@quan-erp/shared-backend-core 2.0.1 → 2.0.3

package/dist/types/0d45f5fd/da7f739f/06cc432b/b16083fb.d.ts

@@ -1,4 +1,4 @@
-import { AIModelService, AIOptions, OnToolCallCallback } from "../../../6610c73e/8d155135.js";
+import { AIModelService, AIOptions, OnToolCallCallback } from "../../../6610c73e/bb890bcf.js";
 import { ExecutionContext } from "../597ef69e.js";
 import { IWorkflowNode, NodeResultType, PromisableReturn, SchemaToType, WorkflowNodeDefination } from "../a588a26e.js";
 declare const inputSchema: {

package/dist/types/0d45f5fd/da7f739f/06cc432b/d1eb6a2a.d.ts

@@ -1,5 +1,5 @@
 import { AIMemoryService } from "../../../6610c73e/87f29211/00282ba1/da49a2f9.js";
-import { AIModelService, AIToolsService } from "../../../6610c73e/8d155135.js";
+import { AIModelService, AIToolsService } from "../../../6610c73e/bb890bcf.js";
 import { WorkflowService } from "../../../6610c73e/da7f739f/e016487a.js";
 import { Loggable } from "../../4dd6b41d.js";
 import { IWorkflowNode, NodeResultType, PropsType, PromisableReturn, SchemaToType, WorkflowNodeDefination } from "../a588a26e.js";

package/dist/types/2ad56231/7f9ba364/e4ec6555.d.ts

@@ -4,7 +4,7 @@ import { ChangeLogDto, ChangeLogReactionDto } from "./09265e63.js";
 import { ChangeLogEntity, ChangeLogReactionsEntity } from "../../2cc49785/5442f571.js";
 import { ICache } from "../../0d45f5fd/8a1d0c4e.js";
 import { NotificationService } from "../1242ab99/21beedc5.js";
-import { UserService } from "../../6610c73e/04f8996d/c028e6f2.js";
+import { UserService } from "../../6610c73e/04f8996d/7c199baa.js";
 export declare class ChangeLogService {
     datasource: DataSource;
     cache: ICache;

package/dist/types/2ad56231/83b99aea/{14bdfadf.d.ts → 7c821af7.d.ts}

@@ -6,5 +6,5 @@ import { RequestedUser } from "../../0d45f5fd/4b41f653.js";
 export declare class LocationTrackingController {
     service: LocationTrackingService;
     locationUpdate(req: ExpressRequest, user: RequestedUser, body: RequestDto<LocationTrackingDTO>): Promise<ResponseDto<null>>;
-    get(id: number): Promise<ResponseDto<import("../../index.js").LocationTrackingEntity[] | null>>;
+    get(id: number, user: RequestedUser): Promise<ResponseDto<import("../../index.js").LocationTrackingEntity[] | null>>;
 }

package/dist/types/2ad56231/9ab6b92e.d.ts

@@ -7,12 +7,12 @@ import { DataSeedHistoryService } from "../6610c73e/6e1815de/1ec1270e.js";
 import { DeveloperConfigService } from "./01dcea55/e9fabd43.js";
 import { ConcurrentTableLockService } from "../6610c73e/82de49c1/a1399ef0.js";
 import { EnvService } from "../6610c73e/b77349bf/6d87f127.js";
-import { UserService } from "../6610c73e/04f8996d/c028e6f2.js";
-import { PluginService } from "../6610c73e/5e689e2b/2cfeccf9.js";
+import { UserService } from "../6610c73e/04f8996d/7c199baa.js";
+import { PluginService } from "../6610c73e/5e689e2b/e99b96ff.js";
 import { RoleService } from "../6610c73e/4b168d88/413ef4e3.js";
 import { PermissionService } from "../6610c73e/fdeb3389/16152e20.js";
 import { DataSource } from "typeorm";
-import { BranchService } from "../6610c73e/8d155135.js";
+import { BranchService } from "../6610c73e/bb890bcf.js";
 export declare const BUILTIN_MODULE: string;
 export declare class BuiltinModules {
     permissionService: PermissionService;

package/dist/types/2ad56231/e6eaea18/66d737cb.d.ts

@@ -1,5 +1,5 @@
 import { DataSource } from "typeorm";
-import { CountryEntity, DivisionEntity, StateEntity, TownshipEntity } from "../../2cc49785/1e6b9ea7.js";
+import { CountryEntity, DivisionEntity, StateEntity, TownshipEntity } from "../../2cc49785/03838cd8.js";
 import { Pagination } from "../../9477dda6/6e82db8c.js";
 export declare class LocationService {
     dataSource: DataSource;

