rl-core-api 0.7.0 → 0.8.0

package/dist/features/audit/presentation/userPermissionsChanged.listener.js

@@ -0,0 +1,43 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserPermissionsChangedListener = void 0;
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const appEvent_enum_1 = require("../../../core/events/appEvent.enum");
+const audit_service_1 = require("../domain/audit.service");
+const auditDataChange_schema_1 = require("../infra/schema/auditDataChange.schema");
+const asLabel = (codes) => codes.length ? [...codes].sort().join(", ") : "—";
+let UserPermissionsChangedListener = class UserPermissionsChangedListener {
+    constructor(audit) {
+        this.audit = audit;
+    }
+    async onPermissionsChanged(event) {
+        await this.audit.recordChange({
+            entity: "User",
+            entityId: event.userId,
+            action: auditDataChange_schema_1.AuditDataAction.UPDATE,
+            oldData: { directPermissions: asLabel(event.previousCodes) },
+            newData: { directPermissions: asLabel(event.codes) },
+        });
+    }
+};
+exports.UserPermissionsChangedListener = UserPermissionsChangedListener;
+__decorate([
+    (0, event_emitter_1.OnEvent)(appEvent_enum_1.AppEvent.USER_PERMISSIONS_CHANGED),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], UserPermissionsChangedListener.prototype, "onPermissionsChanged", null);
+exports.UserPermissionsChangedListener = UserPermissionsChangedListener = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [audit_service_1.AuditService])
+], UserPermissionsChangedListener);

package/dist/features/notifications/notifications.module.js

@@ -40,6 +40,6 @@ exports.NotificationsModule = NotificationsModule = __decorate([
             notifications_publisher_1.NotificationsPublisher,
             domainEvents_listener_1.DomainEventsListener,
         ],
-        exports: [notifications_service_1.NotificationsService, notifications_publisher_1.NotificationsPublisher],
+        exports: [notifications_service_1.NotificationsService, notifications_publisher_1.NotificationsPublisher, notifications_gateway_1.NotificationsGateway],
     })
 ], NotificationsModule);

package/dist/features/notifications/presentation/domainEvents.listener.d.ts

@@ -1,4 +1,4 @@
-import { SystemCleanupFailedEvent, UserLockedEvent, UserPasswordExpiringEvent, UserPasswordResetRequestedEvent, UserRolesChangedEvent, UserTwoFactorResetEvent } from "../../../core/events/appEvent.enum";
+import { SystemCleanupFailedEvent, UserLockedEvent, UserPasswordExpiringEvent, UserPasswordResetRequestedEvent, UserPermissionsChangedEvent, UserRolesChangedEvent, UserTwoFactorResetEvent } from "../../../core/events/appEvent.enum";
 import { NotificationsGateway } from "./notifications.gateway";
 import { NotificationsPublisher } from "./notifications.publisher";
 export declare class DomainEventsListener {
@@ -9,6 +9,7 @@ export declare class DomainEventsListener {
     onUserLocked(event: UserLockedEvent): Promise<void>;
     onTwoFactorReset(event: UserTwoFactorResetEvent): Promise<void>;
     onRolesChanged(event: UserRolesChangedEvent): Promise<void>;
+    onPermissionsChanged(event: UserPermissionsChangedEvent): Promise<void>;
     onPasswordResetRequested(event: UserPasswordResetRequestedEvent): Promise<void>;
     onPasswordExpiring(event: UserPasswordExpiringEvent): Promise<void>;
     onCleanupFailed(event: SystemCleanupFailedEvent): Promise<void>;

package/dist/features/notifications/presentation/domainEvents.listener.js

@@ -63,6 +63,19 @@ let DomainEventsListener = DomainEventsListener_1 = class DomainEventsListener {
             this.gateway.requestSessionRefresh(event.userId);
         });
     }
+    async onPermissionsChanged(event) {
+        await this.safePublish(appEvent_enum_1.AppEvent.USER_PERMISSIONS_CHANGED, async () => {
+            await this.publisher.publishAndPush({
+                title: "Seus acessos foram ajustados",
+                body: event.codes.length
+                    ? "Um administrador ajustou permissões específicas da sua conta. Parte do sistema pode aparecer diferente para você."
+                    : "Um administrador removeu as permissões específicas da sua conta. Seu acesso volta a ser o dos seus papéis.",
+                type: notificationType_enum_1.NotificationType.INFO,
+                targets: [{ type: scopeType_enum_1.ScopeType.USER, key: event.userId }],
+            });
+            this.gateway.requestSessionRefresh(event.userId);
+        });
+    }
     async onPasswordResetRequested(event) {
         await this.safePublish(appEvent_enum_1.AppEvent.USER_PASSWORD_RESET_REQUESTED, () => this.publisher.publishAndPush({
             title: "Redefinição de senha solicitada",
@@ -118,6 +131,12 @@ __decorate([
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], DomainEventsListener.prototype, "onRolesChanged", null);
+__decorate([
+    (0, event_emitter_1.OnEvent)(appEvent_enum_1.AppEvent.USER_PERMISSIONS_CHANGED),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], DomainEventsListener.prototype, "onPermissionsChanged", null);
 __decorate([
     (0, event_emitter_1.OnEvent)(appEvent_enum_1.AppEvent.USER_PASSWORD_RESET_REQUESTED),
     __metadata("design:type", Function),

