rl-core-api 0.1.0

package/dist/features/rbac/presentation/rbac.controller.js

@@ -0,0 +1,413 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RbacController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const currentUser_decorator_1 = require("../../../core/auth/decorators/currentUser.decorator");
+const requirePermission_decorator_1 = require("../../../core/auth/decorators/requirePermission.decorator");
+const permissions_guard_1 = require("../../../core/auth/guards/permissions.guard");
+const rbac_service_1 = require("../domain/rbac.service");
+const createAction_command_1 = require("./commands/createAction.command");
+const createGroup_command_1 = require("./commands/createGroup.command");
+const createPermission_command_1 = require("./commands/createPermission.command");
+const createResource_command_1 = require("./commands/createResource.command");
+const createRole_command_1 = require("./commands/createRole.command");
+const createScope_command_1 = require("./commands/createScope.command");
+const updateAction_command_1 = require("./commands/updateAction.command");
+const updateGroup_command_1 = require("./commands/updateGroup.command");
+const updatePermission_command_1 = require("./commands/updatePermission.command");
+const updateResource_command_1 = require("./commands/updateResource.command");
+const updateRole_command_1 = require("./commands/updateRole.command");
+const updateScope_command_1 = require("./commands/updateScope.command");
+const rbac_response_1 = require("./responses/rbac.response");
+let RbacController = class RbacController {
+    constructor(rbac) {
+        this.rbac = rbac;
+    }
+    resources() {
+        return this.rbac.listResources();
+    }
+    createResource(dto) {
+        return this.rbac.createResource(dto);
+    }
+    updateResource(id, dto) {
+        return this.rbac.updateResource(id, dto);
+    }
+    deleteResource(id) {
+        return this.rbac.deleteResource(id);
+    }
+    actions() {
+        return this.rbac.listActions();
+    }
+    createAction(dto) {
+        return this.rbac.createAction(dto);
+    }
+    updateAction(id, dto) {
+        return this.rbac.updateAction(id, dto);
+    }
+    deleteAction(id) {
+        return this.rbac.deleteAction(id);
+    }
+    scopes() {
+        return this.rbac.listScopes();
+    }
+    createScope(dto) {
+        return this.rbac.createScope(dto);
+    }
+    updateScope(id, dto) {
+        return this.rbac.updateScope(id, dto);
+    }
+    deleteScope(id) {
+        return this.rbac.deleteScope(id);
+    }
+    permissions() {
+        return this.rbac.listPermissions();
+    }
+    createPermission(dto) {
+        return this.rbac.createPermission(dto);
+    }
+    updatePermission(id, dto) {
+        return this.rbac.updatePermission(id, dto);
+    }
+    deletePermission(id) {
+        return this.rbac.deletePermission(id);
+    }
+    groups() {
+        return this.rbac.listGroups();
+    }
+    group(id) {
+        return this.rbac.getGroup(id);
+    }
+    createGroup(dto) {
+        return this.rbac.createGroup(dto);
+    }
+    updateGroup(id, dto) {
+        return this.rbac.updateGroup(id, dto);
+    }
+    deleteGroup(id) {
+        return this.rbac.deleteGroup(id);
+    }
+    addUserToGroup(id, userId) {
+        return this.rbac.addUserToGroup(id, userId);
+    }
+    removeUserFromGroup(id, userId) {
+        return this.rbac.removeUserFromGroup(id, userId);
+    }
+    roles() {
+        return this.rbac.listRoles();
+    }
+    role(id) {
+        return this.rbac.getRole(id);
+    }
+    createRole(dto) {
+        return this.rbac.createRole(dto);
+    }
+    updateRole(id, dto, actor) {
+        return this.rbac.updateRole(id, dto, actor.permissions);
+    }
+    deleteRole(id) {
+        return this.rbac.deleteRole(id);
+    }
+    addPermissionToRole(id, permissionId, actor) {
+        return this.rbac.addPermissionToRole(id, permissionId, actor.permissions);
+    }
+    removePermissionFromRole(id, permissionId) {
+        return this.rbac.removePermissionFromRole(id, permissionId);
+    }
+};
+exports.RbacController = RbacController;
+__decorate([
+    (0, common_1.Get)("resources"),
+    (0, requirePermission_decorator_1.RequirePermission)("resources:read:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.ResourceResponse, isArray: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "resources", null);
+__decorate([
+    (0, common_1.Post)("resources"),
+    (0, requirePermission_decorator_1.RequirePermission)("resources:create:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.ResourceResponse }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [createResource_command_1.CreateResourceCommand]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "createResource", null);
+__decorate([
+    (0, common_1.Patch)("resources/:id"),
+    (0, requirePermission_decorator_1.RequirePermission)("resources:update:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.ResourceResponse }),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, updateResource_command_1.UpdateResourceCommand]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "updateResource", null);
+__decorate([
+    (0, common_1.Delete)("resources/:id"),
+    (0, common_1.HttpCode)(204),
+    (0, requirePermission_decorator_1.RequirePermission)("resources:delete:any"),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "deleteResource", null);
+__decorate([
+    (0, common_1.Get)("actions"),
+    (0, requirePermission_decorator_1.RequirePermission)("actions:read:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.ActionResponse, isArray: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "actions", null);
+__decorate([
+    (0, common_1.Post)("actions"),
+    (0, requirePermission_decorator_1.RequirePermission)("actions:create:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.ActionResponse }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [createAction_command_1.CreateActionCommand]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "createAction", null);
+__decorate([
+    (0, common_1.Patch)("actions/:id"),
+    (0, requirePermission_decorator_1.RequirePermission)("actions:update:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.ActionResponse }),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, updateAction_command_1.UpdateActionCommand]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "updateAction", null);
+__decorate([
+    (0, common_1.Delete)("actions/:id"),
+    (0, common_1.HttpCode)(204),
+    (0, requirePermission_decorator_1.RequirePermission)("actions:delete:any"),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "deleteAction", null);
+__decorate([
+    (0, common_1.Get)("scopes"),
+    (0, requirePermission_decorator_1.RequirePermission)("scopes:read:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.ScopeResponse, isArray: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "scopes", null);
+__decorate([
+    (0, common_1.Post)("scopes"),
