@revisium/core 0.9.1 → 0.9.2

package/dist/src/__tests__/utils/rowMocks.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRowMocks = void 0;
+const jest_mock_extended_1 = require("jest-mock-extended");
+const createRowMocks = () => {
+    const rowTransactionalCommands = (0, jest_mock_extended_1.mockDeep)();
+    return {
+        rowTransactionalCommands,
+    };
+};
+exports.createRowMocks = createRowMocks;
+//# sourceMappingURL=rowMocks.js.map

package/dist/src/__tests__/utils/rowMocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rowMocks.js","sourceRoot":"","sources":["../../../../src/__tests__/utils/rowMocks.ts"],"names":[],"mappings":";;;AAAA,2DAA6D;AAGtD,MAAM,cAAc,GAAG,GAAG,EAAE;IACjC,MAAM,wBAAwB,GAC5B,IAAA,6BAAQ,GAA8B,CAAC;IAEzC,OAAO;QACL,wBAAwB;KACzB,CAAC;AACJ,CAAC,CAAC;AAPW,QAAA,cAAc,kBAOzB"}

package/dist/src/__tests__/utils/schema/schema.mocks.d.ts

@@ -0,0 +1,25 @@
+import { JsonPatchAdd, JsonPatchMove, JsonPatchRemove, JsonPatchReplace } from 'src/share/utils/schema/types/json-patch.types';
+import { JsonArraySchema, JsonBooleanSchema, JsonNumberSchema, JsonObjectSchema, JsonSchema, JsonStringSchema } from 'src/share/utils/schema/types/schema.types';
+export declare const getReplacePatch: ({ path, value, }: {
+    path: string;
+    value: JsonSchema;
+}) => JsonPatchReplace;
+export declare const getRemovePatch: ({ path, }: {
+    path: string;
+}) => JsonPatchRemove;
+export declare const getAddPatch: ({ path, value, }: {
+    path: string;
+    value: JsonSchema;
+}) => JsonPatchAdd;
+export declare const getMovePatch: ({ from, path, }: {
+    from: string;
+    path: string;
+}) => JsonPatchMove;
+export declare const getStringSchema: ({ defaultValue, reference, }?: {
+    defaultValue?: string;
+    reference?: string;
+}) => JsonStringSchema;
+export declare const getNumberSchema: (defaultValue?: number) => JsonNumberSchema;
+export declare const getBooleanSchema: (defaultValue?: boolean) => JsonBooleanSchema;
+export declare const getObjectSchema: (properties: Record<string, JsonSchema>) => JsonObjectSchema;
+export declare const getArraySchema: (items: JsonSchema) => JsonArraySchema;

package/dist/src/__tests__/utils/schema/schema.mocks.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getArraySchema = exports.getObjectSchema = exports.getBooleanSchema = exports.getNumberSchema = exports.getStringSchema = exports.getMovePatch = exports.getAddPatch = exports.getRemovePatch = exports.getReplacePatch = void 0;
+const schema_types_1 = require("../../../share/utils/schema/types/schema.types");
+const getReplacePatch = ({ path, value, }) => ({
+    op: 'replace',
+    path,
+    value,
+});
+exports.getReplacePatch = getReplacePatch;
+const getRemovePatch = ({ path, }) => ({
+    op: 'remove',
+    path,
+});
+exports.getRemovePatch = getRemovePatch;
+const getAddPatch = ({ path, value, }) => ({
+    op: 'add',
+    path,
+    value,
+});
+exports.getAddPatch = getAddPatch;
+const getMovePatch = ({ from, path, }) => ({
+    op: 'move',
+    from,
+    path,
+});
+exports.getMovePatch = getMovePatch;
+const getStringSchema = ({ defaultValue = '', reference, } = {}) => {
+    const schema = {
+        type: schema_types_1.JsonSchemaTypeName.String,
+        default: defaultValue,
+    };
+    if (reference) {
+        schema.reference = reference;
+    }
+    return schema;
+};
+exports.getStringSchema = getStringSchema;
+const getNumberSchema = (defaultValue = 0) => ({
+    type: schema_types_1.JsonSchemaTypeName.Number,
+    default: defaultValue,
+});
+exports.getNumberSchema = getNumberSchema;
+const getBooleanSchema = (defaultValue = false) => ({
+    type: schema_types_1.JsonSchemaTypeName.Boolean,
+    default: defaultValue,
+});
+exports.getBooleanSchema = getBooleanSchema;
+const getObjectSchema = (properties) => ({
+    type: schema_types_1.JsonSchemaTypeName.Object,
+    additionalProperties: false,
+    required: Object.keys(properties).sort(),
+    properties,
+});
+exports.getObjectSchema = getObjectSchema;
+const getArraySchema = (items) => ({
+    type: schema_types_1.JsonSchemaTypeName.Array,
+    items,
+});
+exports.getArraySchema = getArraySchema;
+//# sourceMappingURL=schema.mocks.js.map

