@neohm/nestend 1.0.0

package/README.md

@@ -0,0 +1,125 @@
+# @neohm/nestjs-utilities
+
+Reusable NestJS building blocks for SaaS backends: entities, migrations, JWT auth,
+BullMQ queueing, Redis caching, encryption, system properties, document storage
+(S3 / MinIO), logging and monitoring interceptors, and more — all behind one flat import.
+
+```ts
+import {
+  CommonEntity,
+  QueueService,
+  AuthService,
+  DocumentService,
+} from '@neohm/nestjs-utilities';
+```
+
+> Full, verbose reference (every service, method, env variable, and an end-to-end
+> integration guide): see [`documentation.tex`](./documentation.tex).
+
+## Installation
+
+```bash
+yarn add @neohm/nestjs-utilities
+```
+
+Copy [`.env.example`](./.env.example) into your project and fill in real values —
+it documents every env variable the library reads.
+
+## Quick Start
+
+All modules work as **plain class imports** — `.register(options)` is only needed for
+overrides (named data source, custom queue name):
+
+```ts
+import { Module } from '@nestjs/common';
+import { ConfigModule } from '@nestjs/config';
+import { TypeOrmModule } from '@nestjs/typeorm';
+import {
+  CommonModule,
+  SystemPropertyModule,
+  QueueModule,
+  AuthModule,
+  DocumentModule,
+  TenantModule,
+  NotificationModule,
+} from '@neohm/nestjs-utilities';
+
+@Module({
+  imports: [
+    ConfigModule.forRoot({ isGlobal: true }),
+    TypeOrmModule.forRootAsync({
+      /* your datasource */
+    }),
+    CommonModule, // global: encryption, cache, monitoring, audit
+    SystemPropertyModule, // sys_properties get/set + FeatureFlagService
+    QueueModule, // BullMQ queue + worker (BULL_* env vars)
+    AuthModule, // JWT access/refresh auth + API keys
+    DocumentModule, // S3 / MinIO file storage
+    TenantModule, // multi-tenancy context + middleware
+    NotificationModule, // in-app + FCM push notifications
+  ],
+})
+export class AppModule {}
+```
+
+```ts
+// main.ts
+import {
+  GlobalExceptionFilter,
+  LoggingInterceptor,
+  MonitoringInterceptor,
+  MonitoringService,
+} from '@neohm/nestjs-utilities';
+
+const app = await NestFactory.create(AppModule);
+app.useGlobalFilters(new GlobalExceptionFilter());
+app.useGlobalInterceptors(
+  new LoggingInterceptor(), // morgan-style request log
+  new MonitoringInterceptor(app.get(MonitoringService)), // 5xx + slow-request reporting
+);
+```
+
+## Feature Map
+
+| Area              | Key exports                                                                                             | Notes                                                                                                                                           |
+| ----------------- | ------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- |
+| Entities          | `RootEntity`, `CommonEntity`, `UserEntity`, `SystemRoleEntity`, ...                                     | uuid PK, soft deletes, `created_by`, jsonb `attributes`; entity-level `findOneOrNew`, `softDelete`, `hardDelete`, `restore`, `paginate` statics |
+| Migrations        | `CreateSysUsersTable...` (16 files), `MigrationUtility`, `SeederUtility`                                | fluent `this.string()`, `this.numeric()`, `addRecord()` seeding                                                                                 |
+| Queue             | `QueueModule`, `QueueService`, `CommonJob`                                                              | BullMQ; duplicate prevention, failed jobs persisted to `sys_failed_jobs`                                                                        |
+| Auth              | `AuthModule`, `AuthService`, `JwtAuthGuard`, `JwtRefreshGuard`, `@Public()`, `@CurrentUser()`           | access + rotating refresh tokens, Redis JTI blocklist                                                                                           |
+| API keys          | `ApiKeyService`, `ApiKeyGuard`, `@ApiKeyScopes()`                                                       | hashed keys in `sys_api_keys`, scopes, expiry/revocation, `x-api-key` header                                                                    |
+| Multi-tenancy     | `TenantModule`, `TenantEntity`, `TenantCommonEntity`, `TenantContextService`, `TenantContextMiddleware` | AsyncLocalStorage tenant context; resolve by header, slug, or domain                                                                            |
+| Notifications     | `NotificationModule`, `NotificationService`, `FcmPushNotificationService`                               | in-app rows + FCM push (optional `firebase-admin`); device token registry                                                                       |
+| Audit             | `AuditService`                                                                                          | `saveAuditLog(old, new)` with changed-value diffing into `sys_audit_logs`                                                                       |
+| Feature flags     | `FeatureFlagService`                                                                                    | on/off, percentage rollouts, allow lists — stored as `feature.*` system properties                                                              |
+| Cache             | `CacheService`                                                                                          | Redis, TTL objects (`{days, hours, min}`), transparent encryption                                                                               |
+| Encryption        | `EncryptionService`                                                                                     | AES-256-GCM, scrypt-derived keys                                                                                                                |
+| System properties | `SystemPropertyModule`, `SystemPropertyService`                                                         | cached + optionally encrypted key/value settings in `sys_properties`                                                                            |
+| Documents         | `DocumentModule`, `DocumentService`, `S3BucketDocumentService`, `MinioBucketDocumentService`            | `uploadDocument(multerFiles) → links[]`; driver chosen via `DOCUMENT_STORAGE_DRIVER`                                                            |
+| HTTP              | `CommonController`, `GlobalExceptionFilter`, common DTOs                                                | health endpoint base controller, uniform error envelope                                                                                         |
+| Observability     | `LoggingInterceptor`, `MonitoringInterceptor`, `MonitoringService`                                      | Sentry auto-registers when `@sentry/node` + `SENTRY_DSN` present; pluggable `MonitoringAdapter`                                                 |
+| Jobs/Events       | `CommonJob`, `CommonSubscriber`, `CommonDataProcessor`                                                  | dispatch/handle separation, column-change detection, field error collection                                                                     |
+
+## Document Uploads in 10 Lines
+
+```ts
+@Post('attachments')
+@UseInterceptors(FilesInterceptor('files'))
+async upload(@UploadedFiles() files: Express.Multer.File[], @CurrentUser() user: RequestUser) {
+  const fileLinks = await this.documentService.uploadDocument(files, {
+    pathPrefix: 'attachments',
+    persist: true,                 // also records rows in sys_document_details
+    createdBy: user.userId,
+    sourceType: 'ticket',
+    sourceId: ticketUuid,
+  });
+  return { file_links: fileLinks };
+}
+```
+
+Set `DOCUMENT_STORAGE_DRIVER=minio` for a local MinIO bucket (auto-created) or
+`DOCUMENT_STORAGE_DRIVER=s3` for Amazon S3. Switching drivers requires no code change.
+
+## License
+
+MIT