package/dist/features/rbac/domain/rbac.catalog.js

@@ -11,6 +11,7 @@ exports.RESOURCES = [
     { name: "resources", description: "Controle de acesso — áreas" },
     { name: "actions", description: "Controle de acesso — ações" },
     { name: "scopes", description: "Controle de acesso — alcances" },
+    { name: "queues", description: "Fila de processamento em segundo plano" },
 ];
 exports.ACTIONS = [
     { name: "create", description: "Criar" },
@@ -18,6 +19,8 @@ exports.ACTIONS = [
     { name: "update", description: "Atualizar" },
     { name: "delete", description: "Remover" },
     { name: "promote", description: "Alterar papel/promover" },
+    { name: "grant", description: "Conceder permissão avulsa, fora de papel" },
+    { name: "manage", description: "Operar (reprocessar, remover)" },
     { name: "deactivate", description: "Ativar/desativar" },
     { name: "reset-password", description: "Resetar senha de usuário" },
     { name: "invite", description: "Enviar link de primeiro acesso" },
@@ -51,6 +54,10 @@ exports.PERMISSIONS = [
         code: "users:deactivate:any",
         description: "Ativar/desativar qualquer usuário",
     },
+    {
+        code: "users:grant:any",
+        description: "Conceder permissão diretamente a um usuário, fora de papel — restrito a administradores",
+    },
     {
         code: "users:reset-password:any",
         description: "Resetar senha de qualquer usuário",
@@ -138,6 +145,14 @@ exports.PERMISSIONS = [
         description: "Atualizar scopes do catálogo RBAC",
     },
     { code: "scopes:delete:any", description: "Remover scopes do catálogo RBAC" },
+    {
+        code: "queues:read:any",
+        description: "Ver a fila de processamento e os jobs de qualquer usuário",
+    },
+    {
+        code: "queues:manage:any",
+        description: "Reprocessar e remover jobs da fila",
+    },
 ];
 exports.ROLES = [
     {

package/dist/features/rbac/domain/rbac.service.d.ts

@@ -1,3 +1,4 @@
+import { EventEmitter2 } from "@nestjs/event-emitter";
 import { ActionRepository } from "../infra/repositories/action.repository";
 import { GroupRepository } from "../infra/repositories/group.repository";
 import { PermissionRepository } from "../infra/repositories/permission.repository";
@@ -31,7 +32,8 @@ export declare class RbacService {
     private readonly roleRepo;
     private readonly groupRepo;
     private readonly userRepo;
-    constructor(resourceRepo: ResourceRepository, actionRepo: ActionRepository, scopeRepo: ScopeRepository, permissionRepo: PermissionRepository, roleRepo: RoleRepository, groupRepo: GroupRepository, userRepo: UserRepository);
+    private readonly events;
+    constructor(resourceRepo: ResourceRepository, actionRepo: ActionRepository, scopeRepo: ScopeRepository, permissionRepo: PermissionRepository, roleRepo: RoleRepository, groupRepo: GroupRepository, userRepo: UserRepository, events: EventEmitter2);
     getUserPermissionCodes(userId: string): Promise<string[]>;
     getUserRoleNames(userId: string): Promise<string[]>;
     listResources(): Promise<Resource[]>;
@@ -58,6 +60,14 @@ export declare class RbacService {
     deleteRole(id: string): Promise<void>;
     addPermissionToRole(roleId: string, permissionId: string, actorPermissions?: string[]): Promise<Role>;
     removePermissionFromRole(roleId: string, permissionId: string): Promise<Role>;
+    listUserDirectPermissions(userId: string): Promise<Permission[]>;
+    setUserDirectPermissions(userId: string, permissionIds: string[], actorPermissions?: string[]): Promise<Permission[]>;
+    grantDirectPermission(userId: string, permissionId: string, actorPermissions?: string[]): Promise<Permission[]>;
+    revokeDirectPermission(userId: string, permissionId: string): Promise<Permission[]>;
+    private findUserWithDirectPermissions;
+    private replaceDirectPermissions;
+    private sameCodes;
+    private sortedByCode;
     listGroups(): Promise<Group[]>;
     listManagedGroups(managerId: string): Promise<Group[]>;
     getGroup(id: string): Promise<Group>;

