rl-core-api 0.5.0 → 0.7.0

package/dist/core/auth/ownershipScope.util.d.ts

@@ -0,0 +1,10 @@
+import { Actor } from "./actor.interface";
+export type OwnershipScope = {
+    kind: "all";
+} | {
+    kind: "own";
+    userId: string;
+} | {
+    kind: "none";
+};
+export declare const resolveOwnershipScope: (actor: Actor, action: string) => OwnershipScope;

package/dist/core/auth/ownershipScope.util.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveOwnershipScope = void 0;
+const permissionScope_util_1 = require("./permissionScope.util");
+const resolveOwnershipScope = (actor, action) => {
+    if (actor.permissions.includes(`${action}:${permissionScope_util_1.SCOPE_ANY}`)) {
+        return { kind: "all" };
+    }
+    if (actor.permissions.includes(`${action}:${permissionScope_util_1.SCOPE_OWN}`)) {
+        return { kind: "own", userId: actor.id };
+    }
+    return { kind: "none" };
+};
+exports.resolveOwnershipScope = resolveOwnershipScope;

package/dist/core/auth/permissionScope.util.d.ts

@@ -1,3 +1,5 @@
 export declare const SCOPE_ANY = "any";
 export declare const SCOPE_TEAM = "team";
+export declare const SCOPE_OWN = "own";
 export declare const anyOrTeam: (action: string) => [string, string];
+export declare const anyOrOwn: (action: string) => [string, string];

package/dist/core/auth/permissionScope.util.js

@@ -1,10 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.anyOrTeam = exports.SCOPE_TEAM = exports.SCOPE_ANY = void 0;
+exports.anyOrOwn = exports.anyOrTeam = exports.SCOPE_OWN = exports.SCOPE_TEAM = exports.SCOPE_ANY = void 0;
 exports.SCOPE_ANY = "any";
 exports.SCOPE_TEAM = "team";
+exports.SCOPE_OWN = "own";
 const anyOrTeam = (action) => [
     `${action}:${exports.SCOPE_ANY}`,
     `${action}:${exports.SCOPE_TEAM}`,
 ];
 exports.anyOrTeam = anyOrTeam;
+const anyOrOwn = (action) => [
+    `${action}:${exports.SCOPE_ANY}`,
+    `${action}:${exports.SCOPE_OWN}`,
+];
+exports.anyOrOwn = anyOrOwn;

package/dist/core/database/migrations/1710000000000-InitialSchema.js

@@ -133,11 +133,18 @@ class InitialSchema1710000000000 {
         description varchar(255) NULL,
         type varchar(50) NOT NULL DEFAULT 'team',
         parent_id char(36) NULL,
+        manager_id char(36) NULL,
         is_active tinyint NOT NULL DEFAULT 1,
         ${ts},
         PRIMARY KEY (id),
         KEY IDX_groups_parent (parent_id),
-        CONSTRAINT FK_groups_parent FOREIGN KEY (parent_id) REFERENCES \`groups\` (id)
+        KEY IDX_groups_manager (manager_id),
+        CONSTRAINT FK_groups_parent FOREIGN KEY (parent_id) REFERENCES \`groups\` (id),
+        -- Quem manda no grupo, base do escopo \`team\`. \`ON DELETE SET NULL\` de
+        -- propósito: apagar a pessoa não pode apagar o grupo junto — o time
+        -- continua existindo e fica sem gerente até alguém assumir.
+        CONSTRAINT FK_groups_manager FOREIGN KEY (manager_id)
+          REFERENCES users (id) ON DELETE SET NULL
       ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
     `);
         await queryRunner.query(`

package/dist/core/database/migrations/index.js

@@ -2,8 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.coreMigrations = void 0;
 const _1710000000000_InitialSchema_1 = require("./1710000000000-InitialSchema");
-const _1787270400000_GroupManager_1 = require("./1787270400000-GroupManager");
 exports.coreMigrations = [
     _1710000000000_InitialSchema_1.InitialSchema1710000000000,
-    _1787270400000_GroupManager_1.GroupManager1787270400000,
 ];