package/dist/src/__tests__/utils/schema/schema.mocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.mocks.js","sourceRoot":"","sources":["../../../../../src/__tests__/utils/schema/schema.mocks.ts"],"names":[],"mappings":";;;AAMA,iFAQmD;AAE5C,MAAM,eAAe,GAAG,CAAC,EAC9B,IAAI,EACJ,KAAK,GAIN,EAAoB,EAAE,CAAC,CAAC;IACvB,EAAE,EAAE,SAAS;IACb,IAAI;IACJ,KAAK;CACN,CAAC,CAAC;AAVU,QAAA,eAAe,mBAUzB;AACI,MAAM,cAAc,GAAG,CAAC,EAC7B,IAAI,GAGL,EAAmB,EAAE,CAAC,CAAC;IACtB,EAAE,EAAE,QAAQ;IACZ,IAAI;CACL,CAAC,CAAC;AAPU,QAAA,cAAc,kBAOxB;AACI,MAAM,WAAW,GAAG,CAAC,EAC1B,IAAI,EACJ,KAAK,GAIN,EAAgB,EAAE,CAAC,CAAC;IACnB,EAAE,EAAE,KAAK;IACT,IAAI;IACJ,KAAK;CACN,CAAC,CAAC;AAVU,QAAA,WAAW,eAUrB;AACI,MAAM,YAAY,GAAG,CAAC,EAC3B,IAAI,EACJ,IAAI,GAIL,EAAiB,EAAE,CAAC,CAAC;IACpB,EAAE,EAAE,MAAM;IACV,IAAI;IACJ,IAAI;CACL,CAAC,CAAC;AAVU,QAAA,YAAY,gBAUtB;AACI,MAAM,eAAe,GAAG,CAAC,EAC9B,YAAY,GAAG,EAAE,EACjB,SAAS,MAIP,EAAE,EAAoB,EAAE;IAC1B,MAAM,MAAM,GAAqB;QAC/B,IAAI,EAAE,iCAAkB,CAAC,MAAM;QAC/B,OAAO,EAAE,YAAY;KACtB,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAjBW,QAAA,eAAe,mBAiB1B;AACK,MAAM,eAAe,GAAG,CAC7B,eAAuB,CAAC,EACN,EAAE,CAAC,CAAC;IACtB,IAAI,EAAE,iCAAkB,CAAC,MAAM;IAC/B,OAAO,EAAE,YAAY;CACtB,CAAC,CAAC;AALU,QAAA,eAAe,mBAKzB;AACI,MAAM,gBAAgB,GAAG,CAC9B,eAAwB,KAAK,EACV,EAAE,CAAC,CAAC;IACvB,IAAI,EAAE,iCAAkB,CAAC,OAAO;IAChC,OAAO,EAAE,YAAY;CACtB,CAAC,CAAC;AALU,QAAA,gBAAgB,oBAK1B;AACI,MAAM,eAAe,GAAG,CAC7B,UAAsC,EACpB,EAAE,CAAC,CAAC;IACtB,IAAI,EAAE,iCAAkB,CAAC,MAAM;IAC/B,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE;IACxC,UAAU;CACX,CAAC,CAAC;AAPU,QAAA,eAAe,mBAOzB;AACI,MAAM,cAAc,GAAG,CAAC,KAAiB,EAAmB,EAAE,CAAC,CAAC;IACrE,IAAI,EAAE,iCAAkB,CAAC,KAAK;IAC9B,KAAK;CACN,CAAC,CAAC;AAHU,QAAA,cAAc,kBAGxB"}

