@jumentix/cli-init 0.0.0

package/templates/backend/seed/transactions.ts

@@ -0,0 +1,4 @@
+import data from './transactions-api.json';
+
+const transactions: Array<any> = data as [];
+export default transactions;

package/templates/backend/seed/users.ts

@@ -0,0 +1,191 @@
+// file deepcode ignore NoHardcodedPasswords: <mocked passwords>
+import type { IUser } from '@src/modules/Users';
+import {
+  DocumentValueObject,
+  EDocumentType,
+  EEmailType,
+  EmailValueObject,
+  PhoneValueObject
+} from '@src/modules/ddd/valueObjects';
+import organizations from '@seed/organizations';
+
+const buildSeedCredential = (account: string): string => `seed-${account}-A1!`;
+const now = new Date();
+
+const users: Array<IUser> = [{
+  id: 'b1ffc4d2-1a2b-4c3d-9e8f-7a6b5c4d3e01',
+  createdAt: now,
+  updatedAt: now,
+  firstName: 'eduardo',
+  lastName: 'Almeida',
+  emails: [
+    {
+      email: 'eduardo@xpertminds.dev',
+      type: EEmailType.work,
+      isPrimary: true
+    } as EmailValueObject,
+    {
+      email: 'web2solucoes@gmail.com',
+      type: EEmailType.work,
+      isPrimary: false
+    } as EmailValueObject,
+    {
+      email: 'perottas1@hotmail.com',
+      type: EEmailType.work,
+      isPrimary: false
+    } as EmailValueObject
+  ],
+  avatar: 'avatar.png',
+  username: 'eduardo@xpertminds.dev',
+  password: 'eduardo@123456',
+  organization: organizations[2].id, // XpertMinds (JUM-772)
+  roles: ['superadmin'],
+  documents: [
+    {
+      data: '000-000-000',
+      type: EDocumentType.SSN,
+      countryIssue: 'US'
+    } as DocumentValueObject,
+    {
+      data: '000.000.000-00',
+      type: EDocumentType.CPF,
+      countryIssue: 'BR'
+    } as DocumentValueObject,
+    {
+      data: '0000000000000',
+      type: EDocumentType.PASSPORT,
+      countryIssue: 'BR'
+    } as DocumentValueObject
+  ],
+  phones: [
+    {
+      number: '99805-4033',
+      localCode: '27',
+      countryCode: '+55',
+      isPrimary: true
+    } as PhoneValueObject,
+    {
+      number: '98883-2732',
+      localCode: '27',
+      countryCode: '+55',
+      isPrimary: true
+    } as PhoneValueObject,
+    {
+      number: '99737-5850',
+      localCode: '27',
+      countryCode: '+55',
+      isPrimary: true
+    } as PhoneValueObject
+  ]
+},
+{
+  id: 'b1ffc4d2-1a2b-4c3d-9e8f-7a6b5c4d3e02',
+  createdAt: now,
+  updatedAt: now,
+  firstName: 'Barack',
+  lastName: 'Obama',
+  emails: [{
+    email: 'user2@xpertminds.dev',
+    type: EEmailType.work,
+    isPrimary: true
+  } as EmailValueObject],
+  avatar: 'avatar.png',
+  username: 'user2',
+  password: buildSeedCredential('user2'),
+  organization: organizations[0].id,
+  roles: [
+    'access_allow',
+    'create_transaction',
+    'read_account',
+    'read_transaction',
+    // 'create_user',
+    'read_user'
+    // 'update_user',
+    // 'delete_user'
+  ]
+},
+{
+  id: 'b1ffc4d2-1a2b-4c3d-9e8f-7a6b5c4d3e03',
+  createdAt: now,
+  updatedAt: now,
+  firstName: 'Jimmy',
+  lastName: 'Carter',
+  emails: [{
+    email: 'user3@xpertminds.dev',
+    type: EEmailType.work,
+    isPrimary: true
+  } as EmailValueObject],
+  avatar: 'avatar.png',
+  username: 'user3@xpertminds.dev',
+  password: buildSeedCredential('user3'),
+  organization: organizations[1].id,
+  roles: [
+    'access_allow',
+    'read_account',
+    'read_transaction',
+    // 'create_user',
+    'read_user'
+    // 'update_user',
+    // 'delete_user'
+  ]
+},
+{
+  id: 'b1ffc4d2-1a2b-4c3d-9e8f-7a6b5c4d3e04',
+  createdAt: now,
+  updatedAt: now,
+  firstName: 'James',
+  lastName: 'Bush',
+  emails: [{
+    email: 'user4@xpertminds.dev',
+    type: EEmailType.work,
+    isPrimary: true
+  } as EmailValueObject],
+  avatar: 'avatar.png',
+  username: 'user4@xpertminds.dev',
+  password: buildSeedCredential('user4'),
+  organization: organizations[1].id,
+  roles: [
+    'access_allow',
+    'create_transaction'
+  ]
+},
+// One seed user per RBAC role, all in XpertMinds (JUM-772).
+{
+  id: 'b1ffc4d2-1a2b-4c3d-9e8f-7a6b5c4d3e05',
+  createdAt: now,
+  updatedAt: now,
+  firstName: 'Admin',
+  lastName: 'XpertMinds',
+  emails: [{
+    email: 'admin@xpertminds.dev',
+    type: EEmailType.work,
+    isPrimary: true
+  } as EmailValueObject],
+  avatar: 'avatar.png',
+  username: 'admin@xpertminds.dev',
+  password: 'admin@123456',
+  organization: organizations[2].id,
+  roles: ['admin']
+},
+{
+  id: 'b1ffc4d2-1a2b-4c3d-9e8f-7a6b5c4d3e06',
+  createdAt: now,
+  updatedAt: now,
+  firstName: 'User',
+  lastName: 'XpertMinds',
+  emails: [{
+    email: 'user@xpertminds.dev',
+    type: EEmailType.work,
+    isPrimary: true
+  } as EmailValueObject],
+  avatar: 'avatar.png',
+  username: 'user@xpertminds.dev',
+  password: 'user@123456',
+  organization: organizations[2].id,
+  roles: ['user']
+}
+];
+
+export const seedUserIds = users.map((user) => user.id);
+
+export default users;