package/dist/core/database/seeds/seedPermissions.d.ts

@@ -1,2 +1,21 @@
 import { DataSource } from "typeorm";
-export declare function seedPermissions(ds: DataSource): Promise<void>;
+interface CatalogEntry {
+    name: string;
+    description: string;
+}
+export interface RbacCatalogExtension {
+    resources?: CatalogEntry[];
+    actions?: CatalogEntry[];
+    scopes?: CatalogEntry[];
+    permissions?: {
+        code: string;
+        description: string;
+    }[];
+    roles?: {
+        name: string;
+        description: string;
+        permissions: string[] | "*";
+    }[];
+}
+export declare function seedPermissions(ds: DataSource, extension?: RbacCatalogExtension): Promise<void>;
+export {};

package/dist/core/database/seeds/seedPermissions.js

@@ -7,47 +7,40 @@ const permission_schema_1 = require("../../../features/rbac/infra/schema/permiss
 const resource_schema_1 = require("../../../features/rbac/infra/schema/resource.schema");
 const role_schema_1 = require("../../../features/rbac/infra/schema/role.schema");
 const scope_schema_1 = require("../../../features/rbac/infra/schema/scope.schema");
-async function seedPermissions(ds) {
-    const resourceRepo = ds.getRepository(resource_schema_1.Resource);
-    const actionRepo = ds.getRepository(action_schema_1.Action);
-    const scopeRepo = ds.getRepository(scope_schema_1.Scope);
-    const permissionRepo = ds.getRepository(permission_schema_1.Permission);
-    const roleRepo = ds.getRepository(role_schema_1.Role);
-    const resources = new Map();
-    for (const r of rbac_catalog_1.RESOURCES) {
-        let entity = await resourceRepo.findOne({
-            where: { name: r.name },
-            withDeleted: true,
-        });
-        if (!entity) {
-            entity = await resourceRepo.save(resourceRepo.create(r));
-        }
-        resources.set(r.name, entity);
-    }
-    const actions = new Map();
-    for (const a of rbac_catalog_1.ACTIONS) {
-        let entity = await actionRepo.findOne({
-            where: { name: a.name },
+async function seedCatalog(repo, entries) {
+    const byName = new Map();
+    for (const entry of entries) {
+        let row = await repo.findOne({
+            where: { name: entry.name },
             withDeleted: true,
         });
-        if (!entity) {
-            entity = await actionRepo.save(actionRepo.create(a));
+        if (!row) {
+            row = await repo.save(repo.create(entry));
         }
-        actions.set(a.name, entity);
-    }
-    const scopes = new Map();
-    for (const s of rbac_catalog_1.SCOPES) {
-        let entity = await scopeRepo.findOne({
-            where: { name: s.name },
-            withDeleted: true,
-        });
-        if (!entity) {
-            entity = await scopeRepo.save(scopeRepo.create(s));
+        else if (row.description !== entry.description) {
+            row.description = entry.description;
+            row = await repo.save(row);
         }
-        scopes.set(s.name, entity);
+        byName.set(entry.name, row);
     }
+    return byName;
+}
+async function seedPermissions(ds, extension = {}) {
+    const allResources = [...rbac_catalog_1.RESOURCES, ...(extension.resources ?? [])];
+    const allActions = [...rbac_catalog_1.ACTIONS, ...(extension.actions ?? [])];
+    const allScopes = [...rbac_catalog_1.SCOPES, ...(extension.scopes ?? [])];
+    const allPermissions = [...rbac_catalog_1.PERMISSIONS, ...(extension.permissions ?? [])];
+    const allRoles = [...rbac_catalog_1.ROLES, ...(extension.roles ?? [])];
+    const resourceRepo = ds.getRepository(resource_schema_1.Resource);
+    const actionRepo = ds.getRepository(action_schema_1.Action);
+    const scopeRepo = ds.getRepository(scope_schema_1.Scope);
+    const permissionRepo = ds.getRepository(permission_schema_1.Permission);
+    const roleRepo = ds.getRepository(role_schema_1.Role);
+    const resources = await seedCatalog(resourceRepo, allResources);
+    const actions = await seedCatalog(actionRepo, allActions);
+    const scopes = await seedCatalog(scopeRepo, allScopes);
     const permissions = new Map();
-    for (const p of rbac_catalog_1.PERMISSIONS) {
+    for (const p of allPermissions) {
         let entity = await permissionRepo.findOne({
             where: { code: p.code },
             withDeleted: true,
@@ -70,7 +63,7 @@ async function seedPermissions(ds) {
         }
         permissions.set(p.code, entity);
     }
-    for (const r of rbac_catalog_1.ROLES) {
+    for (const r of allRoles) {
         let role = await roleRepo.findOne({
             where: { name: r.name },
             relations: { permissions: true },
@@ -83,11 +76,11 @@ async function seedPermissions(ds) {
                 permissions: [],
             });
         }
-        const codes = r.permissions === "*" ? rbac_catalog_1.PERMISSIONS.map((p) => p.code) : r.permissions;
+        const codes = r.permissions === "*" ? allPermissions.map((p) => p.code) : r.permissions;
         role.permissions = codes
             .map((code) => permissions.get(code))
             .filter(Boolean);
         await roleRepo.save(role);
     }
-    console.log(`[seed] RBAC: ${resources.size} resources, ${actions.size} actions, ${scopes.size} scopes, ${permissions.size} permissions, ${rbac_catalog_1.ROLES.length} roles`);
+    console.log(`[seed] RBAC: ${resources.size} resources, ${actions.size} actions, ${scopes.size} scopes, ${permissions.size} permissions, ${allRoles.length} roles`);
 }

