@open-rlb/nestjs-amqp 2.1.1 → 2.2.1

package/schematics/add-gateway/index.spec.ts

@@ -0,0 +1,163 @@
+import { Rule, SchematicContext, Tree } from '@angular-devkit/schematics';
+import { parseDocument } from 'yaml';
+import { configAndWireRule } from './index';
+import { AddGatewayOptions } from './schema';
+
+/**
+ * Tests target `configAndWireRule` (config.yaml + TS wiring) directly against a Tree. The full `main`
+ * additionally copies in-memory-repo assets via url()/mergeWith, which needs a real engine context —
+ * that path is covered by the end-to-end CLI run, not this unit test.
+ */
+const ctx = { logger: { info() {}, warn() {}, error() {} } } as unknown as SchematicContext;
+
+async function run(options: AddGatewayOptions, tree: Tree): Promise<Tree> {
+  const rule = configAndWireRule(options) as (t: Tree, c: SchematicContext) => Promise<Tree>;
+  return (await rule(tree, ctx)) || tree;
+}
+
+function read(tree: Tree, path = 'config/config.yaml'): string {
+  return tree.read(path)!.toString('utf-8');
+}
+const doc = (tree: Tree) => parseDocument(read(tree));
+const topicNames = (tree: Tree): string[] =>
+  ((doc(tree).getIn(['topics']) as any)?.items || []).map((i: any) => String(i.get('name')));
+const queueNames = (tree: Tree): string[] =>
+  ((doc(tree).getIn(['broker', 'queues']) as any)?.items || []).map((i: any) => String(i.get('name')));
+const pathNames = (tree: Tree): string[] =>
+  ((doc(tree).getIn(['gateway', 'paths']) as any)?.items || []).map((i: any) => String(i.get('name')));
+
+function seedMicroservice(): Tree {
+  const tree = Tree.empty();
+  tree.create(
+    'config/config.yaml',
+    [
+      '# my service',
+      'broker:',
+      '  routeDiscovery:',
+      '    serviceName: "svc"',
+      '    exchange: rlb-route-discovery',
+      '    queue: rlb-route-sync',
+      '  exchanges: []',
+      '  queues: []',
+      'topics: []',
+      '',
+    ].join('\n'),
+  );
+  return tree;
+}
+
+const APP_MODULE = `import { Module } from '@nestjs/common';
+
+@Module({ imports: [] })
+export class AppModule {}
+`;
+const MAIN_TS = `import { NestFactory } from '@nestjs/core';
+import { AppModule } from './app.module';
+
+async function bootstrap() {
+  const app = await NestFactory.create(AppModule);
+  await app.listen(3000);
+}
+bootstrap();
+`;
+
+function seedProject(): Tree {
+  const tree = seedMicroservice();
+  tree.create('src/app.module.ts', APP_MODULE);
+  tree.create('src/main.ts', MAIN_TS);
+  tree.create('package.json', JSON.stringify({ name: 'demo', dependencies: {} }, null, 2));
+  return tree;
+}
+
+describe('add-gateway schematic', () => {
+  describe('config.yaml', () => {
+    it('removes publisher route-discovery and declares the fixed acl/admin/control topics', async () => {
+      const tree = await run({}, seedMicroservice());
+      const d = doc(tree);
+      expect(d.hasIn(['broker', 'routeDiscovery'])).toBe(false);
+      expect(topicNames(tree)).toEqual(expect.arrayContaining(['rlb-acl', 'rlb-gateway-admin', 'rlb-gateway-control']));
+      const byName = (n: string) => (d.getIn(['topics']) as any).items.find((i: any) => String(i.get('name')) === n);
+      expect(String(byName('rlb-gateway-control').get('mode'))).toBe('broadcast');
+      expect(queueNames(tree)).toEqual(expect.arrayContaining(['rlb-acl', 'rlb-gateway-admin', 'rlb-route-sync']));
+      expect(String(d.getIn(['gateway', 'reloadTopic']))).toBe('rlb-gateway-control');
+      expect(read(tree)).toContain('# my service');
+    });
+
+    it('seeds the ACL + admin management routes into gateway.paths', async () => {
+      const tree = await run({}, seedMicroservice());
+      const names = pathNames(tree);