package/templates/backend/src/config/.env.ci

@@ -0,0 +1,48 @@
+## get passwords from env
+JUMENTIX_REDIS_HOST=127.0.0.1
+JUMENTIX_REDIS_PORT=6379
+JUMENTIX_REDIS_DATABASE=1
+#JUMENTIX_REDIS_PASSWORD=
+
+#JUMENTIX_JWT_TOKEN_SECRET_KEY=
+
+#JUMENTIX_ACCESS_TOKEN_PRIVATE_KEY=
+#JUMENTIX_ACCESS_TOKEN_PUBLIC_KEY=
+#JUMENTIX_REFRESH_TOKEN_PRIVATE_KEY=
+#JUMENTIX_REFRESH_TOKEN_PUBLIC_KEY=
+
+#JUMENTIX_GOOGLE_OAUTH_CLIENT_ID=
+#JUMENTIX_GOOGLE_OAUTH_CLIENT_SECRET=
+#JUMENTIX_GOOGLE_OAUTH_REDIRECT_URL=
+
+#JUMENTIX_GITHUB_OAUTH_CLIENT_ID=
+#JUMENTIX_GITHUB_OAUTH_CLIENT_SECRET=
+#JUMENTIX_GITHUB_OAUTH_REDIRECT_URL=
+
+# Message mediator adapter: inmemory | rabbitmq | bullmq
+JUMENTIX_MESSAGE_MEDIATOR_ADAPTER=inmemory
+
+# Runtime adapter selection
+JUMENTIX_HTTP_FRAMEWORK=express
+JUMENTIX_REALTIME_API=no
+JUMENTIX_REALTIME_API_PROTOCOL=websocket
+# Socket.IO scaling adapter: cluster | redis-streams | (empty for in-memory adapter)
+#JUMENTIX_WEBSOCKET_SOCKETIO_ADAPTER=redis-streams
+#JUMENTIX_WEBSOCKET_CLUSTER_WORKERS=2
+# Optional dedicated Redis URL for Socket.IO adapter
+#JUMENTIX_WEBSOCKET_REDIS_URL=redis://127.0.0.1:6379/1
+JUMENTIX_DATABASE_DRIVER=InMemory
+JUMENTIX_DATABASE_NAME=jumentix
+
+# Auth security controls
+JUMENTIX_ENABLE_BASIC_AUTH=yes
+JUMENTIX_AUTH_MAX_LOGIN_ATTEMPTS=5
+JUMENTIX_AUTH_LOGIN_WINDOW_SECONDS=300
+JUMENTIX_AUTH_LOCKOUT_SECONDS=900
+
+# JWT security controls
+JUMENTIX_JWT_ISSUER=jumentix
+JUMENTIX_JWT_AUDIENCE=jumentix-clients
+
+# CORS security controls
+JUMENTIX_CORS_ALLOWED_ORIGINS=http://localhost:3000