package/dist/types/2cc49785/{1e6b9ea7.d.ts → 03838cd8.d.ts}

@@ -4,10 +4,9 @@ export * from "./935e0dc6.js";
 export * from "./35b9365a.js";
 export * from "./28d3b103.js";
 export * from "./56873654.js";
-export * from "./048ca935.js";
-export * from "../871f3f39/2bfe94e3.js";
-export * from "./46f89c68.js";
-export * from "../871f3f39/fd939073.js";
+export * from "../871f3f39/04928915.js";
+export * from "../871f3f39/32a49bde.js";
+export * from "../871f3f39/f4278326.js";
 export * from "./1a4ff9f0.js";
 export * from "./265711a1.js";
 export * from "./e8dcc4f1.js";

package/dist/types/2cc49785/2a1b2f6a.d.ts

@@ -1,7 +1,7 @@
 import { BaseEntity } from "../871f3f39/799e57cf.js";
 import { UserEntity } from "../871f3f39/bdf74ccb.js";
 import { FileEntity } from "./e8dcc4f1.js";
-import { RoleEntity } from "../871f3f39/fd939073.js";
+import { RoleEntity } from "../871f3f39/f4278326.js";
 import { NotificationClickEntity } from "./79c7a4c3.js";
 export declare enum NotificationTargetType {
     ALL = 0,

package/dist/types/2cc49785/e8dcc4f1.d.ts

@@ -1,5 +1,5 @@
 import { BaseEntity } from "../871f3f39/799e57cf.js";
-import { RoleEntity } from "../871f3f39/fd939073.js";
+import { RoleEntity } from "../871f3f39/f4278326.js";
 import { UserEntity } from "../871f3f39/bdf74ccb.js";
 import { TagEntity } from "../871f3f39/f2188d12.js";
 export declare enum FileStorageType {

package/dist/types/6610c73e/04f8996d/{c028e6f2.d.ts → 7c199baa.d.ts}

@@ -69,7 +69,18 @@ export declare class UserService implements IUserService {
     refreshToken(refreshToken: string): Promise<RefreshTokenResponsePayload>;
     private checkSessionLimit;
     checkToken(refreshToken: string): Promise<boolean>;
-    signout(refreshToken: string): Promise<void>;
+    signout(props: {
+        refreshToken?: string;
+        accessToken?: string;
+        userId: number;
+    }): Promise<void>;
+    /**
+     * Drops this session's access-token allowlist entries.
+     * The bearer token deletes the key ResolveUserMiddleware checks.
+     * The refresh-token suffix deletes the linked login/refresh entry when the
+     * cache value is `{ refreshToken, accessToken }`.
+     */
+    private revokeAccessTokenAllowlist;
     changePassword(data: ChangePasswordRequestPayload): Promise<void>;
     resetPassword(data: ResetPasswordRequestPayload): Promise<void>;
     quarkCloudManagementResetRootAdminPassword(data: CloudManagementResetRootAdminPasswordRequestPayload): Promise<void>;

package/dist/types/6610c73e/04f8996d/{49f69d48.d.ts → 8d684be4.d.ts}

@@ -1,5 +1,5 @@
-import { Loggable } from "../../0d45f5fd/93c2615f.js";
-import { UserService } from "./c028e6f2.js";
+import { Loggable, RequestedUser } from "../../0d45f5fd/93c2615f.js";
+import { UserService } from "./7c199baa.js";
 import { RequestDto, ResponseDto } from "../../9477dda6/a68fa9aa.js";
 import { CreateUserDto, UpdateUserPayload } from "./57b46faf.js";
 export declare class UserController {
@@ -8,5 +8,5 @@ export declare class UserController {
     getUsers(skip: number, limit: number, search: string): Promise<ResponseDto<import("../../index.js").UserEntity[] | null>>;
     getUser(id: string): Promise<ResponseDto<import("./user.dto.js").UserResponsePayload | null>>;
     updateUser(id: number, body: RequestDto<UpdateUserPayload>): Promise<ResponseDto<void>>;
-    createUser(body: RequestDto<CreateUserDto>): Promise<ResponseDto<void>>;
+    createUser(user: RequestedUser, body: RequestDto<CreateUserDto>): Promise<ResponseDto<void>>;
 }