package/dist/src/app.module.d.ts

@@ -0,0 +1,2 @@
+export declare class AppModule {
+}

package/dist/src/app.module.js

@@ -0,0 +1,21 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppModule = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const core_module_1 = require("./core/core.module");
+let AppModule = class AppModule {
+};
+exports.AppModule = AppModule;
+exports.AppModule = AppModule = __decorate([
+    (0, common_1.Module)({
+        imports: [config_1.ConfigModule.forRoot(), core_module_1.CoreModule],
+    })
+], AppModule);
+//# sourceMappingURL=app.module.js.map

package/dist/src/app.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.module.js","sourceRoot":"","sources":["../../src/app.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,2CAA8C;AAC9C,oDAAkD;AAK3C,IAAM,SAAS,GAAf,MAAM,SAAS;CAAG,CAAA;AAAZ,8BAAS;oBAAT,SAAS;IAHrB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,qBAAY,CAAC,OAAO,EAAE,EAAE,wBAAU,CAAC;KAC9C,CAAC;GACW,SAAS,CAAG"}

package/dist/src/auth/auth.module.d.ts

@@ -0,0 +1,2 @@
+export declare class AuthModule {
+}

package/dist/src/auth/auth.module.js

@@ -0,0 +1,51 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthModule = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const cqrs_1 = require("@nestjs/cqrs");
+const jwt_1 = require("@nestjs/jwt");
+const passport_1 = require("@nestjs/passport");
+const auth_service_1 = require("./auth.service");
+const casl_ability_factory_1 = require("./casl-ability.factory");
+const commands_1 = require("./commands");
+const github_oauth_service_1 = require("./github-oauth.service");
+const google_oauth_service_1 = require("./google-oauth.service");
+const jwt_secret_service_1 = require("./jwt-secret.service");
+const jwt_strategy_1 = require("./strategy/jwt.strategy");
+const database_module_1 = require("../database/database.module");
+const email_module_1 = require("../email/email.module");
+let AuthModule = class AuthModule {
+};
+exports.AuthModule = AuthModule;
+exports.AuthModule = AuthModule = __decorate([
+    (0, common_1.Module)({
+        imports: [
+            cqrs_1.CqrsModule,
+            database_module_1.DatabaseModule,
+            config_1.ConfigModule,
+            passport_1.PassportModule,
+            jwt_1.JwtModule.register({
+                global: true,
+            }),
+            email_module_1.EmailModule,
+        ],
+        providers: [
+            auth_service_1.AuthService,
+            jwt_strategy_1.JwtStrategy,
+            jwt_secret_service_1.JwtSecretService,
+            google_oauth_service_1.GoogleOauthService,
+            github_oauth_service_1.GitHubAuthService,
+            casl_ability_factory_1.CaslAbilityFactory,
+            ...commands_1.AUTH_COMMANDS,
+        ],
+        exports: [auth_service_1.AuthService, google_oauth_service_1.GoogleOauthService, github_oauth_service_1.GitHubAuthService],
+    })
+], AuthModule);
+//# sourceMappingURL=auth.module.js.map

