@nathapp/na-cli 1.0.0-rc.9 → 1.0.1-rc.0

package/dist/templates/mxw-base-api-express/src/utils/api-utilities.ts

@@ -0,0 +1,52 @@
+import { isUndefinedOrNullOrEmpty } from "mxw-libs-utils";
+import { mxw } from "mxw-sdk-js";
+
+/**
+ * NOTE: due to limited header size for Bearer this Utils is
+ * To Transform Large Size Property to hash.
+ */
+export default class ApiUtils {
+
+    // change to loop if having more property
+    public static transformParamsWithHash( params: any) {
+        const tokenParams = {
+            ... params,
+        }
+        // docBase64 too large to header, will throw error
+        if(tokenParams.hasOwnProperty("docBase64") && !isUndefinedOrNullOrEmpty(tokenParams.docBase64)) {
+            tokenParams.docBase64Signature = this.hashMessage(tokenParams.docBase64);
+            delete tokenParams.docBase64;
+            params = {
+                ...params,
+                docBase64Signature: tokenParams.docBase64Signature,
+            }
+        }
+        return {
+            tokenParams,
+            requestParams: params,
+        };
+    }
+
+    public static verify(params: any) {
+        
+        if(!params.hasOwnProperty("docBase64") || isUndefinedOrNullOrEmpty(params.docBase64)) {
+            return true;
+        }
+
+        if(isUndefinedOrNullOrEmpty(params?.docBase64Signature)) {
+            return false;
+        }
+
+        return this.verifyHash(params.docBase64, params.docBase64Signature);
+    }
+
+    public static verifyHash(message: string, hash: string) {
+        const signature = this.hashMessage(message);
+        return signature == hash;
+    }
+
+    
+    public static hashMessage(message: string) {
+        return mxw.utils.hashMessage(message);
+    }
+}

package/dist/templates/mxw-base-api-express/src/utils/file-utilities.ts

@@ -0,0 +1,55 @@
+
+import fs from "fs";
+import { errors, INVALID_REQUEST } from "mxw-libs-errors";
+import { base64 } from "mxw-libs-utils";
+import path from 'path'
+import axios from "axios";
+
+export default class FileUtils {
+
+
+    public static validUrl(url) {
+        return /http(s)?:\/\/(\w+:?\w*@)?(\S+)(:\d+)?((?<=\.)\w+)+(\/([\w#!:.?+=&%@!\-/])*)?/gi.test(url);
+    }
+
+    public static validFileType(filename) {
+        return /(?<=\S+)\.(jpg|png|jpeg|pdf)/gi.test(filename);
+    }
+
+    public static isImage(filename) {
+        return /(?<=\S+)\.(jpg|png|jpeg)/gi.test(filename);
+    }
+
+    public static readFileAndConvert(fileName: string) {
+        if (fs.statSync(fileName).isFile()) {
+            return FileUtils.base64ToNode(fs.readFileSync(path.resolve(fileName)));
+        }
+        return null;
+    }
+
+    public static base64ToNode(buffer: Buffer) {
+        return buffer.toString('base64');
+    }
+
+
+    public static writeFile(filename: string, data: string) {
+        const buffer = Buffer.from(base64.decode(data));
+        return this.writeBufferToFile(filename, buffer);
+    }
+
+    public static writeToFile(filename: string, data: string) {
+        const buffer = Buffer.from(data, "utf-8");
+        return this.writeBufferToFile(filename, buffer);
+    }
+
+    public static writeBufferToFile(filename: string, buffer: Buffer) {
+        return new Promise<void>((resolve, reject) => {
+            fs.writeFile(filename, buffer, {}, (error) => {
+                if (error) {
+                    return reject(error);
+                }
+                return resolve();
+            });
+        });
+    }
+}