package/dist/types/6610c73e/04f8996d/{a671786c.d.ts → f4b887dc.d.ts}

@@ -2,19 +2,19 @@ import { ICache, Loggable, RequestedUser } from "../../0d45f5fd/93c2615f.js";
 import { RequestDto, ResponseDto } from "../../9477dda6/a68fa9aa.js";
 import { DeactivateAccountDto } from "./b2dc285c.js";
 import { ChangePasswordRequestPayload, CheckRefreshTokenRequestPayload, ResetPasswordRequestPayload, SigninRequestPayload, SignoutRequestPayload } from "./57b46faf.js";
-import { UserService } from "./c028e6f2.js";
+import { UserService } from "./7c199baa.js";
 import { Request as ExpressRequest, Response as ExpressResponse } from "express";
 export declare class AccountController {
     userService: UserService;
     logger: Loggable;
     cacheClient: ICache;
     login(body: RequestDto<SigninRequestPayload>, req: ExpressRequest, res: ExpressResponse): Promise<ResponseDto<import("./user.dto.js").SigninResponsePayload>>;
-    logout(req: ExpressRequest, res: ExpressResponse, body: RequestDto<SignoutRequestPayload>): Promise<ResponseDto<null>>;
+    logout(req: ExpressRequest, res: ExpressResponse, user: RequestedUser, body: RequestDto<SignoutRequestPayload>): Promise<ResponseDto<null>>;
     refresh(req: ExpressRequest, res: ExpressResponse): Promise<ResponseDto<any>>;
     checkToken(body: RequestDto<CheckRefreshTokenRequestPayload>): Promise<ResponseDto<{
         valid: boolean;
     }>>;
-    changePassword(req: ExpressRequest, body: RequestDto<ChangePasswordRequestPayload>): Promise<ResponseDto<null>>;
+    changePassword(user: RequestedUser, body: RequestDto<ChangePasswordRequestPayload>): Promise<ResponseDto<null>>;
     resetPassword(req: ExpressRequest, res: ExpressResponse, body: RequestDto<ResetPasswordRequestPayload>): Promise<ResponseDto<null>>;
     loginedDevices(req: ExpressRequest, user: RequestedUser, skip: number, limit: number): Promise<ResponseDto<{
         isCurrentDevice: boolean;
@@ -28,8 +28,8 @@ export declare class AccountController {
         deleteDate: Date;
         version: number;
     }[]>>;
-    logoutOtherDevices(req: ExpressRequest, body: RequestDto<{
+    logoutOtherDevices(body: RequestDto<{
         id: number;
     }>): Promise<ResponseDto<null>>;
-    deactivate(req: ExpressRequest, body: RequestDto<DeactivateAccountDto>): Promise<ResponseDto<null>>;
+    deactivate(user: RequestedUser, body: RequestDto<DeactivateAccountDto>): Promise<ResponseDto<null>>;
 }

package/dist/types/6610c73e/2882bf13/{1b635431.d.ts → 14c1426f.d.ts}

@@ -1,9 +1,10 @@
+import { RequestedUser } from "../../0d45f5fd/4b41f653.js";
 import { RequestDto, ResponseDto } from "../../9477dda6/a68fa9aa.js";
 import { CreateAPIAccessTokenDto } from "./d0680253.js";
 import { APIAccessTokenService } from "./5a5d4923.js";
 export declare class APIAccessController {
     service: APIAccessTokenService;
-    tempAccessToken(body: RequestDto<CreateAPIAccessTokenDto>): Promise<ResponseDto<import("../../core-entities/api-access-token.entity.js").APIAccessTokenEntity>>;
+    tempAccessToken(body: RequestDto<CreateAPIAccessTokenDto>, user: RequestedUser): Promise<ResponseDto<import("../../core-entities/api-access-token.entity.js").APIAccessTokenEntity>>;
     deleteAccessToken(body: RequestDto<{
         token: string;
     }>): Promise<ResponseDto<null>>;

package/dist/types/6610c73e/4b168d88/08e67542.d.ts

@@ -1,5 +1,5 @@
 import { RequestDto, ResponseDto } from "../../9477dda6/a68fa9aa.js";
-import { RoleEntity } from "../../871f3f39/fd939073.js";
+import { RoleEntity } from "../../871f3f39/f4278326.js";
 import { RoleService } from "./413ef4e3.js";
 import { CreateRoleDto, UpdateRoleDto } from "./d96befb1.js";
 export declare class RoleController {

package/dist/types/6610c73e/4b168d88/413ef4e3.d.ts

@@ -1,5 +1,5 @@
 import { DataSource } from "typeorm";
-import { RoleEntity } from "../../871f3f39/fd939073.js";
+import { RoleEntity } from "../../871f3f39/f4278326.js";
 import { CreateRoleDto } from "./d96befb1.js";
 import { ServiceProps } from "../../abe2c417/8f79089f.js";
 import { DeveloperConfigService } from "../../2ad56231/01dcea55/e9fabd43.js";

package/dist/types/6610c73e/5e689e2b/a01d5c2f.d.ts

@@ -1,7 +1,7 @@
 import { AppInstance } from "../../0d45f5fd/93c2615f.js";
 import { Request } from 'express';
 import { RequestDto, ResponseDto } from "../../9477dda6/a68fa9aa.js";
-import { PluginService } from "./2cfeccf9.js";
+import { PluginService } from "./e99b96ff.js";
 import { NodeStatusService } from "../09355034/5f5422ae.js";
 export declare class PluginController {
     service: PluginService;