package/dist/src/auth/auth.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../../src/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,2CAA8C;AAC9C,uCAA0C;AAC1C,qCAAwC;AACxC,+CAAkD;AAClD,iDAAoD;AACpD,iEAAmE;AACnE,yCAAkD;AAClD,iEAAkE;AAClE,iEAAmE;AACnE,6DAA+D;AAC/D,0DAA6D;AAC7D,iEAA8D;AAC9D,wDAAqD;AAwB9C,IAAM,UAAU,GAAhB,MAAM,UAAU;CAAG,CAAA;AAAb,gCAAU;qBAAV,UAAU;IAtBtB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,iBAAU;YACV,gCAAc;YACd,qBAAY;YACZ,yBAAc;YACd,eAAS,CAAC,QAAQ,CAAC;gBACjB,MAAM,EAAE,IAAI;aACb,CAAC;YACF,0BAAW;SACZ;QACD,SAAS,EAAE;YACT,0BAAW;YACX,0BAAW;YACX,qCAAgB;YAChB,yCAAkB;YAClB,wCAAiB;YACjB,yCAAkB;YAClB,GAAG,wBAAa;SACjB;QACD,OAAO,EAAE,CAAC,0BAAW,EAAE,yCAAkB,EAAE,wCAAiB,CAAC;KAC9D,CAAC;GACW,UAAU,CAAG"}

package/dist/src/auth/auth.service.d.ts

@@ -0,0 +1,15 @@
+import { JwtService } from '@nestjs/jwt';
+import { JwtSecretService } from 'src/auth/jwt-secret.service';
+export declare class AuthService {
+    private readonly jwtService;
+    private readonly jwtSecret;
+    constructor(jwtService: JwtService, jwtSecret: JwtSecretService);
+    login(payload: {
+        username?: string | null;
+        email?: string | null;
+        sub: string;
+    }): string;
+    hashPassword(password: string): Promise<string>;
+    comparePassword(password: string, hash: string): Promise<boolean>;
+    generateConfirmationCode(): string;
+}

package/dist/src/auth/auth.service.js

@@ -0,0 +1,42 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthService = void 0;
+const common_1 = require("@nestjs/common");
+const jwt_1 = require("@nestjs/jwt");
+const bcrypt = require("bcrypt");
+const crypto = require("crypto");
+const jwt_secret_service_1 = require("./jwt-secret.service");
+let AuthService = class AuthService {
+    constructor(jwtService, jwtSecret) {
+        this.jwtService = jwtService;
+        this.jwtSecret = jwtSecret;
+    }
+    login(payload) {
+        return this.jwtService.sign({ ...payload }, { secret: this.jwtSecret.secret });
+    }
+    hashPassword(password) {
+        return bcrypt.hash(password, 10);
+    }
+    comparePassword(password, hash) {
+        return bcrypt.compare(password, hash);
+    }
+    generateConfirmationCode() {
+        return crypto.randomUUID().toString();
+    }
+};
+exports.AuthService = AuthService;
+exports.AuthService = AuthService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [jwt_1.JwtService,
+        jwt_secret_service_1.JwtSecretService])
+], AuthService);
+//# sourceMappingURL=auth.service.js.map

package/dist/src/auth/auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../src/auth/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,qCAAyC;AACzC,iCAAiC;AACjC,iCAAiC;AACjC,6DAA+D;AAGxD,IAAM,WAAW,GAAjB,MAAM,WAAW;IACtB,YACmB,UAAsB,EACtB,SAA2B;QAD3B,eAAU,GAAV,UAAU,CAAY;QACtB,cAAS,GAAT,SAAS,CAAkB;IAC3C,CAAC;IAEG,KAAK,CAAC,OAIZ;QAEC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,EAAE,GAAG,OAAO,EAAE,EACd,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAClC,CAAC;IACJ,CAAC;IAEM,YAAY,CAAC,QAAgB;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnC,CAAC;IAEM,eAAe,CAAC,QAAgB,EAAE,IAAY;QACnD,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAEM,wBAAwB;QAC7B,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,CAAC;IACxC,CAAC;CACF,CAAA;AA7BY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAGoB,gBAAU;QACX,qCAAgB;GAHnC,WAAW,CA6BvB"}