package/templates/backend/src/config/.env.dev

@@ -0,0 +1,75 @@
+## get passwords from env file
+JUMENTIX_REDIS_HOST=127.0.0.1
+JUMENTIX_REDIS_PORT=6379
+JUMENTIX_REDIS_DATABASE=1
+JUMENTIX_REDIS_PASSWORD=
+
+JUMENTIX_JWT_TOKEN_SECRET_KEY=change_me_dev_secret
+JUMENTIX_JWT_ISSUER=jumentix
+JUMENTIX_JWT_AUDIENCE=jumentix-clients
+
+#JUMENTIX_ACCESS_TOKEN_PRIVATE_KEY=
+#JUMENTIX_ACCESS_TOKEN_PUBLIC_KEY=
+#JUMENTIX_REFRESH_TOKEN_PRIVATE_KEY=
+#JUMENTIX_REFRESH_TOKEN_PUBLIC_KEY=
+
+#JUMENTIX_GOOGLE_OAUTH_CLIENT_ID=
+#JUMENTIX_GOOGLE_OAUTH_CLIENT_SECRET=
+#JUMENTIX_GOOGLE_OAUTH_REDIRECT_URL=
+
+#JUMENTIX_GITHUB_OAUTH_CLIENT_ID=
+#JUMENTIX_GITHUB_OAUTH_CLIENT_SECRET=
+#JUMENTIX_GITHUB_OAUTH_REDIRECT_URL=
+
+# Message mediator adapter: inmemory | rabbitmq | bullmq
+JUMENTIX_MESSAGE_MEDIATOR_ADAPTER=rabbitmq
+
+# Runtime adapter selection
+JUMENTIX_HTTP_FRAMEWORK=express
+JUMENTIX_REALTIME_API=no
+JUMENTIX_REALTIME_API_PROTOCOL=websocket
+# Socket.IO scaling adapter: cluster | redis-streams | (empty for in-memory adapter)
+#JUMENTIX_WEBSOCKET_SOCKETIO_ADAPTER=redis-streams
+#JUMENTIX_WEBSOCKET_CLUSTER_WORKERS=4
+# Optional dedicated Redis URL for Socket.IO adapter
+#JUMENTIX_WEBSOCKET_REDIS_URL=redis://127.0.0.1:6379/1
+JUMENTIX_REALTIME_API_DATABASE_DRIVER=Mongo
+JUMENTIX_DATABASE_DRIVER=InMemory
+JUMENTIX_DATABASE_NAME=jumentix
+#JUMENTIX_DATABASE_CONNECTION_URL=
+#JUMENTIX_DATABASE_DIALECT=postgres
+#JUMENTIX_DATABASE_REGION=us-east-1
+#JUMENTIX_DATABASE_ENDPOINT=http://127.0.0.1:8000
+#JUMENTIX_DATABASE_PROJECT_ID=demo-project
+#JUMENTIX_DATABASE_CASSANDRA_CONTACT_POINTS=127.0.0.1
+#JUMENTIX_DATABASE_CASSANDRA_DATACENTER=datacenter1
+#JUMENTIX_DATABASE_POOL_MAX=20
+#JUMENTIX_DATABASE_POOL_MIN=0
+#JUMENTIX_DATABASE_POOL_ACQUIRE_MS=30000
+#JUMENTIX_DATABASE_POOL_IDLE_MS=10000
+#JUMENTIX_DATABASE_POOL_EVICT_MS=1000
+#JUMENTIX_DATABASE_USER=aaa
+#JUMENTIX_DATABASE_PASSWORD=aaa
+#JUMENTIX_DATABASE_CONNECT_STRING=127.0.0.1:1521/FREEPDB1
+
+# Auth security controls
+JUMENTIX_ENABLE_BASIC_AUTH=yes
+JUMENTIX_AUTH_MAX_LOGIN_ATTEMPTS=5
+JUMENTIX_AUTH_LOGIN_WINDOW_SECONDS=300
+JUMENTIX_AUTH_LOCKOUT_SECONDS=900
+
+# CORS security controls (comma-separated origins, '*' allowed only in non-prod)
+JUMENTIX_CORS_ALLOWED_ORIGINS=http://localhost:3000,http://127.0.0.1:3000,http://localhost:3001,http://127.0.0.1:3001
+
+# RabbitMQ adapter settings
+JUMENTIX_RABBITMQ_URL=amqp://guest:guest@127.0.0.1:5672
+JUMENTIX_RABBITMQ_EXCHANGE=app.events
+JUMENTIX_RABBITMQ_REQUEST_QUEUE=app.requests
+JUMENTIX_RABBITMQ_PREFETCH=10
+
+# BullMQ adapter settings
+#JUMENTIX_BULLMQ_REDIS_HOST=127.0.0.1
+#JUMENTIX_BULLMQ_REDIS_PORT=6379
+#JUMENTIX_BULLMQ_REDIS_PASSWORD=
+#JUMENTIX_BULLMQ_REDIS_DB=1
+#JUMENTIX_BULLMQ_REQUEST_QUEUE=app.requests