package/dist/types/6610c73e/5e689e2b/{2cfeccf9.d.ts → e99b96ff.d.ts}

@@ -1,5 +1,5 @@
 import { AppInstance } from "../../0d45f5fd/93c2615f.js";
-import { PluginEntity } from "../../871f3f39/c1c82e5a.js";
+import { PluginEntity } from "../../871f3f39/5ce08b7a.js";
 import Stream from "stream";
 import { FileInfo } from "busboy";
 import { NotificationService } from "../../2ad56231/1242ab99/21beedc5.js";

package/dist/types/6610c73e/815813d9/{cb19ca62.d.ts → 4b3ca632.d.ts}

@@ -1,7 +1,10 @@
 import { RequestDto, ResponseDto } from "../../9477dda6/a68fa9aa.js";
-import { UserService } from "../04f8996d/c028e6f2.js";
+import { PluginPageRouteService } from "../9ec6f310/cc11730f.js";
+import { UserService } from "../04f8996d/7c199baa.js";
 import { CloudManagementResetRootAdminPasswordRequestPayload } from "./7e93d8ae.js";
 export declare class CloudManagementController {
     userService: UserService;
+    pluginPageRouteService: PluginPageRouteService;
     quarkCloudManagementResetRootAdminPassword(body: RequestDto<CloudManagementResetRootAdminPasswordRequestPayload>): Promise<ResponseDto<null>>;
+    getPublicPluginPageRoutes(skip?: number, limit?: number): Promise<ResponseDto<any>>;
 }

package/dist/types/6610c73e/9ec6f310/354f21fd.d.ts

@@ -0,0 +1,12 @@
+import { EntityManager } from "typeorm";
+export declare class PublicPluginPageRouteMigrationService {
+    private source;
+    private cache;
+    private cacheKey;
+    /**
+     * Run a one-shot page-route migration for a plugin version.
+     * Skips when already recorded (cache + DB). Records the row only after
+     * `callback` succeeds — all in one transaction so a failed callback rolls back.
+     */
+    createMigration(pluginName: string, pluginVersion: string, migrationName: string, callback: (manager: EntityManager) => Promise<void>): Promise<void>;
+}

package/dist/types/6610c73e/9ec6f310/91ebb738.d.ts

@@ -0,0 +1,30 @@
+export type PluginPageRouteDto = {
+    id: number;
+    route: string;
+    description: string | null;
+    pluginName: string;
+    createDate: Date;
+    updateDate: Date;
+};
+export type CreatePluginPageRouteDto = {
+    route: string;
+    description?: string | null;
+    pluginName: string;
+};
+export type UpdatePluginPageRouteDto = {
+    route?: string;
+    description?: string | null;
+    pluginName?: string;
+};
+export type ListPluginPageRoutesQuery = {
+    skip?: number;
+    limit?: number;
+    search?: string;
+    pluginName?: string;
+};
+export type ListPluginPageRoutesResponseDto = {
+    items: PluginPageRouteDto[];
+    total: number;
+    skip: number;
+    limit: number;
+};

package/dist/types/6610c73e/9ec6f310/cc11730f.d.ts

@@ -0,0 +1,39 @@
+import type { CreateServiceProps, DeleteByIdServiceProps, GetByIdServiceProps, ServiceProps, UpdateByIdServiceProps } from "../../abe2c417/8f79089f.js";
+import type { CreatePluginPageRouteDto, ListPluginPageRoutesQuery, ListPluginPageRoutesResponseDto, PluginPageRouteDto, UpdatePluginPageRouteDto } from "./91ebb738.js";
+export declare class PluginPageRouteService {
+    private source;
+    private withManager;
+    private repo;
+    list(props?: ServiceProps<ListPluginPageRoutesQuery>): Promise<ListPluginPageRoutesResponseDto>;
+    getPublicPluginPageRoutes(props?: ServiceProps<{
+        skip?: number;
+        limit?: number;
+    }>): Promise<ListPluginPageRoutesResponseDto>;
+    getById(props: GetByIdServiceProps): Promise<PluginPageRouteDto>;
+    getByRoute(props: ServiceProps<{
+        route: string;
+        pluginName: string;
+    }>): Promise<PluginPageRouteDto>;
+    create(props: CreateServiceProps<CreatePluginPageRouteDto>): Promise<{
+        id: number;
+    }>;
+    /**
+     * Insert many routes in one pass. Existing `(pluginName, route)` pairs
+     * upsert (active → update description; soft-deleted → restore + update).
+     * Duplicate keys within the payload keep the last entry.
+     */
+    createMany(props: CreateServiceProps<CreatePluginPageRouteDto[]>): Promise<{
+        ids: number[];
+    }>;
+    update(props: UpdateByIdServiceProps<UpdatePluginPageRouteDto>): Promise<void>;
+    remove(props: DeleteByIdServiceProps): Promise<void>;
+    /** Soft-delete a route under a plugin. */
+    removeByRouteAndPluginName(props: ServiceProps<{
+        route: string;
+        pluginName: string;
+    }>): Promise<void>;
+    /** Soft-delete every page route registered for a plugin. */
+    removeByPluginName(props: ServiceProps<{
+        pluginName: string;
+    }>): Promise<void>;
+}

