add mq and redis

bun.lock

@@ -4,31 +4,41 @@
     "": {
       "name": "3r",
       "dependencies": {
+        "@casl/ability": "^6.7.3",
         "@fastify/static": "^8.2.0",
         "@nestjs/common": "^11.1.3",
         "@nestjs/core": "^11.1.3",
+        "@nestjs/jwt": "^11.0.0",
+        "@nestjs/passport": "^11.0.5",
         "@nestjs/platform-fastify": "^11.1.3",
         "@nestjs/swagger": "^11.2.0",
         "@nestjs/typeorm": "^11.0.0",
-        "bun": "^1.2.16",
+        "bcrypt": "^6.0.0",
         "chalk": "^5.4.1",
         "chokidar": "^4.0.3",
         "class-transformer": "^0.5.1",
         "class-validator": "^0.14.2",
+        "dayjs": "^1.11.13",
         "deepmerge": "^4.3.1",
         "dotenv": "^16.5.0",
+        "fastify": "^5.4.0",
         "find-up": "^7.0.0",
         "fs-extra": "^11.3.0",
+        "jsonwebtoken": "^9.0.2",
         "lodash": "^4.17.21",
         "meilisearch": "^0.51.0",
         "mysql2": "^3.14.1",
         "ora": "^8.2.0",
+        "passport": "^0.7.0",
+        "passport-jwt": "^4.0.1",
+        "passport-local": "^1.0.0",
         "pm2": "^6.0.8",
         "reflect-metadata": "^0.2.2",
         "rimraf": "^6.0.1",
         "rxjs": "^7.8.2",
         "sanitize-html": "^2.17.0",
         "typeorm": "^0.3.24",
+        "uuid": "^11.1.0",
         "validator": "^13.15.15",
         "yaml": "^2.8.0",
         "yargs": "^18.0.0",
@@ -43,13 +53,18 @@
         "@nestjs/testing": "^11.1.3",
         "@swc/cli": "^0.7.7",
         "@swc/core": "^1.12.1",
+        "@types/bcrypt": "^5.0.2",
         "@types/eslint": "^9.6.1",
         "@types/fs-extra": "^11.0.4",
         "@types/jest": "29.5.14",
+        "@types/jsonwebtoken": "^9.0.10",
         "@types/lodash": "^4.17.17",
         "@types/node": "^24.0.1",
+        "@types/passport-jwt": "^4.0.1",
+        "@types/passport-local": "^1.0.38",
         "@types/sanitize-html": "^2.16.0",
         "@types/supertest": "^6.0.3",
+        "@types/uuid": "^10.0.0",
         "@types/validator": "^13.15.1",
         "@types/yargs": "^17.0.33",
         "@typescript-eslint/eslint-plugin": "^8.34.0",
@@ -154,6 +169,8 @@
 
     "@bcoe/v8-coverage": ["@bcoe/v8-coverage@0.2.3", "", {}, "sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw=="],
 
+    "@casl/ability": ["@casl/ability@6.7.3", "", { "dependencies": { "@ucast/mongo2js": "^1.3.0" } }, "sha512-A4L28Ko+phJAsTDhRjzCOZWECQWN2jzZnJPnROWWHjJpyMq1h7h9ZqjwS2WbIUa3Z474X1ZPSgW0f1PboZGC0A=="],
+
     "@colors/colors": ["@colors/colors@1.5.0", "", {}, "sha512-ooWCrlZP11i8GImSjTHYHLkvFDP48nS4+204nGb1RiX/WXYHmJA2III9/e2DWVabCESdW7hBAEzHRqUn9OUVvQ=="],
 
     "@cspotcode/source-map-support": ["@cspotcode/source-map-support@0.8.1", "", { "dependencies": { "@jridgewell/trace-mapping": "0.3.9" } }, "sha512-IchNf6dN4tHoMFIn/7OE8LWZ19Y6q/67Bmf6vnGREv8RSbBVb9LPJxEcnwrcwX6ixSvaiGoomAUvu4YSxXrVgw=="],
@@ -302,7 +319,7 @@
 
     "@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.0", "", {}, "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ=="],
 
-    "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.9", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.0.3", "@jridgewell/sourcemap-codec": "^1.4.10" } }, "sha512-3Belt6tdc8bPgAtbcmdtNJlirVoTmEb5e2gC94PnkwEW9jI6CAHUeoG85tjWP5WquqfavoMtMwiG4P926ZKKuQ=="],
+    "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
 
     "@lukeed/csprng": ["@lukeed/csprng@1.1.0", "", {}, "sha512-Z7C/xXCiGWsg0KuKsHTKJxbWhpI3Vs5GwLfOean7MGyVFGqdRgBbAjOCh6u4bbjPc/8MJ2pZmK/0DLdCbivLDA=="],
 
@@ -352,8 +369,12 @@
 
     "@nestjs/core": ["@nestjs/core@11.1.3", "", { "dependencies": { "@nuxt/opencollective": "0.4.1", "fast-safe-stringify": "2.1.1", "iterare": "1.2.1", "path-to-regexp": "8.2.0", "tslib": "2.8.1", "uid": "2.0.2" }, "peerDependencies": { "@nestjs/common": "^11.0.0", "@nestjs/microservices": "^11.0.0", "@nestjs/platform-express": "^11.0.0", "@nestjs/websockets": "^11.0.0", "reflect-metadata": "^0.1.12 || ^0.2.0", "rxjs": "^7.1.0" }, "optionalPeers": ["@nestjs/microservices", "@nestjs/platform-express", "@nestjs/websockets"] }, "sha512-5lTni0TCh8x7bXETRD57pQFnKnEg1T6M+VLE7wAmyQRIecKQU+2inRGZD+A4v2DC1I04eA0WffP0GKLxjOKlzw=="],
 
+    "@nestjs/jwt": ["@nestjs/jwt@11.0.0", "", { "dependencies": { "@types/jsonwebtoken": "9.0.7", "jsonwebtoken": "9.0.2" }, "peerDependencies": { "@nestjs/common": "^8.0.0 || ^9.0.0 || ^10.0.0 || ^11.0.0" } }, "sha512-v7YRsW3Xi8HNTsO+jeHSEEqelX37TVWgwt+BcxtkG/OfXJEOs6GZdbdza200d6KqId1pJQZ6UPj1F0M6E+mxaA=="],
+
     "@nestjs/mapped-types": ["@nestjs/mapped-types@2.1.0", "", { "peerDependencies": { "@nestjs/common": "^10.0.0 || ^11.0.0", "class-transformer": "^0.4.0 || ^0.5.0", "class-validator": "^0.13.0 || ^0.14.0", "reflect-metadata": "^0.1.12 || ^0.2.0" }, "optionalPeers": ["class-transformer", "class-validator"] }, "sha512-W+n+rM69XsFdwORF11UqJahn4J3xi4g/ZEOlJNL6KoW5ygWSmBB2p0S2BZ4FQeS/NDH72e6xIcu35SfJnE8bXw=="],
 
+    "@nestjs/passport": ["@nestjs/passport@11.0.5", "", { "peerDependencies": { "@nestjs/common": "^10.0.0 || ^11.0.0", "passport": "^0.5.0 || ^0.6.0 || ^0.7.0" } }, "sha512-ulQX6mbjlws92PIM15Naes4F4p2JoxGnIJuUsdXQPT+Oo2sqQmENEZXM7eYuimocfHnKlcfZOuyzbA33LwUlOQ=="],
+
     "@nestjs/platform-fastify": ["@nestjs/platform-fastify@11.1.3", "", { "dependencies": { "@fastify/cors": "11.0.1", "@fastify/formbody": "8.0.2", "@fastify/middie": "9.0.3", "fast-querystring": "1.1.2", "fastify": "5.3.3", "light-my-request": "6.6.0", "path-to-regexp": "8.2.0", "tslib": "2.8.1" }, "peerDependencies": { "@fastify/static": "^8.0.0", "@fastify/view": "^10.0.0 || ^11.0.0", "@nestjs/common": "^11.0.0", "@nestjs/core": "^11.0.0" }, "optionalPeers": ["@fastify/static", "@fastify/view"] }, "sha512-SMIjGV6eAxQv6+/2OumIdNivVLebql6THWjXv8Uh4dR1CI6ipp3gMbpoiYbHP7AGXv8pzuGmpakli86VP9P8NQ=="],
 
     "@nestjs/schematics": ["@nestjs/schematics@11.0.5", "", { "dependencies": { "@angular-devkit/core": "19.2.6", "@angular-devkit/schematics": "19.2.6", "comment-json": "4.2.5", "jsonc-parser": "3.3.1", "pluralize": "8.0.0" }, "peerDependencies": { "typescript": ">=4.8.2" } }, "sha512-T50SCNyqCZ/fDssaOD7meBKLZ87ebRLaJqZTJPvJKjlib1VYhMOCwXYsr7bjMPmuPgiQHOwvppz77xN/m6GM7A=="],
@@ -374,28 +395,6 @@
 
     "@nuxt/opencollective": ["@nuxt/opencollective@0.4.1", "", { "dependencies": { "consola": "^3.2.3" }, "bin": { "opencollective": "bin/opencollective.js" } }, "sha512-GXD3wy50qYbxCJ652bDrDzgMr3NFEkIS374+IgFQKkCvk9yiYcLvX2XDYr7UyQxf4wK0e+yqDYRubZ0DtOxnmQ=="],
 