package/dist/templates/mxw-base-api-express/tsconfig.json

@@ -0,0 +1,32 @@
+{
+    "compilerOptions": {
+        "module": "commonjs",
+        "esModuleInterop": true,
+        "target": "es6",
+        "noImplicitAny": false,
+        // "noUnusedLocals": true,
+        "forceConsistentCasingInFileNames": true,
+        "noFallthroughCasesInSwitch": true,
+        "moduleResolution": "node",
+        "sourceMap": true,
+        "outDir": "dist",
+        "baseUrl": "./",
+        "paths": {
+            "*": [
+                "node_modules/*",
+                "src/types/*"
+            ]
+        },
+        "typeRoots": [
+            "node_modules/@types/*"
+        ],
+        "types": [
+            "node"
+        ]
+    },
+    "exclude": [
+        "src/**/*.test.ts",
+        "src/**/**/*.test.ts",
+        "src/**/**/**/*.test.ts"
+    ]
+}

package/dist/templates/nestjs-api/.dockerignore

@@ -0,0 +1,6 @@
+dist
+node_modules
+
+.tomg-config
+generated
+.pem

package/dist/templates/nestjs-api/.env

@@ -0,0 +1,24 @@
+SERVER_PORT=8080
+
+GLOBAL_PREFIX=/
+
+JWT_ACCESS_SECRET=thisisasecret
+JWT_ACCESS_PRIVATEKEY="-----BEGIN RSA PRIVATE KEY-----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\ntfixUdU5UUIHRID3XZiApiukE/5lMYf3FmXtgeHq0J9ArgHbF1gd\n-----END RSA PRIVATE KEY-----\n"
+JWT_ACCESS_PUBLICKEY="-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7LDW5t44Z8GNoaTz1iF\n3YF7byIyE0as7Y/F58aFVWFhRC/GmGovJPgm3s6/gOCzxUWtP4URLjWDmGIs2MJe\nbt9GWbXF4Ou5O47DCta75up+ZrqPCoLVOEL1tNUUx/GW+Q/Dd4quiy1SWz7At/BD\nF1y5DUv34C/S3VMR5mxkli1kwqPKzw/ozrc2+JzmoQ0n355utcUVXsU/4ufZ9eQu\nSF2tUUOBZs2nlauYOixz/qrqg+j+3HoJBvmzMTIahXYFEGCjormc2E0kwdz5/0Zf\nYUbAogYH7GZIzXEOZvQedOD8s9JL90i/yEE4L14F3XJsfLo+Krgxz49LBU6KEaGz\nGwIDAQAB\n-----END PUBLIC KEY-----\n"
+JWT_ACCESS_PASSPHRASE=
+## for RSA use RS384, SECRET use HS384
+JWT_ACCESS_ALGORITHM=RS256
+JWT_ACCESS_EXPIRE=1h
+
+## only use on auth-api
+# JWT_REFRESH_SECRET=thisisarefreshsecret
+# JWT_REFRESH_PRIVATEKEY="-----BEGIN RSA PRIVATE KEY-----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\nGM6qsqVdgonL8KWe7YR2AlR9N3l5SnqLvcL92Linuj9aUdhGvyM=\n-----END RSA PRIVATE KEY-----\n"
+# JWT_REFRESH_PUBLICKEY="-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufuMWcfztXd9V3Jbpwzz\nPstzYgFY6wS+pGq0ZGxMUz8bJAFKPAby44knaHgVdDREyldSpcOJqSsAEsfNT7kc\nAeGhkhdwAvDLRpN3MTHuIKRw9DBQXsL1b10A74ao4n77nSIfglmUe1Daobuf8CQZ\nVU6tkONn4B+ibP/A/cIUEwaJVyff8xOCq91nTNfP7l6yOBzsQE+omh5ZP3l/uQcB\nF42+S0URbzFoxNYnA1DPjJbuk2rUp5o8L4JYMR7eGZriFm7A4xBftyINV4W0ptvT\n/S0vOT0CjXrtdz9Adpj/dpkSSiCucCzKZOdm+DEuNT/WBG/GNCWfNiHZxC/qGPOJ\nKwIDAQAB\n-----END PUBLIC KEY-----\n"
+# JWT_REFRESH_PASSPHRASE=
+# ## for RSA use RS384, SECRET use HS384
+# JWT_REFRESH_ALGORITHM=RS256
+# JWT_REFRESH_EXPIRE=1d
+
+#MONGO_URL=mongodb://root:password@127.0.0.1:27017/mongo?authSource=admin
+
+#MYSQL_URL=mysql://root:password@127.0.0.1:3306/db?useSSL=false&useUnicode=true&characterEncoding=UTF-8&serverTimezone=CTT&pinGlobalTxToPhysicalConnection=true