package/dist/types/6610c73e/9ec6f310/f6c79d1e.d.ts

@@ -0,0 +1,12 @@
+import { RequestDto, ResponseDto } from "../../9477dda6/a68fa9aa.js";
+import type { CreatePluginPageRouteDto, UpdatePluginPageRouteDto } from "./91ebb738.js";
+import { PluginPageRouteService } from "./cc11730f.js";
+export declare class PublicPluginPageRouteController {
+    service: PluginPageRouteService;
+    list(skip?: number, limit?: number, search?: string, pluginName?: string): Promise<ResponseDto<any>>;
+    getByRoute(route: string, pluginName: string): Promise<ResponseDto<any>>;
+    getById(id: number): Promise<ResponseDto<any>>;
+    create(body: RequestDto<CreatePluginPageRouteDto>): Promise<ResponseDto<any>>;
+    update(id: number, body: RequestDto<UpdatePluginPageRouteDto>): Promise<ResponseDto<any>>;
+    remove(id: number): Promise<ResponseDto<any>>;
+}

package/dist/types/6610c73e/afc32eaa.d.ts

@@ -1,6 +1,6 @@
 import { DataSeedHistoryService } from "./6e1815de/1ec1270e.js";
 import { RoleService } from "./4b168d88/413ef4e3.js";
-import { UserService } from "./04f8996d/c028e6f2.js";
+import { UserService } from "./04f8996d/7c199baa.js";
 import { SettingService } from "./ec72b956/bdc8076b.js";
 import { Loggable } from "../0d45f5fd/4dd6b41d.js";
 import { PermissionService } from "./fdeb3389/16152e20.js";

package/dist/types/6610c73e/{8d155135.d.ts → bb890bcf.d.ts}

@@ -1,6 +1,6 @@
 export * from "./f38c764c/4d91b5ee.js";
 export * from "./f38c764c/50b90d0c.js";
-export * from "./04f8996d/c028e6f2.js";
+export * from "./04f8996d/7c199baa.js";
 export * from "./04f8996d/57b46faf.js";
 export * from "./87f29211/0f8de574/2b77c604.js";
 export * from "./87f29211/fc973325/9c8f6046.js";
@@ -20,8 +20,11 @@ export * from "./87f29211/6fd89734/ea349714.js";
 export * from "./fdeb3389/16152e20.js";
 export * from "./6e1815de/1ec1270e.js";
 export * from "./6e1815de/cb4e0d9d.js";
-export * from "./5e689e2b/2cfeccf9.js";
+export * from "./5e689e2b/e99b96ff.js";
 export * from "./5e689e2b/f6474de5.js";
+export * from "./9ec6f310/cc11730f.js";
+export * from "./9ec6f310/91ebb738.js";
+export * from "./9ec6f310/354f21fd.js";
 export * from "./8a6cead4/40c4faf7.js";
 export * from "./4b168d88/413ef4e3.js";
 export * from "./4b168d88/d96befb1.js";

package/dist/types/6610c73e/fdeb3389/16152e20.d.ts

@@ -1,5 +1,5 @@
 import { DataSource } from "typeorm";
-import { PermissionEntity } from "../../871f3f39/2bfe94e3.js";
+import { PermissionEntity } from "../../871f3f39/32a49bde.js";
 import { PermissionPayload } from "./81528d33.js";
 import { HttpMethod } from "../../0d45f5fd/1c59aca9.js";
 interface IPermissionService {

package/dist/types/{2cc49785/048ca935.d.ts → 871f3f39/04928915.d.ts}

@@ -1,6 +1,6 @@
-import { PluginEntity } from "../871f3f39/c1c82e5a.js";
-import { RoleEntity } from "../871f3f39/fd939073.js";
-import { BaseEntity } from "../871f3f39/799e57cf.js";
+import { PluginEntity } from "./5ce08b7a.js";
+import { RoleEntity } from "./f4278326.js";
+import { BaseEntity } from "./799e57cf.js";
 export declare class PagePermissionEntity extends BaseEntity {
     id: number;
     plugin: InstanceType<typeof PluginEntity>;