package/dist/app.controller.d.ts

@@ -0,0 +1,7 @@
+import { AppService } from './app.service';
+export declare class AppController {
+    private readonly appService;
+    constructor(appService: AppService);
+    getHello(): string;
+}
+//# sourceMappingURL=app.controller.d.ts.map

package/dist/app.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.controller.d.ts","sourceRoot":"","sources":["../src/app.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,qBACa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAGnD,QAAQ,IAAI,MAAM;CAGnB"}

package/dist/app.controller.js

@@ -0,0 +1,35 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppController = void 0;
+const common_1 = require("@nestjs/common");
+const app_service_1 = require("./app.service");
+let AppController = class AppController {
+    appService;
+    constructor(appService) {
+        this.appService = appService;
+    }
+    getHello() {
+        return this.appService.getHello();
+    }
+};
+exports.AppController = AppController;
+__decorate([
+    (0, common_1.Get)(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", String)
+], AppController.prototype, "getHello", null);
+exports.AppController = AppController = __decorate([
+    (0, common_1.Controller)(),
+    __metadata("design:paramtypes", [app_service_1.AppService])
+], AppController);
+//# sourceMappingURL=app.controller.js.map

package/dist/app.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.controller.js","sourceRoot":"","sources":["../src/app.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAiD;AACjD,+CAA2C;AAGpC,IAAM,aAAa,GAAnB,MAAM,aAAa;IACK;IAA7B,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAGvD,QAAQ;QACN,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;IACpC,CAAC;CACF,CAAA;AAPY,sCAAa;AAIxB;IADC,IAAA,YAAG,GAAE;;;;6CAGL;wBANU,aAAa;IADzB,IAAA,mBAAU,GAAE;qCAE8B,wBAAU;GADxC,aAAa,CAOzB"}

