rl-core-api 0.1.0

package/dist/features/notifications/presentation/notifications.gateway.js

@@ -0,0 +1,58 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotificationsGateway = exports.NOTIFICATION_CREATED_EVENT = void 0;
+const common_1 = require("@nestjs/common");
+const websockets_1 = require("@nestjs/websockets");
+const socket_io_1 = require("socket.io");
+const env_service_1 = require("../../../core/config/env.service");
+const baseGateway_1 = require("../../../core/websocket/baseGateway");
+const socket_constants_1 = require("../../../core/websocket/socket.constants");
+const socketEvent_envelope_1 = require("../../../core/websocket/socketEvent.envelope");
+const socketOrigin_util_1 = require("../../../core/websocket/socketOrigin.util");
+const wsAuth_service_1 = require("../../../core/websocket/wsAuth.service");
+const scopeType_enum_1 = require("../domain/enums/scopeType.enum");
+exports.NOTIFICATION_CREATED_EVENT = "notification:created";
+const gatewayOrigins = (0, socketOrigin_util_1.parseAllowedOrigins)(process.env.CORS_ORIGIN ?? "http://localhost:4000");
+let NotificationsGateway = class NotificationsGateway extends baseGateway_1.BaseGateway {
+    constructor(wsAuth, env) {
+        super(wsAuth, env);
+    }
+    notify(targets, notification) {
+        if (targets.some((target) => target.type === scopeType_enum_1.ScopeType.ALL)) {
+            this.server.emit(exports.NOTIFICATION_CREATED_EVENT, (0, socketEvent_envelope_1.wrapSocketEvent)(exports.NOTIFICATION_CREATED_EVENT, notification));
+            return;
+        }
+        this.emitTo(targets.map((target) => this.roomOf(target)), exports.NOTIFICATION_CREATED_EVENT, notification);
+    }
+    roomOf(target) {
+        if (target.type === scopeType_enum_1.ScopeType.USER && target.key) {
+            return (0, socket_constants_1.userRoom)(target.key);
+        }
+        if (target.type === scopeType_enum_1.ScopeType.ROLE && target.key) {
+            return (0, socket_constants_1.roleRoom)(target.key);
+        }
+        return "";
+    }
+};
+exports.NotificationsGateway = NotificationsGateway;
+__decorate([
+    (0, websockets_1.WebSocketServer)(),
+    __metadata("design:type", socket_io_1.Server)
+], NotificationsGateway.prototype, "server", void 0);
+exports.NotificationsGateway = NotificationsGateway = __decorate([
+    (0, common_1.Injectable)(),
+    (0, websockets_1.WebSocketGateway)({
+        namespace: socket_constants_1.NOTIFICATIONS_NAMESPACE,
+        cors: { origin: gatewayOrigins, credentials: true },
+    }),
+    __metadata("design:paramtypes", [wsAuth_service_1.WsAuthService, env_service_1.EnvService])
+], NotificationsGateway);

package/dist/features/notifications/presentation/notifications.publisher.d.ts

@@ -0,0 +1,9 @@
+import { NotificationsService, PublishNotificationParams } from "../domain/notifications.service";
+import { NotificationsGateway } from "./notifications.gateway";
+import { UserNotificationResponse } from "./responses/notification.response";
+export declare class NotificationsPublisher {
+    private readonly notifications;
+    private readonly gateway;
+    constructor(notifications: NotificationsService, gateway: NotificationsGateway);
+    publishAndPush(params: PublishNotificationParams): Promise<UserNotificationResponse>;
+}

package/dist/features/notifications/presentation/notifications.publisher.js

@@ -0,0 +1,42 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotificationsPublisher = void 0;
+const common_1 = require("@nestjs/common");
+const notifications_service_1 = require("../domain/notifications.service");
+const notifications_gateway_1 = require("./notifications.gateway");
+let NotificationsPublisher = class NotificationsPublisher {
+    constructor(notifications, gateway) {
+        this.notifications = notifications;
+        this.gateway = gateway;
+    }
+    async publishAndPush(params) {
+        const saved = await this.notifications.publish(params);
+        const payload = params.payload;
+        const response = {
+            id: saved.id,
+            title: saved.title,
+            body: saved.body,
+            type: saved.type,
+            route: payload?.route ?? null,
+            read: false,
+            createdAt: saved.createdAt,
+        };
+        this.gateway.notify(params.targets, response);
+        return response;
+    }
+};
+exports.NotificationsPublisher = NotificationsPublisher;
+exports.NotificationsPublisher = NotificationsPublisher = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [notifications_service_1.NotificationsService,
+        notifications_gateway_1.NotificationsGateway])
+], NotificationsPublisher);

package/dist/features/notifications/presentation/responses/notification.response.d.ts

