@meago/core 0.2.0 → 0.3.2

package/README.md

@@ -54,7 +54,15 @@ Consumer chỉ import từ `@meago/core`, không import `@meago/core/dist/...`.
 4. Chạy `npm publish` hoặc `npm run pub`.
 5. Nâng cùng version ở Server và Client, sau đó chạy test của cả hai repo.
 
-Package đang cấu hình `access: restricted`; registry/account deploy phải hỗ trợ scoped private package. Đổi sang `public` nếu chủ đích phát hành công khai.
+Package được phát hành công khai với `publishConfig.access=public`. Npm account/token vẫn phải đáp ứng chính sách 2FA hoặc granular token có quyền bypass 2FA khi publish tự động.
+
+Trên Windows có thể chạy quy trình có kiểm soát:
+
+```powershell
+.\commit.bat
+```
+
+Script chạy `verify` trước khi commit, pull bằng rebase trên branch hiện tại và hỏi riêng trước khi publish. Khi phát hành, người dùng phải chọn `patch`/`minor`/`major`; `npm version` cập nhật cả `package.json`, lockfile, tạo release commit và Git tag. Package được publish rõ ràng với `--access public`, sau đó branch/tag mới được push. Script không force-push, không tự xử lý conflict và dừng ngay khi một gate thất bại.
 
 ## Compatibility
 
@@ -62,4 +70,3 @@ Package đang cấu hình `access: restricted`; registry/account deploy phải h
 - Minor: thêm export hoặc field optional.
 - Major: xóa/đổi export, thêm field required hoặc đổi semantics.
 - Entity database không phải contract và không được export từ library.
-

package/dist/index.d.mts

@@ -52,13 +52,30 @@ declare enum ESortDir {
     ASC = "ASC",
     DESC = "DESC"
 }
+/** Kết quả 1 audit event — mirror AuditOutcome của MeagoServer (audit.types.ts) */
+declare enum EAuditOutcome {
+    SUCCESS = "success",
+    FAILURE = "failure",
+    DENIED = "denied"
+}
+/** Loại actor thực hiện hành động — mirror AuditActorType của MeagoServer  (audit.types.ts) */
+declare enum EAuditActorType {
+    USER = "user",
+    SYSTEM = "system",
+    SERVICE = "service",
+    ANONYMOUS = "anonymous"
+}
 
+type index$a_EAuditActorType = EAuditActorType;
+declare const index$a_EAuditActorType: typeof EAuditActorType;
+type index$a_EAuditOutcome = EAuditOutcome;
+declare const index$a_EAuditOutcome: typeof EAuditOutcome;
 type index$a_ESortDir = ESortDir;
 declare const index$a_ESortDir: typeof ESortDir;
 type index$a_EUserStatus = EUserStatus;
 declare const index$a_EUserStatus: typeof EUserStatus;
 declare namespace index$a {
-  export { index$a_ESortDir as ESortDir, index$a_EUserStatus as EUserStatus };
+  export { index$a_EAuditActorType as EAuditActorType, index$a_EAuditOutcome as EAuditOutcome, index$a_ESortDir as ESortDir, index$a_EUserStatus as EUserStatus };
 }
 
