lapeeh 1.0.11 → 1.0.13

package/dist/src/modules/Rbac/rbac.controller.js

@@ -0,0 +1,438 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRole = createRole;
+exports.listRoles = listRoles;
+exports.updateRole = updateRole;
+exports.deleteRole = deleteRole;
+exports.createPermission = createPermission;
+exports.listPermissions = listPermissions;
+exports.updatePermission = updatePermission;
+exports.deletePermission = deletePermission;
+exports.assignRoleToUser = assignRoleToUser;
+exports.removeRoleFromUser = removeRoleFromUser;
+exports.assignPermissionToRole = assignPermissionToRole;
+exports.removePermissionFromRole = removePermissionFromRole;
+exports.assignPermissionToUser = assignPermissionToUser;
+exports.removePermissionFromUser = removePermissionFromUser;
+const store_1 = require("../../../lib/core/store");
+const response_1 = require("../../../lib/utils/response");
+const validator_1 = require("../../../lib/utils/validator");
+const zod_1 = require("zod");
+const serializer_1 = require("../../../lib/core/serializer");
+// --- Serializers ---
+const roleSchema = {
+    type: "object",
+    properties: {
+        id: { type: "string" },
+        name: { type: "string" },
+        slug: { type: "string" },
+        description: { type: "string", nullable: true },
+        created_at: { type: "string", format: "date-time", nullable: true },
+        updated_at: { type: "string", format: "date-time", nullable: true },
+    },
+};
+const permissionSchema = {
+    type: "object",
+    properties: {
+        id: { type: "string" },
+        name: { type: "string" },
+        slug: { type: "string" },
+        description: { type: "string", nullable: true },
+        created_at: { type: "string", format: "date-time", nullable: true },
+        updated_at: { type: "string", format: "date-time", nullable: true },
+    },
+};
+const roleSerializer = (0, serializer_1.getSerializer)("role", (0, serializer_1.createResponseSchema)(roleSchema));
+const roleListSerializer = (0, serializer_1.getSerializer)("role-list", (0, serializer_1.createResponseSchema)({ type: "array", items: roleSchema }));
+const permissionSerializer = (0, serializer_1.getSerializer)("permission", (0, serializer_1.createResponseSchema)(permissionSchema));
+const permissionListSerializer = (0, serializer_1.getSerializer)("permission-list", (0, serializer_1.createResponseSchema)({ type: "array", items: permissionSchema }));
+const voidSerializer = (0, serializer_1.getSerializer)("void", (0, serializer_1.createResponseSchema)({ type: "null" }));
+// --- Controllers ---
+async function createRole(req, res) {
+    const validator = validator_1.Validator.make(req.body || {}, {
+        name: "required|string|min:1",
+        slug: "required|string|min:1|unique:roles,slug",
+        description: "string",
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { name, slug, description } = await validator.validated();
+    // Manual unique check
+    if (store_1.roles.find((r) => r.slug === slug)) {
+        (0, response_1.sendError)(res, 422, "Validation error", { slug: "Slug already exists" });
+        return;
+    }
+    const role = {
+        id: (0, store_1.generateId)(),
+        name,
+        slug,
+        description: description || null,
+        created_at: new Date(),
+        updated_at: new Date(),
+    };
+    store_1.roles.push(role);
+    (0, store_1.saveStore)();
+    (0, response_1.sendFastSuccess)(res, 201, roleSerializer, {
+        status: "success",
+        message: "Role created",
+        data: { ...role, id: role.id.toString() },
+    });
+}
+async function listRoles(_req, res) {
+    const serialized = store_1.roles.map((r) => ({ ...r, id: r.id.toString() }));
+    (0, response_1.sendFastSuccess)(res, 200, roleListSerializer, {
+        status: "success",
+        message: "Roles list",
+        data: serialized,
+    });
+}
+async function updateRole(req, res) {
+    const { id } = req.params;
+    const roleId = id;
+    const validator = validator_1.Validator.make(req.body || {}, {
+        name: "string",
+        slug: `string|unique:roles,slug,${id}`,