package/templates/backend/src/config/.env.dev.example

@@ -0,0 +1,77 @@
+## get passwords from env file
+JUMENTIX_REDIS_HOST=127.0.0.1
+JUMENTIX_REDIS_PORT=6379
+JUMENTIX_REDIS_DATABASE=1
+#JUMENTIX_REDIS_PASSWORD=setlocal redis password here
+#JUMENTIX_REDIS_CONNECT_TIMEOUT_MS=5000
+#JUMENTIX_REDIS_MAX_RECONNECT_ATTEMPTS=3
+
+#JUMENTIX_JWT_TOKEN_SECRET_KEY=jwt secret goes here
+
+#JUMENTIX_ACCESS_TOKEN_PRIVATE_KEY=
+#JUMENTIX_ACCESS_TOKEN_PUBLIC_KEY=
+#JUMENTIX_REFRESH_TOKEN_PRIVATE_KEY=
+#JUMENTIX_REFRESH_TOKEN_PUBLIC_KEY=
+
+#JUMENTIX_GOOGLE_OAUTH_CLIENT_ID=
+#JUMENTIX_GOOGLE_OAUTH_CLIENT_SECRET=
+#JUMENTIX_GOOGLE_OAUTH_REDIRECT_URL=
+
+#JUMENTIX_GITHUB_OAUTH_CLIENT_ID=
+#JUMENTIX_GITHUB_OAUTH_CLIENT_SECRET=
+#JUMENTIX_GITHUB_OAUTH_REDIRECT_URL=
+
+# Message mediator adapter: inmemory | rabbitmq | bullmq
+#JUMENTIX_MESSAGE_MEDIATOR_ADAPTER=inmemory
+
+# Runtime adapter selection
+#JUMENTIX_HTTP_FRAMEWORK=express
+#JUMENTIX_REALTIME_API=no
+#JUMENTIX_REALTIME_API_PROTOCOL=websocket
+#JUMENTIX_WEBSOCKET_SOCKETIO_ADAPTER=cluster
+#JUMENTIX_WEBSOCKET_CLUSTER_WORKERS=4
+#JUMENTIX_WEBSOCKET_SOCKETIO_ADAPTER=redis-streams
+#JUMENTIX_WEBSOCKET_REDIS_URL=redis://127.0.0.1:6379/1
+#JUMENTIX_DATABASE_DRIVER=Mongo
+#JUMENTIX_DATABASE_CONNECTION_URL=
+#JUMENTIX_DATABASE_NAME=jumentix
+#JUMENTIX_DATABASE_DIALECT=postgres
+#JUMENTIX_DATABASE_REGION=us-east-1
+#JUMENTIX_DATABASE_ENDPOINT=http://127.0.0.1:8000
+#JUMENTIX_DATABASE_PROJECT_ID=demo-project
+#JUMENTIX_DATABASE_CASSANDRA_CONTACT_POINTS=127.0.0.1
+#JUMENTIX_DATABASE_CASSANDRA_DATACENTER=datacenter1
+#JUMENTIX_DATABASE_POOL_MAX=20
+#JUMENTIX_DATABASE_POOL_MIN=0
+#JUMENTIX_DATABASE_POOL_ACQUIRE_MS=30000
+#JUMENTIX_DATABASE_POOL_IDLE_MS=10000
+#JUMENTIX_DATABASE_POOL_EVICT_MS=1000
+#JUMENTIX_DATABASE_USER=aaa
+#JUMENTIX_DATABASE_PASSWORD=aaa
+#JUMENTIX_DATABASE_CONNECT_STRING=127.0.0.1:1521/FREEPDB1
+
+# Auth security controls
+#JUMENTIX_ENABLE_BASIC_AUTH=no
+#JUMENTIX_AUTH_MAX_LOGIN_ATTEMPTS=5
+#JUMENTIX_AUTH_LOGIN_WINDOW_SECONDS=300
+#JUMENTIX_AUTH_LOCKOUT_SECONDS=900
+
+# JWT security controls
+#JUMENTIX_JWT_ISSUER=jumentix
+#JUMENTIX_JWT_AUDIENCE=jumentix-clients
+
+# CORS security controls (comma-separated origins)
+#JUMENTIX_CORS_ALLOWED_ORIGINS=http://localhost:3000,http://127.0.0.1:3000
+
+# RabbitMQ adapter settings
+#JUMENTIX_RABBITMQ_URL=amqp://guest:guest@127.0.0.1:5672
+#JUMENTIX_RABBITMQ_EXCHANGE=app.events
+#JUMENTIX_RABBITMQ_REQUEST_QUEUE=app.requests
+#JUMENTIX_RABBITMQ_PREFETCH=10
+
+# BullMQ adapter settings
+#JUMENTIX_BULLMQ_REDIS_HOST=127.0.0.1
+#JUMENTIX_BULLMQ_REDIS_PORT=6379
+#JUMENTIX_BULLMQ_REDIS_PASSWORD=
+#JUMENTIX_BULLMQ_REDIS_DB=1
+#JUMENTIX_BULLMQ_REQUEST_QUEUE=app.requests