 interface ILoginDto {
@@ -116,6 +133,11 @@ interface IPaginatedResult<T> {
     hasNextPage?: boolean;
     hasPreviousPage?: boolean;
 }
+/** Danh sách dùng cursor thay vì offset — cho bảng lớn/append-only (vd audit_events). */
+interface ICursorPaginatedResult<T> {
+    items: T[];
+    nextCursor: string | null;
+}
 interface IBaseQuery<TSortBy extends string = string> {
     page?: number;
     limit?: number;
@@ -137,11 +159,12 @@ interface ITrackingModel extends IBaseModel {
 type index$8_IBaseModel = IBaseModel;
 type index$8_IBaseQuery<TSortBy extends string = string> = IBaseQuery<TSortBy>;
 type index$8_IBaseResponse<T> = IBaseResponse<T>;
+type index$8_ICursorPaginatedResult<T> = ICursorPaginatedResult<T>;
 type index$8_IErrorResponse<TDetails = unknown> = IErrorResponse<TDetails>;
 type index$8_IPaginatedResult<T> = IPaginatedResult<T>;
 type index$8_ITrackingModel = ITrackingModel;
 declare namespace index$8 {
-  export type { index$8_IBaseModel as IBaseModel, index$8_IBaseQuery as IBaseQuery, index$8_IBaseResponse as IBaseResponse, index$8_IErrorResponse as IErrorResponse, index$8_IPaginatedResult as IPaginatedResult, index$8_ITrackingModel as ITrackingModel };
+  export type { index$8_IBaseModel as IBaseModel, index$8_IBaseQuery as IBaseQuery, index$8_IBaseResponse as IBaseResponse, index$8_ICursorPaginatedResult as ICursorPaginatedResult, index$8_IErrorResponse as IErrorResponse, index$8_IPaginatedResult as IPaginatedResult, index$8_ITrackingModel as ITrackingModel };
 }
 
 /** User trả về từ GET /auth/me — kèm tập permission đã resolve. */
@@ -166,13 +189,51 @@ interface IRole extends IBaseModel {
     description?: string | null;
     permissions: IPermission[];
 }
+/**
+ * 1 dòng lịch sử thao tác — append-only, không có updatedAt/version.
+ * Khớp AuditEventEntity của MeagoServer (audit-event.entity.ts).
+ */
+interface IAuditEvent {
+    id: string;
+    occurredAt: string;
+    actorType: EAuditActorType | string;
+    actorId: string | null;
+    action: string;
+    resourceType: string | null;
+    resourceId: string | null;
+    outcome: EAuditOutcome | string;
+    reasonCode: string | null;
+    requestId: string | null;
+    traceId: string | null;
+    httpMethod: string | null;
+    routeTemplate: string | null;
+    statusCode: number | null;
+    ip: string | null;
+    userAgent: string | null;
+    durationMs: number | null;
+    metadata: Record<string, unknown> | null;
+}
+/** Query params cho GET /audit-events — khớp AuditEventQueryDto của MeagoServer. */
+interface IAuditEventQuery {
+    actorId?: string;
+    action?: string;
+    resourceType?: string;
+    resourceId?: string;
+    outcome?: EAuditOutcome | string;
+    from?: string;
+    to?: string;
+    cursor?: string;
+    limit?: number;
+}
 
+type index$7_IAuditEvent = IAuditEvent;
+type index$7_IAuditEventQuery = IAuditEventQuery;
 type index$7_ICurrentUser = ICurrentUser;
 type index$7_IPermission = IPermission;
 type index$7_IRole = IRole;
 type index$7_IUser = IUser;
 declare namespace index$7 {
-  export type { index$7_ICurrentUser as ICurrentUser, index$7_IPermission as IPermission, index$7_IRole as IRole, index$7_IUser as IUser };
+  export type { index$7_IAuditEvent as IAuditEvent, index$7_IAuditEventQuery as IAuditEventQuery, index$7_ICurrentUser as ICurrentUser, index$7_IPermission as IPermission, index$7_IRole as IRole, index$7_IUser as IUser };
 }
 
 interface ResponseMeta {
@@ -414,4 +475,4 @@ declare namespace index {
   export { type index_Result as Result, index_err as err, index_isErr as isErr, index_isOk as isOk, index_mapResult as mapResult, index_ok as ok, index_unwrapResult as unwrapResult };
 }
 