package/dist/src/auth/casl-ability.factory.d.ts

@@ -0,0 +1,25 @@
+import { PureAbility } from '@casl/ability';
+import { PrismaQuery, Subjects } from '@casl/prisma';
+import { Organization, Project, Branch, Revision, Table, Row, Endpoint, User } from '@prisma/client';
+import { PermissionAction, UserRole } from 'src/auth/consts';
+import { PrismaService } from 'src/database/prisma.service';
+export type AppSubjects = Subjects<{
+    Organization: Organization;
+    Project: Project;
+    Branch: Branch;
+    Revision: Revision;
+    Table: Table;
+    Row: Row;
+    Endpoint: Endpoint;
+    User: User;
+}>;
+export type AppAbility = PureAbility<[
+    PermissionAction,
+    AppSubjects
+], PrismaQuery>;
+export declare class CaslAbilityFactory {
+    private readonly prisma;
+    constructor(prisma: PrismaService);
+    createAbility(...roles: UserRole[]): Promise<AppAbility>;
+    private getPermissions;
+}

package/dist/src/auth/casl-ability.factory.js

@@ -0,0 +1,45 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CaslAbilityFactory = void 0;
+const ability_1 = require("@casl/ability");
+const prisma_1 = require("@casl/prisma");
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../database/prisma.service");
+let CaslAbilityFactory = class CaslAbilityFactory {
+    constructor(prisma) {
+        this.prisma = prisma;
+    }
+    async createAbility(...roles) {
+        const { can, build } = new ability_1.AbilityBuilder(prisma_1.createPrismaAbility);
+        for (const role of roles) {
+            for (const { action, subject, condition } of await this.getPermissions(role)) {
+                can(action, subject, condition);
+            }
+        }
+        return build();
+    }
+    getPermissions(role) {
+        return this.prisma.role
+            .findUniqueOrThrow({
+            where: {
+                id: role,
+            },
+        })
+            .permissions();
+    }
+};
+exports.CaslAbilityFactory = CaslAbilityFactory;
+exports.CaslAbilityFactory = CaslAbilityFactory = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService])
+], CaslAbilityFactory);
+//# sourceMappingURL=casl-ability.factory.js.map

package/dist/src/auth/casl-ability.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"casl-ability.factory.js","sourceRoot":"","sources":["../../../src/auth/casl-ability.factory.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4D;AAC5D,yCAA0E;AAC1E,2CAA4C;AAY5C,+DAA4D;AAmBrD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAEtD,KAAK,CAAC,aAAa,CAAC,GAAG,KAAiB;QACtC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,wBAAc,CAAa,4BAAmB,CAAC,CAAC;QAE3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,MAAM,IAAI,CAAC,cAAc,CACpE,IAAI,CACL,EAAE,CAAC;gBAGF,GAAG,CAAC,MAAM,EAAE,OAAiC,EAAE,SAAS,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,OAAO,KAAK,EAAE,CAAC;IACjB,CAAC;IAEO,cAAc,CAAC,IAAc;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;aACpB,iBAAiB,CAAC;YACjB,KAAK,EAAE;gBACL,EAAE,EAAE,IAAI;aACT;SACF,CAAC;aACD,WAAW,EAAE,CAAC;IACnB,CAAC;CACF,CAAA;AA5BY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAE0B,8BAAa;GADvC,kBAAkB,CA4B9B"}

package/dist/src/auth/commands/handlers/check-organization-permission.handler.d.ts

@@ -0,0 +1,12 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { CaslAbilityFactory } from 'src/auth/casl-ability.factory';
+import { CheckOrganizationPermissionCommand } from 'src/auth/commands/impl/check-organization-permission.command';
+import { PrismaService } from 'src/database/prisma.service';
+export declare class CheckOrganizationPermissionHandler implements ICommandHandler<CheckOrganizationPermissionCommand, true> {
+    private readonly prisma;
+    private readonly casl;
+    constructor(prisma: PrismaService, casl: CaslAbilityFactory);
+    execute({ data }: CheckOrganizationPermissionCommand): Promise<true>;
+    private getOrganizationRole;
+    private getSystemRole;
+}