package/dist/core/query/applyOwnershipScope.util.d.ts

@@ -0,0 +1,7 @@
+import { ObjectLiteral, SelectQueryBuilder } from "typeorm";
+import { OwnershipScope } from "../auth/ownershipScope.util";
+export interface OwnershipScopeOptions {
+    alias: string;
+    column?: string;
+}
+export declare const applyOwnershipScope: <T extends ObjectLiteral>(qb: SelectQueryBuilder<T>, scope: OwnershipScope, options: OwnershipScopeOptions) => SelectQueryBuilder<T>;

package/dist/core/query/applyOwnershipScope.util.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyOwnershipScope = void 0;
+const applyOwnershipScope = (qb, scope, options) => {
+    const { alias, column = "ownerId" } = options;
+    if (scope.kind === "all") {
+        return qb;
+    }
+    if (scope.kind === "none") {
+        return qb.andWhere("1 = 0");
+    }
+    return qb.andWhere(`${alias}.${column} = :ownershipScopeUserId`, {
+        ownershipScopeUserId: scope.userId,
+    });
+};
+exports.applyOwnershipScope = applyOwnershipScope;

package/dist/core/websocket/baseGateway.js

@@ -49,6 +49,10 @@ class BaseGateway {
             this.logger.warn(`Evento ${event} descartado: sem sala de destino`);
             return;
         }
+        if (!this.server) {
+            this.logger.warn(`Evento ${event} descartado: servidor de socket não inicializado`);
+            return;
+        }
         this.server.to(targets).emit(event, (0, socketEvent_envelope_1.wrapSocketEvent)(event, data));
     }
     scheduleExpiry(socket, expiresAt) {

package/dist/features/notifications/notifications.module.js

@@ -40,6 +40,6 @@ exports.NotificationsModule = NotificationsModule = __decorate([
             notifications_publisher_1.NotificationsPublisher,
             domainEvents_listener_1.DomainEventsListener,
         ],
-        exports: [notifications_service_1.NotificationsService],
+        exports: [notifications_service_1.NotificationsService, notifications_publisher_1.NotificationsPublisher],
     })
 ], NotificationsModule);