+      expect(names).toEqual(expect.arrayContaining(['acl-check-action', 'acl-grant', 'gw-path-list', 'gw-reload', 'health']));
+    });
+
+    it('does not clobber a pre-existing gateway section', async () => {
+      const tree = seedMicroservice();
+      tree.overwrite(
+        'config/config.yaml',
+        read(tree) + ['gateway:', '  ws:', '    heartbeatIntervalMs: 9999', '  reloadTopic: my-custom-topic', ''].join('\n'),
+      );
+      const d = doc(await run({}, tree));
+      expect(String(d.getIn(['gateway', 'ws', 'heartbeatIntervalMs']))).toBe('9999');
+      expect(String(d.getIn(['gateway', 'reloadTopic']))).toBe('my-custom-topic');
+    });
+
+    it('is idempotent: re-running duplicates neither topics nor management routes', async () => {
+      let tree = await run({}, seedMicroservice());
+      tree = await run({}, tree);
+      expect(topicNames(tree).filter((n) => n === 'rlb-acl')).toHaveLength(1);
+      expect(pathNames(tree).filter((n) => n === 'acl-check-action')).toHaveLength(1);
+    });
+
+    it('respects feature toggles (acl/routeReception off)', async () => {
+      const tree = await run({ acl: false, routeReception: false }, seedMicroservice());
+      expect(topicNames(tree)).not.toContain('rlb-acl');
+      expect(pathNames(tree)).not.toContain('acl-check-action');
+      expect(topicNames(tree)).toContain('rlb-gateway-admin');
+    });
+  });
+
+  describe('TypeScript wiring', () => {
+    it('wires the modules into AppModule and merges the lib import', async () => {
+      const tree = await run({}, seedProject());
+      const mod = tree.read('src/app.module.ts')!.toString('utf-8');
+      expect(mod).toContain('BrokerModule.forRootAsync');
+      expect(mod).toContain('ProxyModule.forRootAsync');
+      expect(mod).toContain('AclModule.forRoot');
+      expect(mod).toContain('GatewayAdminModule.forRoot');
+      expect(mod).toContain('HttpModule');
+      expect(mod).toContain(`from '@open-rlb/nestjs-amqp'`);
+      expect(mod).toContain(`from '@nestjs/config'`);
+      expect(tree.exists('src/config/config.loader.ts')).toBe(true);
+    });
+
+    it('patches main.ts (rawBody + WsAdapter) and package.json deps', async () => {
+      const tree = await run({}, seedProject());
+      const main = tree.read('src/main.ts')!.toString('utf-8');
+      expect(main).toContain('rawBody: true');
+      expect(main).toContain('useWebSocketAdapter(new WsAdapter');
+      const pkg = JSON.parse(tree.read('package.json')!.toString('utf-8'));
+      expect(pkg.dependencies['@nestjs/axios']).toBeDefined();
+      expect(pkg.dependencies['@nestjs/platform-ws']).toBeDefined();
+    });
+
+    it('is idempotent: re-running does not duplicate the module entries', async () => {
+      let tree = await run({}, seedProject());
+      tree = await run({}, tree);
+      const mod = tree.read('src/app.module.ts')!.toString('utf-8');
+      expect(mod.match(/ProxyModule\.forRootAsync/g)).toHaveLength(1);
+      expect(mod.match(/BrokerModule\.forRootAsync/g)).toHaveLength(1);
+      expect(mod.match(/AclModule\.forRoot/g)).toHaveLength(1);
+    });
+
+    it('merges into an existing lib import without duplicating it', async () => {
+      const tree = seedProject();
+      tree.overwrite(
+        'src/app.module.ts',
+        `import { Module } from '@nestjs/common';\nimport { BrokerModule } from '@open-rlb/nestjs-amqp';\n\n@Module({ imports: [] })\nexport class AppModule {}\n`,
+      );
+      const mod = (await run({}, tree)).read('src/app.module.ts')!.toString('utf-8');
+      expect(mod.match(/from '@open-rlb\/nestjs-amqp'/g)).toHaveLength(1);
+      expect(mod).toContain('ProxyModule');
+      expect(mod).toContain('AclModule');
+    });
+  });
+});