package/dist/src/auth/commands/handlers/check-organization-permission.handler.js

@@ -0,0 +1,67 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CheckOrganizationPermissionHandler = void 0;
+const ability_1 = require("@casl/ability");
+const cqrs_1 = require("@nestjs/cqrs");
+const casl_ability_factory_1 = require("../../casl-ability.factory");
+const check_organization_permission_command_1 = require("../impl/check-organization-permission.command");
+const consts_1 = require("../../consts");
+const utils_1 = require("../../utils");
+const prisma_service_1 = require("../../../database/prisma.service");
+let CheckOrganizationPermissionHandler = class CheckOrganizationPermissionHandler {
+    constructor(prisma, casl) {
+        this.prisma = prisma;
+        this.casl = casl;
+    }
+    async execute({ data }) {
+        const systemRole = await this.getSystemRole(data);
+        const organizationRole = await this.getOrganizationRole(data);
+        const ability = await this.casl.createAbility(systemRole, organizationRole);
+        for (const permission of data.permissions) {
+            ability_1.ForbiddenError.from(ability)
+                .setMessage(`You are not allowed to ${permission.action} on ${permission.subject}`)
+                .throwUnlessCan(permission.action, permission.subject);
+        }
+        return true;
+    }
+    async getOrganizationRole(data) {
+        if (data.userId) {
+            const result = await this.prisma.userOrganization.findFirst({
+                where: { organizationId: data.organizationId, userId: data.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+    async getSystemRole(data) {
+        if (data.userId) {
+            const result = await this.prisma.user.findUnique({
+                where: { id: data.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+};
+exports.CheckOrganizationPermissionHandler = CheckOrganizationPermissionHandler;
+exports.CheckOrganizationPermissionHandler = CheckOrganizationPermissionHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(check_organization_permission_command_1.CheckOrganizationPermissionCommand),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        casl_ability_factory_1.CaslAbilityFactory])
+], CheckOrganizationPermissionHandler);
+//# sourceMappingURL=check-organization-permission.handler.js.map

package/dist/src/auth/commands/handlers/check-organization-permission.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-organization-permission.handler.js","sourceRoot":"","sources":["../../../../../src/auth/commands/handlers/check-organization-permission.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+C;AAC/C,uCAA+D;AAC/D,qEAAmE;AACnE,yGAAkH;AAClH,yCAA2C;AAC3C,uCAA6C;AAC7C,qEAA4D;AAGrD,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAG7C,YACmB,MAAqB,EACrB,IAAwB;QADxB,WAAM,GAAN,MAAM,CAAe;QACrB,SAAI,GAAJ,IAAI,CAAoB;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAsC;QACxD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAE9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAE5E,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,wBAAc,CAAC,IAAI,CAAC,OAAO,CAAC;iBACzB,UAAU,CACT,0BAA0B,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,OAAO,EAAE,CACvE;iBACA,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,IAAgD;QAEhD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBAC1D,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;gBACnE,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,IAAgD;QAEhD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC/C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;CACF,CAAA;AA1DY,gFAAkC;6CAAlC,kCAAkC;IAD9C,IAAA,qBAAc,EAAC,0EAAkC,CAAC;qCAKtB,8BAAa;QACf,yCAAkB;GALhC,kCAAkC,CA0D9C"}

package/dist/src/auth/commands/handlers/check-project-permission.handler.d.ts

@@ -0,0 +1,17 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { CaslAbilityFactory } from 'src/auth/casl-ability.factory';
+import { CheckProjectPermissionCommand } from 'src/auth/commands/impl';
+import { PrismaService } from 'src/database/prisma.service';
+export declare class CheckProjectPermissionHandler implements ICommandHandler<CheckProjectPermissionCommand, true> {
+    private readonly prisma;
+    private readonly casl;
+    constructor(prisma: PrismaService, casl: CaslAbilityFactory);
+    execute({ data }: CheckProjectPermissionCommand): Promise<true>;
+    private getOrganizationRole;
+    private getProjectRole;
+    private resolveProject;
+    private getProjectByProjectName;
+    private getProjectByEndpointId;
+    private getProjectByRevisionId;
+    private getSystemRole;
+}