package/dist/features/rbac/domain/rbac.catalog.js

@@ -8,17 +8,15 @@ exports.RESOURCES = [
     { name: "groups", description: "Gestão de grupos" },
     { name: "audit", description: "Logs e auditoria" },
     { name: "notifications", description: "Notificações" },
-    { name: "reports", description: "Relatórios" },
-    { name: "resources", description: "Catálogo RBAC — resources" },
-    { name: "actions", description: "Catálogo RBAC — actions" },
-    { name: "scopes", description: "Catálogo RBAC — scopes" },
+    { name: "resources", description: "Controle de acesso — áreas" },
+    { name: "actions", description: "Controle de acesso — ações" },
+    { name: "scopes", description: "Controle de acesso — alcances" },
 ];
 exports.ACTIONS = [
     { name: "create", description: "Criar" },
     { name: "read", description: "Ler/visualizar" },
     { name: "update", description: "Atualizar" },
     { name: "delete", description: "Remover" },
-    { name: "export", description: "Exportar" },
     { name: "promote", description: "Alterar papel/promover" },
     { name: "deactivate", description: "Ativar/desativar" },
     { name: "reset-password", description: "Resetar senha de usuário" },
@@ -26,13 +24,12 @@ exports.ACTIONS = [
     { name: "update-email", description: "Alterar email de usuário" },
     {
         name: "read-trail",
-        description: "Ler trilha de auditoria de dados (old/new data)",
+        description: "Ler trilha de auditoria (tela Auditoria)",
     },
 ];
 exports.SCOPES = [
     { name: "own", description: "Apenas recursos próprios" },
     { name: "team", description: "Recursos da equipe" },
-    { name: "department", description: "Recursos do departamento" },
     { name: "any", description: "Todos os recursos" },
 ];
 exports.PERMISSIONS = [
@@ -103,12 +100,6 @@ exports.PERMISSIONS = [
         code: "audit:read-trail:any",
         description: "Ler trilha de auditoria de dados (old/new data) — restrito a administradores",
     },
-    { code: "reports:read:any", description: "Ler todos os relatórios" },
-    {
-        code: "reports:read:department",
-        description: "Ler relatórios do departamento",
-    },
-    { code: "reports:export:any", description: "Exportar todos os relatórios" },
     {
         code: "notifications:read:own",
         description: "Ler e marcar como lidas as próprias notificações",
@@ -164,8 +155,6 @@ exports.ROLES = [
             "users:invite:team",
             "users:reset-password:team",
             "users:deactivate:team",
-            "reports:read:department",
-            "reports:read:any",
             "audit:read:any",
             "notifications:read:own",
         ],
@@ -175,7 +164,6 @@ exports.ROLES = [
         description: "Somente leitura",
         permissions: [
             "users:read:own",
-            "reports:read:department",
             "notifications:read:own",
         ],
     },

package/dist/features/rbac/domain/rbac.service.js

@@ -184,7 +184,10 @@ let RbacService = class RbacService {
         await this.scopeRepo.softRemove(scope);
     }
     listPermissions() {
-        return this.permissionRepo.find({ order: { code: "ASC" } });
+        return this.permissionRepo.find({
+            order: { code: "ASC" },
+            relations: { resource: true, action: true, scope: true },
+        });
     }
     async createPermission(dto) {
         const exists = await this.permissionRepo.findOne({

package/dist/features/rbac/domain/teamScope.service.d.ts

@@ -6,6 +6,7 @@ export declare class TeamScopeService {
     private readonly rbac;
     constructor(groupRepo: GroupRepository, rbac: RbacService);
     reachableUserIds(actor: Actor, action: string): Promise<string[] | null>;
+    private withSelf;
     managedGroupIds(managerId: string): Promise<string[]>;
     private reachOf;
     assertCanAct(actor: Actor, targetUserId: string, action: string): Promise<void>;

package/dist/features/rbac/domain/teamScope.service.js

@@ -23,11 +23,17 @@ let TeamScopeService = class TeamScopeService {
         if (this.has(actor, action, permissionScope_util_1.SCOPE_ANY)) {
             return null;
         }
-        if (!this.has(actor, action, permissionScope_util_1.SCOPE_TEAM)) {
-            return [];
+        if (this.has(actor, action, permissionScope_util_1.SCOPE_TEAM)) {
+            const reach = await this.reachOf(actor.id);
+            return this.withSelf(reach.userIds, actor.id);
         }
-        const reach = await this.reachOf(actor.id);
-        return reach.userIds;
+        if (this.has(actor, action, permissionScope_util_1.SCOPE_OWN)) {
+            return [actor.id];
+        }
+        return [];
+    }
+    withSelf(userIds, actorId) {
+        return userIds.includes(actorId) ? userIds : [...userIds, actorId];
     }
     async managedGroupIds(managerId) {
         return this.groupRepo.findManagedGroupIds(managerId);

package/dist/features/rbac/infra/schema/scope.schema.js

@@ -17,7 +17,7 @@ let Scope = class Scope extends base_schema_1.BaseEntity {
 };
 exports.Scope = Scope;
 __decorate([
-    (0, swagger_1.ApiProperty)({ description: "own | team | department | any" }),
+    (0, swagger_1.ApiProperty)({ description: "own | team | any" }),
     (0, typeorm_1.Column)({ type: "varchar", length: 100, unique: true }),
     __metadata("design:type", String)
 ], Scope.prototype, "name", void 0);