-    "@oven/bun-darwin-aarch64": ["@oven/bun-darwin-aarch64@1.2.16", "", { "os": "darwin", "cpu": "arm64" }, "sha512-NLVU9YDORq/3WuJOE5TQv5of3R99n56gYZPfdqP4U0/5nllbC8yzRxA2BWwAS2RxxD0Y3bxqEVUsIGiTNN2jxg=="],
-
-    "@oven/bun-darwin-x64": ["@oven/bun-darwin-x64@1.2.16", "", { "os": "darwin", "cpu": "x64" }, "sha512-HpcSVCTH9n+9bG2zu3OUJ9h22m6HzNgZpqib9r4NEVZg7Z2U86bOUMKlTCA0ZANaWsK9czl2VIhMWbLF4fgvLA=="],
-
-    "@oven/bun-darwin-x64-baseline": ["@oven/bun-darwin-x64-baseline@1.2.16", "", { "os": "darwin", "cpu": "x64" }, "sha512-FtKr6FwLN+QfrF0/vJtOwBMU72krmrHlxhRSElbKEOWox2n2vWSZ/sNNkHePEsrxGfqaHC5GhEZk2lnaZTavBQ=="],
-
-    "@oven/bun-linux-aarch64": ["@oven/bun-linux-aarch64@1.2.16", "", { "os": "linux", "cpu": "arm64" }, "sha512-nd0eZhihfgrDtfI/NdEqOAQ8KY87SWNQLZKjRB8WoYkqcY1BGwtZqvJOc2bEn2oERJ8K2etJRynXz+MKngiYxw=="],
-
-    "@oven/bun-linux-aarch64-musl": ["@oven/bun-linux-aarch64-musl@1.2.16", "", { "os": "linux", "cpu": "none" }, "sha512-MhvQ0hecunZnbac9cEOqA1CGk/ISDhhnF35i9l90Jgc/osfgGndViLkMp3wk1EO5UG4/Kbil1OlfLmyOHKq0SQ=="],
-
-    "@oven/bun-linux-x64": ["@oven/bun-linux-x64@1.2.16", "", { "os": "linux", "cpu": "x64" }, "sha512-qYUXPXbT4S+MImv51+dLBHKFYy40QIowwCRtzUFGf3TG+9MQQUXHNXryMNSdHveHqecd9rO1EIQ8hroAPBl+Sg=="],
-
-    "@oven/bun-linux-x64-baseline": ["@oven/bun-linux-x64-baseline@1.2.16", "", { "os": "linux", "cpu": "x64" }, "sha512-ZysDeqDfUAqKrQu2R+ddRgSCY30qSnn0LQLr6fAm7Pw9lU2yhWVNa8R3DavddmZQc1vUw6j3ITIAE+DDT9OBCg=="],
-
-    "@oven/bun-linux-x64-musl": ["@oven/bun-linux-x64-musl@1.2.16", "", { "os": "linux", "cpu": "x64" }, "sha512-6o5Oi5ARKYErF6nIBrewxtl20PGhM97faPemJ+v26D47dRNAlUWN5lMVuOqZOhYjqzOe4V+NpxIFBHtXWEmoNQ=="],
-
-    "@oven/bun-linux-x64-musl-baseline": ["@oven/bun-linux-x64-musl-baseline@1.2.16", "", { "os": "linux", "cpu": "x64" }, "sha512-cWwny3cxYkvV9fYnSDb2brXodWV7IcG+Bwd3q3b8OUYbeC3ekHN3zm+TYdSxIVhMm7z46CkiDz5QnnQWVVfZ5A=="],
-
-    "@oven/bun-windows-x64": ["@oven/bun-windows-x64@1.2.16", "", { "os": "win32", "cpu": "x64" }, "sha512-1xUlHHbMZ3DMZlEcppBAQ5vQDgNHDMIGB/AXO+dxQJl/3GiO/Ek4pMDzcqMnlbGDaDcTmTXyZ6cEXEF4C2qygQ=="],
-
-    "@oven/bun-windows-x64-baseline": ["@oven/bun-windows-x64-baseline@1.2.16", "", { "os": "win32", "cpu": "x64" }, "sha512-tHdtHqH6c5ScNusLWOzZCTeuV2rSc3mvlLQQ+DYefTy+XwtjXmY47MbBSgNuBWVYePIob9BqDFOtTHYIWRZTww=="],
-
     "@paralleldrive/cuid2": ["@paralleldrive/cuid2@2.2.2", "", { "dependencies": { "@noble/hashes": "^1.1.5" } }, "sha512-ZOBkgDwEdoYVlSeRbYYXs0S9MejQofiVYoTbKzy/6GQa39/q5tQU2IX46+shYnUkpEl3wc+J6wRlar7r2EK2xA=="],
 
     "@pkgjs/parseargs": ["@pkgjs/parseargs@0.11.0", "", {}, "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg=="],
@@ -480,6 +479,12 @@
 
     "@types/babel__traverse": ["@types/babel__traverse@7.20.7", "", { "dependencies": { "@babel/types": "^7.20.7" } }, "sha512-dkO5fhS7+/oos4ciWxyEyjWe48zmG6wbCheo/G2ZnHx4fs3EU6YC6UM8rk56gAjNJ9P3MTH2jo5jb92/K6wbng=="],
 
+    "@types/bcrypt": ["@types/bcrypt@5.0.2", "", { "dependencies": { "@types/node": "*" } }, "sha512-6atioO8Y75fNcbmj0G7UjI9lXN2pQ/IGJ2FWT4a/btd0Lk9lQalHLKhkgKVZ3r+spnmWUKfbMi1GEe9wyHQfNQ=="],
+
+    "@types/body-parser": ["@types/body-parser@1.19.6", "", { "dependencies": { "@types/connect": "*", "@types/node": "*" } }, "sha512-HLFeCYgz89uk22N5Qg3dvGvsv46B8GLvKKo1zKG4NybA8U2DiEO3w9lqGg29t/tfLRJpJ6iQxnVw4OnB7MoM9g=="],
+
+    "@types/connect": ["@types/connect@3.4.38", "", { "dependencies": { "@types/node": "*" } }, "sha512-K6uROf1LD88uDQqJCktA4yzL1YYAK6NgfsI0v/mTgyPKWsX1CnJ0XPSDhViejru1GcRkLWb8RlzFYJRqGUbaug=="],
+
     "@types/cookiejar": ["@types/cookiejar@2.1.5", "", {}, "sha512-he+DHOWReW0nghN24E1WUqM0efK4kI9oTqDm6XmK8ZPe2djZ90BSNdGnIyCLzCPw7/pogPlGbzI2wHGGmi4O/Q=="],
 
     "@types/eslint": ["@types/eslint@9.6.1", "", { "dependencies": { "@types/estree": "*", "@types/json-schema": "*" } }, "sha512-FXx2pKgId/WyYo2jXw63kk7/+TY7u7AziEJxJAnSFzHlqTAS3Ync6SvgYAN/k4/PQpnnVuzoMuVnByKK2qp0ag=="],
@@ -488,10 +493,16 @@
 
     "@types/estree": ["@types/estree@1.0.8", "", {}, "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w=="],
 
+    "@types/express": ["@types/express@5.0.3", "", { "dependencies": { "@types/body-parser": "*", "@types/express-serve-static-core": "^5.0.0", "@types/serve-static": "*" } }, "sha512-wGA0NX93b19/dZC1J18tKWVIYWyyF2ZjT9vin/NRu0qzzvfVzWjs04iq2rQ3H65vCTQYlRqs3YHfY7zjdV+9Kw=="],
+
+    "@types/express-serve-static-core": ["@types/express-serve-static-core@5.0.6", "", { "dependencies": { "@types/node": "*", "@types/qs": "*", "@types/range-parser": "*", "@types/send": "*" } }, "sha512-3xhRnjJPkULekpSzgtoNYYcTWgEZkp4myc+Saevii5JPnHNvHMRlBSHDbs7Bh1iPPoVTERHEZXyhyLbMEsExsA=="],
+
     "@types/fs-extra": ["@types/fs-extra@11.0.4", "", { "dependencies": { "@types/jsonfile": "*", "@types/node": "*" } }, "sha512-yTbItCNreRooED33qjunPthRcSjERP1r4MqCZc7wv0u2sUkzTFp45tgUfS5+r7FrZPdmCCNflLhVSP/o+SemsQ=="],
 
     "@types/http-cache-semantics": ["@types/http-cache-semantics@4.0.4", "", {}, "sha512-1m0bIFVc7eJWyve9S0RnuRgcQqF/Xd5QsUZAZeQFr1Q3/p9JWoQQEqmVy+DPTNpGXwhgIetAoYF8JSc33q29QA=="],
 
+    "@types/http-errors": ["@types/http-errors@2.0.5", "", {}, "sha512-r8Tayk8HJnX0FztbZN7oVqGccWgw98T/0neJphO91KkmOzug1KkofZURD4UaD5uH8AqcFLfdPErnBod0u71/qg=="],
+
     "@types/istanbul-lib-coverage": ["@types/istanbul-lib-coverage@2.0.6", "", {}, "sha512-2QF/t/auWm0lsy8XtKVPG19v3sSOQlJe/YHZgfjb/KBBHOGSV+J2q/S671rcq9uTBrLAXmZpqJiaQbMT+zNU1w=="],
 
     "@types/istanbul-lib-report": ["@types/istanbul-lib-report@3.0.3", "", { "dependencies": { "@types/istanbul-lib-coverage": "*" } }, "sha512-NQn7AHQnk/RSLOxrBbGyJM/aVQ+pjj5HCgasFxc0K/KhoATfQ/47AyUl15I2yBUpihjmas+a+VJBOqecrFH+uA=="],
@@ -506,20 +517,44 @@
 
     "@types/jsonfile": ["@types/jsonfile@6.1.4", "", { "dependencies": { "@types/node": "*" } }, "sha512-D5qGUYwjvnNNextdU59/+fI+spnwtTFmyQP0h+PfIOSkNfpU6AOICUOkm4i0OnSk+NyjdPJrxCDro0sJsWlRpQ=="],
 
+    "@types/jsonwebtoken": ["@types/jsonwebtoken@9.0.10", "", { "dependencies": { "@types/ms": "*", "@types/node": "*" } }, "sha512-asx5hIG9Qmf/1oStypjanR7iKTv0gXQ1Ov/jfrX6kS/EO0OFni8orbmGCn0672NHR3kXHwpAwR+B368ZGN/2rA=="],
+
     "@types/lodash": ["@types/lodash@4.17.18", "", {}, "sha512-KJ65INaxqxmU6EoCiJmRPZC9H9RVWCRd349tXM2M3O5NA7cY6YL7c0bHAHQ93NOfTObEQ004kd2QVHs/r0+m4g=="],
 