package/dist/features/rbac/domain/rbac.service.js

@@ -11,7 +11,9 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RbacService = void 0;
 const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
 const typeorm_1 = require("typeorm");
+const appEvent_enum_1 = require("../../../core/events/appEvent.enum");
 const action_repository_1 = require("../infra/repositories/action.repository");
 const group_repository_1 = require("../infra/repositories/group.repository");
 const permission_repository_1 = require("../infra/repositories/permission.repository");
@@ -20,7 +22,7 @@ const role_repository_1 = require("../infra/repositories/role.repository");
 const scope_repository_1 = require("../infra/repositories/scope.repository");
 const user_repository_1 = require("../../users/infra/repositories/user.repository");
 let RbacService = class RbacService {
-    constructor(resourceRepo, actionRepo, scopeRepo, permissionRepo, roleRepo, groupRepo, userRepo) {
+    constructor(resourceRepo, actionRepo, scopeRepo, permissionRepo, roleRepo, groupRepo, userRepo, events) {
         this.resourceRepo = resourceRepo;
         this.actionRepo = actionRepo;
         this.scopeRepo = scopeRepo;
@@ -28,6 +30,7 @@ let RbacService = class RbacService {
         this.roleRepo = roleRepo;
         this.groupRepo = groupRepo;
         this.userRepo = userRepo;
+        this.events = events;
     }
     async getUserPermissionCodes(userId) {
         const user = await this.userRepo.findOne({
@@ -345,6 +348,72 @@ let RbacService = class RbacService {
         await this.roleRepo.save(role);
         return this.getRole(roleId);
     }
+    async listUserDirectPermissions(userId) {
+        const user = await this.findUserWithDirectPermissions(userId);
+        return this.sortedByCode(user.directPermissions ?? []);
+    }
+    async setUserDirectPermissions(userId, permissionIds, actorPermissions) {
+        const user = await this.findUserWithDirectPermissions(userId);
+        const permissions = permissionIds.length
+            ? await this.permissionRepo.findBy({ id: (0, typeorm_1.In)(permissionIds) })
+            : [];
+        if (permissions.length !== permissionIds.length) {
+            throw new common_1.NotFoundException("Alguma das permissões informadas não existe");
+        }
+        this.assertGrantableByActor(permissions, actorPermissions);
+        return this.replaceDirectPermissions(user, permissions);
+    }
+    async grantDirectPermission(userId, permissionId, actorPermissions) {
+        const user = await this.findUserWithDirectPermissions(userId);
+        const permission = await this.permissionRepo.findOneBy({
+            id: permissionId,
+        });
+        if (!permission) {
+            throw new common_1.NotFoundException("Permissão não encontrada");
+        }
+        this.assertGrantableByActor([permission], actorPermissions);
+        const current = user.directPermissions ?? [];
+        if (current.some((p) => p.id === permissionId)) {
+            return this.sortedByCode(current);
+        }
+        return this.replaceDirectPermissions(user, [...current, permission]);
+    }
+    async revokeDirectPermission(userId, permissionId) {
+        const user = await this.findUserWithDirectPermissions(userId);
+        const current = user.directPermissions ?? [];
+        return this.replaceDirectPermissions(user, current.filter((p) => p.id !== permissionId));
+    }
+    async findUserWithDirectPermissions(userId) {
+        const user = await this.userRepo.findOne({
+            where: { id: userId },
+            relations: { directPermissions: true },
+        });
+        if (!user) {
+            throw new common_1.NotFoundException("Usuário não encontrado");
+        }
+        return user;
+    }
+    async replaceDirectPermissions(user, permissions) {
+        const previousCodes = (user.directPermissions ?? []).map((p) => p.code);
+        const codes = permissions.map((p) => p.code);
+        user.directPermissions = permissions;
+        await this.userRepo.save(user);
+        if (!this.sameCodes(previousCodes, codes)) {
+            this.events.emit(appEvent_enum_1.AppEvent.USER_PERMISSIONS_CHANGED, {
+                userId: user.id,
+                codes,
+                previousCodes,
+            });
+        }
+        return this.sortedByCode(permissions);
+    }
+    sameCodes(a, b) {
+        const before = new Set(a);
+        return a.length === b.length && b.every((code) => before.has(code));
+    }
+    sortedByCode(permissions) {
+        return [...permissions].sort((a, b) => a.code.localeCompare(b.code));
+    }
     listGroups() {
         return this.groupRepo.find({
             relations: { roles: true },
@@ -449,5 +518,6 @@ exports.RbacService = RbacService = __decorate([
         permission_repository_1.PermissionRepository,
         role_repository_1.RoleRepository,
         group_repository_1.GroupRepository,
-        user_repository_1.UserRepository])
+        user_repository_1.UserRepository,
+        event_emitter_1.EventEmitter2])
 ], RbacService);