+    (0, requirePermission_decorator_1.RequirePermission)("scopes:create:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.ScopeResponse }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [createScope_command_1.CreateScopeCommand]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "createScope", null);
+__decorate([
+    (0, common_1.Patch)("scopes/:id"),
+    (0, requirePermission_decorator_1.RequirePermission)("scopes:update:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.ScopeResponse }),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, updateScope_command_1.UpdateScopeCommand]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "updateScope", null);
+__decorate([
+    (0, common_1.Delete)("scopes/:id"),
+    (0, common_1.HttpCode)(204),
+    (0, requirePermission_decorator_1.RequirePermission)("scopes:delete:any"),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "deleteScope", null);
+__decorate([
+    (0, common_1.Get)("permissions"),
+    (0, requirePermission_decorator_1.RequirePermission)("permissions:read:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.PermissionResponse, isArray: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "permissions", null);
+__decorate([
+    (0, common_1.Post)("permissions"),
+    (0, requirePermission_decorator_1.RequirePermission)("permissions:create:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.PermissionResponse }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [createPermission_command_1.CreatePermissionCommand]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "createPermission", null);
+__decorate([
+    (0, common_1.Patch)("permissions/:id"),
+    (0, requirePermission_decorator_1.RequirePermission)("permissions:update:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.PermissionResponse }),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, updatePermission_command_1.UpdatePermissionCommand]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "updatePermission", null);
+__decorate([
+    (0, common_1.Delete)("permissions/:id"),
+    (0, common_1.HttpCode)(204),
+    (0, requirePermission_decorator_1.RequirePermission)("permissions:delete:any"),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "deletePermission", null);
+__decorate([
+    (0, common_1.Get)("groups"),
+    (0, requirePermission_decorator_1.RequirePermission)("groups:read:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.GroupResponse, isArray: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "groups", null);
+__decorate([
+    (0, common_1.Get)("groups/:id"),
+    (0, requirePermission_decorator_1.RequirePermission)("groups:read:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.GroupResponse }),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "group", null);
+__decorate([
+    (0, common_1.Post)("groups"),
+    (0, requirePermission_decorator_1.RequirePermission)("groups:create:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.GroupResponse }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [createGroup_command_1.CreateGroupCommand]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "createGroup", null);
+__decorate([
+    (0, common_1.Patch)("groups/:id"),
+    (0, requirePermission_decorator_1.RequirePermission)("groups:update:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.GroupResponse }),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, updateGroup_command_1.UpdateGroupCommand]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "updateGroup", null);
+__decorate([
+    (0, common_1.Delete)("groups/:id"),
+    (0, common_1.HttpCode)(204),
+    (0, requirePermission_decorator_1.RequirePermission)("groups:delete:any"),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "deleteGroup", null);
+__decorate([
+    (0, common_1.Post)("groups/:id/users/:userId"),
+    (0, common_1.HttpCode)(204),
+    (0, requirePermission_decorator_1.RequirePermission)("groups:update:any"),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Param)("userId", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "addUserToGroup", null);
+__decorate([
+    (0, common_1.Delete)("groups/:id/users/:userId"),
+    (0, common_1.HttpCode)(204),
+    (0, requirePermission_decorator_1.RequirePermission)("groups:update:any"),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Param)("userId", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "removeUserFromGroup", null);
+__decorate([
+    (0, common_1.Get)("roles"),
+    (0, requirePermission_decorator_1.RequirePermission)("roles:read:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.RoleResponse, isArray: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "roles", null);
+__decorate([
+    (0, common_1.Get)("roles/:id"),
+    (0, requirePermission_decorator_1.RequirePermission)("roles:read:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.RoleResponse }),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "role", null);
+__decorate([
+    (0, common_1.Post)("roles"),
+    (0, requirePermission_decorator_1.RequirePermission)("roles:create:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.RoleResponse }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [createRole_command_1.CreateRoleCommand]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "createRole", null);
+__decorate([
+    (0, common_1.Patch)("roles/:id"),
+    (0, requirePermission_decorator_1.RequirePermission)("roles:update:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.RoleResponse }),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, currentUser_decorator_1.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, updateRole_command_1.UpdateRoleCommand, Object]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "updateRole", null);
+__decorate([
+    (0, common_1.Delete)("roles/:id"),
+    (0, common_1.HttpCode)(204),
+    (0, requirePermission_decorator_1.RequirePermission)("roles:delete:any"),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "deleteRole", null);
+__decorate([
+    (0, common_1.Post)("roles/:id/permissions/:permissionId"),
+    (0, requirePermission_decorator_1.RequirePermission)("roles:update:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.RoleResponse }),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Param)("permissionId", common_1.ParseUUIDPipe)),
+    __param(2, (0, currentUser_decorator_1.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "addPermissionToRole", null);
+__decorate([
+    (0, common_1.Delete)("roles/:id/permissions/:permissionId"),
+    (0, requirePermission_decorator_1.RequirePermission)("roles:update:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.RoleResponse }),
+    __param(0, (0, common_1.Param)("id", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Param)("permissionId", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "removePermissionFromRole", null);
+exports.RbacController = RbacController = __decorate([
+    (0, swagger_1.ApiTags)("RBAC"),
+    (0, swagger_1.ApiBearerAuth)(),
+    (0, common_1.UseGuards)(permissions_guard_1.PermissionsGuard),
+    (0, common_1.Controller)({ path: "rbac", version: "1" }),
+    __metadata("design:paramtypes", [rbac_service_1.RbacService])
+], RbacController);