package/dist/features/rbac/presentation/commands/createScope.command.js

@@ -16,7 +16,7 @@ class CreateScopeCommand {
 }
 exports.CreateScopeCommand = CreateScopeCommand;
 __decorate([
-    (0, swagger_1.ApiProperty)({ example: "own", description: "own | team | department | any" }),
+    (0, swagger_1.ApiProperty)({ example: "own", description: "own | team | any" }),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.Matches)(/^[a-z-]+$/, {
         message: "name deve conter só letras minúsculas e hífen",

package/dist/index.d.ts

@@ -18,8 +18,10 @@ export { AppThrottlerGuard } from "./core/auth/guards/appThrottler.guard";
 export { CsrfGuard } from "./core/auth/guards/csrf.guard";
 export { JwtAuthGuard } from "./core/auth/guards/jwtAuth.guard";
 export { PermissionsGuard } from "./core/auth/guards/permissions.guard";
-export { anyOrTeam, SCOPE_ANY, SCOPE_TEAM, } from "./core/auth/permissionScope.util";
+export { OwnershipScope, resolveOwnershipScope, } from "./core/auth/ownershipScope.util";
+export { anyOrOwn, anyOrTeam, SCOPE_ANY, SCOPE_OWN, SCOPE_TEAM, } from "./core/auth/permissionScope.util";
 export { applyFilter, FilterSql } from "./core/query/applyFilter.util";
+export { applyOwnershipScope, OwnershipScopeOptions, } from "./core/query/applyOwnershipScope.util";
 export { DEFAULT_OPERATORS, FILTER_MAX_DEPTH, FILTER_MAX_IN_ITEMS, FILTER_MAX_LENGTH, FILTER_MAX_NODES, } from "./core/query/filter.constants";
 export { FilterCatalog, FilterCondition, FilterFieldDefinition, FilterGroup, FilterNode, FilterOption, FilterRelation, } from "./core/query/filterField.interface";
 export { FilterFieldType } from "./core/query/filterFieldType.enum";
@@ -32,13 +34,19 @@ export { Paginated, PaginationMeta, PaginationQuery, resolveOrder, SortDir, } fr
 export { PaginationMetaResponse } from "./core/utils/paginationMeta.response";
 export { BaseEntity } from "./core/database/base.schema";
 export { seedAdmin } from "./core/database/seeds/seedAdmin";
-export { seedPermissions } from "./core/database/seeds/seedPermissions";
+export { RbacCatalogExtension, seedPermissions, } from "./core/database/seeds/seedPermissions";
 export { AuditDataChange } from "./features/audit/infra/schema/auditDataChange.schema";
 export { RequestLog } from "./features/audit/infra/schema/requestLog.schema";
 export { AuthToken } from "./features/auth/infra/schema/authToken.schema";
+export { ACTIONS, PERMISSIONS, RESOURCES, ROLES, SCOPES, } from "./features/rbac/domain/rbac.catalog";
+export { NotificationType } from "./features/notifications/domain/enums/notificationType.enum";
+export { ScopeType } from "./features/notifications/domain/enums/scopeType.enum";
+export { NotificationsService, NotificationTarget, PublishNotificationParams, UserNotification, } from "./features/notifications/domain/notifications.service";
 export { Notification } from "./features/notifications/infra/schema/notification.schema";
 export { NotificationRead } from "./features/notifications/infra/schema/notificationRead.schema";
 export { NotificationScope } from "./features/notifications/infra/schema/notificationScope.schema";
+export { NotificationsModule } from "./features/notifications/notifications.module";
+export { NotificationsPublisher } from "./features/notifications/presentation/notifications.publisher";
 export { Action } from "./features/rbac/infra/schema/action.schema";
 export { Group } from "./features/rbac/infra/schema/group.schema";
 export { Permission } from "./features/rbac/infra/schema/permission.schema";