package/dist/features/rbac/presentation/commands/setUserPermissions.command.d.ts

@@ -0,0 +1,3 @@
+export declare class SetUserPermissionsCommand {
+    permissionIds: string[];
+}

package/dist/features/rbac/presentation/commands/setUserPermissions.command.js

@@ -0,0 +1,24 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SetUserPermissionsCommand = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class SetUserPermissionsCommand {
+}
+exports.SetUserPermissionsCommand = SetUserPermissionsCommand;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: [String], format: "uuid" }),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayUnique)(),
+    (0, class_validator_1.IsUUID)("all", { each: true }),
+    __metadata("design:type", Array)
+], SetUserPermissionsCommand.prototype, "permissionIds", void 0);

package/dist/features/rbac/presentation/index.d.ts

@@ -4,6 +4,7 @@ export * from "./commands/createPermission.command";
 export * from "./commands/createResource.command";
 export * from "./commands/createRole.command";
 export * from "./commands/createScope.command";
+export * from "./commands/setUserPermissions.command";
 export * from "./commands/updateAction.command";
 export * from "./commands/updateGroup.command";
 export * from "./commands/updatePermission.command";

package/dist/features/rbac/presentation/index.js

@@ -20,6 +20,7 @@ __exportStar(require("./commands/createPermission.command"), exports);
 __exportStar(require("./commands/createResource.command"), exports);
 __exportStar(require("./commands/createRole.command"), exports);
 __exportStar(require("./commands/createScope.command"), exports);
+__exportStar(require("./commands/setUserPermissions.command"), exports);
 __exportStar(require("./commands/updateAction.command"), exports);
 __exportStar(require("./commands/updateGroup.command"), exports);
 __exportStar(require("./commands/updatePermission.command"), exports);

package/dist/features/rbac/presentation/rbac.controller.d.ts

@@ -12,6 +12,7 @@ import { CreatePermissionCommand } from "./commands/createPermission.command";
 import { CreateResourceCommand } from "./commands/createResource.command";
 import { CreateRoleCommand } from "./commands/createRole.command";
 import { CreateScopeCommand } from "./commands/createScope.command";
+import { SetUserPermissionsCommand } from "./commands/setUserPermissions.command";
 import { UpdateActionCommand } from "./commands/updateAction.command";
 import { UpdateGroupCommand } from "./commands/updateGroup.command";
 import { UpdatePermissionCommand } from "./commands/updatePermission.command";
@@ -52,4 +53,8 @@ export declare class RbacController {
     deleteRole(id: string): Promise<void>;
     addPermissionToRole(id: string, permissionId: string, actor: AuthenticatedUser): Promise<Role>;
     removePermissionFromRole(id: string, permissionId: string): Promise<Role>;
+    userPermissions(userId: string): Promise<Permission[]>;
+    setUserPermissions(userId: string, dto: SetUserPermissionsCommand, actor: AuthenticatedUser): Promise<Permission[]>;
+    grantUserPermission(userId: string, permissionId: string, actor: AuthenticatedUser): Promise<Permission[]>;
+    revokeUserPermission(userId: string, permissionId: string): Promise<Permission[]>;
 }