     "@types/methods": ["@types/methods@1.1.4", "", {}, "sha512-ymXWVrDiCxTBE3+RIrrP533E70eA+9qu7zdWoHuOmGujkYtzf4HQF96b8nwHLqhuf4ykX61IGRIB38CC6/sImQ=="],
 
+    "@types/mime": ["@types/mime@1.3.5", "", {}, "sha512-/pyBZWSLD2n0dcHE3hq8s8ZvcETHtEuF+3E7XVt0Ig2nvsVQXdghHVcEkIWjy9A0wKfTn97a/PSDYohKIlnP/w=="],
+
+    "@types/ms": ["@types/ms@2.1.0", "", {}, "sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA=="],
+
     "@types/node": ["@types/node@24.0.3", "", { "dependencies": { "undici-types": "~7.8.0" } }, "sha512-R4I/kzCYAdRLzfiCabn9hxWfbuHS573x+r0dJMkkzThEa7pbrcDWK+9zu3e7aBOouf+rQAciqPFMnxwr0aWgKg=="],
 
+    "@types/passport": ["@types/passport@1.0.17", "", { "dependencies": { "@types/express": "*" } }, "sha512-aciLyx+wDwT2t2/kJGJR2AEeBz0nJU4WuRX04Wu9Dqc5lSUtwu0WERPHYsLhF9PtseiAMPBGNUOtFjxZ56prsg=="],
+
+    "@types/passport-jwt": ["@types/passport-jwt@4.0.1", "", { "dependencies": { "@types/jsonwebtoken": "*", "@types/passport-strategy": "*" } }, "sha512-Y0Ykz6nWP4jpxgEUYq8NoVZeCQPo1ZndJLfapI249g1jHChvRfZRO/LS3tqu26YgAS/laI1qx98sYGz0IalRXQ=="],
+
+    "@types/passport-local": ["@types/passport-local@1.0.38", "", { "dependencies": { "@types/express": "*", "@types/passport": "*", "@types/passport-strategy": "*" } }, "sha512-nsrW4A963lYE7lNTv9cr5WmiUD1ibYJvWrpE13oxApFsRt77b0RdtZvKbCdNIY4v/QZ6TRQWaDDEwV1kCTmcXg=="],
+
+    "@types/passport-strategy": ["@types/passport-strategy@0.2.38", "", { "dependencies": { "@types/express": "*", "@types/passport": "*" } }, "sha512-GC6eMqqojOooq993Tmnmp7AUTbbQSgilyvpCYQjT+H6JfG/g6RGc7nXEniZlp0zyKJ0WUdOiZWLBZft9Yug1uA=="],
+
+    "@types/qs": ["@types/qs@6.14.0", "", {}, "sha512-eOunJqu0K1923aExK6y8p6fsihYEn/BYuQ4g0CxAAgFc4b/ZLN4CrsRZ55srTdqoiLzU2B2evC+apEIxprEzkQ=="],
+
+    "@types/range-parser": ["@types/range-parser@1.2.7", "", {}, "sha512-hKormJbkJqzQGhziax5PItDUTMAM9uE2XXQmM37dyd4hVM+5aVl7oVxMVUiVQn2oCQFN/LKCZdvSM0pFRqbSmQ=="],
+
     "@types/sanitize-html": ["@types/sanitize-html@2.16.0", "", { "dependencies": { "htmlparser2": "^8.0.0" } }, "sha512-l6rX1MUXje5ztPT0cAFtUayXF06DqPhRyfVXareEN5gGCFaP/iwsxIyKODr9XDhfxPpN6vXUFNfo5kZMXCxBtw=="],
 
+    "@types/send": ["@types/send@0.17.5", "", { "dependencies": { "@types/mime": "^1", "@types/node": "*" } }, "sha512-z6F2D3cOStZvuk2SaP6YrwkNO65iTZcwA2ZkSABegdkAh/lf+Aa/YQndZVfmEXT5vgAp6zv06VQ3ejSVjAny4w=="],
+
+    "@types/serve-static": ["@types/serve-static@1.15.8", "", { "dependencies": { "@types/http-errors": "*", "@types/node": "*", "@types/send": "*" } }, "sha512-roei0UY3LhpOJvjbIP6ZZFngyLKl5dskOtDhxY5THRSpO+ZI+nzJ+m5yUMzGrp89YRa7lvknKkMYjqQFGwA7Sg=="],
+
     "@types/stack-utils": ["@types/stack-utils@2.0.3", "", {}, "sha512-9aEbYZ3TbYMznPdcdr3SmIrLXwC/AKZXQeCf9Pgao5CKb8CyHuEX5jzWPTkvregvhRJHcpRO6BFoGW9ycaOkYw=="],
 
     "@types/superagent": ["@types/superagent@8.1.9", "", { "dependencies": { "@types/cookiejar": "^2.1.5", "@types/methods": "^1.1.4", "@types/node": "*", "form-data": "^4.0.0" } }, "sha512-pTVjI73witn+9ILmoJdajHGW2jkSaOzhiFYF1Rd3EQ94kymLqB9PjD9ISg7WaALC7+dCHT0FGe9T2LktLq/3GQ=="],
 
     "@types/supertest": ["@types/supertest@6.0.3", "", { "dependencies": { "@types/methods": "^1.1.4", "@types/superagent": "^8.1.0" } }, "sha512-8WzXq62EXFhJ7QsH3Ocb/iKQ/Ty9ZVWnVzoTKc9tyyFRRF3a74Tk2+TLFgaFFw364Ere+npzHKEJ6ga2LzIL7w=="],
 
+    "@types/uuid": ["@types/uuid@10.0.0", "", {}, "sha512-7gqG38EyHgyP1S+7+xomFtL+ZNHcKv6DwNaCZmJmo1vgMugyF3TCnXVg4t1uk89mLNwnLtnY3TpOpCOyp1/xHQ=="],
+
     "@types/validator": ["@types/validator@13.15.2", "", {}, "sha512-y7pa/oEJJ4iGYBxOpfAKn5b9+xuihvzDVnC/OSvlVnGxVg0pOqmjiMafiJ1KVNQEaPZf9HsEp5icEwGg8uIe5Q=="],
 
     "@types/yargs": ["@types/yargs@17.0.33", "", { "dependencies": { "@types/yargs-parser": "*" } }, "sha512-WpxBCKWPLr4xSsHgz511rFJAM+wS28w2zEO1QDNY5zM/S8ok70NNfztH0xwhqKyaK0OHCbN98LDAZuy1ctxDkA=="],
@@ -546,6 +581,14 @@
 
     "@typescript-eslint/visitor-keys": ["@typescript-eslint/visitor-keys@8.34.1", "", { "dependencies": { "@typescript-eslint/types": "8.34.1", "eslint-visitor-keys": "^4.2.1" } }, "sha512-xoh5rJ+tgsRKoXnkBPFRLZ7rjKM0AfVbC68UZ/ECXoDbfggb9RbEySN359acY1vS3qZ0jVTVWzbtfapwm5ztxw=="],
 
+    "@ucast/core": ["@ucast/core@1.10.2", "", {}, "sha512-ons5CwXZ/51wrUPfoduC+cO7AS1/wRb0ybpQJ9RrssossDxVy4t49QxWoWgfBDvVKsz9VXzBk9z0wqTdZ+Cq8g=="],
+
+    "@ucast/js": ["@ucast/js@3.0.4", "", { "dependencies": { "@ucast/core": "^1.0.0" } }, "sha512-TgG1aIaCMdcaEyckOZKQozn1hazE0w90SVdlpIJ/er8xVumE11gYAtSbw/LBeUnA4fFnFWTcw3t6reqseeH/4Q=="],
+
+    "@ucast/mongo": ["@ucast/mongo@2.4.3", "", { "dependencies": { "@ucast/core": "^1.4.1" } }, "sha512-XcI8LclrHWP83H+7H2anGCEeDq0n+12FU2mXCTz6/Tva9/9ddK/iacvvhCyW6cijAAOILmt0tWplRyRhVyZLsA=="],
+
+    "@ucast/mongo2js": ["@ucast/mongo2js@1.4.0", "", { "dependencies": { "@ucast/core": "^1.6.1", "@ucast/js": "^3.0.0", "@ucast/mongo": "^2.4.0" } }, "sha512-vR9RJ3BHlkI3RfKJIZFdVktxWvBCQRiSTeJSWN9NPxP5YJkpfXvcBWAMLwvyJx4HbB+qib5/AlSDEmQiuQyx2w=="],
+
     "@ungap/structured-clone": ["@ungap/structured-clone@1.3.0", "", {}, "sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g=="],
 
     "@unrs/resolver-binding-android-arm-eabi": ["@unrs/resolver-binding-android-arm-eabi@1.9.0", "", { "os": "android", "cpu": "arm" }, "sha512-h1T2c2Di49ekF2TE8ZCoJkb+jwETKUIPDJ/nO3tJBKlLFPu+fyd93f0rGP/BvArKx2k2HlRM4kqkNarj3dvZlg=="],
@@ -732,6 +775,8 @@
 
     "basic-ftp": ["basic-ftp@5.0.5", "", {}, "sha512-4Bcg1P8xhUuqcii/S0Z9wiHIrQVPMermM1any+MX5GeGD7faD3/msQUDGLol9wOcz4/jbg/WJnGqoJF6LiBdtg=="],
 
+    "bcrypt": ["bcrypt@6.0.0", "", { "dependencies": { "node-addon-api": "^8.3.0", "node-gyp-build": "^4.8.4" } }, "sha512-cU8v/EGSrnH+HnxV2z0J7/blxH8gq7Xh2JFT6Aroax7UohdmiJJlxApMxtKfuI7z68NvvVcmR78k2LbT6efhRg=="],
+
     "bin-version": ["bin-version@6.0.0", "", { "dependencies": { "execa": "^5.0.0", "find-versions": "^5.0.0" } }, "sha512-nk5wEsP4RiKjG+vF+uG8lFsEn4d7Y6FVDamzzftSunXOoOcOOkzcWdKVlGgFFwlUQCj63SgnUkLLGF8v7lufhw=="],
 