package/dist/types/871f3f39/{2bfe94e3.d.ts → 32a49bde.d.ts}

@@ -1,7 +1,7 @@
 import "reflect-metadata";
 import { BaseEntity } from "./799e57cf.js";
-import { RoleEntity } from "./fd939073.js";
-import { PluginEntity } from "./c1c82e5a.js";
+import { RoleEntity } from "./f4278326.js";
+import { PluginEntity } from "./5ce08b7a.js";
 export declare class PermissionEntity extends BaseEntity {
     id: number;
     url: string;

package/dist/types/871f3f39/4dbaf1b6.d.ts

@@ -1,7 +1,7 @@
 import { BaseEntity } from "./799e57cf.js";
 import { AIModelEntity } from "./b82d5bd3.js";
 import { UserEntity } from "./bdf74ccb.js";
-import { RoleEntity } from "./fd939073.js";
+import { RoleEntity } from "./f4278326.js";
 export declare class AIAssistantRegistryEntity extends BaseEntity {
     id: number;
     shortId: string;

package/dist/types/871f3f39/{c1c82e5a.d.ts → 5ce08b7a.d.ts}

@@ -1,8 +1,7 @@
 import "reflect-metadata";
 import { BaseEntity } from "./799e57cf.js";
-import { PermissionEntity } from "./2bfe94e3.js";
-import { PagePermissionEntity } from "../2cc49785/048ca935.js";
-import { PluginRouteEntity } from "../2cc49785/46f89c68.js";
+import { PermissionEntity } from "./32a49bde.js";
+import { PagePermissionEntity } from "./04928915.js";
 export declare enum Access {
     MICROPHONE = 0,
     CAMERA = 1,
@@ -38,5 +37,4 @@ export declare class PluginEntity extends BaseEntity {
     access: Access[];
     permission: InstanceType<typeof PermissionEntity>;
     pagePermissions: InstanceType<typeof PagePermissionEntity>[];
-    routes: InstanceType<typeof PluginRouteEntity>[];
 }

package/dist/types/871f3f39/{e9ffc988.d.ts → 9d2a3ad6.d.ts}

@@ -11,10 +11,11 @@ import { CronJobEntity, CronJobExecutionHistoryEntity } from "./c42eb7f4.js";
 import { DataLockingEntity } from "./5724033a.js";
 import { EnvEntity } from "./4ec64ebc.js";
 import { MigrationEntity } from "./6a0d07bb.js";
-import { PluginEntity } from "./c1c82e5a.js";
-import { PermissionEntity } from "./2bfe94e3.js";
+import { PluginEntity } from "./5ce08b7a.js";
+import { PublicPluginPageRouteEntity } from "./a86a30c9.js";
+import { PermissionEntity } from "./32a49bde.js";
 import { RefreshTokenEntity } from "./871a1ed2.js";
-import { RoleEntity } from "./fd939073.js";
+import { RoleEntity } from "./f4278326.js";
 import { UserEntity } from "./bdf74ccb.js";
 import { WorkflowChangesEntity, WorkflowEntity, WorkflowExecutionHistoryEntity } from "./e4e56e24.js";
-export declare const CORE_ENTITIES: (typeof MigrationEntity | typeof RefreshTokenEntity | typeof UserEntity | typeof PluginEntity | typeof RoleEntity | typeof PermissionEntity | typeof BranchEntity | typeof AIModelEntity | typeof AIToolsEntity | typeof ConcurrentTableLockEntity | typeof EnvEntity | typeof AIAssistantRegistryEntity | typeof AIChatHistoryEntity | typeof AIChatHistoryConversationEntity | typeof AIMemoryEntity | typeof WorkflowEntity | typeof WorkflowChangesEntity | typeof WorkflowExecutionHistoryEntity | typeof CronJobEntity | typeof CronJobExecutionHistoryEntity | typeof AIAssistantUserPermissionEntity | typeof AuditLogEntity | typeof DataLockingEntity | typeof APIAccessTokenPermissionEntity)[];
+export declare const CORE_ENTITIES: (typeof MigrationEntity | typeof RefreshTokenEntity | typeof UserEntity | typeof PluginEntity | typeof RoleEntity | typeof PermissionEntity | typeof BranchEntity | typeof AIModelEntity | typeof AIToolsEntity | typeof ConcurrentTableLockEntity | typeof EnvEntity | typeof AIAssistantRegistryEntity | typeof AIChatHistoryEntity | typeof AIChatHistoryConversationEntity | typeof AIMemoryEntity | typeof PublicPluginPageRouteEntity | typeof WorkflowEntity | typeof WorkflowChangesEntity | typeof WorkflowExecutionHistoryEntity | typeof CronJobEntity | typeof CronJobExecutionHistoryEntity | typeof AIAssistantUserPermissionEntity | typeof AuditLogEntity | typeof DataLockingEntity | typeof APIAccessTokenPermissionEntity)[];