package/dist/features/rbac/presentation/rbac.controller.js

@@ -26,6 +26,7 @@ const createPermission_command_1 = require("./commands/createPermission.command"
 const createResource_command_1 = require("./commands/createResource.command");
 const createRole_command_1 = require("./commands/createRole.command");
 const createScope_command_1 = require("./commands/createScope.command");
+const setUserPermissions_command_1 = require("./commands/setUserPermissions.command");
 const updateAction_command_1 = require("./commands/updateAction.command");
 const updateGroup_command_1 = require("./commands/updateGroup.command");
 const updatePermission_command_1 = require("./commands/updatePermission.command");
@@ -130,6 +131,18 @@ let RbacController = class RbacController {
     removePermissionFromRole(id, permissionId) {
         return this.rbac.removePermissionFromRole(id, permissionId);
     }
+    userPermissions(userId) {
+        return this.rbac.listUserDirectPermissions(userId);
+    }
+    setUserPermissions(userId, dto, actor) {
+        return this.rbac.setUserDirectPermissions(userId, dto.permissionIds, actor.permissions);
+    }
+    grantUserPermission(userId, permissionId, actor) {
+        return this.rbac.grantDirectPermission(userId, permissionId, actor.permissions);
+    }
+    revokeUserPermission(userId, permissionId) {
+        return this.rbac.revokeDirectPermission(userId, permissionId);
+    }
 };
 exports.RbacController = RbacController;
 __decorate([
@@ -420,6 +433,50 @@ __decorate([
     __metadata("design:paramtypes", [String, String]),
     __metadata("design:returntype", Promise)
 ], RbacController.prototype, "removePermissionFromRole", null);
+__decorate([
+    (0, common_1.Get)("users/:userId/permissions"),
+    (0, requirePermission_decorator_1.RequirePermission)("users:read:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.PermissionResponse, isArray: true }),
+    __param(0, (0, common_1.Param)("userId", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "userPermissions", null);
+__decorate([
+    (0, auditable_decorator_1.Auditable)("Permissões avulsas do usuário redefinidas"),
+    (0, common_1.Put)("users/:userId/permissions"),
+    (0, requirePermission_decorator_1.RequirePermission)("users:grant:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.PermissionResponse, isArray: true }),
+    __param(0, (0, common_1.Param)("userId", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, currentUser_decorator_1.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, setUserPermissions_command_1.SetUserPermissionsCommand, Object]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "setUserPermissions", null);
+__decorate([
+    (0, auditable_decorator_1.Auditable)("Permissão avulsa concedida ao usuário"),
+    (0, common_1.Post)("users/:userId/permissions/:permissionId"),
+    (0, requirePermission_decorator_1.RequirePermission)("users:grant:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.PermissionResponse, isArray: true }),
+    __param(0, (0, common_1.Param)("userId", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Param)("permissionId", common_1.ParseUUIDPipe)),
+    __param(2, (0, currentUser_decorator_1.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "grantUserPermission", null);
+__decorate([
+    (0, auditable_decorator_1.Auditable)("Permissão avulsa revogada do usuário"),
+    (0, common_1.Delete)("users/:userId/permissions/:permissionId"),
+    (0, requirePermission_decorator_1.RequirePermission)("users:grant:any"),
+    (0, swagger_1.ApiOkResponse)({ type: rbac_response_1.PermissionResponse, isArray: true }),
+    __param(0, (0, common_1.Param)("userId", common_1.ParseUUIDPipe)),
+    __param(1, (0, common_1.Param)("permissionId", common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], RbacController.prototype, "revokeUserPermission", null);
 exports.RbacController = RbacController = __decorate([
     (0, swagger_1.ApiTags)("RBAC"),
     (0, swagger_1.ApiBearerAuth)(),

package/dist/index.d.ts

@@ -56,12 +56,22 @@ export { Scope } from "./features/rbac/infra/schema/scope.schema";
 export { PasswordHistory } from "./features/users/infra/schema/passwordHistory.schema";
 export { User } from "./features/users/infra/schema/user.schema";
 export { auditContext, AuditContextStore } from "./core/context/auditContext";
-export { AppEvent, HttpErrorEvent, SystemCleanupFailedEvent, UserLockedEvent, UserPasswordExpiringEvent, UserPasswordResetRequestedEvent, UserRolesChangedEvent, UserTwoFactorResetEvent, } from "./core/events/appEvent.enum";
+export { AppEvent, HttpErrorEvent, SystemCleanupFailedEvent, UserLockedEvent, UserPasswordExpiringEvent, UserPasswordResetRequestedEvent, UserPermissionsChangedEvent, UserRolesChangedEvent, UserTwoFactorResetEvent, } from "./core/events/appEvent.enum";
 export { AppErrorCode } from "./core/filters/appErrorCode.enum";
 export { codedBadRequest, codedTooManyRequests, codedUnauthorized, } from "./core/utils/codedError.util";
 export { ErrorType } from "./features/audit/domain/enums/errorType.enum";
 export { RequestOutcome } from "./features/audit/domain/enums/requestOutcome.enum";
 export { Auditable } from "./features/audit/presentation/decorators/auditable.decorator";
+export { BullConnectionModule } from "./core/queue/bullConnection.module";
+export { EnqueueOptions, JobCompleted, JobContext, JobEnvelope, JobFailed, JobProgress, JobRef, JobState, JobStatus, QueueCounts, QueueJobSummary, } from "./core/queue/job.interface";
+export { JobProducer } from "./core/queue/job.producer";
+export { JOB_EVENTS_PUBLISHER, JobEventsPublisher, } from "./core/queue/jobEvents.interface";
+export { JobEventsService } from "./core/queue/jobEvents.service";
+export { JobErrorResponse, JobProgressResponse, JobStatusResponse, } from "./core/queue/jobStatus.response";
+export { JobWorkerHost, toSafeError } from "./core/queue/jobWorkerHost";
+export { COMPLETED_RETENTION_SECONDS, FAILED_RETENTION_SECONDS, isRedisConfigured, JOB_ATTEMPTS, JOB_BACKOFF_DELAY_MS, JOB_COMPLETED_EVENT, JOB_CONCURRENCY, JOB_FAILED_EVENT, JOB_PROGRESS_EVENT, JOBS_QUEUE, queuePrefix, } from "./core/queue/queue.constants";
+export { QueueModule } from "./core/queue/queue.module";
+export { buildRedisOptions } from "./core/queue/redisConnection";
 export { BaseGateway, SocketData } from "./core/websocket/baseGateway";
 export { NOTIFICATIONS_NAMESPACE, roleRoom, SESSION_REFRESH_EVENT, userRoom, } from "./core/websocket/socket.constants";
 export { SOCKET_EVENT_VERSION, SocketEvent, wrapSocketEvent, } from "./core/websocket/socketEvent.envelope";