package/templates/backend/src/config/.env.staging

@@ -0,0 +1,52 @@
+## get passwords from env
+JUMENTIX_REDIS_HOST=127.0.0.1
+JUMENTIX_REDIS_PORT=6379
+JUMENTIX_REDIS_DATABASE=1
+#JUMENTIX_REDIS_PASSWORD=
+
+#JUMENTIX_JWT_TOKEN_SECRET_KEY=
+
+#JUMENTIX_ACCESS_TOKEN_PRIVATE_KEY=
+#JUMENTIX_ACCESS_TOKEN_PUBLIC_KEY=
+#JUMENTIX_REFRESH_TOKEN_PRIVATE_KEY=
+#JUMENTIX_REFRESH_TOKEN_PUBLIC_KEY=
+
+#JUMENTIX_GOOGLE_OAUTH_CLIENT_ID=
+#JUMENTIX_GOOGLE_OAUTH_CLIENT_SECRET=
+#JUMENTIX_GOOGLE_OAUTH_REDIRECT_URL=
+
+#JUMENTIX_GITHUB_OAUTH_CLIENT_ID=
+#JUMENTIX_GITHUB_OAUTH_CLIENT_SECRET=
+#JUMENTIX_GITHUB_OAUTH_REDIRECT_URL=
+
+# Runtime adapter selection
+JUMENTIX_HTTP_FRAMEWORK=express
+JUMENTIX_REALTIME_API=no
+JUMENTIX_REALTIME_API_PROTOCOL=websocket
+# Socket.IO scaling adapter: cluster | redis-streams | (empty for in-memory adapter)
+#JUMENTIX_WEBSOCKET_SOCKETIO_ADAPTER=redis-streams
+#JUMENTIX_WEBSOCKET_CLUSTER_WORKERS=4
+# Optional dedicated Redis URL for Socket.IO adapter
+#JUMENTIX_WEBSOCKET_REDIS_URL=redis://127.0.0.1:6379/1
+JUMENTIX_DATABASE_DRIVER=Mongo
+JUMENTIX_DATABASE_NAME=jumentix
+#JUMENTIX_DATABASE_CONNECTION_URL=
+#JUMENTIX_DATABASE_DIALECT=postgres
+#JUMENTIX_DATABASE_REGION=us-east-1
+#JUMENTIX_DATABASE_ENDPOINT=http://127.0.0.1:8000
+#JUMENTIX_DATABASE_PROJECT_ID=demo-project
+#JUMENTIX_DATABASE_CASSANDRA_CONTACT_POINTS=127.0.0.1
+#JUMENTIX_DATABASE_CASSANDRA_DATACENTER=datacenter1
+
+# Auth security controls
+JUMENTIX_ENABLE_BASIC_AUTH=no
+JUMENTIX_AUTH_MAX_LOGIN_ATTEMPTS=5
+JUMENTIX_AUTH_LOGIN_WINDOW_SECONDS=300
+JUMENTIX_AUTH_LOCKOUT_SECONDS=900
+
+# JWT security controls
+#JUMENTIX_JWT_ISSUER=jumentix
+#JUMENTIX_JWT_AUDIENCE=jumentix-clients
+
+# CORS security controls (comma-separated origins)
+#JUMENTIX_CORS_ALLOWED_ORIGINS=https://staging.example.com

