@schorts/shared-kernel 2.3.0 → 2.3.2

package/CHANGELOG

@@ -5,7 +5,19 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [2.3.0] - 2025-10-11
+## [2.3.2] - 2025-10-11
+
+### Added
+
+- Added `NotAuthorized` exception.
+
+## [2.3.1] - 2025-10-11
+
+### Changed
+
+- `userID` now is protected in the `RBACPolicy`.
+
+## [2.3.0] - 2025-10-10
 
 ### Added
 

package/README.md

@@ -15,6 +15,10 @@ npm install @schorts/shared-kernel --save
 - **AuthProvider:** Abstract interface for authentication strategies.
 - **RequireAuthDecorator:** Method-level decorator for enforcing authentication.
 
+### 🛡️ RBAC (Role-Based Access Control)
+- **RBACPolicy:** Abstract base class for defining role-based permission logic. Supports wildcard actions (manage) and resources (*), ownership checks, and composable access control strategies.
+- **Permission:** Lightweight value object representing an action-resource pair (e.g., read:orders, manage:*).
+
 ### 📊 Criteria
 
 - **Criteria:** Fluent query builder for filtering, sorting, and pagination.

package/dist/cjs/rbac/exceptions/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotAuthorized = void 0;
+var not_authorized_1 = require("./not-authorized");
+Object.defineProperty(exports, "NotAuthorized", { enumerable: true, get: function () { return not_authorized_1.NotAuthorized; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/rbac/exceptions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/rbac/exceptions/index.ts"],"names":[],"mappings":";;;AAAA,mDAAiD;AAAxC,+GAAA,aAAa,OAAA"}

package/dist/cjs/rbac/exceptions/not-authorized.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotAuthorized = void 0;
+class NotAuthorized extends Error {
+}
+exports.NotAuthorized = NotAuthorized;
+//# sourceMappingURL=not-authorized.js.map

package/dist/cjs/rbac/exceptions/not-authorized.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"not-authorized.js","sourceRoot":"","sources":["../../../../src/rbac/exceptions/not-authorized.ts"],"names":[],"mappings":";;;AAAA,MAAa,aAAc,SAAQ,KAAK;CAAG;AAA3C,sCAA2C"}

package/dist/cjs/rbac/index.js

@@ -1,6 +1,21 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RBACPolicy = void 0;
 var rbac_policy_1 = require("./rbac-policy");
 Object.defineProperty(exports, "RBACPolicy", { enumerable: true, get: function () { return rbac_policy_1.RBACPolicy; } });
+__exportStar(require("./exceptions"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/rbac/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/rbac/index.ts"],"names":[],"mappings":";;;AAGA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/rbac/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAGA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,+CAA6B"}

package/dist/esm/rbac/exceptions/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotAuthorized = void 0;
+var not_authorized_1 = require("./not-authorized");
+Object.defineProperty(exports, "NotAuthorized", { enumerable: true, get: function () { return not_authorized_1.NotAuthorized; } });
+//# sourceMappingURL=index.js.map

package/dist/esm/rbac/exceptions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/rbac/exceptions/index.ts"],"names":[],"mappings":";;;AAAA,mDAAiD;AAAxC,+GAAA,aAAa,OAAA"}

package/dist/esm/rbac/exceptions/not-authorized.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotAuthorized = void 0;
+class NotAuthorized extends Error {
+}
+exports.NotAuthorized = NotAuthorized;
+//# sourceMappingURL=not-authorized.js.map

package/dist/esm/rbac/exceptions/not-authorized.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"not-authorized.js","sourceRoot":"","sources":["../../../../src/rbac/exceptions/not-authorized.ts"],"names":[],"mappings":";;;AAAA,MAAa,aAAc,SAAQ,KAAK;CAAG;AAA3C,sCAA2C"}

package/dist/esm/rbac/index.js

@@ -1,6 +1,21 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RBACPolicy = void 0;
 var rbac_policy_1 = require("./rbac-policy");
 Object.defineProperty(exports, "RBACPolicy", { enumerable: true, get: function () { return rbac_policy_1.RBACPolicy; } });
+__exportStar(require("./exceptions"), exports);
 //# sourceMappingURL=index.js.map

package/dist/esm/rbac/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/rbac/index.ts"],"names":[],"mappings":";;;AAGA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/rbac/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAGA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,+CAA6B"}

package/dist/types/rbac/exceptions/index.d.ts

@@ -0,0 +1,2 @@
+export { NotAuthorized } from "./not-authorized";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/rbac/exceptions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/rbac/exceptions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/types/rbac/exceptions/not-authorized.d.ts