package/dist/src/auth/commands/handlers/check-project-permission.handler.js

@@ -0,0 +1,149 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CheckProjectPermissionHandler = void 0;
+const ability_1 = require("@casl/ability");
+const cqrs_1 = require("@nestjs/cqrs");
+const casl_ability_factory_1 = require("../../casl-ability.factory");
+const impl_1 = require("../impl");
+const consts_1 = require("../../consts");
+const utils_1 = require("../../utils");
+const prisma_service_1 = require("../../../database/prisma.service");
+let CheckProjectPermissionHandler = class CheckProjectPermissionHandler {
+    constructor(prisma, casl) {
+        this.prisma = prisma;
+        this.casl = casl;
+    }
+    async execute({ data }) {
+        const project = await this.resolveProject(data);
+        const systemRole = await this.getSystemRole(data);
+        const organizationRole = await this.getOrganizationRole({
+            organizationId: project.organizationId,
+            userId: data.userId,
+        });
+        const projectRole = await this.getProjectRole({
+            organizationId: project.organizationId,
+            projectName: project.name,
+            userId: data.userId,
+        });
+        const ability = await this.casl.createAbility(systemRole, organizationRole, projectRole);
+        for (const permission of data.permissions) {
+            ability_1.ForbiddenError.from(ability)
+                .setMessage(`You are not allowed to ${permission.action} on ${permission.subject}`)
+                .throwUnlessCan(permission.action, permission.subject === consts_1.PermissionSubject.Project
+                ? (0, ability_1.subject)(consts_1.PermissionSubject.Project, project)
+                : permission.subject);
+        }
+        return true;
+    }
+    async getOrganizationRole(params) {
+        if (params.userId) {
+            const result = await this.prisma.userOrganization.findFirst({
+                where: { organizationId: params.organizationId, userId: params.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+    async getProjectRole(params) {
+        if (params.userId) {
+            const project = await this.prisma.project.findFirst({
+                where: {
+                    organizationId: params.organizationId,
+                    name: params.projectName,
+                },
+                select: {
+                    id: true,
+                },
+            });
+            if (!project) {
+                return consts_1.UserRole.guest;
+            }
+            const result = await this.prisma.userProject.findFirst({
+                where: { projectId: project.id, userId: params.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+    async resolveProject(data) {
+        if ('organizationId' in data && 'projectName' in data) {
+            return this.getProjectByProjectName(data.organizationId, data.projectName);
+        }
+        else if ('revisionId' in data) {
+            return this.getProjectByRevisionId(data.revisionId);
+        }
+        else if ('endpointId' in data) {
+            return this.getProjectByEndpointId(data.endpointId);
+        }
+        throw new Error(`Invalid data=${data}`);
+    }
+    async getProjectByProjectName(organizationId, projectName) {
+        return this.prisma.project.findFirstOrThrow({
+            where: { organizationId, name: projectName },
+        });
+    }
+    async getProjectByEndpointId(endpointId) {
+        const revision = await this.prisma.endpoint.findUniqueOrThrow({
+            where: { id: endpointId },
+            select: {
+                revision: {
+                    select: {
+                        branch: {
+                            select: {
+                                project: true,
+                            },
+                        },
+                    },
+                },
+            },
+        });
+        return revision.revision.branch.project;
+    }
+    async getProjectByRevisionId(revisionId) {
+        const revision = await this.prisma.revision.findUniqueOrThrow({
+            where: { id: revisionId },
+            select: {
+                branch: {
+                    select: {
+                        project: true,
+                    },
+                },
+            },
+        });
+        return revision.branch.project;
+    }
+    async getSystemRole(data) {
+        if (data.userId) {
+            const result = await this.prisma.user.findUnique({
+                where: { id: data.userId },
+                select: {
+                    roleId: true,
+                },
+            });
+            return (0, utils_1.getUserRole)(result?.roleId);
+        }
+        return consts_1.UserRole.guest;
+    }
+};
+exports.CheckProjectPermissionHandler = CheckProjectPermissionHandler;
+exports.CheckProjectPermissionHandler = CheckProjectPermissionHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(impl_1.CheckProjectPermissionCommand),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        casl_ability_factory_1.CaslAbilityFactory])
+], CheckProjectPermissionHandler);
+//# sourceMappingURL=check-project-permission.handler.js.map