package/dist/index.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.seedPermissions = exports.seedAdmin = exports.BaseEntity = exports.PaginationMetaResponse = exports.resolveOrder = exports.PaginationQuery = exports.Paginated = exports.parseFilter = exports.paginateWithFilter = exports.resolveCatalogOrder = exports.toFilterSchema = exports.FilterOptionResponse = exports.FilterFieldResponse = exports.FilterOperator = exports.FilterCombinator = exports.FilterFieldType = exports.FILTER_MAX_NODES = exports.FILTER_MAX_LENGTH = exports.FILTER_MAX_IN_ITEMS = exports.FILTER_MAX_DEPTH = exports.DEFAULT_OPERATORS = exports.applyFilter = exports.SCOPE_TEAM = exports.SCOPE_ANY = exports.anyOrTeam = exports.PermissionsGuard = exports.JwtAuthGuard = exports.CsrfGuard = exports.AppThrottlerGuard = exports.RequirePermission = exports.RequireAnyPermission = exports.PERMISSIONS_KEY = exports.ANY_PERMISSIONS_KEY = exports.Public = exports.IS_PUBLIC_KEY = exports.CurrentUser = exports.setAuthCookies = exports.REFRESH_COOKIE = exports.clearAuthCookies = exports.ACCESS_COOKIE = exports.EnvService = exports.validateEnv = exports.envSchema = exports.ConfigModule = exports.RlCoreModule = exports.coreEntities = exports.coreMigrations = exports.createCoreDataSource = exports.CoreModule = exports.bootstrapCore = void 0;
-exports.normalizeIp = exports.sha256 = exports.randomToken = exports.numericCode = exports.backupCode = exports.encryptSecret = exports.decryptSecret = exports.MailerService = exports.createAppLogger = exports.WS_USER_RESOLVER = exports.WsAuthService = exports.wrapSocketEvent = exports.SOCKET_EVENT_VERSION = exports.userRoom = exports.SESSION_REFRESH_EVENT = exports.roleRoom = exports.NOTIFICATIONS_NAMESPACE = exports.BaseGateway = exports.Auditable = exports.RequestOutcome = exports.ErrorType = exports.codedUnauthorized = exports.codedTooManyRequests = exports.codedBadRequest = exports.AppErrorCode = exports.AppEvent = exports.auditContext = exports.User = exports.PasswordHistory = exports.Scope = exports.Role = exports.Resource = exports.Permission = exports.Group = exports.Action = exports.NotificationScope = exports.NotificationRead = exports.Notification = exports.AuthToken = exports.RequestLog = exports.AuditDataChange = void 0;
+exports.resolveOrder = exports.PaginationQuery = exports.Paginated = exports.parseFilter = exports.paginateWithFilter = exports.resolveCatalogOrder = exports.toFilterSchema = exports.FilterOptionResponse = exports.FilterFieldResponse = exports.FilterOperator = exports.FilterCombinator = exports.FilterFieldType = exports.FILTER_MAX_NODES = exports.FILTER_MAX_LENGTH = exports.FILTER_MAX_IN_ITEMS = exports.FILTER_MAX_DEPTH = exports.DEFAULT_OPERATORS = exports.applyOwnershipScope = exports.applyFilter = exports.SCOPE_TEAM = exports.SCOPE_OWN = exports.SCOPE_ANY = exports.anyOrTeam = exports.anyOrOwn = exports.resolveOwnershipScope = exports.PermissionsGuard = exports.JwtAuthGuard = exports.CsrfGuard = exports.AppThrottlerGuard = exports.RequirePermission = exports.RequireAnyPermission = exports.PERMISSIONS_KEY = exports.ANY_PERMISSIONS_KEY = exports.Public = exports.IS_PUBLIC_KEY = exports.CurrentUser = exports.setAuthCookies = exports.REFRESH_COOKIE = exports.clearAuthCookies = exports.ACCESS_COOKIE = exports.EnvService = exports.validateEnv = exports.envSchema = exports.ConfigModule = exports.RlCoreModule = exports.coreEntities = exports.coreMigrations = exports.createCoreDataSource = exports.CoreModule = exports.bootstrapCore = void 0;
+exports.encryptSecret = exports.decryptSecret = exports.MailerService = exports.createAppLogger = exports.WS_USER_RESOLVER = exports.WsAuthService = exports.wrapSocketEvent = exports.SOCKET_EVENT_VERSION = exports.userRoom = exports.SESSION_REFRESH_EVENT = exports.roleRoom = exports.NOTIFICATIONS_NAMESPACE = exports.BaseGateway = exports.Auditable = exports.RequestOutcome = exports.ErrorType = exports.codedUnauthorized = exports.codedTooManyRequests = exports.codedBadRequest = exports.AppErrorCode = exports.AppEvent = exports.auditContext = exports.User = exports.PasswordHistory = exports.Scope = exports.Role = exports.Resource = exports.Permission = exports.Group = exports.Action = exports.NotificationsPublisher = exports.NotificationsModule = exports.NotificationScope = exports.NotificationRead = exports.Notification = exports.NotificationsService = exports.ScopeType = exports.NotificationType = exports.SCOPES = exports.ROLES = exports.RESOURCES = exports.PERMISSIONS = exports.ACTIONS = exports.AuthToken = exports.RequestLog = exports.AuditDataChange = exports.seedPermissions = exports.seedAdmin = exports.BaseEntity = exports.PaginationMetaResponse = void 0;
+exports.normalizeIp = exports.sha256 = exports.randomToken = exports.numericCode = exports.backupCode = void 0;
 var bootstrapCore_util_1 = require("./core/bootstrap/bootstrapCore.util");
 Object.defineProperty(exports, "bootstrapCore", { enumerable: true, get: function () { return bootstrapCore_util_1.bootstrapCore; } });
 var core_module_1 = require("./core/core.module");
@@ -44,12 +45,18 @@ var jwtAuth_guard_1 = require("./core/auth/guards/jwtAuth.guard");
 Object.defineProperty(exports, "JwtAuthGuard", { enumerable: true, get: function () { return jwtAuth_guard_1.JwtAuthGuard; } });