package/dist/index.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveOrder = exports.PaginationQuery = exports.Paginated = exports.parseFilter = exports.paginateWithFilter = exports.resolveCatalogOrder = exports.toFilterSchema = exports.FilterOptionResponse = exports.FilterFieldResponse = exports.FilterOperator = exports.FilterCombinator = exports.FilterFieldType = exports.FILTER_MAX_NODES = exports.FILTER_MAX_LENGTH = exports.FILTER_MAX_IN_ITEMS = exports.FILTER_MAX_DEPTH = exports.DEFAULT_OPERATORS = exports.applyOwnershipScope = exports.applyFilter = exports.SCOPE_TEAM = exports.SCOPE_OWN = exports.SCOPE_ANY = exports.anyOrTeam = exports.anyOrOwn = exports.resolveOwnershipScope = exports.PermissionsGuard = exports.JwtAuthGuard = exports.CsrfGuard = exports.AppThrottlerGuard = exports.RequirePermission = exports.RequireAnyPermission = exports.PERMISSIONS_KEY = exports.ANY_PERMISSIONS_KEY = exports.Public = exports.IS_PUBLIC_KEY = exports.CurrentUser = exports.setAuthCookies = exports.REFRESH_COOKIE = exports.clearAuthCookies = exports.ACCESS_COOKIE = exports.EnvService = exports.validateEnv = exports.envSchema = exports.ConfigModule = exports.RlCoreModule = exports.coreEntities = exports.coreMigrations = exports.createCoreDataSource = exports.CoreModule = exports.bootstrapCore = void 0;
-exports.encryptSecret = exports.decryptSecret = exports.MailerService = exports.createAppLogger = exports.WS_USER_RESOLVER = exports.WsAuthService = exports.wrapSocketEvent = exports.SOCKET_EVENT_VERSION = exports.userRoom = exports.SESSION_REFRESH_EVENT = exports.roleRoom = exports.NOTIFICATIONS_NAMESPACE = exports.BaseGateway = exports.Auditable = exports.RequestOutcome = exports.ErrorType = exports.codedUnauthorized = exports.codedTooManyRequests = exports.codedBadRequest = exports.AppErrorCode = exports.AppEvent = exports.auditContext = exports.User = exports.PasswordHistory = exports.Scope = exports.Role = exports.Resource = exports.Permission = exports.Group = exports.Action = exports.NotificationsPublisher = exports.NotificationsModule = exports.NotificationScope = exports.NotificationRead = exports.Notification = exports.NotificationsService = exports.ScopeType = exports.NotificationType = exports.SCOPES = exports.ROLES = exports.RESOURCES = exports.PERMISSIONS = exports.ACTIONS = exports.AuthToken = exports.RequestLog = exports.AuditDataChange = exports.seedPermissions = exports.seedAdmin = exports.BaseEntity = exports.PaginationMetaResponse = void 0;
-exports.normalizeIp = exports.sha256 = exports.randomToken = exports.numericCode = exports.backupCode = void 0;
+exports.JOB_ATTEMPTS = exports.isRedisConfigured = exports.FAILED_RETENTION_SECONDS = exports.COMPLETED_RETENTION_SECONDS = exports.toSafeError = exports.JobWorkerHost = exports.JobStatusResponse = exports.JobProgressResponse = exports.JobErrorResponse = exports.JobEventsService = exports.JOB_EVENTS_PUBLISHER = exports.JobProducer = exports.BullConnectionModule = exports.Auditable = exports.RequestOutcome = exports.ErrorType = exports.codedUnauthorized = exports.codedTooManyRequests = exports.codedBadRequest = exports.AppErrorCode = exports.AppEvent = exports.auditContext = exports.User = exports.PasswordHistory = exports.Scope = exports.Role = exports.Resource = exports.Permission = exports.Group = exports.Action = exports.NotificationsPublisher = exports.NotificationsModule = exports.NotificationScope = exports.NotificationRead = exports.Notification = exports.NotificationsService = exports.ScopeType = exports.NotificationType = exports.SCOPES = exports.ROLES = exports.RESOURCES = exports.PERMISSIONS = exports.ACTIONS = exports.AuthToken = exports.RequestLog = exports.AuditDataChange = exports.seedPermissions = exports.seedAdmin = exports.BaseEntity = exports.PaginationMetaResponse = void 0;
+exports.normalizeIp = exports.sha256 = exports.randomToken = exports.numericCode = exports.backupCode = exports.encryptSecret = exports.decryptSecret = exports.MailerService = exports.createAppLogger = exports.WS_USER_RESOLVER = exports.WsAuthService = exports.wrapSocketEvent = exports.SOCKET_EVENT_VERSION = exports.userRoom = exports.SESSION_REFRESH_EVENT = exports.roleRoom = exports.NOTIFICATIONS_NAMESPACE = exports.BaseGateway = exports.buildRedisOptions = exports.QueueModule = exports.queuePrefix = exports.JOBS_QUEUE = exports.JOB_PROGRESS_EVENT = exports.JOB_FAILED_EVENT = exports.JOB_CONCURRENCY = exports.JOB_COMPLETED_EVENT = exports.JOB_BACKOFF_DELAY_MS = void 0;
 var bootstrapCore_util_1 = require("./core/bootstrap/bootstrapCore.util");