package/dist/templates/nestjs-api/.eslintrc.js

@@ -0,0 +1,25 @@
+module.exports = {
+  parser: '@typescript-eslint/parser',
+  parserOptions: {
+    project: 'tsconfig.json',
+    tsconfigRootDir: __dirname,
+    sourceType: 'module',
+  },
+  plugins: ['@typescript-eslint/eslint-plugin'],
+  extends: [
+    'plugin:@typescript-eslint/recommended',
+    'plugin:prettier/recommended',
+  ],
+  root: true,
+  env: {
+    node: true,
+    jest: true,
+  },
+  ignorePatterns: ['.eslintrc.js'],
+  rules: {
+    '@typescript-eslint/interface-name-prefix': 'off',
+    '@typescript-eslint/explicit-function-return-type': 'off',
+    '@typescript-eslint/explicit-module-boundary-types': 'off',
+    '@typescript-eslint/no-explicit-any': 'off',
+  },
+};

package/dist/templates/nestjs-api/.gitignore-rename

@@ -0,0 +1,39 @@
+# compiled output
+/dist
+/node_modules
+
+# Logs
+logs
+*.log
+npm-debug.log*
+pnpm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+
+# OS
+.DS_Store
+
+# Tests
+/coverage
+/.nyc_output
+
+# IDEs and editors
+/.idea
+.project
+.classpath
+.c9/
+*.launch
+.settings/
+*.sublime-workspace
+
+# IDE - VSCode
+.vscode/*
+!.vscode/settings.json
+!.vscode/tasks.json
+!.vscode/launch.json
+!.vscode/extensions.json
+
+.tomg-config
+generated
+*.pem