-export { API_ACTIONS, API_CONTROLLERS, API_VERSION, type AuthContext, type AuthCredential, type AuthIdentity, AuthMode, type AuthPrincipal, type AuthResult, type AuthStrategy, type Clock, CoreError, CoreErrorCode, type CoreErrorOptions, ESortDir, EUserStatus, type ErrorResponseInput, type Hasher, type IBaseModel, type IBaseQuery, type IBaseResponse, type ICurrentUser, type IErrorResponse, type IJwtPayload, type ILoginDto, type IPaginatedResult, type IPermission, type IRegisterDto, type IRole, type ITokenResponse, type ITrackingModel, type IUser, type IdGenerator, index$6 as MeagoApi, index$5 as MeagoAuth, index$b as MeagoConstants, index$9 as MeagoDto, index$a as MeagoEnums, index$4 as MeagoErrors, index$8 as MeagoInterfacesCommon, index$7 as MeagoInterfacesModels, index$3 as MeagoPagination, index$2 as MeagoPermissions, index$1 as MeagoPorts, index as MeagoResult, type NormalizedPagination, PERMISSIONS, type PaginationInput, type PaginationPolicy, type PermissionCollection, type ResponseMeta, type Result, type SessionRecord, type SessionStore, type TransactionRunner, createErrorResponse, createPaginatedResult, createSuccessResponse, err, getPaginationOffset, hasAllPermissions, hasAnyPermission, isCoreError, isErr, isOk, joinApiPath, mapResult, normalizePagination, ok, systemClock, unwrapResult };
+export { API_ACTIONS, API_CONTROLLERS, API_VERSION, type AuthContext, type AuthCredential, type AuthIdentity, AuthMode, type AuthPrincipal, type AuthResult, type AuthStrategy, type Clock, CoreError, CoreErrorCode, type CoreErrorOptions, EAuditActorType, EAuditOutcome, ESortDir, EUserStatus, type ErrorResponseInput, type Hasher, type IAuditEvent, type IAuditEventQuery, type IBaseModel, type IBaseQuery, type IBaseResponse, type ICurrentUser, type ICursorPaginatedResult, type IErrorResponse, type IJwtPayload, type ILoginDto, type IPaginatedResult, type IPermission, type IRegisterDto, type IRole, type ITokenResponse, type ITrackingModel, type IUser, type IdGenerator, index$6 as MeagoApi, index$5 as MeagoAuth, index$b as MeagoConstants, index$9 as MeagoDto, index$a as MeagoEnums, index$4 as MeagoErrors, index$8 as MeagoInterfacesCommon, index$7 as MeagoInterfacesModels, index$3 as MeagoPagination, index$2 as MeagoPermissions, index$1 as MeagoPorts, index as MeagoResult, type NormalizedPagination, PERMISSIONS, type PaginationInput, type PaginationPolicy, type PermissionCollection, type ResponseMeta, type Result, type SessionRecord, type SessionStore, type TransactionRunner, createErrorResponse, createPaginatedResult, createSuccessResponse, err, getPaginationOffset, hasAllPermissions, hasAnyPermission, isCoreError, isErr, isOk, joinApiPath, mapResult, normalizePagination, ok, systemClock, unwrapResult };

package/dist/index.d.ts

@@ -52,13 +52,30 @@ declare enum ESortDir {
     ASC = "ASC",
     DESC = "DESC"
 }
+/** Kết quả 1 audit event — mirror AuditOutcome của MeagoServer (audit.types.ts) */
+declare enum EAuditOutcome {
+    SUCCESS = "success",
+    FAILURE = "failure",
+    DENIED = "denied"
+}
+/** Loại actor thực hiện hành động — mirror AuditActorType của MeagoServer  (audit.types.ts) */
+declare enum EAuditActorType {
+    USER = "user",
+    SYSTEM = "system",
+    SERVICE = "service",
+    ANONYMOUS = "anonymous"
+}
 