     "bin-version-check": ["bin-version-check@5.1.0", "", { "dependencies": { "bin-version": "^6.0.0", "semver": "^7.5.3", "semver-truncate": "^3.0.0" } }, "sha512-bYsvMqJ8yNGILLz1KP9zKLzQ6YpljV3ln1gqhuLkUtyfGi3qXKGuK2p+U4NAvjVFzDFiBBtOpCOSFNuYYEGZ5g=="],
@@ -758,9 +803,9 @@
 
     "buffer-crc32": ["buffer-crc32@0.2.13", "", {}, "sha512-VO9Ht/+p3SN7SKWqcrgEzjGbRSJYTx+Q1pTQC0wrWqHx0vpJraQ6GtHx8tvcg1rlK1byhU5gccxgOgj7B0TDkQ=="],
 
-    "buffer-from": ["buffer-from@1.1.2", "", {}, "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ=="],
+    "buffer-equal-constant-time": ["buffer-equal-constant-time@1.0.1", "", {}, "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA=="],
 
-    "bun": ["bun@1.2.16", "", { "optionalDependencies": { "@oven/bun-darwin-aarch64": "1.2.16", "@oven/bun-darwin-x64": "1.2.16", "@oven/bun-darwin-x64-baseline": "1.2.16", "@oven/bun-linux-aarch64": "1.2.16", "@oven/bun-linux-aarch64-musl": "1.2.16", "@oven/bun-linux-x64": "1.2.16", "@oven/bun-linux-x64-baseline": "1.2.16", "@oven/bun-linux-x64-musl": "1.2.16", "@oven/bun-linux-x64-musl-baseline": "1.2.16", "@oven/bun-windows-x64": "1.2.16", "@oven/bun-windows-x64-baseline": "1.2.16" }, "os": [ "linux", "win32", "darwin", ], "cpu": [ "x64", "arm64", ], "bin": { "bun": "bin/bun.exe", "bunx": "bin/bun.exe" } }, "sha512-sjZH6rr1P6yu44+XPA8r+ZojwmK9Kbz9lO6KAA/4HRIupdpC31k7b93crLBm19wEYmd6f2+3+57/7tbOcmHbGg=="],
+    "buffer-from": ["buffer-from@1.1.2", "", {}, "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ=="],
 
     "bun-types": ["bun-types@1.2.16", "", { "dependencies": { "@types/node": "*" } }, "sha512-ciXLrHV4PXax9vHvUrkvun9VPVGOVwbbbBF/Ev1cXz12lyEZMoJpIJABOfPcN9gDJRaiKF9MVbSygLg4NXu3/A=="],
 
@@ -920,6 +965,8 @@
 
     "eastasianwidth": ["eastasianwidth@0.2.0", "", {}, "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA=="],
 
+    "ecdsa-sig-formatter": ["ecdsa-sig-formatter@1.0.11", "", { "dependencies": { "safe-buffer": "^5.0.1" } }, "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ=="],
+
     "ejs": ["ejs@3.1.10", "", { "dependencies": { "jake": "^10.8.5" }, "bin": { "ejs": "bin/cli.js" } }, "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA=="],
 
     "electron-to-chromium": ["electron-to-chromium@1.5.170", "", {}, "sha512-GP+M7aeluQo9uAyiTCxgIj/j+PrWhMlY7LFVj8prlsPljd0Fdg9AprlfUi+OCSFWy9Y5/2D/Jrj9HS8Z4rpKWA=="],
@@ -1040,7 +1087,7 @@
 
     "fast-uri": ["fast-uri@3.0.6", "", {}, "sha512-Atfo14OibSv5wAp4VWNsFYE1AchQRTv9cBGWET4pZWHzYshFSS9NQI6I57rdKn9croWVMbYFbLhJ+yJvmZIIHw=="],
 
-    "fastify": ["fastify@5.3.3", "", { "dependencies": { "@fastify/ajv-compiler": "^4.0.0", "@fastify/error": "^4.0.0", "@fastify/fast-json-stringify-compiler": "^5.0.0", "@fastify/proxy-addr": "^5.0.0", "abstract-logging": "^2.0.1", "avvio": "^9.0.0", "fast-json-stringify": "^6.0.0", "find-my-way": "^9.0.0", "light-my-request": "^6.0.0", "pino": "^9.0.0", "process-warning": "^5.0.0", "rfdc": "^1.3.1", "secure-json-parse": "^4.0.0", "semver": "^7.6.0", "toad-cache": "^3.7.0" } }, "sha512-nCBiBCw9q6jPx+JJNVgO8JVnTXeUyrGcyTKPQikRkA/PanrFcOIo4R+ZnLeOLPZPGgzjomqfVarzE0kYx7qWiQ=="],
+    "fastify": ["fastify@5.4.0", "https://registry.npmmirror.com/fastify/-/fastify-5.4.0.tgz", { "dependencies": { "@fastify/ajv-compiler": "^4.0.0", "@fastify/error": "^4.0.0", "@fastify/fast-json-stringify-compiler": "^5.0.0", "@fastify/proxy-addr": "^5.0.0", "abstract-logging": "^2.0.1", "avvio": "^9.0.0", "fast-json-stringify": "^6.0.0", "find-my-way": "^9.0.0", "light-my-request": "^6.0.0", "pino": "^9.0.0", "process-warning": "^5.0.0", "rfdc": "^1.3.1", "secure-json-parse": "^4.0.0", "semver": "^7.6.0", "toad-cache": "^3.7.0" } }, "sha512-I4dVlUe+WNQAhKSyv15w+dwUh2EPiEl4X2lGYMmNSgF83WzTMAPKGdWEv5tPsCQOb+SOZwz8Vlta2vF+OeDgRw=="],
 
     "fastify-plugin": ["fastify-plugin@5.0.1", "", {}, "sha512-HCxs+YnRaWzCl+cWRYFnHmeRFyR5GVnJTAaCJQiYzQSDwK9MgJdyAsuL3nh0EWRCYMgQ5MeziymvmAhUHYHDUQ=="],
 
@@ -1372,6 +1419,12 @@
 
     "jsonfile": ["jsonfile@6.1.0", "", { "dependencies": { "universalify": "^2.0.0" }, "optionalDependencies": { "graceful-fs": "^4.1.6" } }, "sha512-5dgndWOriYSm5cnYaJNhalLNDKOqFwyDB/rr1E9ZsGciGvKPs8R2xYGCacuf3z6K1YKDz182fd+fY3cn3pMqXQ=="],
 
+    "jsonwebtoken": ["jsonwebtoken@9.0.2", "", { "dependencies": { "jws": "^3.2.2", "lodash.includes": "^4.3.0", "lodash.isboolean": "^3.0.3", "lodash.isinteger": "^4.0.4", "lodash.isnumber": "^3.0.3", "lodash.isplainobject": "^4.0.6", "lodash.isstring": "^4.0.1", "lodash.once": "^4.0.0", "ms": "^2.1.1", "semver": "^7.5.4" } }, "sha512-PRp66vJ865SSqOlgqS8hujT5U4AOgMfhrwYIuIhfKaoSCZcirrmASQr8CX7cUg+RMih+hgznrjp99o+W4pJLHQ=="],
+
+    "jwa": ["jwa@1.4.2", "", { "dependencies": { "buffer-equal-constant-time": "^1.0.1", "ecdsa-sig-formatter": "1.0.11", "safe-buffer": "^5.0.1" } }, "sha512-eeH5JO+21J78qMvTIDdBXidBd6nG2kZjg5Ohz/1fpa28Z4CcsWUzJ1ZZyFq/3z3N17aZy+ZuBoHljASbL1WfOw=="],
+
+    "jws": ["jws@3.2.2", "", { "dependencies": { "jwa": "^1.4.1", "safe-buffer": "^5.0.1" } }, "sha512-YHlZCB6lMTllWDtSPHz/ZXTsi8S00usEV6v1tjq8tOUZzw7DpSDWVXjXDre6ed1w/pd495ODpHZYSdkRTsa0HA=="],
+
     "keyv": ["keyv@4.5.4", "", { "dependencies": { "json-buffer": "3.0.1" } }, "sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw=="],
 
     "kind-of": ["kind-of@6.0.3", "", {}, "sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw=="],
@@ -1394,10 +1447,24 @@
 
     "lodash": ["lodash@4.17.21", "", {}, "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="],
 
+    "lodash.includes": ["lodash.includes@4.3.0", "", {}, "sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w=="],
+
+    "lodash.isboolean": ["lodash.isboolean@3.0.3", "", {}, "sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg=="],
+
+    "lodash.isinteger": ["lodash.isinteger@4.0.4", "", {}, "sha512-DBwtEWN2caHQ9/imiNeEA5ys1JoRtRfY3d7V9wkqtbycnAmTvRRmbHKDV4a0EYc678/dia0jrte4tjYwVBaZUA=="],
+
+    "lodash.isnumber": ["lodash.isnumber@3.0.3", "", {}, "sha512-QYqzpfwO3/CWf3XP+Z+tkQsfaLL/EnUlXWVkIk5FUPc4sBdTehEqZONuyRt2P67PXAk+NXmTBcc97zw9t1FQrw=="],
+
+    "lodash.isplainobject": ["lodash.isplainobject@4.0.6", "", {}, "sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA=="],
+
+    "lodash.isstring": ["lodash.isstring@4.0.1", "", {}, "sha512-0wJxfxH1wgO3GrbuP+dTTk7op+6L41QCXbGINEmD+ny/G/eCqGzxyCsh7159S+mgDDcoarnBw6PC1PS5+wUGgw=="],
+
     "lodash.memoize": ["lodash.memoize@4.1.2", "", {}, "sha512-t7j+NzmgnQzTAYXcsHYLgimltOV1MXHtlOWf6GjL9Kj8GK5FInw5JotxvbOs+IvV1/Dzo04/fCGfLVs7aXb4Ag=="],
 