package/dist/app.module.d.ts

@@ -0,0 +1,3 @@
+export declare class AppModule {
+}
+//# sourceMappingURL=app.module.d.ts.map

package/dist/app.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.module.d.ts","sourceRoot":"","sources":["../src/app.module.ts"],"names":[],"mappings":"AAIA,qBAKa,SAAS;CAAG"}

package/dist/app.module.js

@@ -0,0 +1,23 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppModule = void 0;
+const common_1 = require("@nestjs/common");
+const app_controller_1 = require("./app.controller");
+const app_service_1 = require("./app.service");
+let AppModule = class AppModule {
+};
+exports.AppModule = AppModule;
+exports.AppModule = AppModule = __decorate([
+    (0, common_1.Module)({
+        imports: [],
+        controllers: [app_controller_1.AppController],
+        providers: [app_service_1.AppService],
+    })
+], AppModule);
+//# sourceMappingURL=app.module.js.map

package/dist/app.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.module.js","sourceRoot":"","sources":["../src/app.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,qDAAiD;AACjD,+CAA2C;AAOpC,IAAM,SAAS,GAAf,MAAM,SAAS;CAAG,CAAA;AAAZ,8BAAS;oBAAT,SAAS;IALrB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,CAAC,8BAAa,CAAC;QAC5B,SAAS,EAAE,CAAC,wBAAU,CAAC;KACxB,CAAC;GACW,SAAS,CAAG"}

package/dist/app.service.d.ts

@@ -0,0 +1,4 @@
+export declare class AppService {
+    getHello(): string;
+}
+//# sourceMappingURL=app.service.d.ts.map

package/dist/app.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.service.d.ts","sourceRoot":"","sources":["../src/app.service.ts"],"names":[],"mappings":"AAEA,qBACa,UAAU;IACrB,QAAQ,IAAI,MAAM;CAGnB"}

package/dist/app.service.js

@@ -0,0 +1,20 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppService = void 0;
+const common_1 = require("@nestjs/common");
+let AppService = class AppService {
+    getHello() {
+        return 'Hello World!';
+    }
+};
+exports.AppService = AppService;
+exports.AppService = AppService = __decorate([
+    (0, common_1.Injectable)()
+], AppService);
+//# sourceMappingURL=app.service.js.map

package/dist/app.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.service.js","sourceRoot":"","sources":["../src/app.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAGrC,IAAM,UAAU,GAAhB,MAAM,UAAU;IACrB,QAAQ;QACN,OAAO,cAAc,CAAC;IACxB,CAAC;CACF,CAAA;AAJY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;GACA,UAAU,CAItB"}

package/dist/auth/auth.module.d.ts

@@ -0,0 +1,8 @@
+import { DynamicModule } from '@nestjs/common';
+export interface AuthModuleOptions {
+    dataSourceName?: string;
+}
+export declare class AuthModule {
+    static register(options?: AuthModuleOptions): DynamicModule;
+}
+//# sourceMappingURL=auth.module.d.ts.map

package/dist/auth/auth.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.module.d.ts","sourceRoot":"","sources":["../../src/auth/auth.module.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAId,MAAM,gBAAgB,CAAC;AAaxB,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AA0DD,qBAKa,UAAU;IACrB,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAE,iBAAsB,GAAG,aAAa;CAQhE"}