package/templates/backend/src/config/auth.ts

@@ -0,0 +1,14 @@
+/* export const authConfig = {
+  accessTokenPrivateKey: process.env.ACCESS_TOKEN_PRIVATE_KEY,
+  accessTokenPublicKey: process.env.ACCESS_TOKEN_PUBLIC_KEY,
+  refreshTokenPrivateKey: process.env.REFRESH_TOKEN_PRIVATE_KEY,
+  refreshTokenPublicKey: process.env.REFRESH_TOKEN_PUBLIC_KEY,
+
+  googleClientId: process.env.GOOGLE_OAUTH_CLIENT_ID,
+  googleClientSecret: process.env.GOOGLE_OAUTH_CLIENT_SECRET,
+  googleOauthRedirect: process.env.GOOGLE_OAUTH_REDIRECT_URL,
+
+  githubClientId: process.env.GITHUB_OAUTH_CLIENT_ID,
+  githubClientSecret: process.env.GITHUB_OAUTH_CLIENT_SECRET,
+  githubOauthRedirect: process.env.GITHUB_OAUTH_REDIRECT_URL
+}; */

package/templates/backend/src/config/constants.ts

@@ -0,0 +1,53 @@
+const _HTTP_PORT_ = 3000;
+const _DOCS_PREFIX_ = '/docs';
+const _API_PREFIX_ = '/api';
+
+const _MINUTES_IN_THE_FUTURE_ = 5;
+
+const _VALIDATION_ERROR_NAME_ = 'validation_error';
+const _LOCKED_RESOURCE_ERROR_NAME_ = 'locked_resource';
+const _FORBIDDEN_ERROR_NAME_ = 'forbidden';
+const _UNAUTHORIZED_ERROR_NAME_ = 'unauthorized';
+const _NOT_FOUND_ERROR_NAME_ = 'not_found';
+const _INTERNAL_SERVER_ERROR_ = 'internal_server_error';
+const _DOMAIN_VALIDATION_ERROR_NAME_ = 'domain_validation_error';
+const _DOMAIN_NOT_FOUND_ERROR_NAME_ = 'domain_not_found';
+const _EVENT_INVALID_MESSAGE_ = 'event_invalid_message';
+const _INFRA_NOT_IMPLEMENTED_ = 'infrastructure_not_implemented';
+const _DATABASE_NOT_FOUND_ERROR_NAME_ = 'database_not_found';
+const _DATABASE_CONFLICT_ERROR_NAME_ = 'database_duplicated';
+const _DATABASE_PAGING_ERROR_ = 'database_paging_error';
+
+const _DEFAULT_PAGE_SIZE_ = 30;
+
+const _BCRYPT_SALT_ROUNDS_ = 10;
+
+const _PASSWORD_MIN_LENGTH_ = 8;
+
+const _KV_KEY_NAME_PREFIX_ = 'my_prefix';
+const _MUTEX_KEY_NAME_PREFIX_ = 'mutex';
+
+export {
+  _HTTP_PORT_,
+  _DOCS_PREFIX_,
+  _API_PREFIX_,
+  _MINUTES_IN_THE_FUTURE_,
+  _VALIDATION_ERROR_NAME_,
+  _DOMAIN_VALIDATION_ERROR_NAME_,
+  _FORBIDDEN_ERROR_NAME_,
+  _NOT_FOUND_ERROR_NAME_,
+  _DOMAIN_NOT_FOUND_ERROR_NAME_,
+  _DATABASE_NOT_FOUND_ERROR_NAME_,
+  _DATABASE_CONFLICT_ERROR_NAME_,