     "lodash.merge": ["lodash.merge@4.6.2", "", {}, "sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ=="],
 
+    "lodash.once": ["lodash.once@4.1.1", "", {}, "sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg=="],
+
     "log-symbols": ["log-symbols@6.0.0", "", { "dependencies": { "chalk": "^5.3.0", "is-unicode-supported": "^1.3.0" } }, "sha512-i24m8rpwhmPIS4zscNzK6MSEhk0DUWa/8iYQWxhffV8jkI4Phvs3F+quL5xvS0gdQR0FyTCMMH33Y78dDTzzIw=="],
 
     "long": ["long@5.3.2", "", {}, "sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA=="],
@@ -1474,8 +1541,12 @@
 
     "node-abort-controller": ["node-abort-controller@3.1.1", "", {}, "sha512-AGK2yQKIjRuqnc6VkX2Xj5d+QW8xZ87pa1UK6yA6ouUyuxfHuMP6umE5QK7UmTeOAymo+Zx1Fxiuw9rVx8taHQ=="],
 
+    "node-addon-api": ["node-addon-api@8.4.0", "", {}, "sha512-D9DI/gXHvVmjHS08SVch0Em8G5S1P+QWtU31appcKT/8wFSPRcdHadIFSAntdMMVM5zz+/DL+bL/gz3UDppqtg=="],
+
     "node-emoji": ["node-emoji@1.11.0", "", { "dependencies": { "lodash": "^4.17.21" } }, "sha512-wo2DpQkQp7Sjm2A0cq+sN7EHKO6Sl0ctXeBdFZrL9T9+UywORbufTcTZxom8YqpLQt/FqNMUkOpkZrJVYSKD3A=="],
 
+    "node-gyp-build": ["node-gyp-build@4.8.4", "", { "bin": { "node-gyp-build": "bin.js", "node-gyp-build-optional": "optional.js", "node-gyp-build-test": "build-test.js" } }, "sha512-LA4ZjwlnUblHVgq0oBF3Jl/6h/Nvs5fzBLwdEF4nuxnFdsfajde4WfxtJr3CaiH+F6ewcIB/q4jQ4UzPyid+CQ=="],
+
     "node-int64": ["node-int64@0.4.0", "", {}, "sha512-O5lz91xSOeoXP6DulyHfllpq+Eg00MWitZIbtPfoSEvqIHdl5gfcY6hYzDWnj0qD5tz52PI08u9qUvSVeUBeHw=="],
 
     "node-releases": ["node-releases@2.0.19", "", {}, "sha512-xxOWJsBKtzAq7DY0J+DTzuz58K8e7sJbdgwkbMWQe8UYB6ekmsQ45q0M/tJDsGaZmbC+l7n57UV8Hl5tHxO9uw=="],
@@ -1536,6 +1607,14 @@
 
     "parse-srcset": ["parse-srcset@1.0.2", "", {}, "sha512-/2qh0lav6CmI15FzA3i/2Bzk2zCgQhGMkvhOhKNcBVQ1ldgpbfiNTVslmooUmWJcADi1f1kIeynbDRVzNlfR6Q=="],
 
+    "passport": ["passport@0.7.0", "", { "dependencies": { "passport-strategy": "1.x.x", "pause": "0.0.1", "utils-merge": "^1.0.1" } }, "sha512-cPLl+qZpSc+ireUvt+IzqbED1cHHkDoVYMo30jbJIdOOjQ1MQYZBPiNvmi8UM6lJuOpTPXJGZQk0DtC4y61MYQ=="],
+
+    "passport-jwt": ["passport-jwt@4.0.1", "", { "dependencies": { "jsonwebtoken": "^9.0.0", "passport-strategy": "^1.0.0" } }, "sha512-UCKMDYhNuGOBE9/9Ycuoyh7vP6jpeTp/+sfMJl7nLff/t6dps+iaeE0hhNkKN8/HZHcJ7lCdOyDxHdDoxoSvdQ=="],
+
+    "passport-local": ["passport-local@1.0.0", "", { "dependencies": { "passport-strategy": "1.x.x" } }, "sha512-9wCE6qKznvf9mQYYbgJ3sVOHmCWoUNMVFoZzNoznmISbhnNNPhN9xfY3sLmScHMetEJeoY7CXwfhCe7argfQow=="],
+
+    "passport-strategy": ["passport-strategy@1.0.0", "", {}, "sha512-CB97UUvDKJde2V0KDWWB3lyf6PC3FaZP7YxZ2G8OAtn9p4HI9j9JLP9qjOGZFvyl8uwNT8qM+hGnz/n16NI7oA=="],
+
     "path-exists": ["path-exists@5.0.0", "", {}, "sha512-RjhtfwJOxzcFmNOi6ltcbcu4Iu+FL3zEj83dk4kAS+fVpTxXLO1b38RvJgT/0QwvV/L3aY9TAnyv0EOqW4GoMQ=="],
 
     "path-is-absolute": ["path-is-absolute@1.0.1", "", {}, "sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg=="],
@@ -1550,6 +1629,8 @@
 
     "path-type": ["path-type@4.0.0", "", {}, "sha512-gDKb8aZMDeD/tZWs9P6+q0J9Mwkdl6xMV8TjnGP3qJVJ06bdMgkbBlLU8IdfOsIsFz2BW1rNVT3XuNEl8zPAvw=="],
 
+    "pause": ["pause@0.0.1", "", {}, "sha512-KG8UEiEVkR3wGEb4m5yZkVCzigAD+cVEJck2CzYZO37ZGJfctvVptVO192MwrtPhzONn6go8ylnOdMhKqi4nfg=="],
+
     "peek-readable": ["peek-readable@5.4.2", "", {}, "sha512-peBp3qZyuS6cNIJ2akRNG1uo1WJ1d0wTxg/fxMdZ0BqCVhx242bSFHM9eNqflfJVS9SsgkzgT/1UgnsurBOTMg=="],
 
     "pend": ["pend@1.2.0", "", {}, "sha512-F3asv42UuXchdzt+xXqfW1OGlVBe+mxa2mqI0pg5yAHZPvFmY3Y6drSf/GQ1A86WgWEN9Kzh/WrgKa6iGcHXLg=="],
@@ -1902,6 +1983,8 @@
 
     "util-deprecate": ["util-deprecate@1.0.2", "", {}, "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw=="],
 
+    "utils-merge": ["utils-merge@1.0.1", "", {}, "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA=="],
+
     "uuid": ["uuid@11.1.0", "", { "bin": { "uuid": "dist/esm/bin/uuid" } }, "sha512-0/A9rDy9P7cJ+8w1c9WD9V//9Wj15Ce2MPz8Ri6032usz+NfePxx5AcN3bN+r6ZL6jEo066/yNYB3tn4pQEx+A=="],
 
     "v8-compile-cache-lib": ["v8-compile-cache-lib@3.0.1", "", {}, "sha512-wa7YjyUGfNZngI/vtK0UHAN+lgDCxBPCylVXGp0zu59Fz5aiGtNXaq3DhIov063MorB+VfufLh3JlF2KdTK3xg=="],
@@ -1948,7 +2031,7 @@
 
     "y18n": ["y18n@5.0.8", "", {}, "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA=="],
 
-    "yallist": ["yallist@4.0.0", "", {}, "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "yallist": ["yallist@3.1.1", "", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],
 
     "yaml": ["yaml@2.8.0", "", { "bin": { "yaml": "bin.mjs" } }, "sha512-4lLa/EcQCB0cJkyts+FpIRx5G/llPxfP6VQU5KByHEhLxY3IJCH0f0Hy1MHI8sClTvsIb8qwRJ6R/ZdlDJ/leQ=="],
 
@@ -1964,8 +2047,6 @@
 
     "yoctocolors-cjs": ["yoctocolors-cjs@2.1.2", "", {}, "sha512-cYVsTjKl8b+FrnidjibDWskAv7UKOfcwaVZdp/it9n1s9fU3IkgDbhdIRKCW4JDsAlECJY0ytoVPT3sK6kideA=="],
 
-    "@ampproject/remapping/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
-
     "@angular-devkit/core/ajv": ["ajv@8.17.1", "", { "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1", "json-schema-traverse": "^1.0.0", "require-from-string": "^2.0.2" } }, "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g=="],
 
     "@angular-devkit/core/rxjs": ["rxjs@7.8.1", "", { "dependencies": { "tslib": "^2.1.0" } }, "sha512-AA3TVj+0A2iuIoQkWEK/tqFjBq2j+6PO6Y0zJcvzLAFhEFIO3HL0vls9hWLncZbAAbK0mar7oZ4V079I/qPMxg=="],
@@ -1978,14 +2059,14 @@
 
     "@babel/core/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
 
-    "@babel/generator/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
-
     "@babel/helper-compilation-targets/lru-cache": ["lru-cache@5.1.1", "", { "dependencies": { "yallist": "^3.0.2" } }, "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w=="],
 
     "@babel/helper-compilation-targets/semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
 
     "@babel/traverse/globals": ["globals@11.12.0", "", {}, "sha512-WOBp/EEGUiIsJSp7wcv/y6MO+lV9UoncWqxuFfm8eBwzWNgyfBd6Gz+IeKQ9jCmyhoH99g15M3T+QaVHFjizVA=="],
 
+    "@cspotcode/source-map-support/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.9", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.0.3", "@jridgewell/sourcemap-codec": "^1.4.10" } }, "sha512-3Belt6tdc8bPgAtbcmdtNJlirVoTmEb5e2gC94PnkwEW9jI6CAHUeoG85tjWP5WquqfavoMtMwiG4P926ZKKuQ=="],
+
     "@eslint-community/eslint-utils/eslint-visitor-keys": ["eslint-visitor-keys@3.4.3", "", {}, "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag=="],
 