+        description: "string",
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { name, slug, description } = await validator.validated();
+    const roleIndex = store_1.roles.findIndex((r) => r.id === roleId);
+    if (roleIndex === -1) {
+        (0, response_1.sendError)(res, 404, "Role not found");
+        return;
+    }
+    // Manual unique check for update
+    if (slug &&
+        slug !== store_1.roles[roleIndex].slug &&
+        store_1.roles.find((r) => r.slug === slug)) {
+        (0, response_1.sendError)(res, 422, "Validation error", { slug: "Slug already exists" });
+        return;
+    }
+    store_1.roles[roleIndex] = {
+        ...store_1.roles[roleIndex],
+        name: name ?? store_1.roles[roleIndex].name,
+        slug: slug ?? store_1.roles[roleIndex].slug,
+        description: description ?? store_1.roles[roleIndex].description,
+        updated_at: new Date(),
+    };
+    (0, store_1.saveStore)();
+    const updated = store_1.roles[roleIndex];
+    (0, response_1.sendFastSuccess)(res, 200, roleSerializer, {
+        status: "success",
+        message: "Role updated",
+        data: { ...updated, id: updated.id.toString() },
+    });
+}
+async function deleteRole(req, res) {
+    const { id } = req.params;
+    const roleId = id;
+    const roleIndex = store_1.roles.findIndex((r) => r.id === roleId);
+    if (roleIndex === -1) {
+        (0, response_1.sendError)(res, 404, "Role not found");
+        return;
+    }
+    // Clean up relationships
+    // Remove from role_permissions
+    for (let i = store_1.role_permissions.length - 1; i >= 0; i--) {
+        if (store_1.role_permissions[i].role_id === roleId) {
+            store_1.role_permissions.splice(i, 1);
+        }
+    }
+    // Remove from user_roles
+    for (let i = store_1.user_roles.length - 1; i >= 0; i--) {
+        if (store_1.user_roles[i].role_id === roleId) {
+            store_1.user_roles.splice(i, 1);
+        }
+    }
+    store_1.roles.splice(roleIndex, 1);
+    (0, response_1.sendFastSuccess)(res, 200, voidSerializer, {
+        status: "success",
+        message: "Role deleted",
+        data: null,
+    });
+}
+async function createPermission(req, res) {
+    const validator = validator_1.Validator.make(req.body || {}, {
+        name: "required|string|min:1",
+        slug: "required|string|min:1|unique:permissions,slug",
+        description: "string",
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { name, slug, description } = await validator.validated();
+    // Manual unique check
+    if (store_1.permissions.find((p) => p.slug === slug)) {
+        (0, response_1.sendError)(res, 422, "Validation error", { slug: "Slug already exists" });
+        return;
+    }
+    const permission = {
+        id: (0, store_1.generateId)(),
+        name,
+        slug,
+        description: description || null,
+        created_at: new Date(),
+        updated_at: new Date(),
+    };
+    store_1.permissions.push(permission);
+    (0, store_1.saveStore)();
+    (0, response_1.sendFastSuccess)(res, 201, permissionSerializer, {
+        status: "success",
+        message: "Permission created",
+        data: { ...permission, id: permission.id.toString() },
+    });
+}
+async function listPermissions(_req, res) {
+    const serialized = store_1.permissions.map((p) => ({
+        ...p,
+        id: p.id.toString(),
+    }));
+    (0, response_1.sendFastSuccess)(res, 200, permissionListSerializer, {
+        status: "success",
+        message: "Permissions list",
+        data: serialized,
+    });
+}
+async function updatePermission(req, res) {
+    const { id } = req.params;
+    const permissionId = id;
+    const validator = validator_1.Validator.make(req.body || {}, {
+        name: "string",
+        slug: `string|unique:permissions,slug,${id}`,
+        description: "string",
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { name, slug, description } = await validator.validated();
+    const permIndex = store_1.permissions.findIndex((p) => p.id === permissionId);
+    if (permIndex === -1) {