 var permissions_guard_1 = require("./core/auth/guards/permissions.guard");
 Object.defineProperty(exports, "PermissionsGuard", { enumerable: true, get: function () { return permissions_guard_1.PermissionsGuard; } });
+var ownershipScope_util_1 = require("./core/auth/ownershipScope.util");
+Object.defineProperty(exports, "resolveOwnershipScope", { enumerable: true, get: function () { return ownershipScope_util_1.resolveOwnershipScope; } });
 var permissionScope_util_1 = require("./core/auth/permissionScope.util");
+Object.defineProperty(exports, "anyOrOwn", { enumerable: true, get: function () { return permissionScope_util_1.anyOrOwn; } });
 Object.defineProperty(exports, "anyOrTeam", { enumerable: true, get: function () { return permissionScope_util_1.anyOrTeam; } });
 Object.defineProperty(exports, "SCOPE_ANY", { enumerable: true, get: function () { return permissionScope_util_1.SCOPE_ANY; } });
+Object.defineProperty(exports, "SCOPE_OWN", { enumerable: true, get: function () { return permissionScope_util_1.SCOPE_OWN; } });
 Object.defineProperty(exports, "SCOPE_TEAM", { enumerable: true, get: function () { return permissionScope_util_1.SCOPE_TEAM; } });
 var applyFilter_util_1 = require("./core/query/applyFilter.util");
 Object.defineProperty(exports, "applyFilter", { enumerable: true, get: function () { return applyFilter_util_1.applyFilter; } });
+var applyOwnershipScope_util_1 = require("./core/query/applyOwnershipScope.util");
+Object.defineProperty(exports, "applyOwnershipScope", { enumerable: true, get: function () { return applyOwnershipScope_util_1.applyOwnershipScope; } });
 var filter_constants_1 = require("./core/query/filter.constants");
 Object.defineProperty(exports, "DEFAULT_OPERATORS", { enumerable: true, get: function () { return filter_constants_1.DEFAULT_OPERATORS; } });
 Object.defineProperty(exports, "FILTER_MAX_DEPTH", { enumerable: true, get: function () { return filter_constants_1.FILTER_MAX_DEPTH; } });
@@ -89,12 +96,28 @@ var requestLog_schema_1 = require("./features/audit/infra/schema/requestLog.sche
 Object.defineProperty(exports, "RequestLog", { enumerable: true, get: function () { return requestLog_schema_1.RequestLog; } });
 var authToken_schema_1 = require("./features/auth/infra/schema/authToken.schema");
 Object.defineProperty(exports, "AuthToken", { enumerable: true, get: function () { return authToken_schema_1.AuthToken; } });
+var rbac_catalog_1 = require("./features/rbac/domain/rbac.catalog");
+Object.defineProperty(exports, "ACTIONS", { enumerable: true, get: function () { return rbac_catalog_1.ACTIONS; } });
+Object.defineProperty(exports, "PERMISSIONS", { enumerable: true, get: function () { return rbac_catalog_1.PERMISSIONS; } });
+Object.defineProperty(exports, "RESOURCES", { enumerable: true, get: function () { return rbac_catalog_1.RESOURCES; } });
+Object.defineProperty(exports, "ROLES", { enumerable: true, get: function () { return rbac_catalog_1.ROLES; } });
+Object.defineProperty(exports, "SCOPES", { enumerable: true, get: function () { return rbac_catalog_1.SCOPES; } });
+var notificationType_enum_1 = require("./features/notifications/domain/enums/notificationType.enum");
+Object.defineProperty(exports, "NotificationType", { enumerable: true, get: function () { return notificationType_enum_1.NotificationType; } });
+var scopeType_enum_1 = require("./features/notifications/domain/enums/scopeType.enum");
+Object.defineProperty(exports, "ScopeType", { enumerable: true, get: function () { return scopeType_enum_1.ScopeType; } });
+var notifications_service_1 = require("./features/notifications/domain/notifications.service");
+Object.defineProperty(exports, "NotificationsService", { enumerable: true, get: function () { return notifications_service_1.NotificationsService; } });
 var notification_schema_1 = require("./features/notifications/infra/schema/notification.schema");
 Object.defineProperty(exports, "Notification", { enumerable: true, get: function () { return notification_schema_1.Notification; } });
 var notificationRead_schema_1 = require("./features/notifications/infra/schema/notificationRead.schema");
 Object.defineProperty(exports, "NotificationRead", { enumerable: true, get: function () { return notificationRead_schema_1.NotificationRead; } });
 var notificationScope_schema_1 = require("./features/notifications/infra/schema/notificationScope.schema");
 Object.defineProperty(exports, "NotificationScope", { enumerable: true, get: function () { return notificationScope_schema_1.NotificationScope; } });
+var notifications_module_1 = require("./features/notifications/notifications.module");
+Object.defineProperty(exports, "NotificationsModule", { enumerable: true, get: function () { return notifications_module_1.NotificationsModule; } });
+var notifications_publisher_1 = require("./features/notifications/presentation/notifications.publisher");
+Object.defineProperty(exports, "NotificationsPublisher", { enumerable: true, get: function () { return notifications_publisher_1.NotificationsPublisher; } });
 var action_schema_1 = require("./features/rbac/infra/schema/action.schema");
 Object.defineProperty(exports, "Action", { enumerable: true, get: function () { return action_schema_1.Action; } });
 var group_schema_1 = require("./features/rbac/infra/schema/group.schema");