+  _EVENT_INVALID_MESSAGE_,
+  _UNAUTHORIZED_ERROR_NAME_,
+  _INFRA_NOT_IMPLEMENTED_,
+  _DEFAULT_PAGE_SIZE_,
+  _DATABASE_PAGING_ERROR_,
+  _BCRYPT_SALT_ROUNDS_,
+  _PASSWORD_MIN_LENGTH_,
+  _KV_KEY_NAME_PREFIX_,
+  _MUTEX_KEY_NAME_PREFIX_,
+  _LOCKED_RESOURCE_ERROR_NAME_,
+  _INTERNAL_SERVER_ERROR_
+};

package/templates/backend/src/config/jwt.ts

@@ -0,0 +1,9 @@
+import { readProductEnv } from '@src/interface/runtime/RuntimeEnvironment';
+
+const _JWT_TOKEN_SECRET_KEY_ = readProductEnv(process.env, 'JUMENTIX_JWT_TOKEN_SECRET_KEY');
+const _JWT_TOKEN_EXPIRES_IN_ = 60 * 60; // one hour ( 60 * 60 )
+
+export {
+  _JWT_TOKEN_SECRET_KEY_,
+  _JWT_TOKEN_EXPIRES_IN_
+};

package/templates/backend/src/config/redis.ts

@@ -0,0 +1,11 @@
+import {
+  RedisClientOptions, RedisFunctions, RedisScripts, RedisModules
+} from 'redis';
+import { readProductEnv } from '@src/interface/runtime/RuntimeEnvironment';
+
+export const redisConfig = {
+  host: readProductEnv(process.env, 'JUMENTIX_REDIS_HOST'),
+  port: readProductEnv(process.env, 'JUMENTIX_REDIS_PORT'),
+  database: readProductEnv(process.env, 'JUMENTIX_REDIS_DATABASE'),
+  password: readProductEnv(process.env, 'JUMENTIX_REDIS_PASSWORD')
+} as RedisClientOptions<RedisModules, RedisFunctions, RedisScripts>;

package/templates/backend/src/config/security.ts

@@ -0,0 +1,25 @@
+import { readProductEnv } from '@src/interface/runtime/RuntimeEnvironment';
+
+function isProductionEnv(): boolean {
+  const nodeEnv = String(process.env.NODE_ENV || '').trim().toLowerCase();
+  return nodeEnv === 'prod' || nodeEnv === 'production';
+}
+
+const parseAllowedCorsOrigins = (): string[] => {
+  const raw = String(readProductEnv(process.env, 'JUMENTIX_CORS_ALLOWED_ORIGINS') || '').trim();
+  if (!raw) return [];
+  return raw
+    .split(',')
+    .map((item) => item.trim())
+    .filter(Boolean);
+};
+
+export const isCorsOriginAllowed = (origin?: string): boolean => {
+  const allowedOrigins = parseAllowedCorsOrigins();
+  if (!origin) return true;
+  if (allowedOrigins.includes('*')) return true;
+  if (allowedOrigins.length === 0) {
+    return !isProductionEnv();
+  }
+  return allowedOrigins.includes(origin);
+};