package/dist/auth/auth.module.js

@@ -0,0 +1,86 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var AuthModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthModule = void 0;
+const common_1 = require("@nestjs/common");
+const jwt_1 = require("@nestjs/jwt");
+const passport_1 = require("@nestjs/passport");
+const typeorm_1 = require("@nestjs/typeorm");
+const common_module_1 = require("../common/common.module");
+const cache_service_1 = require("../common/services/cache.service");
+const es6_classes_1 = __importDefault(require("./es6.classes"));
+const [AuthService, ApiKeyService] = es6_classes_1.default.services;
+const [JwtStrategy, JwtRefreshStrategy] = es6_classes_1.default.strategy;
+const [JwtAuthGuard, JwtRefreshGuard, ApiKeyGuard] = es6_classes_1.default.guards;
+function createAuthImports() {
+    return [
+        common_module_1.CommonModule,
+        passport_1.PassportModule.register({ defaultStrategy: 'jwt' }),
+        jwt_1.JwtModule.registerAsync({
+            useFactory: () => ({
+                secret: process.env.ACCESS_TOKEN_SECRET,
+                signOptions: { expiresIn: process.env.ACCESS_TOKEN_EXPIRY },
+            }),
+        }),
+    ];
+}
+function createAuthProviders(options = {}) {
+    return [
+        {
+            provide: AuthService,
+            useFactory: (jwtService, cacheService, dataSource) => new AuthService(jwtService, cacheService, dataSource),
+            inject: [
+                jwt_1.JwtService,
+                cache_service_1.CacheService,
+                (0, typeorm_1.getDataSourceToken)(options.dataSourceName),
+            ],
+        },
+        {
+            provide: ApiKeyService,
+            useFactory: (dataSource) => new ApiKeyService(dataSource),
+            inject: [(0, typeorm_1.getDataSourceToken)(options.dataSourceName)],
+        },
+        JwtStrategy,
+        JwtRefreshStrategy,
+        JwtAuthGuard,
+        JwtRefreshGuard,
+        ApiKeyGuard,
+    ];
+}
+const authExports = [
+    AuthService,
+    ApiKeyService,
+    JwtAuthGuard,
+    JwtRefreshGuard,
+    ApiKeyGuard,
+    jwt_1.JwtModule,
+    passport_1.PassportModule,
+];
+let AuthModule = AuthModule_1 = class AuthModule {
+    static register(options = {}) {
+        return {
+            module: AuthModule_1,
+            imports: createAuthImports(),
+            providers: createAuthProviders(options),
+            exports: authExports,
+        };
+    }
+};
+exports.AuthModule = AuthModule;
+exports.AuthModule = AuthModule = AuthModule_1 = __decorate([
+    (0, common_1.Module)({
+        imports: createAuthImports(),
+        providers: createAuthProviders(),
+        exports: authExports,
+    })
+], AuthModule);
+//# sourceMappingURL=auth.module.js.map

package/dist/auth/auth.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../src/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAKwB;AACxB,qCAAoD;AACpD,+CAAkD;AAClD,6CAAqD;AAErD,2DAAuD;AACvD,oEAAgE;AAChE,gEAAuC;AAEvC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,GAAG,qBAAU,CAAC,QAAQ,CAAC;AACzD,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,GAAG,qBAAU,CAAC,QAAQ,CAAC;AAC9D,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,WAAW,CAAC,GAAG,qBAAU,CAAC,MAAM,CAAC;AAMvE,SAAS,iBAAiB;IACxB,OAAO;QACL,4BAAY;QACZ,yBAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QAEnD,eAAS,CAAC,aAAa,CAAC;YACtB,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;gBACjB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;gBACvC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAA0B,EAAE;aACnE,CAAC;SACH,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,UAA6B,EAAE;IAC1D,OAAO;QACL;YACE,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,CACV,UAAsB,EACtB,YAA0B,EAC1B,UAAsB,EACtB,EAAE,CAAC,IAAI,WAAW,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC;YAC1D,MAAM,EAAE;gBACN,gBAAU;gBACV,4BAAY;gBACZ,IAAA,4BAAkB,EAAC,OAAO,CAAC,cAAc,CAAC;aAC3C;SACF;QACD;YACE,OAAO,EAAE,aAAa;YACtB,UAAU,EAAE,CAAC,UAAsB,EAAE,EAAE,CAAC,IAAI,aAAa,CAAC,UAAU,CAAC;YACrE,MAAM,EAAE,CAAC,IAAA,4BAAkB,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC;SACrD;QACD,WAAW;QACX,kBAAkB;QAClB,YAAY;QACZ,eAAe;QACf,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG;IAClB,WAAW;IACX,aAAa;IACb,YAAY;IACZ,eAAe;IACf,WAAW;IACX,eAAS;IACT,yBAAc;CACf,CAAC;AAWK,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB,MAAM,CAAC,QAAQ,CAAC,UAA6B,EAAE;QAC7C,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,OAAO,EAAE,iBAAiB,EAAE;YAC5B,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC;YACvC,OAAO,EAAE,WAAW;SACrB,CAAC;IACJ,CAAC;CACF,CAAA;AATY,gCAAU;qBAAV,UAAU;IALtB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,iBAAiB,EAAE;QAC5B,SAAS,EAAE,mBAAmB,EAAE;QAChC,OAAO,EAAE,WAAW;KACrB,CAAC;GACW,UAAU,CAStB"}