package/dist/features/rbac/presentation/responses/rbac.response.d.ts

@@ -0,0 +1,47 @@
+declare class RbacTimestampsResponse {
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt?: Date | null;
+}
+export declare class ResourceResponse extends RbacTimestampsResponse {
+    name: string;
+    description?: string | null;
+    isActive: boolean;
+}
+export declare class ActionResponse extends RbacTimestampsResponse {
+    name: string;
+    description?: string | null;
+    isActive: boolean;
+}
+export declare class ScopeResponse extends RbacTimestampsResponse {
+    name: string;
+    description?: string | null;
+    isActive: boolean;
+}
+export declare class PermissionResponse extends RbacTimestampsResponse {
+    code: string;
+    description?: string | null;
+    isActive: boolean;
+    resourceId: string;
+    actionId: string;
+    scopeId: string;
+    resource: ResourceResponse;
+    action: ActionResponse;
+    scope: ScopeResponse;
+}
+export declare class RoleResponse extends RbacTimestampsResponse {
+    name: string;
+    description?: string | null;
+    isActive: boolean;
+    permissions?: PermissionResponse[];
+}
+export declare class GroupResponse extends RbacTimestampsResponse {
+    name: string;
+    description?: string | null;
+    type: string;
+    parentId?: string | null;
+    isActive: boolean;
+    roles?: RoleResponse[];
+}
+export {};