@@ -0,0 +1,18 @@
+import { PaginationMetaResponse } from "../../../../core/utils/paginationMeta.response";
+import { NotificationType } from "../../domain/enums/notificationType.enum";
+export declare class UserNotificationResponse {
+    id: string;
+    title: string;
+    body: string;
+    type: NotificationType;
+    route: string | null;
+    read: boolean;
+    createdAt: Date;
+}
+export declare class PaginatedNotificationsResponse {
+    items: UserNotificationResponse[];
+    meta: PaginationMetaResponse;
+}
+export declare class UnreadCountResponse {
+    unread: number;
+}

package/dist/features/notifications/presentation/responses/notification.response.js

@@ -0,0 +1,72 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UnreadCountResponse = exports.PaginatedNotificationsResponse = exports.UserNotificationResponse = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const paginationMeta_response_1 = require("../../../../core/utils/paginationMeta.response");
+const notificationType_enum_1 = require("../../domain/enums/notificationType.enum");
+class UserNotificationResponse {
+}
+exports.UserNotificationResponse = UserNotificationResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ format: "uuid" }),
+    __metadata("design:type", String)
+], UserNotificationResponse.prototype, "id", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: "Sua conta foi bloqueada" }),
+    __metadata("design:type", String)
+], UserNotificationResponse.prototype, "title", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: "Foram feitas 10 tentativas de acesso sem sucesso.",
+    }),
+    __metadata("design:type", String)
+], UserNotificationResponse.prototype, "body", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: notificationType_enum_1.NotificationType, enumName: "NotificationType" }),
+    __metadata("design:type", String)
+], UserNotificationResponse.prototype, "type", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: String,
+        required: false,
+        nullable: true,
+        example: "/usuarios",
+        description: "Rota do cliente para abrir ao clicar. Nulo quando não há.",
+    }),
+    __metadata("design:type", Object)
+], UserNotificationResponse.prototype, "route", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", Boolean)
+], UserNotificationResponse.prototype, "read", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ format: "date-time" }),
+    __metadata("design:type", Date)
+], UserNotificationResponse.prototype, "createdAt", void 0);
+class PaginatedNotificationsResponse {
+}
+exports.PaginatedNotificationsResponse = PaginatedNotificationsResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: [UserNotificationResponse] }),
+    __metadata("design:type", Array)
+], PaginatedNotificationsResponse.prototype, "items", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: paginationMeta_response_1.PaginationMetaResponse }),
+    __metadata("design:type", paginationMeta_response_1.PaginationMetaResponse)
+], PaginatedNotificationsResponse.prototype, "meta", void 0);
+class UnreadCountResponse {
+}
+exports.UnreadCountResponse = UnreadCountResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: 3 }),
+    __metadata("design:type", Number)
+], UnreadCountResponse.prototype, "unread", void 0);

package/dist/features/rbac/domain/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./rbac.catalog";
+export * from "./rbac.service";

package/dist/features/rbac/domain/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./rbac.catalog"), exports);
+__exportStar(require("./rbac.service"), exports);

package/dist/features/rbac/domain/rbac.catalog.d.ts

@@ -0,0 +1,21 @@
+export declare const RESOURCES: {
+    name: string;
+    description: string;
+}[];
+export declare const ACTIONS: {
+    name: string;
+    description: string;
+}[];
+export declare const SCOPES: {
+    name: string;
+    description: string;
+}[];
+export declare const PERMISSIONS: {
+    code: string;
+    description: string;
+}[];
+export declare const ROLES: {
+    name: string;
+    description: string;
+    permissions: string[] | "*";
+}[];