package/schematics/add-gateway/index.ts

@@ -0,0 +1,141 @@
+import { apply, chain, MergeStrategy, mergeWith, move, noop, Rule, SchematicContext, Tree, url } from '@angular-devkit/schematics';
+import { normalize } from 'path';
+import { ensureExchange, ensureQueue, ensureTopic } from '../utils/broker-yaml.util';
+import { addDeps, configureMainForGateway, createConfigLoader, wireAppModule } from '../utils/nest-wiring.util';
+import { findConfigYaml, readConfigDoc, setIn, upsertSeqItemByKey, writeConfigDoc } from '../utils/yaml-config.util';
+import { aclManagementPaths, adminManagementPaths } from './paths';
+import { AddGatewayOptions } from './schema';
+import { GwFeatures, importLines, libSymbols, moduleEntries } from './wiring';
+
+/**
+ * `add-gateway` — promote a plain microservice into a working gateway. It edits config.yaml (drop
+ * publisher route-discovery; declare the acl/admin/control + route-sync infra; seed the `gateway:`
+ * section AND its management routes) AND wires the app: AppModule (Broker/Proxy/Http/Acl/GatewayAdmin
+ * modules), main.ts (rawBody + WsAdapter), the config loader, in-memory repositories, and package.json
+ * deps. Every step is idempotent, so re-running (or running on an already-partly-wired app) is safe.
+ */
+export function main(options: AddGatewayOptions): Rule {
+  const r = resolveFlags(options);
+  return chain([
+    // Config edits + TypeScript wiring (directly unit-testable — no engine/url source needed).
+    configAndWireRule(options),
+    // In-memory starter repositories referenced by the wiring (Overwrite = idempotent re-copy).
+    copyAsset('db-core'),
+    r.acl ? copyAsset('acl') : noop(),
+    r.anyAdmin ? copyAsset('gateway-admin') : noop(),
+  ]);
+}
+
+interface Resolved {
+  exchange: string;
+  aclQueue: string;
+  adminQueue: string;
+  controlTopic: string;
+  routeExchange: string;
+  routeQueue: string;
+  acl: boolean;
+  admin: boolean;
+  routeReception: boolean;
+  anyAdmin: boolean;
+  features: GwFeatures;
+}
+
+function resolveFlags(options: AddGatewayOptions): Resolved {
+  const exchange = options.exchange || 'rlb';
+  const aclQueue = options.aclQueue || 'rlb-acl';
+  const adminQueue = options.adminQueue || 'rlb-gateway-admin';
+  const controlTopic = options.controlTopic || 'rlb-gateway-control';
+  const routeExchange = options.routeExchange || 'rlb-route-discovery';
+  const routeQueue = options.routeQueue || 'rlb-route-sync';
+  const acl = options.acl ?? true;
+  const admin = options.admin ?? true;
+  const routeReception = options.routeReception ?? true;
+  const anyAdmin = admin || routeReception;
+  const features: GwFeatures = { acl, admin, routeReception, routeExchange, routeQueue };
+  return { exchange, aclQueue, adminQueue, controlTopic, routeExchange, routeQueue, acl, admin, routeReception, anyAdmin, features };
+}
+
+/** The config.yaml edits + config-loader/AppModule/main.ts/package.json wiring — everything except the
+ *  url()-based asset copy, so it can be invoked directly against a Tree in unit tests. */
+export function configAndWireRule(options: AddGatewayOptions): Rule {
+  return (tree: Tree, context: SchematicContext) => {
+    const r = resolveFlags(options);
+    const opts = { overwrite: options.overwrite };
+    const configPath = findConfigYaml(tree, options.config);
+    const { doc, existed } = readConfigDoc(tree, configPath);
+    if (!existed) context.logger.info(`[rlb-amqp] ${configPath} not found — creating it.`);
+
+    // 1. A gateway consumes routes, it does not publish its own → drop publisher route-discovery.
+    if (doc.hasIn(['broker', 'routeDiscovery'])) {
+      doc.deleteIn(['broker', 'routeDiscovery']);
