // Parse CRUD_API_CACHE_S_MAXAGE (default: 60 seconds)
+  const sMaxAge = process.env.CRUD_API_CACHE_S_MAXAGE
+    ? parseInt(process.env.CRUD_API_CACHE_S_MAXAGE, 10)
+    : 60;
+
+  // Parse CRUD_API_CACHE_STALE_WHILE_REVALIDATE (default: 300 seconds = 5 minutes)
+  const staleWhileRevalidate = process.env.CRUD_API_CACHE_STALE_WHILE_REVALIDATE
+    ? parseInt(process.env.CRUD_API_CACHE_STALE_WHILE_REVALIDATE, 10)
+    : 300;
+
+  // Validate values are positive
+  const validatedSMaxAge = sMaxAge > 0 ? sMaxAge : 60;
+  const validatedStaleWhileRevalidate =
+    staleWhileRevalidate > 0 ? staleWhileRevalidate : 300;
+
+  return {
+    sMaxAge: validatedSMaxAge,
+    staleWhileRevalidate: validatedStaleWhileRevalidate,
+  };
+}
+
+/**
+ * Get CRUD LazyLoader cache configuration from environment variables
+ */
+function getCrudLazyLoaderConfig() {
+  // Parse CRUD_LAZY_LOADER_MAX_STATES (default: 50)
+  const maxStates = process.env.CRUD_LAZY_LOADER_MAX_STATES
+    ? parseInt(process.env.CRUD_LAZY_LOADER_MAX_STATES, 10)
+    : 50;
+
+  // Parse CRUD_LAZY_LOADER_MAX_AGE_MS (default: 600000 = 10 minutes)
+  const maxAge = process.env.CRUD_LAZY_LOADER_MAX_AGE_MS
+    ? parseInt(process.env.CRUD_LAZY_LOADER_MAX_AGE_MS, 10)
+    : 600000; // 10 minutes
+
+  // Validate values are positive
+  const validatedMaxStates = maxStates > 0 ? maxStates : 50;
+  const validatedMaxAge = maxAge > 0 ? maxAge : 600000;
+
+  return {
+    maxStates: validatedMaxStates,
+    maxAge: validatedMaxAge,
+  };
+}
+
+export const crudConfig = {
+  /**
+   * DataLoader Configuration
+   * Configure via environment variables:
+   * - CRUD_CACHE_ENABLED: Enable/disable caching (default: true)
+   * - CRUD_CACHE_TIME_MS: Cache time in milliseconds (default: 60000 = 1 minute)
+   */
+  dataLoader: getCrudDataLoaderConfig(),
+
+  /**
+   * CrudService Configuration
+   * Configure via environment variables:
+   * - CRUD_SERVICE_CACHE_ENABLED: Enable browser cache for fetch requests (default: false)
+   * - CRUD_SERVICE_CACHE_BUSTER_ENABLED: Enable cache buster timestamp (default: true)
+   */
+  service: getCrudServiceConfig(),
+
+  /**
+   * API Route Cache Configuration
+   * Configure via environment variables:
+   * - CRUD_API_CACHE_S_MAXAGE: Cache max age in seconds for CDN/proxy (default: 60)
+   * - CRUD_API_CACHE_STALE_WHILE_REVALIDATE: Stale-while-revalidate time in seconds (default: 300 = 5 minutes)
+   */
+  apiRoute: getCrudApiRouteConfig(),
+
+  /**
+   * LazyLoader Configuration
+   * Configure via environment variables:
+   * - CRUD_LAZY_LOADER_MAX_STATES: Maximum number of cached states (default: 50)
+   * - CRUD_LAZY_LOADER_MAX_AGE_MS: Maximum age of cached state in milliseconds (default: 600000 = 10 minutes)
+   */
+  lazyLoader: getCrudLazyLoaderConfig(),
+} as const;
+
+export type CrudConfig = typeof crudConfig;