package/dist/features/rbac/domain/rbac.catalog.js

@@ -0,0 +1,153 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ROLES = exports.PERMISSIONS = exports.SCOPES = exports.ACTIONS = exports.RESOURCES = void 0;
+exports.RESOURCES = [
+    { name: "users", description: "Gestão de usuários" },
+    { name: "roles", description: "Gestão de papéis" },
+    { name: "permissions", description: "Gestão de permissões" },
+    { name: "groups", description: "Gestão de grupos" },
+    { name: "audit", description: "Logs e auditoria" },
+    { name: "notifications", description: "Notificações" },
+    { name: "reports", description: "Relatórios" },
+    { name: "resources", description: "Catálogo RBAC — resources" },
+    { name: "actions", description: "Catálogo RBAC — actions" },
+    { name: "scopes", description: "Catálogo RBAC — scopes" },
+];
+exports.ACTIONS = [
+    { name: "create", description: "Criar" },
+    { name: "read", description: "Ler/visualizar" },
+    { name: "update", description: "Atualizar" },
+    { name: "delete", description: "Remover" },
+    { name: "export", description: "Exportar" },
+    { name: "promote", description: "Alterar papel/promover" },
+    { name: "deactivate", description: "Ativar/desativar" },
+    { name: "reset-password", description: "Resetar senha de usuário" },
+    { name: "invite", description: "Enviar link de primeiro acesso" },
+    { name: "update-email", description: "Alterar email de usuário" },
+    {
+        name: "read-trail",
+        description: "Ler trilha de auditoria de dados (old/new data)",
+    },
+];
+exports.SCOPES = [
+    { name: "own", description: "Apenas recursos próprios" },
+    { name: "team", description: "Recursos da equipe" },
+    { name: "department", description: "Recursos do departamento" },
+    { name: "any", description: "Todos os recursos" },
+];
+exports.PERMISSIONS = [
+    { code: "users:create:any", description: "Criar qualquer usuário" },
+    { code: "users:read:any", description: "Ler qualquer usuário" },
+    { code: "users:read:own", description: "Ler o próprio perfil" },
+    { code: "users:update:any", description: "Atualizar qualquer usuário" },
+    {
+        code: "users:update-email:any",
+        description: "Alterar o email de qualquer usuário — restrito a administradores (risco de sequestro de conta)",
+    },
+    { code: "users:update:own", description: "Atualizar o próprio perfil" },
+    { code: "users:delete:any", description: "Remover qualquer usuário" },
+    {
+        code: "users:promote:any",
+        description: "Alterar papéis de qualquer usuário",
+    },
+    {
+        code: "users:deactivate:any",
+        description: "Ativar/desativar qualquer usuário",
+    },
+    {
+        code: "users:reset-password:any",
+        description: "Resetar senha de qualquer usuário",
+    },
+    {
+        code: "users:invite:any",
+        description: "Enviar link de primeiro acesso a qualquer usuário",
+    },
+    { code: "roles:create:any", description: "Criar papéis" },
+    { code: "roles:read:any", description: "Ler papéis" },
+    { code: "roles:update:any", description: "Atualizar papéis" },
+    { code: "roles:delete:any", description: "Remover papéis" },
+    { code: "permissions:create:any", description: "Criar permissões" },
+    { code: "permissions:read:any", description: "Ler permissões" },
+    { code: "permissions:update:any", description: "Atualizar permissões" },
+    { code: "permissions:delete:any", description: "Remover permissões" },
+    { code: "groups:create:any", description: "Criar grupos" },
+    { code: "groups:read:any", description: "Ler grupos" },
+    { code: "groups:update:any", description: "Atualizar grupos" },
+    { code: "groups:delete:any", description: "Remover grupos" },
+    { code: "audit:read:any", description: "Ler logs de auditoria" },
+    {
+        code: "audit:read-trail:any",
+        description: "Ler trilha de auditoria de dados (old/new data) — restrito a administradores",
+    },
+    { code: "reports:read:any", description: "Ler todos os relatórios" },
+    {
+        code: "reports:read:department",
+        description: "Ler relatórios do departamento",
+    },
+    { code: "reports:export:any", description: "Exportar todos os relatórios" },
+    {
+        code: "notifications:read:own",
+        description: "Ler e marcar como lidas as próprias notificações",
+    },
+    {
+        code: "notifications:create:any",
+        description: "Criar notificação para qualquer usuário ou papel",
+    },
+    {
+        code: "resources:create:any",
+        description: "Criar resources do catálogo RBAC",
+    },
+    { code: "resources:read:any", description: "Ler resources do catálogo RBAC" },
+    {
+        code: "resources:update:any",
+        description: "Atualizar resources do catálogo RBAC",
+    },
+    {
+        code: "resources:delete:any",
+        description: "Remover resources do catálogo RBAC",
+    },
+    { code: "actions:create:any", description: "Criar actions do catálogo RBAC" },
+    { code: "actions:read:any", description: "Ler actions do catálogo RBAC" },
+    {
+        code: "actions:update:any",
+        description: "Atualizar actions do catálogo RBAC",
+    },
+    {
+        code: "actions:delete:any",
+        description: "Remover actions do catálogo RBAC",
+    },
+    { code: "scopes:create:any", description: "Criar scopes do catálogo RBAC" },
+    { code: "scopes:read:any", description: "Ler scopes do catálogo RBAC" },
+    {
+        code: "scopes:update:any",
+        description: "Atualizar scopes do catálogo RBAC",
+    },
+    { code: "scopes:delete:any", description: "Remover scopes do catálogo RBAC" },
+];
+exports.ROLES = [
+    {
+        name: "Super Admin",
+        description: "Acesso total ao sistema",
+        permissions: "*",
+    },
+    {
+        name: "Manager",
+        description: "Gestor de departamento",
+        permissions: [
+            "users:read:any",
+            "reports:read:department",
+            "reports:read:any",
+            "audit:read:any",
+            "notifications:read:own",
+        ],
+    },
+    {
+        name: "Viewer",
+        description: "Somente leitura",
+        permissions: [
+            "users:read:own",
+            "reports:read:department",
+            "notifications:read:own",
+        ],
+    },
+];