package/templates/backend/src/infra/audit/ISecurityAuditRepository.ts

@@ -0,0 +1,13 @@
+export interface ISecurityAuditEvent {
+  id: string;
+  name: string;
+  outcome: 'success' | 'failed' | 'denied';
+  occurredAt: string;
+  payload: Record<string, unknown>;
+}
+
+export interface ISecurityAuditRepository {
+  record(event: ISecurityAuditEvent): Promise<void>;
+  getAll(): Promise<ISecurityAuditEvent[]>;
+  clear(): Promise<void>;
+}

package/templates/backend/src/infra/audit/InMemorySecurityAuditRepository.ts

@@ -0,0 +1,26 @@
+import type { ISecurityAuditEvent, ISecurityAuditRepository } from './ISecurityAuditRepository';
+
+let securityAuditRepository: ISecurityAuditRepository | undefined;
+
+export class InMemorySecurityAuditRepository implements ISecurityAuditRepository {
+  private readonly events: ISecurityAuditEvent[] = [];
+
+  public async record(event: ISecurityAuditEvent): Promise<void> {
+    this.events.push(event);
+  }
+
+  public async getAll(): Promise<ISecurityAuditEvent[]> {
+    return [...this.events];
+  }
+
+  public async clear(): Promise<void> {
+    this.events.length = 0;
+  }
+
+  public static compile(): ISecurityAuditRepository {
+    if (!securityAuditRepository) {
+      securityAuditRepository = new InMemorySecurityAuditRepository();
+    }
+    return securityAuditRepository;
+  }
+}

package/templates/backend/src/infra/audit/index.ts

@@ -0,0 +1,2 @@
+export * from './ISecurityAuditRepository';
+export * from './InMemorySecurityAuditRepository';

package/templates/backend/src/infra/cache/CacheService.ts

@@ -0,0 +1,74 @@
+import type { IKeyValueStorageClient } from '@src/infra/persistence/KeyValueStorage/IKeyValueStorageClient';
+
+import type { ICacheService } from './ICacheService';
+
+interface ICacheEnvelope<T = any> {
+  value: T;
+  expiresAt?: number;
+}
+
+interface ICacheServiceConfig {
+  keyValueStorageClient: IKeyValueStorageClient;
+}
+
+export class CacheService implements ICacheService {
+  private readonly keyValueStorageClient: IKeyValueStorageClient;
+
+  private constructor(config: ICacheServiceConfig) {
+    this.keyValueStorageClient = config.keyValueStorageClient;
+  }
+
+  public async get<T = any>(key: string): Promise<T | undefined> {
+    const { result, error } = await this.keyValueStorageClient.get(key);
+    if (error || result === undefined || result === null) return undefined;
+
+    const envelope = result as ICacheEnvelope<T>;
+    if (typeof envelope === 'object' && envelope && 'value' in envelope) {
+      if (envelope.expiresAt && envelope.expiresAt <= Date.now()) {
+        await this.keyValueStorageClient.del(key);
+        return undefined;
+      }
+      return envelope.value;
+    }
+
+    return result as T;
+  }
+
+  public async set<T = any>(key: string, value: T, ttlInSeconds?: number): Promise<void> {
+    const envelope: ICacheEnvelope<T> = { value };
+    if (ttlInSeconds && ttlInSeconds > 0) {
+      envelope.expiresAt = Date.now() + (ttlInSeconds * 1000);
+    }
+    await this.keyValueStorageClient.set(key, envelope);
+  }
+
+  public async del(key: string): Promise<void> {
+    await this.keyValueStorageClient.del(key);
+  }
+
+  public async getVersion(namespace: string): Promise<number> {
+    const key = CacheService.buildVersionKey(namespace);
+    const version = await this.get<number>(key);
+    if (!version || Number.isNaN(Number(version)) || Number(version) < 1) {
+      await this.set<number>(key, 1);
+      return 1;
+    }
+    return Number(version);
+  }
+
+  public async bumpVersion(namespace: string): Promise<number> {
+    const key = CacheService.buildVersionKey(namespace);
+    const current = await this.getVersion(namespace);
+    const next = current + 1;
+    await this.set<number>(key, next);
+    return next;
+  }
+
+  private static buildVersionKey(namespace: string): string {
+    return `cache:version:${namespace}`;
+  }
+
+  public static compile(config: ICacheServiceConfig): CacheService {
+    return new CacheService(config);
+  }
+}