package/dist/types/871f3f39/a225cc21.d.ts

@@ -1,6 +1,6 @@
 import "reflect-metadata";
 import { BaseEntity } from "./799e57cf.js";
-import { RoleEntity } from "./fd939073.js";
+import { RoleEntity } from "./f4278326.js";
 import { TagEntity } from "./f2188d12.js";
 export declare class BranchEntity extends BaseEntity {
     id: number;

package/dist/types/871f3f39/a86a30c9.d.ts

@@ -0,0 +1,17 @@
+import { BaseEntity } from "./799e57cf.js";
+/**
+ * Catalog of frontend page routes owned by a plugin.
+ * Used for page-permission / nav registration lookups.
+ */
+export declare class PublicPluginPageRouteEntity extends BaseEntity {
+    id: number;
+    route: string;
+    description: string | null;
+    pluginName: string;
+}
+export declare class PublicPluginPageRouteMigrationEntity extends BaseEntity {
+    id: number;
+    pluginName: string;
+    pluginVersion: string;
+    migrationName: string;
+}

package/dist/types/871f3f39/b82d5bd3.d.ts

@@ -1,5 +1,5 @@
 import { UserEntity } from "./bdf74ccb.js";
-import { RoleEntity } from "./fd939073.js";
+import { RoleEntity } from "./f4278326.js";
 import { BaseEntity } from "./799e57cf.js";
 export declare class AIModelEntity extends BaseEntity {
     id: number;

package/dist/types/871f3f39/bdf74ccb.d.ts

@@ -1,7 +1,7 @@
 import "reflect-metadata";
 import { BaseEntity } from "./799e57cf.js";
 import { RefreshTokenEntity } from "./871a1ed2.js";
-import { RoleEntity } from "./fd939073.js";
+import { RoleEntity } from "./f4278326.js";
 import { SettingEntity } from "../2cc49785/4573e170.js";
 import { BranchEntity } from "./a225cc21.js";
 import { TagEntity } from "./f2188d12.js";

package/dist/types/871f3f39/{194ec074.d.ts → d77ac409.d.ts}

@@ -15,5 +15,6 @@ export * from "./6a0d07bb.js";
 export * from "./871a1ed2.js";
 export * from "./e4e56e24.js";
 export * from "./f2188d12.js";
-export * from "./e9ffc988.js";
-export * from "./c1c82e5a.js";
+export * from "./9d2a3ad6.js";
+export * from "./5ce08b7a.js";
+export * from "./a86a30c9.js";

package/dist/types/871f3f39/{fd939073.d.ts → f4278326.d.ts}

@@ -1,8 +1,8 @@
 import "reflect-metadata";
 import { BaseEntity } from "./799e57cf.js";
-import { PermissionEntity } from "./2bfe94e3.js";
+import { PermissionEntity } from "./32a49bde.js";
 import { UserEntity } from "./bdf74ccb.js";
-import { PagePermissionEntity } from "../2cc49785/048ca935.js";
+import { PagePermissionEntity } from "./04928915.js";
 import { FileEntity } from "../2cc49785/e8dcc4f1.js";
 import { BranchEntity } from "./a225cc21.js";
 export declare class RoleEntity extends BaseEntity {

package/dist/types/d58efc4e/6c80f5ea.d.ts

@@ -0,0 +1,14 @@
+import { IDatabaseMigration } from "@quan-erp/shared-types";
+import { QueryRunner } from "typeorm";
+/**
+ * ai_tools: add unique(fnName); drop allowedRoles join table.
+ */
+export declare class InitialMigrations2_0_2 implements IDatabaseMigration {
+    getName(): string;
+    getSource(): {
+        plugin: string;
+        name: string;
+    };
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/dist/types/fd7f274b/0daaeab3.d.ts

@@ -2,4 +2,4 @@ export * from "./272670be.js";
 export * from "./396495ab.js";
 export * from "./3c41945d.js";
 export * from "./4f9e1401.js";
-export { CheckAPIPermission } from "./83451de8.js";
+export { CheckAPIPermission } from "./88259428.js";