package/dist/templates/nestjs-api/.gitlab-ci.yml

@@ -0,0 +1,174 @@
+# Project must implement Makefile for commands (test, version-prerelease, version-patch, name, version, image)
+# command:
+#   - test: run project test cases
+#   - version-prerelease: bump prerelease version
+#   - version-patch: bump release version
+#   - name: display project name
+#   - version: display project version
+#   - image: display project name and version (e.g. hello-world:1.0.0)
+#
+stages:
+  # run test cases
+  - test
+  # build container image and push to registry
+  - prepare
+  - build-init
+  - build
+  - build-commit
+  # mark release commit as verified
+  - release
+  - notify
+
+run-test:
+  stage: test
+  image: registry-intl.cn-hongkong.aliyuncs.com/gkci/docker:18-ci
+  services:
+    - docker:18-dind
+  script:
+    - make test
+  rules:
+    # NOT triggerred by bot and NOT commit message contains `run-without-release` keyword and NOT tag was created
+    - if: '$CI_COMMIT_MESSAGE =~ /release-by-bot/ || $CI_COMMIT_MESSAGE =~ /run-without-release/ || $CI_COMMIT_TAG != null'
+      when: never
+    # Merge request
+    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
+    # Commit to protected branch or commit branch is default branch (master)
+    - if: '$CI_COMMIT_REF_PROTECTED == "true" || $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
+    # Commit message contains `run-test` keyword
+    - if: '$CI_COMMIT_MESSAGE =~ /run-test/'
+    # Commit message contains `run-prerelease` keyword and commit branch is not default branch (master)
+    - if: '$CI_COMMIT_MESSAGE =~ /run-prerelease/ && $CI_COMMIT_BRANCH != $CI_DEFAULT_BRANCH'
+
+run-pre-prepare:
+  stage: prepare
+  image: registry-intl.cn-hongkong.aliyuncs.com/gkci/node:10.20.0-alpine-ci-1
+  artifacts:
+    paths:
+      - package.json
+      - package-lock.json
+      - image-tag.txt
+      - postman-collection.json
+  script:
+    - make spec
+    - make version-prerelease
+    - make image | awk '{ printf("%s/%s/%s", ENVIRON["CONTAINER_REGISTRY_URL"], ENVIRON["CONTAINER_REGISTRY_NAMESPACE"], $0)}' > image-tag.txt
+  rules:
+    # NOT triggerred by bot and NOT commit message contains `run-without-release` keyword and NOT merge request and NOT tag was created
+    - if: '$CI_COMMIT_MESSAGE =~ /release-by-bot/ || $CI_COMMIT_MESSAGE =~ /run-without-release/ || $CI_PIPELINE_SOURCE == "merge_request_event" || $CI_COMMIT_TAG != null'
+      when: never
+    # Commit message contains `run-prerelease` keyword and commit branch is not default branch (master)
+    - if: '$CI_COMMIT_MESSAGE =~ /run-prerelease/ && $CI_COMMIT_BRANCH != $CI_DEFAULT_BRANCH'
+
+run-prepare:
+  stage: prepare
+  image: registry-intl.cn-hongkong.aliyuncs.com/gkci/node:10.20.0-alpine-ci-1
+  artifacts:
+    paths:
+      - package.json
+      - package-lock.json
+      - image-tag.txt
+      - postman-collection.json
+  script:
+    - make spec
+    - make version-patch
+    - make image | awk '{ printf("%s/%s/%s", ENVIRON["CONTAINER_REGISTRY_URL"], ENVIRON["CONTAINER_REGISTRY_NAMESPACE"], $0)}' > image-tag.txt