     "@eslint/eslintrc/globals": ["globals@14.0.0", "", {}, "sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ=="],
@@ -2038,8 +2119,6 @@
 
     "@jest/fake-timers/jest-util": ["jest-util@30.0.0", "", { "dependencies": { "@jest/types": "30.0.0", "@types/node": "*", "chalk": "^4.1.2", "ci-info": "^4.2.0", "graceful-fs": "^4.2.11", "picomatch": "^4.0.2" } }, "sha512-fhNBBM9uSUbd4Lzsf8l/kcAdaHD/4SgoI48en3HXcBEMwKwoleKFMZ6cYEYs21SB779PRuRCyNLmymApAm8tZw=="],
 
-    "@jest/reporters/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
-
     "@jest/reporters/chalk": ["chalk@4.1.2", "", { "dependencies": { "ansi-styles": "^4.1.0", "supports-color": "^7.1.0" } }, "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA=="],
 
     "@jest/reporters/glob": ["glob@10.4.5", "", { "dependencies": { "foreground-child": "^3.1.0", "jackspeak": "^3.1.2", "minimatch": "^9.0.4", "minipass": "^7.1.2", "package-json-from-dist": "^1.0.0", "path-scurry": "^1.11.1" }, "bin": { "glob": "dist/esm/bin.mjs" } }, "sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg=="],
@@ -2052,10 +2131,6 @@
 
     "@jest/snapshot-utils/chalk": ["chalk@4.1.2", "", { "dependencies": { "ansi-styles": "^4.1.0", "supports-color": "^7.1.0" } }, "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA=="],
 
-    "@jest/source-map/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
-
-    "@jest/transform/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
-
     "@jest/transform/chalk": ["chalk@4.1.2", "", { "dependencies": { "ansi-styles": "^4.1.0", "supports-color": "^7.1.0" } }, "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA=="],
 
     "@jest/transform/jest-util": ["jest-util@30.0.0", "", { "dependencies": { "@jest/types": "30.0.0", "@types/node": "*", "chalk": "^4.1.2", "ci-info": "^4.2.0", "graceful-fs": "^4.2.11", "picomatch": "^4.0.2" } }, "sha512-fhNBBM9uSUbd4Lzsf8l/kcAdaHD/4SgoI48en3HXcBEMwKwoleKFMZ6cYEYs21SB779PRuRCyNLmymApAm8tZw=="],
@@ -2064,12 +2139,12 @@
 
     "@jest/types/chalk": ["chalk@4.1.2", "", { "dependencies": { "ansi-styles": "^4.1.0", "supports-color": "^7.1.0" } }, "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA=="],
 
-    "@jridgewell/gen-mapping/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
-
-    "@jridgewell/source-map/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
-
     "@nestjs/cli/ora": ["ora@5.4.1", "", { "dependencies": { "bl": "^4.1.0", "chalk": "^4.1.0", "cli-cursor": "^3.1.0", "cli-spinners": "^2.5.0", "is-interactive": "^1.0.0", "is-unicode-supported": "^0.1.0", "log-symbols": "^4.1.0", "strip-ansi": "^6.0.0", "wcwidth": "^1.0.1" } }, "sha512-5b6Y85tPxZZ7QytO+BQzysW31HJku27cRIlkbAXaNx+BdcVi+LlRFmVXzeF6a7JCwJpyw5c4b+YSVImQIrBpuQ=="],
 
+    "@nestjs/jwt/@types/jsonwebtoken": ["@types/jsonwebtoken@9.0.7", "", { "dependencies": { "@types/node": "*" } }, "sha512-ugo316mmTYBl2g81zDFnZ7cfxlut3o+/EQdaP7J8QN2kY6lJ22hmQYCK5EHcJHbrW+dkCGSCPgbG8JtYj6qSrg=="],
+
+    "@nestjs/platform-fastify/fastify": ["fastify@5.3.3", "", { "dependencies": { "@fastify/ajv-compiler": "^4.0.0", "@fastify/error": "^4.0.0", "@fastify/fast-json-stringify-compiler": "^5.0.0", "@fastify/proxy-addr": "^5.0.0", "abstract-logging": "^2.0.1", "avvio": "^9.0.0", "fast-json-stringify": "^6.0.0", "find-my-way": "^9.0.0", "light-my-request": "^6.0.0", "pino": "^9.0.0", "process-warning": "^5.0.0", "rfdc": "^1.3.1", "secure-json-parse": "^4.0.0", "semver": "^7.6.0", "toad-cache": "^3.7.0" } }, "sha512-nCBiBCw9q6jPx+JJNVgO8JVnTXeUyrGcyTKPQikRkA/PanrFcOIo4R+ZnLeOLPZPGgzjomqfVarzE0kYx7qWiQ=="],
+
     "@nestjs/schematics/@angular-devkit/core": ["@angular-devkit/core@19.2.6", "", { "dependencies": { "ajv": "8.17.1", "ajv-formats": "3.0.1", "jsonc-parser": "3.3.1", "picomatch": "4.0.2", "rxjs": "7.8.1", "source-map": "0.7.4" }, "peerDependencies": { "chokidar": "^4.0.0" }, "optionalPeers": ["chokidar"] }, "sha512-WFgiYhrDMq83UNaGRAneIM7CYYdBozD+yYA9BjoU8AgBLKtrvn6S8ZcjKAk5heoHtY/u8pEb0mwDTz9gxFmJZQ=="],
 
     "@nestjs/schematics/@angular-devkit/schematics": ["@angular-devkit/schematics@19.2.6", "", { "dependencies": { "@angular-devkit/core": "19.2.6", "jsonc-parser": "3.3.1", "magic-string": "0.30.17", "ora": "5.4.1", "rxjs": "7.8.1" } }, "sha512-YTAxNnT++5eflx19OUHmOWu597/TbTel+QARiZCv1xQw99+X8DCKKOUXtqBRd53CAHlREDI33Rn/JLY3NYgMLQ=="],
@@ -2174,8 +2249,6 @@
 
     "ip-address/sprintf-js": ["sprintf-js@1.1.3", "", {}, "sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA=="],
 
-    "istanbul-lib-source-maps/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
-
     "jake/chalk": ["chalk@4.1.2", "", { "dependencies": { "ansi-styles": "^4.1.0", "supports-color": "^7.1.0" } }, "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA=="],
 
     "jest-changed-files/jest-util": ["jest-util@30.0.0", "", { "dependencies": { "@jest/types": "30.0.0", "@types/node": "*", "chalk": "^4.1.2", "ci-info": "^4.2.0", "graceful-fs": "^4.2.11", "picomatch": "^4.0.2" } }, "sha512-fhNBBM9uSUbd4Lzsf8l/kcAdaHD/4SgoI48en3HXcBEMwKwoleKFMZ6cYEYs21SB779PRuRCyNLmymApAm8tZw=="],
@@ -2332,8 +2405,6 @@
 
     "terser/commander": ["commander@2.20.3", "", {}, "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ=="],
 
-    "terser-webpack-plugin/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
-
     "terser-webpack-plugin/schema-utils": ["schema-utils@4.3.2", "", { "dependencies": { "@types/json-schema": "^7.0.9", "ajv": "^8.9.0", "ajv-formats": "^2.1.1", "ajv-keywords": "^5.1.0" } }, "sha512-Gn/JaSk/Mt9gYubxTtSn/QCV4em9mpAPiR1rqy/Ocu19u/G9J5WWdNoUT4SiV6mFC3y6cxyFcFwdzPM3FgxGAQ=="],
 
     "test-exclude/glob": ["glob@7.2.3", "", { "dependencies": { "fs.realpath": "^1.0.0", "inflight": "^1.0.4", "inherits": "2", "minimatch": "^3.1.1", "once": "^1.3.0", "path-is-absolute": "^1.0.0" } }, "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q=="],
@@ -2348,8 +2419,6 @@
 
     "unbzip2-stream/buffer": ["buffer@5.7.1", "", { "dependencies": { "base64-js": "^1.3.1", "ieee754": "^1.1.13" } }, "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ=="],
 
-    "v8-to-istanbul/@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.25", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ=="],
-
     "vizion/async": ["async@2.6.4", "", { "dependencies": { "lodash": "^4.17.14" } }, "sha512-mzo5dfJYwAn29PeiJ0zvwTo04zj8HDJj0Mn8TD7sno7q12prdbnasKJHhkm2c1LgrhlJ0teaea8860oxi51mGA=="],
 
     "webpack/eslint-scope": ["eslint-scope@5.1.1", "", { "dependencies": { "esrecurse": "^4.3.0", "estraverse": "^4.1.1" } }, "sha512-2NxwbF/hZ0KpepYN0cNbo+FN6XoK7GaHlQhgx/hIZl6Va0bF45RQOOwhLIy8lQDbuCiadSLCBnH2CFYquit5bw=="],
@@ -2382,8 +2451,6 @@
 
     "@angular-devkit/schematics/ora/strip-ansi": ["strip-ansi@6.0.1", "", { "dependencies": { "ansi-regex": "^5.0.1" } }, "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A=="],
 
-    "@babel/helper-compilation-targets/lru-cache/yallist": ["yallist@3.1.1", "", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],
-
     "@fastify/ajv-compiler/ajv/json-schema-traverse": ["json-schema-traverse@1.0.0", "", {}, "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug=="],
 
     "@fastify/static/glob/minimatch": ["minimatch@10.0.3", "", { "dependencies": { "@isaacs/brace-expansion": "^5.0.0" } }, "sha512-IPZ167aShDZZUMdRk66cyQAW3qr0WzbHkPdMYa8bzZhlHhO3jALbKdxcaak7W9FfT2rZNpQuUu4Od7ILEpXSaw=="],
@@ -2712,6 +2779,10 @@
 
     "@nestjs/schematics/@angular-devkit/schematics/ora/strip-ansi": ["strip-ansi@6.0.1", "", { "dependencies": { "ansi-regex": "^5.0.1" } }, "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A=="],
 