package/dist/auth/decorators/api.key.scopes.decorator.d.ts

@@ -0,0 +1,3 @@
+export declare const API_KEY_SCOPES_KEY = "api_key_scopes";
+export declare const ApiKeyScopes: (...scopes: string[]) => import("@nestjs/common").CustomDecorator<string>;
+//# sourceMappingURL=api.key.scopes.decorator.d.ts.map

package/dist/auth/decorators/api.key.scopes.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.key.scopes.decorator.d.ts","sourceRoot":"","sources":["../../../src/auth/decorators/api.key.scopes.decorator.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AAQnD,eAAO,MAAM,YAAY,GAAI,GAAG,QAAQ,MAAM,EAAE,qDACP,CAAC"}

package/dist/auth/decorators/api.key.scopes.decorator.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyScopes = exports.API_KEY_SCOPES_KEY = void 0;
+const common_1 = require("@nestjs/common");
+exports.API_KEY_SCOPES_KEY = 'api_key_scopes';
+const ApiKeyScopes = (...scopes) => (0, common_1.SetMetadata)(exports.API_KEY_SCOPES_KEY, scopes);
+exports.ApiKeyScopes = ApiKeyScopes;
+//# sourceMappingURL=api.key.scopes.decorator.js.map

package/dist/auth/decorators/api.key.scopes.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.key.scopes.decorator.js","sourceRoot":"","sources":["../../../src/auth/decorators/api.key.scopes.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAEhC,QAAA,kBAAkB,GAAG,gBAAgB,CAAC;AAQ5C,MAAM,YAAY,GAAG,CAAC,GAAG,MAAgB,EAAE,EAAE,CAClD,IAAA,oBAAW,EAAC,0BAAkB,EAAE,MAAM,CAAC,CAAC;AAD7B,QAAA,YAAY,gBACiB"}

package/dist/auth/decorators/current.user.decorator.d.ts

@@ -0,0 +1,2 @@
+export declare const CurrentUser: (...dataOrPipes: unknown[]) => ParameterDecorator;
+//# sourceMappingURL=current.user.decorator.d.ts.map

package/dist/auth/decorators/current.user.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"current.user.decorator.d.ts","sourceRoot":"","sources":["../../../src/auth/decorators/current.user.decorator.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW,mDAOvB,CAAC"}

package/dist/auth/decorators/current.user.decorator.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CurrentUser = void 0;
+const common_1 = require("@nestjs/common");
+exports.CurrentUser = (0, common_1.createParamDecorator)((_data, ctx) => {
+    const request = ctx
+        .switchToHttp()
+        .getRequest();
+    return request.user;
+});
+//# sourceMappingURL=current.user.decorator.js.map

package/dist/auth/decorators/current.user.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current.user.decorator.js","sourceRoot":"","sources":["../../../src/auth/decorators/current.user.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAAwE;AAI3D,QAAA,WAAW,GAAG,IAAA,6BAAoB,EAC7C,CAAC,KAAc,EAAE,GAAqB,EAAe,EAAE;IACrD,MAAM,OAAO,GAAG,GAAG;SAChB,YAAY,EAAE;SACd,UAAU,EAAmC,CAAC;IACjD,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC,CACF,CAAC"}

package/dist/auth/decorators/public.decorator.d.ts

@@ -0,0 +1,3 @@
+export declare const IS_PUBLIC_KEY = "isPublic";
+export declare const Public: () => import("@nestjs/common").CustomDecorator<string>;
+//# sourceMappingURL=public.decorator.d.ts.map

package/dist/auth/decorators/public.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.decorator.d.ts","sourceRoot":"","sources":["../../../src/auth/decorators/public.decorator.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,aAAa,aAAa,CAAC;AACxC,eAAO,MAAM,MAAM,wDAAyC,CAAC"}