@@ -0,0 +1,3 @@
+export declare class NotAuthorized extends Error {
+}
+//# sourceMappingURL=not-authorized.d.ts.map

package/dist/types/rbac/exceptions/not-authorized.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"not-authorized.d.ts","sourceRoot":"","sources":["../../../../src/rbac/exceptions/not-authorized.ts"],"names":[],"mappings":"AAAA,qBAAa,aAAc,SAAQ,KAAK;CAAG"}

package/dist/types/rbac/index.d.ts

@@ -1,4 +1,5 @@
 export type { Permission } from "./permission";
 export type { Resource } from "./resource";
 export { RBACPolicy } from "./rbac-policy";
+export * from "./exceptions";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/rbac/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/rbac/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/rbac/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,cAAc,cAAc,CAAC"}

package/dist/types/rbac/rbac-policy.d.ts

@@ -2,7 +2,7 @@ import { Permission } from './permission';
 import { Resource } from './resource';
 import { ValueObject } from '../value-objects';
 export declare abstract class RBACPolicy<Role extends string, UserID extends ValueObject> {
-    abstract userID: UserID;
+    protected abstract userID: UserID;
     abstract getPermissions(role: Role): Permission[];
     can(role: Role, action: Permission['action'], resource: Resource): boolean;
     canAccessOwnedResource(resource: Resource): boolean;

package/dist/types/rbac/rbac-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rbac-policy.d.ts","sourceRoot":"","sources":["../../../src/rbac/rbac-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,8BAAsB,UAAU,CAAC,IAAI,SAAS,MAAM,EAAE,MAAM,SAAS,WAAW;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,EAAE;IAEjD,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO;IAU1E,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO;IAInD,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO;CAGxF"}
+{"version":3,"file":"rbac-policy.d.ts","sourceRoot":"","sources":["../../../src/rbac/rbac-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,8BAAsB,UAAU,CAAC,IAAI,SAAS,MAAM,EAAE,MAAM,SAAS,WAAW;IAC9E,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,EAAE;IAEjD,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO;IAU1E,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO;IAInD,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO;CAGxF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@schorts/shared-kernel",
-  "version": "2.3.0",
+  "version": "2.3.2",
   "description": "A modular, type-safe foundation for building expressive, maintainable applications. This package provides core abstractions for domain modeling, HTTP integration, authentication, state management, and more — designed to be framework-agnostic and highly extensible.",
   "main": "./dist/cjs/index.js",
   "module": "./dist/esm/index.js",

package/src/rbac/exceptions/index.ts

@@ -0,0 +1 @@
+export { NotAuthorized } from "./not-authorized";

package/src/rbac/exceptions/not-authorized.ts

@@ -0,0 +1 @@
+export class NotAuthorized extends Error {}

package/src/rbac/index.ts

@@ -2,3 +2,4 @@ export type { Permission } from "./permission";
 export type { Resource } from "./resource";
 
 export { RBACPolicy } from "./rbac-policy"; 
+export * from "./exceptions";

package/src/rbac/rbac-policy.ts

@@ -3,7 +3,7 @@ import { Resource } from './resource';
 import { ValueObject } from '../value-objects';
 
 export abstract class RBACPolicy<Role extends string, UserID extends ValueObject> {
-  abstract userID: UserID;
+  protected abstract userID: UserID;
   abstract getPermissions(role: Role): Permission[];
 
   can(role: Role, action: Permission['action'], resource: Resource): boolean {