+      context.logger.info('[rlb-amqp] removed broker.routeDiscovery (a gateway consumes routes, it does not publish its own).');
+    }
+
+    // 2. Main exchange backing the acl/admin queues.
+    ensureExchange(doc, { name: r.exchange, type: 'direct' }, opts);
+
+    // 3. ACL infra — topic name is FIXED 'rlb-acl' (decorator-bound in the lib).
+    if (r.acl) {
+      ensureQueue(doc, { name: r.aclQueue, exchange: r.exchange, routingKey: r.aclQueue, durable: true }, opts);
+      ensureTopic(doc, { name: 'rlb-acl', mode: 'rpc', queue: r.aclQueue, exchange: r.exchange, routingKey: r.aclQueue }, opts);
+    }
+
+    // 4. Gateway-admin infra — 'rlb-gateway-admin' is decorator-bound; controlTopic is a broadcast.
+    if (r.anyAdmin) {
+      ensureQueue(doc, { name: r.adminQueue, exchange: r.exchange, routingKey: r.adminQueue, durable: true }, opts);
+      ensureTopic(doc, { name: 'rlb-gateway-admin', mode: 'rpc', queue: r.adminQueue, exchange: r.exchange, routingKey: r.adminQueue }, opts);
+      ensureTopic(doc, { name: r.controlTopic, mode: 'broadcast', exchange: r.exchange, routingKey: r.controlTopic }, opts);
+    }
+
+    // 5. Consumer-side route-sync infra (fanout exchange + durable sync queue).
+    if (r.routeReception) {
+      ensureExchange(doc, { name: r.routeExchange, type: 'fanout' }, opts);
+      ensureQueue(doc, { name: r.routeQueue, exchange: r.routeExchange, durable: true }, opts);
+    }
+
+    // 6. gateway: section — set each key ONLY if absent, so user edits are never clobbered.
+    if (!doc.hasIn(['gateway', 'events'])) setIn(doc, ['gateway', 'events'], []);
+    if (!doc.hasIn(['gateway', 'ws'])) setIn(doc, ['gateway', 'ws'], { heartbeatIntervalMs: 30000 });
+    if (r.anyAdmin) {
+      if (!doc.hasIn(['gateway', 'reloadTopic'])) setIn(doc, ['gateway', 'reloadTopic'], r.controlTopic);
+      if (!doc.hasIn(['gateway', 'metrics'])) setIn(doc, ['gateway', 'metrics'], { topic: 'rlb-gateway-admin', action: 'gw-metrics-track' });
+      if (!doc.hasIn(['gateway', 'loadConfig'])) setIn(doc, ['gateway', 'loadConfig'], { paths: { topic: 'rlb-gateway-admin', action: 'gw-path-export' } });
+    }
+
+    // 7. Management routes so the wired ACL / gateway-admin modules are reachable over HTTP.
+    if (!doc.hasIn(['gateway', 'paths'])) setIn(doc, ['gateway', 'paths'], []);
+    const paths = [...(r.acl ? aclManagementPaths() : []), ...(r.anyAdmin ? adminManagementPaths(r.controlTopic) : [])];
+    for (const p of paths) upsertSeqItemByKey(doc, ['gateway', 'paths'], 'name', p as unknown as Record<string, unknown>, opts);
+
+    writeConfigDoc(tree, configPath, doc);
+
+    // 8. TypeScript wiring: config loader, AppModule modules, main.ts, package.json deps.
+    createConfigLoader(tree);
+    const modulePath = wireAppModule(tree, {
+      libSymbols: libSymbols(r.features),
+      importLines: importLines(r.features),
+      entries: moduleEntries(r.features),
+    });
+    if (!modulePath) {
+      context.logger.warn('[rlb-amqp] app.module.ts not found — module wiring skipped. Wire Broker/Proxy/Http' + (r.acl ? '/Acl' : '') + (r.anyAdmin ? '/GatewayAdmin' : '') + ' modules manually.');
+    }
+    if (!configureMainForGateway(tree)) {
+      context.logger.warn('[rlb-amqp] main.ts not found — enable rawBody + WsAdapter manually.');
+    }
+    addDeps(tree, {
+      '@nestjs/config': '^4.0.4',
+      'js-yaml': '^4.1.0',
+      '@nestjs/axios': '^4.0.1',
+      '@nestjs/platform-ws': '^11.0.1',
+      '@nestjs/websockets': '^11.0.1',
+      ws: '^8.21.0',
+    });
+
+    return tree;
+  };
+}
+
+/** Copy a static in-memory-repository asset tree under ./files/<name> to the project root. */
+function copyAsset(name: string): Rule {
+  return mergeWith(apply(url(`./files/${name}`), [move(normalize('.'))]), MergeStrategy.Overwrite);
+}