package/dist/rlCore.module.js

@@ -33,6 +33,7 @@ let RlCoreModule = RlCoreModule_1 = class RlCoreModule {
                 maintenance_module_1.MaintenanceModule,
                 notifications_module_1.NotificationsModule,
             ],
+            exports: [notifications_module_1.NotificationsModule],
         };
     }
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rl-core-api",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Core NestJS: autenticação com 2FA, RBAC, auditoria, notificações e listagens com filtro dinâmico",
   "author": "Rodrigo Liberti",
   "license": "MIT",

package/dist/core/database/migrations/1787270400000-GroupManager.d.ts

@@ -1,6 +0,0 @@
-import { MigrationInterface, QueryRunner } from "typeorm";
-export declare class GroupManager1787270400000 implements MigrationInterface {
-    name: string;
-    up(queryRunner: QueryRunner): Promise<void>;
-    down(queryRunner: QueryRunner): Promise<void>;
-}

package/dist/core/database/migrations/1787270400000-GroupManager.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GroupManager1787270400000 = void 0;
-class GroupManager1787270400000 {
-    constructor() {
-        this.name = "GroupManager1787270400000";
-    }
-    async up(queryRunner) {
-        await queryRunner.query(`
-      ALTER TABLE \`groups\`
-        ADD COLUMN manager_id char(36) NULL AFTER parent_id,
-        ADD KEY IDX_groups_manager (manager_id),
-        ADD CONSTRAINT FK_groups_manager FOREIGN KEY (manager_id)
-          REFERENCES users (id) ON DELETE SET NULL;
-    `);
-    }
-    async down(queryRunner) {
-        await queryRunner.query(`
-      ALTER TABLE \`groups\`
-        DROP FOREIGN KEY FK_groups_manager,
-        DROP KEY IDX_groups_manager,
-        DROP COLUMN manager_id;
-    `);
-    }
-}
-exports.GroupManager1787270400000 = GroupManager1787270400000;