+  rules:
+    # NOT triggerred by bot and NOT commit message contains `run-without-release` keyword and NOT merge request and NOT tag was created
+    - if: '$CI_COMMIT_MESSAGE =~ /release-by-bot/ || $CI_COMMIT_MESSAGE =~ /run-without-release/ || $CI_PIPELINE_SOURCE == "merge_request_event" || $CI_COMMIT_TAG != null'
+      when: never
+    # Commit into default branch (master)
+    - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
+
+run-build-warmer:
+  stage: build-init
+  image: 
+    name: registry-intl.cn-hongkong.aliyuncs.com/gkci/kaniko-warmer:debug
+    entrypoint: [""]
+  before_script:
+    - echo "$DOCKER_AUTH_CONFIG" > /kaniko/.docker/config.json
+  script:
+    - warmer `cat $CI_PROJECT_DIR/Dockerfile | grep FROM | awk -F" " '{ printf("--image=%s ", $2) }'`
+  rules:
+    # NOT triggerred by bot and NOT commit message contains `run-without-release` keyword and NOT merge request and NOT tag was created
+    - if: '$CI_COMMIT_MESSAGE =~ /release-by-bot/ || $CI_COMMIT_MESSAGE =~ /run-without-release/ || $CI_PIPELINE_SOURCE == "merge_request_event" || $CI_COMMIT_TAG != null'
+      when: never
+    # Commit message contains `run-prerelease` keyword and commit branch is not default branch (master)
+    - if: '$CI_COMMIT_MESSAGE =~ /run-prerelease/ && $CI_COMMIT_BRANCH != $CI_DEFAULT_BRANCH'
+    # Commit into default branch (master)
+    - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
+
+run-build:
+  stage: build
+  image: 
+    name: registry-intl.cn-hongkong.aliyuncs.com/gkci/kaniko-executor:debug
+    entrypoint: [""]
+  artifacts:
+    paths:
+      - image-digest.txt
+  before_script:
+    - echo "$DOCKER_AUTH_CONFIG" > /kaniko/.docker/config.json
+  script:
+    - echo "BUILDING... `cat $CI_PROJECT_DIR/image-tag.txt`"
+    - if [ -f $CI_PROJECT_DIR/dependency.txt ] && ! [ -z "`cat $CI_PROJECT_DIR/dependency.txt`" ]; then cat $CI_PROJECT_DIR/dependency.txt | awk '{$1=$1;print;exit}' > $CI_PROJECT_DIR/dep.txt; else echo > $CI_PROJECT_DIR/dep.txt; fi
+    - echo -n 'LABEL DEPENDENCY='; cat $CI_PROJECT_DIR/dep.txt
+    - executor --cache=true --context $CI_PROJECT_DIR --dockerfile $CI_PROJECT_DIR/Dockerfile --digest-file $CI_PROJECT_DIR/image-digest.txt --destination "`cat $CI_PROJECT_DIR/image-tag.txt`" --label "dependency=`cat $CI_PROJECT_DIR/dep.txt`"
+    - echo "PUSHED `cat $CI_PROJECT_DIR/image-tag.txt` (`cat $CI_PROJECT_DIR/image-digest.txt`)"
+  rules:
+    # NOT triggerred by bot and NOT commit message contains `run-without-release` keyword and NOT merge request and NOT tag was created
+    - if: '$CI_COMMIT_MESSAGE =~ /release-by-bot/ || $CI_COMMIT_MESSAGE =~ /run-without-release/ || $CI_PIPELINE_SOURCE == "merge_request_event" || $CI_COMMIT_TAG != null'
+      when: never
+    # Commit message contains `run-prerelease` keyword and commit branch is not default branch (master)
+    - if: '$CI_COMMIT_MESSAGE =~ /run-prerelease/ && $CI_COMMIT_BRANCH != $CI_DEFAULT_BRANCH'
+    # Commit into default branch (master)