package/schematics/add-gateway/paths.d.ts

@@ -0,0 +1,12 @@
+export interface GatewayPath {
+    name: string;
+    method: string;
+    path: string;
+    dataSource: string;
+    topic: string;
+    action: string;
+    mode: string;
+    headers?: Record<string, string>;
+}
+export declare function aclManagementPaths(): GatewayPath[];
+export declare function adminManagementPaths(controlTopic: string): GatewayPath[];

package/schematics/add-gateway/paths.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.aclManagementPaths = aclManagementPaths;
+exports.adminManagementPaths = adminManagementPaths;
+function aclManagementPaths() {
+    const rpc = (name, method, path, dataSource, action) => ({
+        name,
+        method,
+        path,
+        dataSource,
+        topic: 'rlb-acl',
+        action,
+        mode: 'rpc',
+    });
+    return [
+        rpc('acl-action-list', 'GET', '/acl/actions', 'query', 'acl-action-list'),
+        rpc('acl-action-get', 'GET', '/acl/actions/get', 'query', 'acl-action-get'),
+        rpc('acl-action-upsert', 'PUT', '/acl/actions', 'body', 'acl-action-update'),
+        rpc('acl-action-delete', 'DELETE', '/acl/actions', 'body', 'acl-action-delete'),
+        rpc('acl-action-search', 'GET', '/acl/actions/search', 'query', 'acl-action-search'),
+        rpc('acl-role-list', 'GET', '/acl/roles', 'query', 'acl-role-list'),
+        rpc('acl-role-get', 'GET', '/acl/roles/get', 'query', 'acl-role-get'),
+        rpc('acl-role-upsert', 'PUT', '/acl/roles', 'body', 'acl-role-update'),
+        rpc('acl-role-delete', 'DELETE', '/acl/roles', 'body', 'acl-role-delete'),
+        rpc('acl-role-search', 'GET', '/acl/roles/search', 'query', 'acl-role-search'),
+        rpc('acl-grant', 'POST', '/acl/grants', 'body', 'acl-grant'),
+        rpc('acl-revoke', 'DELETE', '/acl/grants', 'body', 'acl-revoke'),
+        rpc('acl-grant-search', 'GET', '/acl/grants/search', 'query', 'acl-grant-search'),
+        rpc('acl-check-action', 'GET', '/acl/check', 'query', 'acl-check-action'),
+        rpc('acl-list-resources-by-user', 'GET', '/acl/resources', 'query', 'acl-list-resources-by-user'),
+    ];
+}
+function adminManagementPaths(controlTopic) {
+    const rpc = (name, method, path, dataSource, action) => ({
+        name,
+        method,
+        path,
+        dataSource,
+        topic: 'rlb-gateway-admin',
+        action,
+        mode: 'rpc',
+    });
+    return [
+        rpc('health', 'GET', '/health', 'query', 'gw-health'),
+        rpc('gw-path-create', 'POST', '/admin/paths', 'body', 'gw-path-create'),
+        rpc('gw-path-list', 'GET', '/admin/paths', 'query', 'gw-path-list'),
+        rpc('gw-path-search', 'GET', '/admin/paths/search', 'query', 'gw-path-search'),
+        rpc('gw-path-export', 'GET', '/admin/paths/export', 'query', 'gw-path-export'),
+        rpc('gw-path-update', 'PUT', '/admin/paths', 'body', 'gw-path-update'),
+        rpc('gw-path-get', 'GET', '/admin/paths/get', 'query', 'gw-path-get'),
+        rpc('gw-path-delete', 'DELETE', '/admin/paths', 'body', 'gw-path-delete'),
+        rpc('gw-route-log-list', 'GET', '/admin/route-log', 'query', 'gw-route-log-list'),
+        rpc('gw-route-log-search', 'GET', '/admin/route-log/search', 'query', 'gw-route-log-search'),
+        rpc('gw-auth-list', 'GET', '/admin/auth', 'query', 'gw-auth-list'),
+        rpc('gw-auth-search', 'GET', '/admin/auth/search', 'query', 'gw-auth-search'),
+        rpc('gw-auth-upsert', 'PUT', '/admin/auth', 'body', 'gw-auth-update'),
+        rpc('gw-auth-get', 'GET', '/admin/auth/get', 'query', 'gw-auth-get'),
+        rpc('gw-auth-delete', 'DELETE', '/admin/auth', 'body', 'gw-auth-delete'),
+        rpc('gw-metrics-get', 'GET', '/admin/metrics', 'query', 'gw-metrics-get'),
+        rpc('gw-metrics-series', 'GET', '/admin/metrics/series', 'query', 'gw-metrics-series'),
+        rpc('gw-metrics-points', 'GET', '/admin/metrics/points', 'query', 'gw-metrics-points'),
+        rpc('gw-metrics-summary', 'GET', '/admin/metrics/summary', 'query', 'gw-metrics-summary'),
+        {
+            name: 'gw-metrics-prometheus',
+            method: 'GET',
+            path: '/admin/metrics/prometheus',
+            dataSource: 'query',
+            topic: 'rlb-gateway-admin',
+            action: 'gw-metrics-prometheus',
+            mode: 'rpc',
+            headers: { 'Content-Type': 'text/plain; version=0.0.4' },
+        },
+        rpc('gw-metrics-rollups', 'GET', '/admin/metrics/rollups', 'query', 'gw-metrics-rollups'),
+        {
+            name: 'gw-metrics-track',
+            method: 'POST',
+            path: '/admin/metrics/track',
+            dataSource: 'body',
+            topic: 'rlb-gateway-admin',
+            action: 'gw-metrics-track',
+            mode: 'event',
+        },
+        { name: 'gw-reload', method: 'POST', path: '/admin/reload', dataSource: 'body', topic: controlTopic, action: 'gw-reload', mode: 'event' },
+        { name: 'gw-auth-reload', method: 'POST', path: '/admin/auth/reload', dataSource: 'body', topic: controlTopic, action: 'gw-auth-reload', mode: 'event' },
+    ];
+}
+//# sourceMappingURL=paths.js.map