+        (0, response_1.sendError)(res, 404, "Permission not found");
+        return;
+    }
+    if (slug &&
+        slug !== store_1.permissions[permIndex].slug &&
+        store_1.permissions.find((p) => p.slug === slug)) {
+        (0, response_1.sendError)(res, 422, "Validation error", { slug: "Slug already exists" });
+        return;
+    }
+    store_1.permissions[permIndex] = {
+        ...store_1.permissions[permIndex],
+        name: name ?? store_1.permissions[permIndex].name,
+        slug: slug ?? store_1.permissions[permIndex].slug,
+        description: description ?? store_1.permissions[permIndex].description,
+        updated_at: new Date(),
+    };
+    (0, store_1.saveStore)();
+    const updated = store_1.permissions[permIndex];
+    (0, response_1.sendFastSuccess)(res, 200, permissionSerializer, {
+        status: "success",
+        message: "Permission updated",
+        data: { ...updated, id: updated.id.toString() },
+    });
+}
+async function deletePermission(req, res) {
+    const { id } = req.params;
+    const permissionId = id;
+    const permIndex = store_1.permissions.findIndex((p) => p.id === permissionId);
+    if (permIndex === -1) {
+        (0, response_1.sendError)(res, 404, "Permission not found");
+        return;
+    }
+    // Clean up relationships
+    for (let i = store_1.role_permissions.length - 1; i >= 0; i--) {
+        if (store_1.role_permissions[i].permission_id === permissionId) {
+            store_1.role_permissions.splice(i, 1);
+        }
+    }
+    for (let i = store_1.user_permissions.length - 1; i >= 0; i--) {
+        if (store_1.user_permissions[i].permission_id === permissionId) {
+            store_1.user_permissions.splice(i, 1);
+        }
+    }
+    store_1.permissions.splice(permIndex, 1);
+    (0, store_1.saveStore)();
+    (0, response_1.sendFastSuccess)(res, 200, voidSerializer, {
+        status: "success",
+        message: "Permission deleted",
+        data: null,
+    });
+}
+async function assignRoleToUser(req, res) {
+    const validator = validator_1.Validator.make(req.body || {}, {
+        userId: zod_1.z.string().min(1, "userId wajib diisi"),
+        roleId: zod_1.z.string().min(1, "roleId wajib diisi"),
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { userId, roleId } = await validator.validated();
+    const user = store_1.users.find((u) => u.id === userId);
+    if (!user) {
+        (0, response_1.sendError)(res, 404, "User not found");
+        return;
+    }
+    const role = store_1.roles.find((r) => r.id === roleId);
+    if (!role) {
+        (0, response_1.sendError)(res, 404, "Role not found");
+        return;
+    }
+    const exists = store_1.user_roles.find((ur) => ur.user_id === userId && ur.role_id === roleId);
+    if (!exists) {
+        store_1.user_roles.push({
+            id: (0, store_1.generateId)(),
+            user_id: userId,
+            role_id: roleId,
+            created_at: new Date(),
+        });
+        (0, store_1.saveStore)();
+    }
+    (0, response_1.sendFastSuccess)(res, 200, voidSerializer, {
+        status: "success",
+        message: "Role assigned to user",
+        data: null,
+    });
+}
+async function removeRoleFromUser(req, res) {
+    const validator = validator_1.Validator.make(req.body || {}, {
+        userId: zod_1.z.string().min(1, "userId wajib diisi"),
+        roleId: zod_1.z.string().min(1, "roleId wajib diisi"),
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { userId, roleId } = await validator.validated();
+    for (let i = store_1.user_roles.length - 1; i >= 0; i--) {
+        if (store_1.user_roles[i].user_id === userId && store_1.user_roles[i].role_id === roleId) {
+            store_1.user_roles.splice(i, 1);
+        }
+    }
+    (0, response_1.sendFastSuccess)(res, 200, voidSerializer, {
+        status: "success",
+        message: "Role removed from user",
+        data: null,
+    });
+}
+async function assignPermissionToRole(req, res) {
+    const validator = validator_1.Validator.make(req.body || {}, {
+        roleId: zod_1.z.string().min(1, "roleId wajib diisi"),