package/dist/src/auth/commands/handlers/check-project-permission.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-project-permission.handler.js","sourceRoot":"","sources":["../../../../../src/auth/commands/handlers/check-project-permission.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAwD;AACxD,uCAA+D;AAC/D,qEAAmE;AACnE,kCAAuE;AACvE,yCAA8D;AAC9D,uCAA6C;AAC7C,qEAA4D;AAGrD,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IAGxC,YACmB,MAAqB,EACrB,IAAwB;QADxB,WAAM,GAAN,MAAM,CAAe;QACrB,SAAI,GAAJ,IAAI,CAAoB;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAiC;QACnD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAEhD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAElD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC;YACtD,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;YAC5C,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAC3C,UAAU,EACV,gBAAgB,EAChB,WAAW,CACZ,CAAC;QAEF,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,wBAAc,CAAC,IAAI,CAAC,OAAO,CAAC;iBACzB,UAAU,CACT,0BAA0B,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,OAAO,EAAE,CACvE;iBACA,cAAc,CACb,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,OAAO,KAAK,0BAAiB,CAAC,OAAO;gBAC9C,CAAC,CAAC,IAAA,iBAAO,EAAC,0BAAiB,CAAC,OAAO,EAAE,OAAO,CAAC;gBAC7C,CAAC,CAAC,UAAU,CAAC,OAAO,CACvB,CAAC;QACN,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,MAGjC;QACC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBAC1D,KAAK,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;gBACvE,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAI5B;QACC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;gBAClD,KAAK,EAAE;oBACL,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,IAAI,EAAE,MAAM,CAAC,WAAW;iBACzB;gBACD,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;iBACT;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,iBAAQ,CAAC,KAAK,CAAC;YACxB,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC;gBACrD,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;gBACvD,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAA2C;QACtE,IAAI,gBAAgB,IAAI,IAAI,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,uBAAuB,CACjC,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,WAAW,CACjB,CAAC;QACJ,CAAC;aAAM,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,cAAsB,EACtB,WAAmB;QAEnB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC1C,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,UAAkB;QACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC5D,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;YACzB,MAAM,EAAE;gBACN,QAAQ,EAAE;oBACR,MAAM,EAAE;wBACN,MAAM,EAAE;4BACN,MAAM,EAAE;gCACN,OAAO,EAAE,IAAI;6BACd;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,UAAkB;QACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC5D,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;YACzB,MAAM,EAAE;gBACN,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,OAAO,EAAE,IAAI;qBACd;iBACF;aACF;SACF,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,IAA2C;QAE3C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC/C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,iBAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;CACF,CAAA;AA3KY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,qBAAc,EAAC,oCAA6B,CAAC;qCAKjB,8BAAa;QACf,yCAAkB;GALhC,6BAA6B,CA2KzC"}

package/dist/src/auth/commands/handlers/check-system-permission.handler.d.ts

@@ -0,0 +1,11 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { CaslAbilityFactory } from 'src/auth/casl-ability.factory';
+import { CheckSystemPermissionCommand, CheckSystemPermissionCommandReturnType } from 'src/auth/commands/impl';
+import { PrismaService } from 'src/database/prisma.service';
+export declare class CheckSystemPermissionHandler implements ICommandHandler<CheckSystemPermissionCommand, CheckSystemPermissionCommandReturnType> {
+    private readonly prisma;
+    private readonly casl;
+    constructor(prisma: PrismaService, casl: CaslAbilityFactory);
+    execute({ data }: CheckSystemPermissionCommand): Promise<boolean>;
+    private getSystemRole;
+}