package/schematics/add-gateway/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../libs/rlb-nestjs-amqp/src/schematics/add-gateway/paths.ts"],"names":[],"mappings":";;AAmBA,gDA2BC;AAGD,oDAqDC;AAnFD,SAAgB,kBAAkB;IAChC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,IAAY,EAAE,UAAkB,EAAE,MAAc,EAAe,EAAE,CAAC,CAAC;QAC5G,IAAI;QACJ,MAAM;QACN,IAAI;QACJ,UAAU;QACV,KAAK,EAAE,SAAS;QAChB,MAAM;QACN,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,OAAO;QACL,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB,CAAC;QACzE,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,CAAC;QAC3E,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,mBAAmB,CAAC;QAC5E,GAAG,CAAC,mBAAmB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,mBAAmB,CAAC;QAC/E,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,mBAAmB,CAAC;QACpF,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,CAAC;QACnE,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,cAAc,CAAC;QACrE,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,CAAC;QACtE,GAAG,CAAC,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,CAAC;QACzE,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,iBAAiB,CAAC;QAC9E,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC;QAC5D,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC;QAChE,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,kBAAkB,CAAC;QACjF,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,CAAC;QACzE,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,4BAA4B,CAAC;KAClG,CAAC;AACJ,CAAC;AAGD,SAAgB,oBAAoB,CAAC,YAAoB;IACvD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,IAAY,EAAE,UAAkB,EAAE,MAAc,EAAe,EAAE,CAAC,CAAC;QAC5G,IAAI;QACJ,MAAM;QACN,IAAI;QACJ,UAAU;QACV,KAAK,EAAE,mBAAmB;QAC1B,MAAM;QACN,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,OAAO;QACL,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC;QACrD,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,CAAC;QACvE,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,CAAC;QACnE,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,gBAAgB,CAAC;QAC9E,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,gBAAgB,CAAC;QAC9E,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,CAAC;QACtE,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,aAAa,CAAC;QACrE,GAAG,CAAC,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,CAAC;QACzE,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,CAAC;QACjF,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,qBAAqB,CAAC;QAC5F,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,CAAC;QAClE,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,gBAAgB,CAAC;QAC7E,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,CAAC;QACrE,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,aAAa,CAAC;QACpE,GAAG,CAAC,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,CAAC;QACxE,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,CAAC;QACzE,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,mBAAmB,CAAC;QACtF,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,mBAAmB,CAAC;QACtF,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,oBAAoB,CAAC;QACzF;YACE,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,2BAA2B;YACjC,UAAU,EAAE,OAAO;YACnB,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,uBAAuB;YAC/B,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;SACzD;QACD,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,oBAAoB,CAAC;QACzF;YACE,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sBAAsB;YAC5B,UAAU,EAAE,MAAM;YAClB,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,kBAAkB;YAC1B,IAAI,EAAE,OAAO;SACd;QACD,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;QACzI,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;KACzJ,CAAC;AACJ,CAAC"}