package/dist/features/rbac/presentation/responses/rbac.response.js

@@ -0,0 +1,161 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GroupResponse = exports.RoleResponse = exports.PermissionResponse = exports.ScopeResponse = exports.ActionResponse = exports.ResourceResponse = void 0;
+const swagger_1 = require("@nestjs/swagger");
+class RbacTimestampsResponse {
+}
+__decorate([
+    (0, swagger_1.ApiProperty)({ format: "uuid" }),
+    __metadata("design:type", String)
+], RbacTimestampsResponse.prototype, "id", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ format: "date-time" }),
+    __metadata("design:type", Date)
+], RbacTimestampsResponse.prototype, "createdAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ format: "date-time" }),
+    __metadata("design:type", Date)
+], RbacTimestampsResponse.prototype, "updatedAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: String, format: "date-time", required: false, nullable: true }),
+    __metadata("design:type", Object)
+], RbacTimestampsResponse.prototype, "deletedAt", void 0);
+class ResourceResponse extends RbacTimestampsResponse {
+}
+exports.ResourceResponse = ResourceResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: "users" }),
+    __metadata("design:type", String)
+], ResourceResponse.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: String, required: false, nullable: true }),
+    __metadata("design:type", Object)
+], ResourceResponse.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", Boolean)
+], ResourceResponse.prototype, "isActive", void 0);
+class ActionResponse extends RbacTimestampsResponse {
+}
+exports.ActionResponse = ActionResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: "read" }),
+    __metadata("design:type", String)
+], ActionResponse.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: String, required: false, nullable: true }),
+    __metadata("design:type", Object)
+], ActionResponse.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", Boolean)
+], ActionResponse.prototype, "isActive", void 0);
+class ScopeResponse extends RbacTimestampsResponse {
+}
+exports.ScopeResponse = ScopeResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: "any" }),
+    __metadata("design:type", String)
+], ScopeResponse.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: String, required: false, nullable: true }),
+    __metadata("design:type", Object)
+], ScopeResponse.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", Boolean)
+], ScopeResponse.prototype, "isActive", void 0);
+class PermissionResponse extends RbacTimestampsResponse {
+}
+exports.PermissionResponse = PermissionResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: "users:read:any" }),
+    __metadata("design:type", String)
+], PermissionResponse.prototype, "code", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: String, required: false, nullable: true }),
+    __metadata("design:type", Object)
+], PermissionResponse.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", Boolean)
+], PermissionResponse.prototype, "isActive", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ format: "uuid" }),
+    __metadata("design:type", String)
+], PermissionResponse.prototype, "resourceId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ format: "uuid" }),
+    __metadata("design:type", String)
+], PermissionResponse.prototype, "actionId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ format: "uuid" }),
+    __metadata("design:type", String)
+], PermissionResponse.prototype, "scopeId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: ResourceResponse }),
+    __metadata("design:type", ResourceResponse)
+], PermissionResponse.prototype, "resource", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: ActionResponse }),
+    __metadata("design:type", ActionResponse)
+], PermissionResponse.prototype, "action", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: ScopeResponse }),
+    __metadata("design:type", ScopeResponse)
+], PermissionResponse.prototype, "scope", void 0);
+class RoleResponse extends RbacTimestampsResponse {
+}
+exports.RoleResponse = RoleResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: "admin" }),
+    __metadata("design:type", String)
+], RoleResponse.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: String, required: false, nullable: true }),
+    __metadata("design:type", Object)
+], RoleResponse.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", Boolean)
+], RoleResponse.prototype, "isActive", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: [PermissionResponse], required: false }),
+    __metadata("design:type", Array)
+], RoleResponse.prototype, "permissions", void 0);
+class GroupResponse extends RbacTimestampsResponse {
+}
+exports.GroupResponse = GroupResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", String)
+], GroupResponse.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: String, required: false, nullable: true }),
+    __metadata("design:type", Object)
+], GroupResponse.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: ["company", "department", "team"], enumName: "GroupType" }),
+    __metadata("design:type", String)
+], GroupResponse.prototype, "type", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: String, required: false, nullable: true, format: "uuid" }),
+    __metadata("design:type", Object)
+], GroupResponse.prototype, "parentId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", Boolean)
+], GroupResponse.prototype, "isActive", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: [RoleResponse], required: false }),
+    __metadata("design:type", Array)
+], GroupResponse.prototype, "roles", void 0);

package/dist/features/rbac/rbac.module.d.ts

@@ -0,0 +1,2 @@
+export declare class RbacModule {
+}

package/dist/features/rbac/rbac.module.js

@@ -0,0 +1,55 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RbacModule = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const domain_1 = require("./domain");
+const infra_1 = require("./infra");
+const presentation_1 = require("./presentation");
+const user_repository_1 = require("../users/infra/repositories/user.repository");
+const user_schema_1 = require("../users/infra/schema/user.schema");
+let RbacModule = class RbacModule {
+};
+exports.RbacModule = RbacModule;
+exports.RbacModule = RbacModule = __decorate([
+    (0, common_1.Module)({
+        imports: [
+            typeorm_1.TypeOrmModule.forFeature([
+                infra_1.Resource,
+                infra_1.Action,
+                infra_1.Scope,
+                infra_1.Permission,
+                infra_1.Role,
+                infra_1.Group,
+                user_schema_1.User,
+            ]),
+        ],
+        controllers: [presentation_1.RbacController],
+        providers: [
+            infra_1.ResourceRepository,
+            infra_1.ActionRepository,
+            infra_1.ScopeRepository,
+            infra_1.PermissionRepository,
+            infra_1.RoleRepository,
+            infra_1.GroupRepository,
+            user_repository_1.UserRepository,
+            domain_1.RbacService,
+        ],
+        exports: [
+            infra_1.ResourceRepository,
+            infra_1.ActionRepository,
+            infra_1.ScopeRepository,
+            infra_1.PermissionRepository,
+            infra_1.RoleRepository,
+            infra_1.GroupRepository,
+            user_repository_1.UserRepository,
+            domain_1.RbacService,
+        ],
+    })
+], RbacModule);