+    "@pm2/agent/semver/lru-cache/yallist": ["yallist@4.0.0", "", {}, "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+
+    "@pm2/io/semver/lru-cache/yallist": ["yallist@4.0.0", "", {}, "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+
     "@xhmikosr/archive-type/file-type/get-stream/is-stream": ["is-stream@4.0.1", "", {}, "sha512-Dnz92NInDqYckGEUJv689RbRiTSEHCQ7wOVeALbkOz999YpqT46yMRIGtSNl2iCL1waAZSx40+h59NV/EwzV/A=="],
 
     "@xhmikosr/decompress-tar/file-type/get-stream/is-stream": ["is-stream@4.0.1", "", {}, "sha512-Dnz92NInDqYckGEUJv689RbRiTSEHCQ7wOVeALbkOz999YpqT46yMRIGtSNl2iCL1waAZSx40+h59NV/EwzV/A=="],

nest-cli.json

@@ -6,6 +6,7 @@
     "assets": [
       "assets/**/*"
     ],
+    "watchAssets": true,
     "deleteOutDir": true,
     "builder": "swc",
     "typeCheck": true,

package.json

@@ -23,30 +23,47 @@
     "test:e2e": "jest --config ./test/jest-e2e.json"
   },
   "dependencies": {
+    "@casl/ability": "^6.7.3",
     "@fastify/static": "^8.2.0",
+    "@nestjs/bullmq": "^11.0.2",
     "@nestjs/common": "^11.1.3",
     "@nestjs/core": "^11.1.3",
+    "@nestjs/jwt": "^11.0.0",
+    "@nestjs/passport": "^11.0.5",
     "@nestjs/platform-fastify": "^11.1.3",
     "@nestjs/swagger": "^11.2.0",
     "@nestjs/typeorm": "^11.0.0",
+    "bcrypt": "^6.0.0",
+    "bullmq": "^5.56.0",
     "chalk": "^5.4.1",
     "chokidar": "^4.0.3",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.2",
+    "dayjs": "^1.11.13",
     "deepmerge": "^4.3.1",
     "dotenv": "^16.5.0",
+    "email-templates": "^12.0.3",
+    "fastify": "^5.4.0",
     "find-up": "^7.0.0",
     "fs-extra": "^11.3.0",
+    "ioredis": "^5.6.1",
+    "jsonwebtoken": "^9.0.2",
     "lodash": "^4.17.21",
     "meilisearch": "^0.51.0",
     "mysql2": "^3.14.1",
+    "nodemailer": "^7.0.4",
     "ora": "^8.2.0",
+    "passport": "^0.7.0",
+    "passport-jwt": "^4.0.1",
+    "passport-local": "^1.0.0",
     "pm2": "^6.0.8",
     "reflect-metadata": "^0.2.2",
     "rimraf": "^6.0.1",
     "rxjs": "^7.8.2",
     "sanitize-html": "^2.17.0",
+    "tencentcloud-sdk-nodejs": "^4.1.67",
     "typeorm": "^0.3.24",
+    "uuid": "^11.1.0",
     "validator": "^13.15.15",
     "yaml": "^2.8.0",
     "yargs": "^18.0.0"
@@ -61,13 +78,20 @@
     "@nestjs/testing": "^11.1.3",
     "@swc/cli": "^0.7.7",
     "@swc/core": "^1.12.1",
+    "@types/bcrypt": "^5.0.2",
+    "@types/email-templates": "^10.0.4",
     "@types/eslint": "^9.6.1",
     "@types/fs-extra": "^11.0.4",
     "@types/jest": "29.5.14",
+    "@types/jsonwebtoken": "^9.0.10",
     "@types/lodash": "^4.17.17",
     "@types/node": "^24.0.1",
+    "@types/nodemailer": "^6.4.17",
+    "@types/passport-jwt": "^4.0.1",
+    "@types/passport-local": "^1.0.38",
     "@types/sanitize-html": "^2.16.0",
     "@types/supertest": "^6.0.3",
+    "@types/uuid": "^10.0.0",
     "@types/validator": "^13.15.1",
     "@types/yargs": "^17.0.33",
     "@typescript-eslint/eslint-plugin": "^8.34.0",

src/assets/posts/docker-introduce.md

@@ -0,0 +1,64 @@
+# 什么是 Docker
+
+**Docker** 最初是 `dotCloud` 公司创始人 [Solomon Hykes](https://github.com/shykes) 在法国期间发起的一个公司内部项目，它是基于 `dotCloud` 公司多年云服务技术的一次革新，并于 [2013 年 3 月以 Apache 2.0 授权协议开源][docker-soft]，主要项目代码在 [GitHub](https://github.com/moby/moby) 上进行维护。`Docker` 项目后来还加入了 Linux 基金会，并成立推动 [开放容器联盟（OCI）](https://www.opencontainers.org/)。
+
+**Docker** 自开源后受到广泛的关注和讨论，至今其 [GitHub 项目](https://github.com/moby/moby) 已经超过 5 万 4 千个星标和一万多个 `fork`。甚至由于 `Docker` 项目的火爆，在 `2013` 年底，[dotCloud 公司决定改名为 Docker](https://blog.docker.com/2013/10/dotcloud-is-becoming-docker-inc/)。`Docker` 最初是在 `Ubuntu 12.04` 上开发实现的；`Red Hat` 则从 `RHEL 6.5` 开始对 `Docker` 进行支持；`Google` 也在其 `PaaS` 产品中广泛应用 `Docker`。
+
+**Docker** 使用 `Google` 公司推出的 [Go 语言](https://golang.org/) 进行开发实现，基于 `Linux` 内核的 [cgroup](https://zh.wikipedia.org/wiki/Cgroups)，[namespace](https://en.wikipedia.org/wiki/Linux_namespaces)，以及  [AUFS](https://en.wikipedia.org/wiki/Aufs) 类的 [Union FS](https://en.wikipedia.org/wiki/Union_mount) 等技术，对进程进行封装隔离，属于 [操作系统层面的虚拟化技术](https://en.wikipedia.org/wiki/Operating-system-level_virtualization)。由于隔离的进程独立于宿主和其它的隔离的进程，因此也称其为容器。最初实现是基于 [LXC](https://linuxcontainers.org/lxc/introduction/)，从 0.7 版本以后开始去除 `LXC`，转而使用自行开发的 [libcontainer](https://github.com/docker/libcontainer)，从 1.11 开始，则进一步演进为使用 [runC](https://github.com/opencontainers/runc) 和 [containerd](https://github.com/containerd/containerd)。
+
+![Docker 架构](https://docs.microsoft.com/en-us/virtualization/windowscontainers/deploy-containers/media/docker-on-linux.png)
+
+> `runc` 是一个 Linux 命令行工具，用于根据 [OCI容器运行时规范](https://github.com/opencontainers/runtime-spec) 创建和运行容器。
+
+> `containerd` 是一个守护程序，它管理容器生命周期，提供了在一个节点上执行容器和管理镜像的最小功能集。
+
+**Docker** 在容器的基础上，进行了进一步的封装，从文件系统、网络互联到进程隔离等等，极大的简化了容器的创建和维护。使得 `Docker` 技术比虚拟机技术更为轻便、快捷。
+
+下面的图片比较了 **Docker** 和传统虚拟化方式的不同之处。传统虚拟机技术是虚拟出一套硬件后，在其上运行一个完整操作系统，在该系统上再运行所需应用进程；而容器内的应用进程直接运行于宿主的内核，容器内没有自己的内核，而且也没有进行硬件虚拟。因此容器要比传统虚拟机更为轻便。
+
+![传统虚拟化](_images/virtualization.png)
+
+![Docker](_images/docker.png)
+
+[docker-soft]:https://en.wikipedia.org/wiki/Docker_(software)
+
+# 为什么要使用 Docker？
+
+作为一种新兴的虚拟化方式，`Docker` 跟传统的虚拟化方式相比具有众多的优势。
+
+## 更高效的利用系统资源
+
+由于容器不需要进行硬件虚拟以及运行完整操作系统等额外开销，`Docker` 对系统资源的利用率更高。无论是应用执行速度、内存损耗或者文件存储速度，都要比传统虚拟机技术更高效。因此，相比虚拟机技术，一个相同配置的主机，往往可以运行更多数量的应用。
+
+## 更快速的启动时间
+
+传统的虚拟机技术启动应用服务往往需要数分钟，而 `Docker` 容器应用，由于直接运行于宿主内核，无需启动完整的操作系统，因此可以做到秒级、甚至毫秒级的启动时间。大大的节约了开发、测试、部署的时间。
+
+## 一致的运行环境
+
+开发过程中一个常见的问题是环境一致性问题。由于开发环境、测试环境、生产环境不一致，导致有些 bug 并未在开发过程中被发现。而 `Docker` 的镜像提供了除内核外完整的运行时环境，确保了应用运行环境一致性，从而不会再出现 *「这段代码在我机器上没问题啊」* 这类问题。
+
+## 持续交付和部署
+
+对开发和运维（[DevOps](https://zh.wikipedia.org/wiki/DevOps)）人员来说，最希望的就是一次创建或配置，可以在任意地方正常运行。
+
+使用 `Docker` 可以通过定制应用镜像来实现持续集成、持续交付、部署。开发人员可以通过 [Dockerfile](../image/dockerfile/) 来进行镜像构建，并结合 [持续集成(Continuous Integration)](https://en.wikipedia.org/wiki/Continuous_integration) 系统进行集成测试，而运维人员则可以直接在生产环境中快速部署该镜像，甚至结合 [持续部署(Continuous Delivery/Deployment)](https://en.wikipedia.org/wiki/Continuous_delivery) 系统进行自动部署。
+
+而且使用 [`Dockerfile`](../image/build.md) 使镜像构建透明化，不仅仅开发团队可以理解应用运行环境，也方便运维团队理解应用运行所需条件，帮助更好的生产环境中部署该镜像。
+
+## 更轻松的迁移
+
+由于 `Docker` 确保了执行环境的一致性，使得应用的迁移更加容易。`Docker` 可以在很多平台上运行，无论是物理机、虚拟机、公有云、私有云，甚至是笔记本，其运行结果是一致的。因此用户可以很轻易的将在一个平台上运行的应用，迁移到另一个平台上，而不用担心运行环境的变化导致应用无法正常运行的情况。
+
+## 更轻松的维护和扩展
+
+`Docker` 使用的分层存储以及镜像的技术，使得应用重复部分的复用更为容易，也使得应用的维护更新更加简单，基于基础镜像进一步扩展镜像也变得非常简单。此外，`Docker` 团队同各个开源项目团队一起维护了一大批高质量的 [官方镜像](https://hub.docker.com/search/?type=image&image_filter=official)，既可以直接在生产环境使用，又可以作为基础进一步定制，大大的降低了应用服务的镜像制作成本。
+
+## 对比传统虚拟机总结
+
+| 特性       | 容器               | 虚拟机      |
+| :--------- | :----------------- | :---------- |
+| 启动       | 秒级               | 分钟级      |
+| 硬盘使用   | 一般为 `MB`        | 一般为 `GB` |
+| 性能       | 接近原生           | 弱于        |
+| 系统支持量 | 单机支持上千个容器 | 一般几十个  |