package/schematics/add-gateway/paths.ts

@@ -0,0 +1,103 @@
+/**
+ * The management HTTP routes a gateway exposes so the ACL and gateway-admin RPC surfaces are
+ * reachable over HTTP. Seeded into `gateway.paths[]` (idempotent upsert by `name`) so the wired
+ * AclModule / GatewayAdminModule are actually usable — a gateway with the modules but no routes
+ * is inert. Name-keyed resources use PUT-upsert (no POST); `acl-grant`/`acl-revoke` are the exception.
+ */
+
+export interface GatewayPath {
+  name: string;
+  method: string;
+  path: string;
+  dataSource: string;
+  topic: string;
+  action: string;
+  mode: string;
+  headers?: Record<string, string>;
+}
+
+/** ACL management + check routes (topic `rlb-acl`). */
+export function aclManagementPaths(): GatewayPath[] {
+  const rpc = (name: string, method: string, path: string, dataSource: string, action: string): GatewayPath => ({
+    name,
+    method,
+    path,
+    dataSource,
+    topic: 'rlb-acl',
+    action,
+    mode: 'rpc',
+  });
+  return [
+    rpc('acl-action-list', 'GET', '/acl/actions', 'query', 'acl-action-list'),
+    rpc('acl-action-get', 'GET', '/acl/actions/get', 'query', 'acl-action-get'),
+    rpc('acl-action-upsert', 'PUT', '/acl/actions', 'body', 'acl-action-update'),
+    rpc('acl-action-delete', 'DELETE', '/acl/actions', 'body', 'acl-action-delete'),
+    rpc('acl-action-search', 'GET', '/acl/actions/search', 'query', 'acl-action-search'),
+    rpc('acl-role-list', 'GET', '/acl/roles', 'query', 'acl-role-list'),
+    rpc('acl-role-get', 'GET', '/acl/roles/get', 'query', 'acl-role-get'),
+    rpc('acl-role-upsert', 'PUT', '/acl/roles', 'body', 'acl-role-update'),
+    rpc('acl-role-delete', 'DELETE', '/acl/roles', 'body', 'acl-role-delete'),
+    rpc('acl-role-search', 'GET', '/acl/roles/search', 'query', 'acl-role-search'),
+    rpc('acl-grant', 'POST', '/acl/grants', 'body', 'acl-grant'),
+    rpc('acl-revoke', 'DELETE', '/acl/grants', 'body', 'acl-revoke'),
+    rpc('acl-grant-search', 'GET', '/acl/grants/search', 'query', 'acl-grant-search'),
+    rpc('acl-check-action', 'GET', '/acl/check', 'query', 'acl-check-action'),
+    rpc('acl-list-resources-by-user', 'GET', '/acl/resources', 'query', 'acl-list-resources-by-user'),
+  ];
+}
+
+/** Gateway-admin routes (topic `rlb-gateway-admin`; the two reloads publish on `controlTopic`). */
+export function adminManagementPaths(controlTopic: string): GatewayPath[] {
+  const rpc = (name: string, method: string, path: string, dataSource: string, action: string): GatewayPath => ({
+    name,
+    method,
+    path,
+    dataSource,
+    topic: 'rlb-gateway-admin',
+    action,
+    mode: 'rpc',
+  });
+  return [
+    rpc('health', 'GET', '/health', 'query', 'gw-health'),
+    rpc('gw-path-create', 'POST', '/admin/paths', 'body', 'gw-path-create'),
+    rpc('gw-path-list', 'GET', '/admin/paths', 'query', 'gw-path-list'),
+    rpc('gw-path-search', 'GET', '/admin/paths/search', 'query', 'gw-path-search'),
+    rpc('gw-path-export', 'GET', '/admin/paths/export', 'query', 'gw-path-export'),
+    rpc('gw-path-update', 'PUT', '/admin/paths', 'body', 'gw-path-update'),
+    rpc('gw-path-get', 'GET', '/admin/paths/get', 'query', 'gw-path-get'),
+    rpc('gw-path-delete', 'DELETE', '/admin/paths', 'body', 'gw-path-delete'),
+    rpc('gw-route-log-list', 'GET', '/admin/route-log', 'query', 'gw-route-log-list'),
+    rpc('gw-route-log-search', 'GET', '/admin/route-log/search', 'query', 'gw-route-log-search'),
+    rpc('gw-auth-list', 'GET', '/admin/auth', 'query', 'gw-auth-list'),
+    rpc('gw-auth-search', 'GET', '/admin/auth/search', 'query', 'gw-auth-search'),
+    rpc('gw-auth-upsert', 'PUT', '/admin/auth', 'body', 'gw-auth-update'),
+    rpc('gw-auth-get', 'GET', '/admin/auth/get', 'query', 'gw-auth-get'),
+    rpc('gw-auth-delete', 'DELETE', '/admin/auth', 'body', 'gw-auth-delete'),
+    rpc('gw-metrics-get', 'GET', '/admin/metrics', 'query', 'gw-metrics-get'),
+    rpc('gw-metrics-series', 'GET', '/admin/metrics/series', 'query', 'gw-metrics-series'),
+    rpc('gw-metrics-points', 'GET', '/admin/metrics/points', 'query', 'gw-metrics-points'),
+    rpc('gw-metrics-summary', 'GET', '/admin/metrics/summary', 'query', 'gw-metrics-summary'),
+    {
+      name: 'gw-metrics-prometheus',
+      method: 'GET',
+      path: '/admin/metrics/prometheus',
+      dataSource: 'query',
+      topic: 'rlb-gateway-admin',
+      action: 'gw-metrics-prometheus',
+      mode: 'rpc',
+      headers: { 'Content-Type': 'text/plain; version=0.0.4' },
+    },
+    rpc('gw-metrics-rollups', 'GET', '/admin/metrics/rollups', 'query', 'gw-metrics-rollups'),
+    {
+      name: 'gw-metrics-track',
+      method: 'POST',
+      path: '/admin/metrics/track',
+      dataSource: 'body',
+      topic: 'rlb-gateway-admin',
+      action: 'gw-metrics-track',
+      mode: 'event',
+    },
+    { name: 'gw-reload', method: 'POST', path: '/admin/reload', dataSource: 'body', topic: controlTopic, action: 'gw-reload', mode: 'event' },
+    { name: 'gw-auth-reload', method: 'POST', path: '/admin/auth/reload', dataSource: 'body', topic: controlTopic, action: 'gw-auth-reload', mode: 'event' },
+  ];
+}