+    - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
+
+run-build-commit:
+  stage: build-commit
+  image: registry-intl.cn-hongkong.aliyuncs.com/gkci/node:10.20.0-alpine-ci-1
+  before_script:
+    - git config --global user.name "$GITLAB_USER_NAME"
+    - git config --global user.email "$GITLAB_USER_EMAIL"
+  script:
+    - git add -A
+    - git commit -m "$(make version)" -m "== release-by-bot ($CI_COMMIT_SHA) =="
+    - git tag -a "$(make version)" -m "$(cat image-tag.txt) ($(cat image-digest.txt))"
+    - git push "https://${GITLAB_USER_NAME}:${CI_GIT_TOKEN}@${CI_REPOSITORY_URL#*@}" "HEAD:${CI_COMMIT_BRANCH}"
+    - git push "https://${GITLAB_USER_NAME}:${CI_GIT_TOKEN}@${CI_REPOSITORY_URL#*@}" --tags
+  rules:
+    # NOT triggerred by bot and NOT commit message contains `run-without-release` keyword and NOT merge request and NOT tag was created
+    - if: '$CI_COMMIT_MESSAGE =~ /release-by-bot/ || $CI_COMMIT_MESSAGE =~ /run-without-release/ || $CI_PIPELINE_SOURCE == "merge_request_event" || $CI_COMMIT_TAG != null'
+      when: never
+    # Commit message contains `run-prerelease` keyword and commit branch is not default branch (master)
+    - if: '$CI_COMMIT_MESSAGE =~ /run-prerelease/ && $CI_COMMIT_BRANCH != $CI_DEFAULT_BRANCH'
+    # Commit into default branch (master)
+    - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
+
+run-release:
+  stage: release
+  image: registry-intl.cn-hongkong.aliyuncs.com/gkci/node:10.20.0-alpine-ci-1
+  script:
+    - echo "Bumped version $(make version)"
+  rules:
+    # NOT commit message contains `run-without-release` keyword and NOT merge request
+    - if: '$CI_COMMIT_MESSAGE =~ /run-without-release/ || $CI_PIPELINE_SOURCE == "merge_request_event"'
+      when: never
+    # Tag was created
+    - if: '$CI_COMMIT_TAG != null'
+
+run-notify:
+  stage: notify
+  image: registry-intl.cn-hongkong.aliyuncs.com/gkci/node:10.20.0-alpine-ci-1
+  before_script:
+    - apk --no-cache add curl
+  script:
+    - 'curl -X POST -H "Content-Type: application/json" -d "{\"chat_id\": \"$TELEGRAM_CHAT_ID\", \"text\": \"CI: $CI_PROJECT_NAMESPACE/$CI_PROJECT_NAME version:$(make version) has been released \"}" https://api.telegram.org/bot$TELEGRAM_BOT_TOKEN/sendMessage'
+  rules:
+    # NOT triggerred by bot and NOT commit message contains `run-without-release` keyword and NOT merge request and NOT tag was created
+    - if: '$CI_COMMIT_MESSAGE =~ /release-by-bot/ || $CI_COMMIT_MESSAGE =~ /run-without-release/ || $CI_PIPELINE_SOURCE == "merge_request_event" || $CI_COMMIT_TAG != null'
+      when: never
+    - if: '$TELEGRAM_BOT_TOKEN == null || $TELEGRAM_BOT_TOKEN == "" || $TELEGRAM_CHAT_ID == null || $TELEGRAM_CHAT_ID == ""'
+      when: never
+    # Commit message contains `run-prerelease` keyword and commit branch is not default branch (master)
+    - if: '$CI_COMMIT_MESSAGE =~ /run-prerelease/ && $CI_COMMIT_BRANCH != $CI_DEFAULT_BRANCH'
+    # Commit into default branch (master)
+    - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'