+        permissionId: zod_1.z.string().min(1, "permissionId wajib diisi"),
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { roleId, permissionId } = await validator.validated();
+    const role = store_1.roles.find((r) => r.id === roleId);
+    if (!role) {
+        (0, response_1.sendError)(res, 404, "Role not found");
+        return;
+    }
+    const permission = store_1.permissions.find((p) => p.id === permissionId);
+    if (!permission) {
+        (0, response_1.sendError)(res, 404, "Permission not found");
+        return;
+    }
+    const exists = store_1.role_permissions.find((rp) => rp.role_id === roleId && rp.permission_id === permissionId);
+    if (!exists) {
+        store_1.role_permissions.push({
+            id: (0, store_1.generateId)(),
+            role_id: roleId,
+            permission_id: permissionId,
+            created_at: new Date(),
+        });
+        (0, store_1.saveStore)();
+    }
+    (0, response_1.sendFastSuccess)(res, 200, voidSerializer, {
+        status: "success",
+        message: "Permission assigned to role",
+        data: null,
+    });
+}
+async function removePermissionFromRole(req, res) {
+    const validator = validator_1.Validator.make(req.body || {}, {
+        roleId: zod_1.z.string().min(1, "roleId wajib diisi"),
+        permissionId: zod_1.z.string().min(1, "permissionId wajib diisi"),
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { roleId, permissionId } = await validator.validated();
+    for (let i = store_1.role_permissions.length - 1; i >= 0; i--) {
+        if (store_1.role_permissions[i].role_id === roleId &&
+            store_1.role_permissions[i].permission_id === permissionId) {
+            store_1.role_permissions.splice(i, 1);
+        }
+    }
+    (0, response_1.sendFastSuccess)(res, 200, voidSerializer, {
+        status: "success",
+        message: "Permission removed from role",
+        data: null,
+    });
+}
+async function assignPermissionToUser(req, res) {
+    const validator = validator_1.Validator.make(req.body || {}, {
+        userId: zod_1.z.string().min(1, "userId wajib diisi"),
+        permissionId: zod_1.z.string().min(1, "permissionId wajib diisi"),
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { userId, permissionId } = await validator.validated();
+    const user = store_1.users.find((u) => u.id === userId);
+    if (!user) {
+        (0, response_1.sendError)(res, 404, "User not found");
+        return;
+    }
+    const permission = store_1.permissions.find((p) => p.id === permissionId);
+    if (!permission) {
+        (0, response_1.sendError)(res, 404, "Permission not found");
+        return;
+    }
+    const exists = store_1.user_permissions.find((up) => up.user_id === userId && up.permission_id === permissionId);
+    if (!exists) {
+        store_1.user_permissions.push({
+            id: (0, store_1.generateId)(),
+            user_id: userId,
+            permission_id: permissionId,
+            created_at: new Date(),
+        });
+    }
+    (0, response_1.sendFastSuccess)(res, 200, voidSerializer, {
+        status: "success",
+        message: "Permission assigned to user",
+        data: null,
+    });
+}
+async function removePermissionFromUser(req, res) {
+    const validator = validator_1.Validator.make(req.body || {}, {
+        userId: zod_1.z.string().min(1, "userId wajib diisi"),
+        permissionId: zod_1.z.string().min(1, "permissionId wajib diisi"),
+    });
+    if (await validator.fails()) {
+        (0, response_1.sendError)(res, 422, "Validation error", validator.errors());
+        return;
+    }
+    const { userId, permissionId } = await validator.validated();
+    const index = store_1.user_permissions.findIndex((up) => up.user_id === userId && up.permission_id === permissionId);
+    if (index !== -1) {
+        store_1.user_permissions.splice(index, 1);
+        (0, store_1.saveStore)();
+    }
+    (0, response_1.sendFastSuccess)(res, 200, voidSerializer, {
+        status: "success",
+        message: "Permission removed from user",
+        data: null,
+    });
+}