package/dist/auth/decorators/public.decorator.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Public = exports.IS_PUBLIC_KEY = void 0;
+const common_1 = require("@nestjs/common");
+exports.IS_PUBLIC_KEY = 'isPublic';
+const Public = () => (0, common_1.SetMetadata)(exports.IS_PUBLIC_KEY, true);
+exports.Public = Public;
+//# sourceMappingURL=public.decorator.js.map

package/dist/auth/decorators/public.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.decorator.js","sourceRoot":"","sources":["../../../src/auth/decorators/public.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAEhC,QAAA,aAAa,GAAG,UAAU,CAAC;AACjC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,qBAAa,EAAE,IAAI,CAAC,CAAC;AAAhD,QAAA,MAAM,UAA0C"}

package/dist/auth/entities/api.key.entity.d.ts

@@ -0,0 +1,12 @@
+import { CommonEntity } from '../../common/entities/common.entity';
+export declare class ApiKeyEntity extends CommonEntity {
+    is_active: boolean;
+    name: string;
+    key_prefix: string;
+    key_hash: string;
+    scopes: string[];
+    expires_at: Date;
+    revoked_at: Date;
+    last_used_at: Date;
+}
+//# sourceMappingURL=api.key.entity.d.ts.map

package/dist/auth/entities/api.key.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.key.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/api.key.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAEnE,qBACa,YAAa,SAAQ,YAAY;IAE5C,SAAS,EAAE,OAAO,CAAC;IAGnB,IAAI,EAAE,MAAM,CAAC;IAIb,UAAU,EAAE,MAAM,CAAC;IAInB,QAAQ,EAAE,MAAM,CAAC;IAIjB,MAAM,EAAE,MAAM,EAAE,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,YAAY,EAAE,IAAI,CAAC;CACpB"}

package/dist/auth/entities/api.key.entity.js

@@ -0,0 +1,61 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyEntity = void 0;
+const typeorm_1 = require("typeorm");
+const common_entity_1 = require("../../common/entities/common.entity");
+let ApiKeyEntity = class ApiKeyEntity extends common_entity_1.CommonEntity {
+    is_active;
+    name;
+    key_prefix;
+    key_hash;
+    scopes;
+    expires_at;
+    revoked_at;
+    last_used_at;
+};
+exports.ApiKeyEntity = ApiKeyEntity;
+__decorate([
+    (0, typeorm_1.Column)({ type: 'boolean', default: true }),
+    __metadata("design:type", Boolean)
+], ApiKeyEntity.prototype, "is_active", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'varchar' }),
+    __metadata("design:type", String)
+], ApiKeyEntity.prototype, "name", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'varchar' }),
+    __metadata("design:type", String)
+], ApiKeyEntity.prototype, "key_prefix", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'varchar', unique: true }),
+    __metadata("design:type", String)
+], ApiKeyEntity.prototype, "key_hash", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'jsonb' }),
+    __metadata("design:type", Array)
+], ApiKeyEntity.prototype, "scopes", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], ApiKeyEntity.prototype, "expires_at", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], ApiKeyEntity.prototype, "revoked_at", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], ApiKeyEntity.prototype, "last_used_at", void 0);
+exports.ApiKeyEntity = ApiKeyEntity = __decorate([
+    (0, typeorm_1.Entity)({ name: 'sys_api_keys' })
+], ApiKeyEntity);
+//# sourceMappingURL=api.key.entity.js.map

package/dist/auth/entities/api.key.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.key.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/api.key.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAyC;AACzC,uEAAmE;AAG5D,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,4BAAY;IAE5C,SAAS,CAAU;IAGnB,IAAI,CAAS;IAIb,UAAU,CAAS;IAInB,QAAQ,CAAS;IAIjB,MAAM,CAAW;IAGjB,UAAU,CAAO;IAGjB,UAAU,CAAO;IAGjB,YAAY,CAAO;CACpB,CAAA;AA3BY,oCAAY;AAEvB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;+CACxB;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;0CACf;AAIb;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;gDACT;AAInB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;;8CACzB;AAIjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;4CACT;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;gDAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;gDAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAClB,IAAI;kDAAC;uBA1BR,YAAY;IADxB,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;GACpB,YAAY,CA2BxB"}