package/dist/types/fd7f274b/88259428.d.ts

@@ -0,0 +1,56 @@
+import { Request, Response, NextFunction } from "express";
+import { IExpressMiddleware } from "../0d45f5fd/6559a8c1.js";
+import { Loggable } from "../0d45f5fd/4dd6b41d.js";
+/**
+ * Route permission check used by {@link CheckAPIPermission}.
+ * {@link CheckAPIPermission} က သုံးတဲ့ route ခွင့်ပြုချက်စစ်ဆေးမှု။
+ *
+ * Session users are allowed when the route is public, the caller is the owner,
+ * or the role has no permission rows. Otherwise the route must be an allowed
+ * permission for that role.
+ * Session သုံးသူကို route က public ဖြစ်ရင်၊ ခေါ်သူက owner ဖြစ်ရင်၊
+ * သို့မဟုတ် role မှာ permission မရှိရင် ခွင့်ပြုသည်။
+ * အဲဒီအချက်တွေ မဟုတ်ရင် route ဟာ အဲဒီ role က ခွင့်ပြုထားတဲ့ API ထဲမှာ ရှိရမည်။
+ *
+ * An API access token is the token's user. Two allow lists apply:
+ * the role allow list is the ceiling, and the token allow list can only be a
+ * subset. A role that allows 5 APIs and a token that allows 2 of them leaves
+ * the token with those 2. An API outside the role list is denied. A public
+ * route, a role with no permission rows, an empty token list, and the owner
+ * stay unrestricted.
+ * API access token ကို အဲဒီ token ပိုင်တဲ့ user အဖြစ် သတ်မှတ်သည်။
+ * ခွင့်ပြုစာရင်းနှစ်ခုရှိသည်။ Role စာရင်းက အမြင့်ဆုံးအကန့်အသတ်ဖြစ်ပြီး၊
+ * token စာရင်းက အဲဒီထဲက အစိတ်အပိုင်းပဲ ဖြစ်နိုင်သည်။
+ * Role က API ၅ ခုခွင့်ပြုပြီး token က ၂ ခုပဲ ခွင့်ပြုရင် token သည် အဲဒီ ၂ ခုကိုပဲ သုံးနိုင်သည်။
+ * Role စာရင်းထဲမှာ မရှိတဲ့ API ကို token မှာ ထည့်ထားရင်တောင် ငြင်းပယ်သည်။
+ * Public route၊ permission မရှိတဲ့ role၊ token စာရင်းအလွတ်၊ နှင့် owner တို့ကို ကန့်သတ်မထားပါ။
+ */
+export declare class ApiPermissionMiddlewareFilter implements IExpressMiddleware {
+    logger: Loggable;
+    private permissionService;
+    private temporaryAPIAccessService;
+    private get app();
+    handler(req: Request, res: Response, next: NextFunction): Promise<void | Response<any, Record<string, any>>>;
+    private isOwner;
+    private matchesAllowedApi;
+    private isPreflight;
+}
+/**
+ * Applies {@link ApiPermissionMiddlewareFilter} to a controller or route.
+ * Not registered globally; only decorated handlers run this check.
+ * {@link ApiPermissionMiddlewareFilter} ကို controller သို့မဟုတ် route ပေါ်မှာ တပ်သည်။
+ * Global အနေနဲ့ မမှတ်ပုံတင်ပါ။ decorator တပ်ထားတဲ့ handler တွေမှာပဲ ဒီစစ်ဆေးမှုအလုပ်လုပ်သည်။
+ *
+ * @returns A decorator that checks role permissions, and for an API access token
+ *          also keeps that token inside the user's role scope.
+ *          Role ခွင့်ပြုချက်ကို စစ်တဲ့ decorator ကို ပြန်ပေးသည်။
+ *          API access token ဖြစ်ရင် အဲဒီ token ကို user ရဲ့ role ခွင့်ပြုချက်ထဲမှာပဲ ထားသည်။
+ *
+ * @example
+ * ```ts
+ * @CheckAPIPermission()
+ * @Post('/invoice')
+ * createInvoice() {}
+ * ```
+ */
+export declare function CheckAPIPermission(): ClassDecorator & MethodDecorator;

package/dist/types/index.d.ts

@@ -1,9 +1,9 @@
 export * from "./fbc6c1d4/80614691.js";
 export * from "./9f80922e/3e32acfa.js";
 export * from "./0d45f5fd/93c2615f.js";
-export * from "./6610c73e/8d155135.js";
-export * from "./2cc49785/1e6b9ea7.js";
-export * from "./871f3f39/194ec074.js";
+export * from "./6610c73e/bb890bcf.js";
+export * from "./2cc49785/03838cd8.js";
+export * from "./871f3f39/d77ac409.js";
 export * from "./9477dda6/99edb198.js";
 export * from "./2ad56231/839b9411.js";
 export * from "./46b42b42/df62afb5.js";

package/external.json

@@ -28,6 +28,8 @@
     "firebase",
     "@quan-erp-sdk/notification-gateway-sdk",
     "cron",
+    "adm-zip",
     "openai",
-    "safe-stable-stringify"
+    "safe-stable-stringify",
+    "sharp"
 ]