package/dist/features/rbac/domain/rbac.service.d.ts

@@ -0,0 +1,68 @@
+import { ActionRepository } from "../infra/repositories/action.repository";
+import { GroupRepository } from "../infra/repositories/group.repository";
+import { PermissionRepository } from "../infra/repositories/permission.repository";
+import { ResourceRepository } from "../infra/repositories/resource.repository";
+import { RoleRepository } from "../infra/repositories/role.repository";
+import { ScopeRepository } from "../infra/repositories/scope.repository";
+import { Action } from "../infra/schema/action.schema";
+import { Group } from "../infra/schema/group.schema";
+import { Permission } from "../infra/schema/permission.schema";
+import { Resource } from "../infra/schema/resource.schema";
+import { Role } from "../infra/schema/role.schema";
+import { Scope } from "../infra/schema/scope.schema";
+import { CreateActionCommand } from "../presentation/commands/createAction.command";
+import { CreateGroupCommand } from "../presentation/commands/createGroup.command";
+import { CreatePermissionCommand } from "../presentation/commands/createPermission.command";
+import { CreateResourceCommand } from "../presentation/commands/createResource.command";
+import { CreateRoleCommand } from "../presentation/commands/createRole.command";
+import { CreateScopeCommand } from "../presentation/commands/createScope.command";
+import { UpdateActionCommand } from "../presentation/commands/updateAction.command";
+import { UpdateGroupCommand } from "../presentation/commands/updateGroup.command";
+import { UpdatePermissionCommand } from "../presentation/commands/updatePermission.command";
+import { UpdateResourceCommand } from "../presentation/commands/updateResource.command";
+import { UpdateRoleCommand } from "../presentation/commands/updateRole.command";
+import { UpdateScopeCommand } from "../presentation/commands/updateScope.command";
+import { UserRepository } from "../../users/infra/repositories/user.repository";
+export declare class RbacService {
+    private readonly resourceRepo;
+    private readonly actionRepo;
+    private readonly scopeRepo;
+    private readonly permissionRepo;
+    private readonly roleRepo;
+    private readonly groupRepo;
+    private readonly userRepo;
+    constructor(resourceRepo: ResourceRepository, actionRepo: ActionRepository, scopeRepo: ScopeRepository, permissionRepo: PermissionRepository, roleRepo: RoleRepository, groupRepo: GroupRepository, userRepo: UserRepository);
+    getUserPermissionCodes(userId: string): Promise<string[]>;
+    getUserRoleNames(userId: string): Promise<string[]>;
+    listResources(): Promise<Resource[]>;
+    createResource(dto: CreateResourceCommand): Promise<Resource>;
+    updateResource(id: string, dto: UpdateResourceCommand): Promise<Resource>;
+    deleteResource(id: string): Promise<void>;
+    listActions(): Promise<Action[]>;
+    createAction(dto: CreateActionCommand): Promise<Action>;
+    updateAction(id: string, dto: UpdateActionCommand): Promise<Action>;
+    deleteAction(id: string): Promise<void>;
+    listScopes(): Promise<Scope[]>;
+    createScope(dto: CreateScopeCommand): Promise<Scope>;
+    updateScope(id: string, dto: UpdateScopeCommand): Promise<Scope>;
+    deleteScope(id: string): Promise<void>;
+    listPermissions(): Promise<Permission[]>;
+    createPermission(dto: CreatePermissionCommand): Promise<Permission>;
+    updatePermission(id: string, dto: UpdatePermissionCommand): Promise<Permission>;
+    deletePermission(id: string): Promise<void>;
+    listRoles(): Promise<Role[]>;
+    getRole(id: string): Promise<Role>;
+    createRole(dto: CreateRoleCommand): Promise<Role>;
+    updateRole(id: string, dto: UpdateRoleCommand, actorPermissions?: string[]): Promise<Role>;
+    private assertGrantableByActor;
+    deleteRole(id: string): Promise<void>;
+    addPermissionToRole(roleId: string, permissionId: string, actorPermissions?: string[]): Promise<Role>;
+    removePermissionFromRole(roleId: string, permissionId: string): Promise<Role>;
+    listGroups(): Promise<Group[]>;
+    getGroup(id: string): Promise<Group>;
+    createGroup(dto: CreateGroupCommand): Promise<Group>;
+    updateGroup(id: string, dto: UpdateGroupCommand): Promise<Group>;
+    deleteGroup(id: string): Promise<void>;
+    addUserToGroup(groupId: string, userId: string): Promise<void>;
+    removeUserFromGroup(groupId: string, userId: string): Promise<void>;
+}