+type index$a_EAuditActorType = EAuditActorType;
+declare const index$a_EAuditActorType: typeof EAuditActorType;
+type index$a_EAuditOutcome = EAuditOutcome;
+declare const index$a_EAuditOutcome: typeof EAuditOutcome;
 type index$a_ESortDir = ESortDir;
 declare const index$a_ESortDir: typeof ESortDir;
 type index$a_EUserStatus = EUserStatus;
 declare const index$a_EUserStatus: typeof EUserStatus;
 declare namespace index$a {
-  export { index$a_ESortDir as ESortDir, index$a_EUserStatus as EUserStatus };
+  export { index$a_EAuditActorType as EAuditActorType, index$a_EAuditOutcome as EAuditOutcome, index$a_ESortDir as ESortDir, index$a_EUserStatus as EUserStatus };
 }
 
 interface ILoginDto {
@@ -116,6 +133,11 @@ interface IPaginatedResult<T> {
     hasNextPage?: boolean;
     hasPreviousPage?: boolean;
 }
+/** Danh sách dùng cursor thay vì offset — cho bảng lớn/append-only (vd audit_events). */
+interface ICursorPaginatedResult<T> {
+    items: T[];
+    nextCursor: string | null;
+}
 interface IBaseQuery<TSortBy extends string = string> {
     page?: number;
     limit?: number;
@@ -137,11 +159,12 @@ interface ITrackingModel extends IBaseModel {
 type index$8_IBaseModel = IBaseModel;
 type index$8_IBaseQuery<TSortBy extends string = string> = IBaseQuery<TSortBy>;
 type index$8_IBaseResponse<T> = IBaseResponse<T>;
+type index$8_ICursorPaginatedResult<T> = ICursorPaginatedResult<T>;
 type index$8_IErrorResponse<TDetails = unknown> = IErrorResponse<TDetails>;
 type index$8_IPaginatedResult<T> = IPaginatedResult<T>;
 type index$8_ITrackingModel = ITrackingModel;
 declare namespace index$8 {
-  export type { index$8_IBaseModel as IBaseModel, index$8_IBaseQuery as IBaseQuery, index$8_IBaseResponse as IBaseResponse, index$8_IErrorResponse as IErrorResponse, index$8_IPaginatedResult as IPaginatedResult, index$8_ITrackingModel as ITrackingModel };
+  export type { index$8_IBaseModel as IBaseModel, index$8_IBaseQuery as IBaseQuery, index$8_IBaseResponse as IBaseResponse, index$8_ICursorPaginatedResult as ICursorPaginatedResult, index$8_IErrorResponse as IErrorResponse, index$8_IPaginatedResult as IPaginatedResult, index$8_ITrackingModel as ITrackingModel };
 }
 
 /** User trả về từ GET /auth/me — kèm tập permission đã resolve. */
@@ -166,13 +189,51 @@ interface IRole extends IBaseModel {
     description?: string | null;
     permissions: IPermission[];
 }
+/**
+ * 1 dòng lịch sử thao tác — append-only, không có updatedAt/version.
+ * Khớp AuditEventEntity của MeagoServer (audit-event.entity.ts).
+ */
+interface IAuditEvent {
+    id: string;
+    occurredAt: string;
+    actorType: EAuditActorType | string;
+    actorId: string | null;
+    action: string;
+    resourceType: string | null;
+    resourceId: string | null;
+    outcome: EAuditOutcome | string;
+    reasonCode: string | null;
+    requestId: string | null;
+    traceId: string | null;
+    httpMethod: string | null;
+    routeTemplate: string | null;
+    statusCode: number | null;
+    ip: string | null;
+    userAgent: string | null;
+    durationMs: number | null;
+    metadata: Record<string, unknown> | null;
+}
+/** Query params cho GET /audit-events — khớp AuditEventQueryDto của MeagoServer. */
+interface IAuditEventQuery {
+    actorId?: string;
+    action?: string;
+    resourceType?: string;
+    resourceId?: string;
+    outcome?: EAuditOutcome | string;
+    from?: string;
+    to?: string;
+    cursor?: string;
+    limit?: number;
+}
 