package/dist/auth/entities/system.refresh.token.entity.d.ts

@@ -0,0 +1,10 @@
+import { CommonEntity } from '../../common/entities/common.entity';
+export declare class SystemRefreshTokenEntity extends CommonEntity {
+    user_id: string;
+    token_hash: string;
+    ip_address: string;
+    user_agent: string;
+    expires_at: Date;
+    revoked_at: Date;
+}
+//# sourceMappingURL=system.refresh.token.entity.d.ts.map

package/dist/auth/entities/system.refresh.token.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.refresh.token.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/system.refresh.token.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAEnE,qBACa,wBAAyB,SAAQ,YAAY;IAExD,OAAO,EAAE,MAAM,CAAC;IAGhB,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;CAClB"}

package/dist/auth/entities/system.refresh.token.entity.js

@@ -0,0 +1,51 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SystemRefreshTokenEntity = void 0;
+const typeorm_1 = require("typeorm");
+const common_entity_1 = require("../../common/entities/common.entity");
+let SystemRefreshTokenEntity = class SystemRefreshTokenEntity extends common_entity_1.CommonEntity {
+    user_id;
+    token_hash;
+    ip_address;
+    user_agent;
+    expires_at;
+    revoked_at;
+};
+exports.SystemRefreshTokenEntity = SystemRefreshTokenEntity;
+__decorate([
+    (0, typeorm_1.Column)({ type: 'uuid' }),
+    __metadata("design:type", String)
+], SystemRefreshTokenEntity.prototype, "user_id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'varchar' }),
+    __metadata("design:type", String)
+], SystemRefreshTokenEntity.prototype, "token_hash", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'varchar' }),
+    __metadata("design:type", String)
+], SystemRefreshTokenEntity.prototype, "ip_address", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], SystemRefreshTokenEntity.prototype, "user_agent", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], SystemRefreshTokenEntity.prototype, "expires_at", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'timestamptz' }),
+    __metadata("design:type", Date)
+], SystemRefreshTokenEntity.prototype, "revoked_at", void 0);
+exports.SystemRefreshTokenEntity = SystemRefreshTokenEntity = __decorate([
+    (0, typeorm_1.Entity)({ name: 'sys_refresh_tokens' })
+], SystemRefreshTokenEntity);
+//# sourceMappingURL=system.refresh.token.entity.js.map

package/dist/auth/entities/system.refresh.token.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.refresh.token.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/system.refresh.token.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAyC;AACzC,uEAAmE;AAG5D,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,4BAAY;IAExD,OAAO,CAAS;IAGhB,UAAU,CAAS;IAGnB,UAAU,CAAS;IAGnB,UAAU,CAAS;IAGnB,UAAU,CAAO;IAGjB,UAAU,CAAO;CAClB,CAAA;AAlBY,4DAAwB;AAEnC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;yDACT;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;4DACT;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;4DACT;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;4DACN;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;4DAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BACpB,IAAI;4DAAC;mCAjBN,wBAAwB;IADpC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;GAC1B,wBAAwB,CAkBpC"}

package/dist/auth/entities/system.role.entity.d.ts

@@ -0,0 +1,11 @@
+import { CommonEntity } from '../../common/entities/common.entity';
+import { UserRoleEntity } from './user.role.entity';
+export declare class SystemRoleEntity extends CommonEntity {
+    is_active: boolean;
+    is_system: boolean;
+    name: string;
+    display_name: string;
+    description: string;
+    userRoles: UserRoleEntity[];
+}
+//# sourceMappingURL=system.role.entity.d.ts.map

package/dist/auth/entities/system.role.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.role.entity.d.ts","sourceRoot":"","sources":["../../../src/auth/entities/system.role.entity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,qBACa,gBAAiB,SAAQ,YAAY;IAEhD,SAAS,EAAE,OAAO,CAAC;IAGnB,SAAS,EAAE,OAAO,CAAC;IAGnB,IAAI,EAAE,MAAM,CAAC;IAGb,YAAY,EAAE,MAAM,CAAC;IAGrB,WAAW,EAAE,MAAM,CAAC;IAIpB,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B"}