 Object.defineProperty(exports, "bootstrapCore", { enumerable: true, get: function () { return bootstrapCore_util_1.bootstrapCore; } });
 var core_module_1 = require("./core/core.module");
@@ -150,6 +150,37 @@ var requestOutcome_enum_1 = require("./features/audit/domain/enums/requestOutcom
 Object.defineProperty(exports, "RequestOutcome", { enumerable: true, get: function () { return requestOutcome_enum_1.RequestOutcome; } });
 var auditable_decorator_1 = require("./features/audit/presentation/decorators/auditable.decorator");
 Object.defineProperty(exports, "Auditable", { enumerable: true, get: function () { return auditable_decorator_1.Auditable; } });
+var bullConnection_module_1 = require("./core/queue/bullConnection.module");
+Object.defineProperty(exports, "BullConnectionModule", { enumerable: true, get: function () { return bullConnection_module_1.BullConnectionModule; } });
+var job_producer_1 = require("./core/queue/job.producer");
+Object.defineProperty(exports, "JobProducer", { enumerable: true, get: function () { return job_producer_1.JobProducer; } });
+var jobEvents_interface_1 = require("./core/queue/jobEvents.interface");
+Object.defineProperty(exports, "JOB_EVENTS_PUBLISHER", { enumerable: true, get: function () { return jobEvents_interface_1.JOB_EVENTS_PUBLISHER; } });
+var jobEvents_service_1 = require("./core/queue/jobEvents.service");
+Object.defineProperty(exports, "JobEventsService", { enumerable: true, get: function () { return jobEvents_service_1.JobEventsService; } });
+var jobStatus_response_1 = require("./core/queue/jobStatus.response");
+Object.defineProperty(exports, "JobErrorResponse", { enumerable: true, get: function () { return jobStatus_response_1.JobErrorResponse; } });
+Object.defineProperty(exports, "JobProgressResponse", { enumerable: true, get: function () { return jobStatus_response_1.JobProgressResponse; } });
+Object.defineProperty(exports, "JobStatusResponse", { enumerable: true, get: function () { return jobStatus_response_1.JobStatusResponse; } });
+var jobWorkerHost_1 = require("./core/queue/jobWorkerHost");
+Object.defineProperty(exports, "JobWorkerHost", { enumerable: true, get: function () { return jobWorkerHost_1.JobWorkerHost; } });
+Object.defineProperty(exports, "toSafeError", { enumerable: true, get: function () { return jobWorkerHost_1.toSafeError; } });
+var queue_constants_1 = require("./core/queue/queue.constants");
+Object.defineProperty(exports, "COMPLETED_RETENTION_SECONDS", { enumerable: true, get: function () { return queue_constants_1.COMPLETED_RETENTION_SECONDS; } });
+Object.defineProperty(exports, "FAILED_RETENTION_SECONDS", { enumerable: true, get: function () { return queue_constants_1.FAILED_RETENTION_SECONDS; } });
+Object.defineProperty(exports, "isRedisConfigured", { enumerable: true, get: function () { return queue_constants_1.isRedisConfigured; } });
+Object.defineProperty(exports, "JOB_ATTEMPTS", { enumerable: true, get: function () { return queue_constants_1.JOB_ATTEMPTS; } });
+Object.defineProperty(exports, "JOB_BACKOFF_DELAY_MS", { enumerable: true, get: function () { return queue_constants_1.JOB_BACKOFF_DELAY_MS; } });
+Object.defineProperty(exports, "JOB_COMPLETED_EVENT", { enumerable: true, get: function () { return queue_constants_1.JOB_COMPLETED_EVENT; } });
+Object.defineProperty(exports, "JOB_CONCURRENCY", { enumerable: true, get: function () { return queue_constants_1.JOB_CONCURRENCY; } });
+Object.defineProperty(exports, "JOB_FAILED_EVENT", { enumerable: true, get: function () { return queue_constants_1.JOB_FAILED_EVENT; } });
+Object.defineProperty(exports, "JOB_PROGRESS_EVENT", { enumerable: true, get: function () { return queue_constants_1.JOB_PROGRESS_EVENT; } });
+Object.defineProperty(exports, "JOBS_QUEUE", { enumerable: true, get: function () { return queue_constants_1.JOBS_QUEUE; } });
+Object.defineProperty(exports, "queuePrefix", { enumerable: true, get: function () { return queue_constants_1.queuePrefix; } });
+var queue_module_1 = require("./core/queue/queue.module");
+Object.defineProperty(exports, "QueueModule", { enumerable: true, get: function () { return queue_module_1.QueueModule; } });
+var redisConnection_1 = require("./core/queue/redisConnection");
+Object.defineProperty(exports, "buildRedisOptions", { enumerable: true, get: function () { return redisConnection_1.buildRedisOptions; } });
 var baseGateway_1 = require("./core/websocket/baseGateway");
 Object.defineProperty(exports, "BaseGateway", { enumerable: true, get: function () { return baseGateway_1.BaseGateway; } });
 var socket_constants_1 = require("./core/websocket/socket.constants");