+type index$7_IAuditEvent = IAuditEvent;
+type index$7_IAuditEventQuery = IAuditEventQuery;
 type index$7_ICurrentUser = ICurrentUser;
 type index$7_IPermission = IPermission;
 type index$7_IRole = IRole;
 type index$7_IUser = IUser;
 declare namespace index$7 {
-  export type { index$7_ICurrentUser as ICurrentUser, index$7_IPermission as IPermission, index$7_IRole as IRole, index$7_IUser as IUser };
+  export type { index$7_IAuditEvent as IAuditEvent, index$7_IAuditEventQuery as IAuditEventQuery, index$7_ICurrentUser as ICurrentUser, index$7_IPermission as IPermission, index$7_IRole as IRole, index$7_IUser as IUser };
 }
 
 interface ResponseMeta {
@@ -414,4 +475,4 @@ declare namespace index {
   export { type index_Result as Result, index_err as err, index_isErr as isErr, index_isOk as isOk, index_mapResult as mapResult, index_ok as ok, index_unwrapResult as unwrapResult };
 }
 
-export { API_ACTIONS, API_CONTROLLERS, API_VERSION, type AuthContext, type AuthCredential, type AuthIdentity, AuthMode, type AuthPrincipal, type AuthResult, type AuthStrategy, type Clock, CoreError, CoreErrorCode, type CoreErrorOptions, ESortDir, EUserStatus, type ErrorResponseInput, type Hasher, type IBaseModel, type IBaseQuery, type IBaseResponse, type ICurrentUser, type IErrorResponse, type IJwtPayload, type ILoginDto, type IPaginatedResult, type IPermission, type IRegisterDto, type IRole, type ITokenResponse, type ITrackingModel, type IUser, type IdGenerator, index$6 as MeagoApi, index$5 as MeagoAuth, index$b as MeagoConstants, index$9 as MeagoDto, index$a as MeagoEnums, index$4 as MeagoErrors, index$8 as MeagoInterfacesCommon, index$7 as MeagoInterfacesModels, index$3 as MeagoPagination, index$2 as MeagoPermissions, index$1 as MeagoPorts, index as MeagoResult, type NormalizedPagination, PERMISSIONS, type PaginationInput, type PaginationPolicy, type PermissionCollection, type ResponseMeta, type Result, type SessionRecord, type SessionStore, type TransactionRunner, createErrorResponse, createPaginatedResult, createSuccessResponse, err, getPaginationOffset, hasAllPermissions, hasAnyPermission, isCoreError, isErr, isOk, joinApiPath, mapResult, normalizePagination, ok, systemClock, unwrapResult };
+export { API_ACTIONS, API_CONTROLLERS, API_VERSION, type AuthContext, type AuthCredential, type AuthIdentity, AuthMode, type AuthPrincipal, type AuthResult, type AuthStrategy, type Clock, CoreError, CoreErrorCode, type CoreErrorOptions, EAuditActorType, EAuditOutcome, ESortDir, EUserStatus, type ErrorResponseInput, type Hasher, type IAuditEvent, type IAuditEventQuery, type IBaseModel, type IBaseQuery, type IBaseResponse, type ICurrentUser, type ICursorPaginatedResult, type IErrorResponse, type IJwtPayload, type ILoginDto, type IPaginatedResult, type IPermission, type IRegisterDto, type IRole, type ITokenResponse, type ITrackingModel, type IUser, type IdGenerator, index$6 as MeagoApi, index$5 as MeagoAuth, index$b as MeagoConstants, index$9 as MeagoDto, index$a as MeagoEnums, index$4 as MeagoErrors, index$8 as MeagoInterfacesCommon, index$7 as MeagoInterfacesModels, index$3 as MeagoPagination, index$2 as MeagoPermissions, index$1 as MeagoPorts, index as MeagoResult, type NormalizedPagination, PERMISSIONS, type PaginationInput, type PaginationPolicy, type PermissionCollection, type ResponseMeta, type Result, type SessionRecord, type SessionStore, type TransactionRunner, createErrorResponse, createPaginatedResult, createSuccessResponse, err, getPaginationOffset, hasAllPermissions, hasAnyPermission, isCoreError, isErr, isOk, joinApiPath, mapResult, normalizePagination, ok, systemClock, unwrapResult };