package/schematics/add-gateway/schema.d.ts

@@ -0,0 +1,13 @@
+export interface AddGatewayOptions {
+    exchange?: string;
+    aclQueue?: string;
+    adminQueue?: string;
+    controlTopic?: string;
+    routeExchange?: string;
+    routeQueue?: string;
+    acl?: boolean;
+    admin?: boolean;
+    routeReception?: boolean;
+    overwrite?: boolean;
+    config?: string;
+}

package/schematics/add-gateway/schema.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=schema.js.map

package/schematics/add-gateway/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../libs/rlb-nestjs-amqp/src/schematics/add-gateway/schema.ts"],"names":[],"mappings":""}

package/schematics/add-gateway/schema.json

@@ -0,0 +1,63 @@
+{
+  "$schema": "http://json-schema.org/schema",
+  "$id": "SchematicsRlbAmqpAddGateway",
+  "title": "Promote a microservice config to a gateway (config.yaml only)",
+  "type": "object",
+  "properties": {
+    "exchange": {
+      "type": "string",
+      "default": "rlb",
+      "description": "Main AMQP exchange backing the acl/admin queues."
+    },
+    "aclQueue": {
+      "type": "string",
+      "default": "rlb-acl",
+      "description": "Queue backing the fixed rlb-acl topic."
+    },
+    "adminQueue": {
+      "type": "string",
+      "default": "rlb-gateway-admin",
+      "description": "Queue backing the fixed rlb-gateway-admin topic."
+    },
+    "controlTopic": {
+      "type": "string",
+      "default": "rlb-gateway-control",
+      "description": "Broadcast control/reload topic name."
+    },
+    "routeExchange": {
+      "type": "string",
+      "default": "rlb-route-discovery",
+      "description": "Route-discovery fanout exchange (consumer side)."
+    },
+    "routeQueue": {
+      "type": "string",
+      "default": "rlb-route-sync",
+      "description": "Route-sync durable queue (consumer side)."
+    },
+    "acl": {
+      "type": "boolean",
+      "default": true,
+      "description": "Include ACL infra (rlb-acl topic/queue)."
+    },
+    "admin": {
+      "type": "boolean",
+      "default": true,
+      "description": "Include gateway-admin infra (rlb-gateway-admin topic/queue + control topic)."
+    },
+    "routeReception": {
+      "type": "boolean",
+      "default": true,
+      "description": "Consume routes auto-published by microservices (route-sync infra)."
+    },
+    "overwrite": {
+      "type": "boolean",
+      "default": false,
+      "description": "Update entries that already exist (default: leave them untouched)."
+    },
+    "config": {
+      "type": "string",
+      "description": "Path to config.yaml (default: auto-detected)."
+    }
+  },
+  "required": []
+}

package/schematics/add-gateway/schema.ts

@@ -0,0 +1,24 @@
+export interface AddGatewayOptions {
+  /** Main AMQP exchange backing the acl/admin queues. Default: 'rlb'. */
+  exchange?: string;
+  /** Queue backing the fixed rlb-acl topic. Default: 'rlb-acl'. */
+  aclQueue?: string;
+  /** Queue backing the fixed rlb-gateway-admin topic. Default: 'rlb-gateway-admin'. */
+  adminQueue?: string;
+  /** Broadcast control/reload topic name. Default: 'rlb-gateway-control'. */
+  controlTopic?: string;
+  /** Route-discovery fanout exchange (consumer side). Default: 'rlb-route-discovery'. */
+  routeExchange?: string;
+  /** Route-sync durable queue (consumer side). Default: 'rlb-route-sync'. */
+  routeQueue?: string;
+  /** Include ACL infra (rlb-acl topic/queue). Default: true. */
+  acl?: boolean;
+  /** Include gateway-admin infra (rlb-gateway-admin topic/queue + control topic). Default: true. */
+  admin?: boolean;
+  /** Consume routes auto-published by microservices (route-sync infra). Default: true. */
+  routeReception?: boolean;
+  /** Update entries that already exist (default: leave them untouched). */
+  overwrite?: boolean;
+  /** Path to config.yaml (default: auto-detected, typically config/config.yaml). */
+  config?: string;
+}

package/schematics/add-gateway/wiring.d.ts

@@ -0,0 +1,14 @@
+import { WireEntry } from '../utils/nest-wiring.util';
+export interface GwFeatures {
+    acl: boolean;
+    admin: boolean;
+    routeReception: boolean;
+    routeExchange: string;
+    routeQueue: string;
+}
+export declare function libSymbols(f: GwFeatures): string[];
+export declare function importLines(f: GwFeatures): {
+    line: string;
+    marker: string;
+}[];
+export declare function moduleEntries(f: GwFeatures): WireEntry[];