package/dist/rlCore.module.js

@@ -10,11 +10,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.RlCoreModule = void 0;
 const common_1 = require("@nestjs/common");
 const core_module_1 = require("./core/core.module");
+const jobEvents_interface_1 = require("./core/queue/jobEvents.interface");
 const coreEntities_1 = require("./coreEntities");
 const audit_module_1 = require("./features/audit/audit.module");
 const auth_module_1 = require("./features/auth/auth.module");
 const maintenance_module_1 = require("./features/maintenance/maintenance.module");
 const notifications_module_1 = require("./features/notifications/notifications.module");
+const notifications_gateway_1 = require("./features/notifications/presentation/notifications.gateway");
 const rbac_module_1 = require("./features/rbac/rbac.module");
 const users_module_1 = require("./features/users/users.module");
 let RlCoreModule = RlCoreModule_1 = class RlCoreModule {
@@ -33,6 +35,12 @@ let RlCoreModule = RlCoreModule_1 = class RlCoreModule {
                 maintenance_module_1.MaintenanceModule,
                 notifications_module_1.NotificationsModule,
             ],
+            providers: [
+                {
+                    provide: jobEvents_interface_1.JOB_EVENTS_PUBLISHER,
+                    useExisting: notifications_gateway_1.NotificationsGateway,
+                },
+            ],
             exports: [notifications_module_1.NotificationsModule],
         };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rl-core-api",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Core NestJS: autenticação com 2FA, RBAC, auditoria, notificações e listagens com filtro dinâmico",
   "author": "Rodrigo Liberti",
   "license": "MIT",
@@ -69,6 +69,7 @@
     "zod": "^4.4.3"
   },
   "dependencies": {
+    "@nestjs/bullmq": "^11.0.5",
     "@nestjs/config": "^4.0.4",
     "@nestjs/event-emitter": "^3.1.0",
     "@nestjs/jwt": "^11.0.2",
@@ -78,9 +79,11 @@
     "@nestjs/throttler": "^6.5.0",
     "@nestjs/websockets": "^11.2.1",
     "argon2": "^0.45.1",
+    "bullmq": "^5.81.4",
     "cookie-parser": "^1.4.7",
     "dotenv": "^17.4.2",
     "helmet": "^8.3.0",
+    "ioredis": "^5.11.1",
     "mysql2": "^3.23.2",
     "nest-winston": "^1.10.2",
     "nodemailer": "^9.0.5",