package/dist/src/modules/Rbac/rbac.routes.d.ts

@@ -0,0 +1,2 @@
+export declare const rbacRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=rbac.routes.d.ts.map

package/dist/src/modules/Rbac/rbac.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.routes.d.ts","sourceRoot":"","sources":["../../../../src/modules/Rbac/rbac.routes.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,UAAU,4CAAW,CAAC"}

package/dist/src/modules/Rbac/rbac.routes.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rbacRouter = void 0;
+const express_1 = require("express");
+const auth_1 = require("../../../lib/middleware/auth");
+const rbac_controller_1 = require("./rbac.controller");
+exports.rbacRouter = (0, express_1.Router)();
+exports.rbacRouter.use(auth_1.requireAuth);
+exports.rbacRouter.use(auth_1.requireAdmin);
+exports.rbacRouter.post("/roles", rbac_controller_1.createRole);
+exports.rbacRouter.get("/roles", rbac_controller_1.listRoles);
+exports.rbacRouter.put("/roles/:id", rbac_controller_1.updateRole);
+exports.rbacRouter.delete("/roles/:id", rbac_controller_1.deleteRole);
+exports.rbacRouter.post("/permissions", rbac_controller_1.createPermission);
+exports.rbacRouter.get("/permissions", rbac_controller_1.listPermissions);
+exports.rbacRouter.put("/permissions/:id", rbac_controller_1.updatePermission);
+exports.rbacRouter.delete("/permissions/:id", rbac_controller_1.deletePermission);
+exports.rbacRouter.post("/users/assign-role", rbac_controller_1.assignRoleToUser);
+exports.rbacRouter.post("/users/remove-role", rbac_controller_1.removeRoleFromUser);
+exports.rbacRouter.post("/roles/assign-permission", rbac_controller_1.assignPermissionToRole);
+exports.rbacRouter.post("/roles/remove-permission", rbac_controller_1.removePermissionFromRole);
+exports.rbacRouter.post("/users/assign-permission", rbac_controller_1.assignPermissionToUser);
+exports.rbacRouter.post("/users/remove-permission", rbac_controller_1.removePermissionFromUser);

package/dist/src/modules/Rbac/rbac.service.d.ts

@@ -0,0 +1,3 @@
+export declare class RbacService {
+}
+//# sourceMappingURL=rbac.service.d.ts.map

package/dist/src/modules/Rbac/rbac.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.service.d.ts","sourceRoot":"","sources":["../../../../src/modules/Rbac/rbac.service.ts"],"names":[],"mappings":"AAGA,qBAAa,WAAW;CAEvB"}

package/dist/src/modules/Rbac/rbac.service.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RbacService = void 0;
+// Placeholder for Rbac Service
+// You can move business logic from controller to here in the future
+class RbacService {
+}
+exports.RbacService = RbacService;

package/dist/src/routes/index.d.ts

@@ -0,0 +1,2 @@
+export declare const apiRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/routes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/index.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,SAAS,4CAAW,CAAC"}

package/dist/src/routes/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apiRouter = void 0;
+const express_1 = require("express");
+const auth_routes_1 = require("../modules/Auth/auth.routes");
+const rbac_routes_1 = require("../modules/Rbac/rbac.routes");
+exports.apiRouter = (0, express_1.Router)();
+exports.apiRouter.use("/auth", auth_routes_1.authRouter);
+exports.apiRouter.use("/rbac", rbac_routes_1.rbacRouter);

package/package.json

@@ -1,12 +1,25 @@
 {
   "name": "lapeeh",
-  "version": "1.0.11",
+  "version": "1.0.13",
   "description": "lapeeh Framework  (Standardized by lapeeh)",
   "engines": {
     "node": ">=18.0.0",
     "npm": ">=9.0.0"
   },
   "main": "dist/lib/bootstrap.js",
+  "exports": {
+    ".": {
+      "types": "./dist/lib/bootstrap.d.ts",
+      "require": "./dist/lib/bootstrap.js",
+      "default": "./dist/lib/bootstrap.js"
+    },
+    "./*": {
+      "types": "./dist/lib/*.d.ts",
+      "require": "./dist/lib/*.js",
+      "default": "./dist/lib/*.js"
+    },
+    "./package.json": "./package.json"
+  },
   "bin": {
     "lapeeh": "bin/index.js"
   },
@@ -19,6 +32,13 @@
     "url": "https://github.com/lapeeh/lapeeh/issues"
   },
   "types": "dist/lib/bootstrap.d.ts",
+  "typesVersions": {
+    "*": {
+      "*": [
+        "dist/lib/*"
+      ]
+    }
+  },
   "files": [
     "bin",
     "dist",
@@ -49,6 +69,7 @@
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "test": "jest",
+    "prepublishOnly": "npm run build",
     "generate:jwt": "node scripts/generate-jwt-secret.js",
     "make:module": "node scripts/make-module.js",
     "make:modul": "node scripts/make-module.js",
@@ -121,6 +142,7 @@
     "globals": "^16.5.0",
     "jest": "^30.2.0",
     "supertest": "^7.1.4",
+    "tsc-alias": "^1.8.16",
     "ts-jest": "^29.4.6",
     "typescript-eslint": "^8.50.1"
   }