package/dist/templates/nestjs-api/.nvmrc

@@ -0,0 +1 @@
+v16.14.2

package/dist/templates/nestjs-api/.prettierrc

@@ -0,0 +1,4 @@
+{
+  "singleQuote": true,
+  "trailingComma": "all"
+}

package/dist/templates/nestjs-api/Dockerfile

@@ -0,0 +1,19 @@
+FROM node:16.14.2-alpine3.15 AS builder
+WORKDIR /app/
+ADD ./package.json /app/
+ADD ./package-lock.json /app/
+ADD ./tsconfig.json /app/
+ADD ./tsconfig.build.json /app/
+ADD ./src /app/src
+RUN npm install glob rimraf
+RUN npm install
+COPY . .
+RUN npm run build
+
+
+FROM node:16.14.2-alpine3.15
+WORKDIR /app/
+COPY package*.json ./
+RUN npm ci --omit=dev
+COPY --from=builder /app/dist /app/dist
+CMD ["npm", "run", "start:prod"]

package/dist/templates/nestjs-api/Makefile

@@ -0,0 +1,95 @@
+MAKEFILE := $(abspath $(lastword $(MAKEFILE_LIST)))
+ROOT_PATH := $(shell pwd)
+SERVICE_NAME := <%= projectName %>
+
+.PHONY: version name image
+
+version-major: version-sync
+	@npm -s version major --no-git-tag-version
+
+version-minor: version-sync
+	@npm -s version minor --no-git-tag-version
+
+version-patch: version-sync
+	@npm -s version patch --no-git-tag-version
+
+version-prerelease: version-sync
+	@npm -s version prerelease --preid=rc --no-git-tag-version
+
+version-latest:
+	@(git tag --sort=-creatordate || echo) | awk 'NR==1 { \
+		split($$0, n, "-"); \
+		if (n[1] != "") { \
+			split(n[1], v, "."); \
+			if (v[1] ~ /^[0-9]+$$/ && v[2] ~ /^[0-9]+$$/ && v[3] ~ /^[0-9]+$$/) { \
+				print $$0; \
+				exit 0; \
+			} \
+		} \
+		print "1.0.0-rc.0"; \
+	 } \
+	 END { \
+		 if (NR == 0) { \
+			 print "1.0.0-rc.0"; \
+		 } \
+	 }'
+
+version-sync:
+	@git checkout $(CI_COMMIT_BRANCH)
+	@git pull --tags 2&>/dev/null || true
+	@git tag --sort=-creatordate | head -10
+	@cat package.json | jq -r --arg PKG_VERSION `make --no-print-directory -f$(MAKEFILE) version-latest` '.version=$$PKG_VERSION' > package.json;
+	@echo -n "Current Git tag: "; cat package.json | jq -r '.version'
+
+version:
+	@echo $(shell node -p "require('$(ROOT_PATH)/package.json').version")
+
+name:
+	@echo $(SERVICE_NAME)
+
+image:
+	@echo $(SERVICE_NAME):$(shell node -p "require('$(ROOT_PATH)/package.json').version")
+
+test:
+	@npm i
+	@npm run -s test
+
+spec:
+	@set -e -o pipefail; \
+		if [ -f "$(ROOT_PATH)/spec.yaml" ]; then \
+			make --no-print-directory -f$(MAKEFILE) spec-file > $(ROOT_PATH)/all-spec.yaml; \
+			openapi2postmanv2 -s $(ROOT_PATH)/all-spec.yaml -o postman-collection.json | \
+				awk ' \
+					BEGIN{ result = 0; error = "" } \
+					{ \
+						if (0 < index($$0, "Conversion successful, collection written to file")) { \
+							result = 1; \
+						} \
+						error = error $$0; \
+					} \
+					END{ \
+						if (result != 1) { \
+							print error; \
+							exit(-1); \
+						} \
+					}'; \
+			rm -f $(ROOT_PATH)/all-spec.yaml; \
+		fi;
+
+spec-file:
+	@cat $(ROOT_PATH)/spec.yaml;
+	@for file in `find $(ROOT_PATH)/src -iname "*-spec.yaml"`; do \
+		echo ""; \
+		cat $$file; \
+	done;
+
+
+gen-keypair:
+	@openssl genrsa -out private.pem 2048
+	@openssl rsa -in private.pem -pubout -out public.pem
+
+view-privatekey:
+	@awk '{printf "%s\\n", $$0}' private.pem
+
+view-publickey:
+	@awk '{printf "%s\\n", $$0}' public.pem

package/dist/templates/nestjs-api/README.md

@@ -0,0 +1,71 @@
+# <%= projectName %>
+
+## Issue
+
+1. if u having Cannot find module 'typescript' error. https://github.com/toonvanstrijp/nestjs-i18n/issues/551
+
+### Getting Started
+
+The <%= projectName %> API endpoints.
+
+### How to setup environment?
+
+1. Clone this repository.
+
+2. Change directory to the repository.
+
+3. Install package dependencies.
+   ```
+   npm install
+   ```
+
+### How to run unit-test?
+
+1. Write test cases in a `*.test.ts` file under the same folder with the actual module file. For example, module file `src/app-service.ts`, unit-test file `src/app-service.test.ts`.
+
+2. Run unit-test command.
+
+   - To run single module unit-test.
+
+     ```
+     npm run test-this src/app-service.test.ts
+     ```
+
+   - To run all unit-test.
+     ```
+     npm run test
+     ```
+
+### How to debug?
+
+Please use unit-test method for debugging.
+
+1. Set breakpoint on the source code by pressing `F9` key.
+
+2. Run unit-test command with debugging.
+
+   ```
+   npm run debug-this src/app-service.test.ts
+   ```
+
+3. Start debugging by pressing `F5` key.
+
+### How to release version?
+
+Git pipeline will perform unit-test, build container image and push to the container registry.
+
+- Bump a `prerelease` version (E.g. `1.0.0-rc.0`).
+
+  - Write commit message that contain `run-prerelease` keyword to `feature` branch.
+
+- Bump a `release` version (E.g. `1.0.0`).
+
+  - Merge into `default` branch (main/master) with any commit message.
+
+> Note: **Code review** process should be perform before merge into `default` branch or release version.
+
+### Merge into default branch without trigger pipeline
+
+If you want to merge into `default` branch without triggering the pipeline, write commit message that contain `run-without-release`.
+
+chatbot: 0

package/dist/templates/nestjs-api/nest-cli.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://json.schemastore.org/nest-cli",
+  "collection": "@nestjs/schematics",
+  "sourceRoot": "src",
+  "compilerOptions": {
+    "deleteOutDir": true,
+    "assets": [
+      "i18n/**/*"
+    ]
+  }
+}