package/dist/index.js

@@ -26,6 +26,8 @@ __export(index_exports, {
   AuthMode: () => AuthMode,
   CoreError: () => CoreError,
   CoreErrorCode: () => CoreErrorCode,
+  EAuditActorType: () => EAuditActorType,
+  EAuditOutcome: () => EAuditOutcome,
   ESortDir: () => ESortDir,
   EUserStatus: () => EUserStatus,
   MeagoApi: () => api_exports,
@@ -102,6 +104,8 @@ var PERMISSIONS = {
 // src/enums/index.ts
 var enums_exports = {};
 __export(enums_exports, {
+  EAuditActorType: () => EAuditActorType,
+  EAuditOutcome: () => EAuditOutcome,
   ESortDir: () => ESortDir,
   EUserStatus: () => EUserStatus
 });
@@ -115,6 +119,19 @@ var ESortDir = /* @__PURE__ */ ((ESortDir2) => {
   ESortDir2["DESC"] = "DESC";
   return ESortDir2;
 })(ESortDir || {});
+var EAuditOutcome = /* @__PURE__ */ ((EAuditOutcome2) => {
+  EAuditOutcome2["SUCCESS"] = "success";
+  EAuditOutcome2["FAILURE"] = "failure";
+  EAuditOutcome2["DENIED"] = "denied";
+  return EAuditOutcome2;
+})(EAuditOutcome || {});
+var EAuditActorType = /* @__PURE__ */ ((EAuditActorType2) => {
+  EAuditActorType2["USER"] = "user";
+  EAuditActorType2["SYSTEM"] = "system";
+  EAuditActorType2["SERVICE"] = "service";
+  EAuditActorType2["ANONYMOUS"] = "anonymous";
+  return EAuditActorType2;
+})(EAuditActorType || {});
 
 // src/dto/auth/index.ts
 var auth_exports = {};
@@ -294,6 +311,8 @@ function mapResult(result, mapper) {
   AuthMode,
   CoreError,
   CoreErrorCode,
+  EAuditActorType,
+  EAuditOutcome,
   ESortDir,
   EUserStatus,
   MeagoApi,

package/dist/index.mjs

@@ -46,6 +46,8 @@ var PERMISSIONS = {
 // src/enums/index.ts
 var enums_exports = {};
 __export(enums_exports, {
+  EAuditActorType: () => EAuditActorType,
+  EAuditOutcome: () => EAuditOutcome,
   ESortDir: () => ESortDir,
   EUserStatus: () => EUserStatus
 });
@@ -59,6 +61,19 @@ var ESortDir = /* @__PURE__ */ ((ESortDir2) => {
   ESortDir2["DESC"] = "DESC";
   return ESortDir2;
 })(ESortDir || {});
+var EAuditOutcome = /* @__PURE__ */ ((EAuditOutcome2) => {
+  EAuditOutcome2["SUCCESS"] = "success";
+  EAuditOutcome2["FAILURE"] = "failure";
+  EAuditOutcome2["DENIED"] = "denied";
+  return EAuditOutcome2;
+})(EAuditOutcome || {});
+var EAuditActorType = /* @__PURE__ */ ((EAuditActorType2) => {
+  EAuditActorType2["USER"] = "user";
+  EAuditActorType2["SYSTEM"] = "system";
+  EAuditActorType2["SERVICE"] = "service";
+  EAuditActorType2["ANONYMOUS"] = "anonymous";
+  return EAuditActorType2;
+})(EAuditActorType || {});
 
 // src/dto/auth/index.ts
 var auth_exports = {};
@@ -237,6 +252,8 @@ export {
   AuthMode,
   CoreError,
   CoreErrorCode,
+  EAuditActorType,
+  EAuditOutcome,
   ESortDir,
   EUserStatus,
   api_exports as MeagoApi,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meago/core",
-  "version": "0.2.0",
+  "version": "0.3.2",
   "description": "Framework-neutral contracts and core primitives for Meago applications",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -26,7 +26,7 @@
     "pub": "npm run build && npm publish"
   },
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "author": "Meago",
   "license": "MIT",