src/assets/posts/goroutings.md

@@ -0,0 +1,197 @@
+## 概念
+
+下面简单介绍一下，进程，线程，锁，协程，通道，并发，并行的概念。
+
+### 进程
+
+一个程序一般会开一个进程（像phpfpm这种是开多进程的），一个进程可以开N多线程。
+
+### 线程
+
+线程在单核计算机上是抢占执行的，也就是说同一时间单核计算机上一个进程内只有一个线程列队（线程池），但可以有多条线程在线程池，它们等待时机执行，但是同一时间段运行着的只有一个线程。这样做的好处就是异步执行，比如一些耗时的任务可以先放入线程池，等其余的线程不忙碌的时候再拿出来执行。而多核计算机则可以有多个线程池，把不同的线程池分配到不同的核心上，但是同样的一个核心上的每个线程池同时只有一个线程在运行，所以多核心上同时运行的线程数量就等于核心的数量。
+
+### 协程
+
+> 这里的协程直接使用goroutine概念，跟coroutine不相干
+
+每个线程又可以有非常多的协程，协程在线程上成列队排序，就跟每个内核的线程池一样，并且随机执行，当某个线程上一个协程在执行过程中卡死的时候go会自动把此线程上其余协程分配到空闲的线程上执行。
+
+### 通道与锁
+
+一个线程池的线程列队是随机执行的，这会导致共享的数据无法确定。比如一个线程列队共享一个数据`count`，但是其中一部分线程设置`count`值，另一部分线程又需要读取`count`值，而我们又无法确定哪些线程先执行哪些后执行，这时候在一个设置`count`的线程里会导致`count`值被随意覆盖，而读取的线程里无法获得准确值。所以我们就需要**线程锁**来控制线程的执行顺序，以及锁定共享数据了，通过这种**共享内存**的方法虽然解决了问题，但也造成了不必要的风险，比如锁住后忘记解锁会导致整个程序崩溃。因为一个线程上的协程也是随机抢占（就是不自觉排队，看能力插队）执行的，这就导致了与线程同样的问题-数据不准确。
+
+go直接放弃操作线程，只操作协程，并且使用简单易用的通道来解决这个问题。通道的目标就是在一部分协程间建立起一座数据通信的桥梁，使各个协程可以关联，从而通过执行顺序来控制共享数据。
+
+### 并发并行
+
+多个任务在同一时间片执行是为并行，多个任务在同一时间异步抢占执行是为并发。由于一个核心同时只能有一个线程运行，一个线程同时只有一个协程处于运行状态，所以协程的并行需要线程的并行，线程的并行需要多核心。所以go并行的首要条件就是多核心计算机。其中并行的每个核心其实包含了并发的协程。但是重要的是，对于单核计算机来说，协程也远比线程轻量，协程的切换和控制更加方便，所以即使单核计算机上goroutine的性能也是无可比拟的。
+
+### 线程设置
+
+Go默认设置的线程数等于执行go程序的计算机的核心数，但是这个数字是可以读取也可以修改的。如下：
+
+> 当GOMAXPROCS方法没有参数或参数<=0时为读取线程数
+
+```go
+// 获取核心数
+fmt.Println(runtime.NumCPU())
+// 读取当前线程数
+fmt.Println(runtime.GOMAXPROCS(0))
+// 设置线程数
+runtime.GOMAXPROCS(16)
+```
+
+### 协程优势
+
+类似PHP(swoole等除外)这种语言是最传统的，每次执行一个单位需要过一遍整个进程。而像Java,Node(新版本),Python等编程语言对并发的处理一般使用多线程的方式解决，而一个线程是非常重量的单位，一个进程开的线程数是非常有限的，开多了很容易造成程序假死。而go协程(区别于python,kotlin等coroutines)是非常轻量的单位，一个进程就可以管理上百万个协程，所以这就使得go的并发量特别高，进一步是go程序的执行性能非常优秀。协程主要用于API请求，消息推送，聊天会话等，每次请求开一个协程，开个几十万都不是问题。
+
+## 协程
+
+### 初步
+
+> go的入口函数`main`是所有协程的父协程
+
+Go语言里使用协程非常简单，只要在调用一个函数的时候在其前面加上`go`关键字即可。比如：
+
+```go
+package main
+
+import (
+	"time"
+	"fmt"
+)
+
+func outputName(name string)  {
+	fmt.Println(name)
+}
+
+func main() {
+	go outputName("Jack")
+	go outputName("Rose")
+	go outputName("Lily")
+  // 保证其它的协程执行完毕后(1秒的时间足够执行三次输出)再继续执行主协程
+	time.Sleep(time.Second)
+	fmt.Println("do in main goroutine")
+}
+```
+
+结果：
+
+> 每次执行输出的结果都是不一样的除了最后一条，因为输出人名的是放到线程里异步抢占执行的协程
+
+```shell
+Jack
+Lily
+Rose
+do in main goroutine
+```
+
+协程也可以使用立即执行的*匿名函数*，与JS里的用法类似，比如：
+
+> 立即执行的意思，是立即加入到协程列队，而不是同步当场执行
+
+```go
+func main() {
+  go func() {
+    fmt.Println("Jack")
+  }()
+  // 保证其它的协程执行完毕后(1秒的时间足够执行三次输出)再继续执行主协程
+	time.Sleep(time.Second)
+	fmt.Println("do in main goroutine")
+}
+```
+
+为了不会让因子协程执行错误而导致主协程甚至整个程序挂掉，可以在有风险的子协程函数内加入一个`defer`关键字的异常处理，并在异常处理的时候使用`recover()`函数恢复异常状态为正常状态，这样可以确保在子协程执行遇到错误的时候立即结束这个协程而不至于冒泡到主协程
+
+```go
+func outputName(name string)  {
+	defer func() {
+    if err := recover(); err != nil {
+      // log error
+    }
+  }()
+}
+```
+
+### 通道
+
+通道(channels)是协程间的数据通信机制。可以用通道对协程进行执行顺序和数据的控制。
+
+#### 创建通道
+
+通道是引用类型数据，使用`make`关键字创建，如下：
+
+```go
+ch1 := make(chan 类型,缓冲数量) // 类型可以是int,string等基础类型，也可以是结构体指针或接口等引用类型 
+```
+
+#### 无缓冲通道
+
+无缓冲通道就是创建通道的时候把`缓冲数量`参数的值设置为`<=0`的数值或者不设置。一个无缓冲通道要求发送goroutine和接受gorouine同时就绪才能执行。如果发送者没有准备好，则接受者会一直处于阻塞状态，反之亦然。
+
+> 阻塞是某个协程处于等待数据的状态而无法向下执行
+
+```go
+package main
+
+import (
+	"fmt"
+	"math/rand"
+	"time"
+)
+
+var groups = []string{
+	"jack", "rose", "Lily", "jobs", "tim", "jordan",
+}
+
+func init() {
+	// 设置一个取货随机数的基准为unix时间戳
+	rand.Seed(time.Now().UnixNano())
+}
+
+func main() {
+	// 设置一个判断是否全歼敌军的通道变量
+	alldied := make(chan bool)
+	go func() {
+		for {
+			// 随机判断是否击杀
+			killed := rand.Intn(2) != 0
+			if !killed {
+				fmt.Println("本轮没有击杀敌人")
+			} else {
+				// 如果击杀则pop最后一个敌人
+				groups = groups[0 : len(groups)-1]
+				fmt.Printf("击杀1人，剩余%d个敌人\n", len(groups))
+			}
+			// 全部歼灭则发送通道值通知父routine并跳出循环
+			if len(groups) <= 0 {
+				alldied <- true
+				break
+			}
+			// 每轮射击后休息1秒
+			time.Sleep(time.Second)
+		}
+
+	}()
+	// 阻塞到全部击杀
+	<-alldied
+	fmt.Println("敌人全部被歼灭")
+}
+```
+执行结果如下
+```shell
+本轮没有击杀敌人
+击杀1人，剩余5个敌人
+击杀1人，剩余4个敌人
+本轮没有击杀敌人
+击杀1人，剩余3个敌人
+本轮没有击杀敌人
+击杀1人，剩余2个敌人
+击杀1人，剩余1个敌人
+本轮没有击杀敌人
+击杀1人，剩余0个敌人
+敌人全部被歼灭
+```
+
+#### 缓冲通道
+

src/assets/posts/lerna.md

@@ -0,0 +1,221 @@
+## 关于
+
+将大型代码库分成单独的独立版本的packages对于代码共享非常有用。但是，跨许多仓库进行更改很麻烦且难以跟踪，并且跨仓库的测试变得非常复杂。
+
+为了解决这些（以及许多其他）问题，一些项目会将其代码库组织到单个的多packages仓库中（有时称为[monorepos](https://github.com/babel/babel/blob/master/doc/design/monorepo.md)）。比如像Babel，React，Angular，Ember，Meteor，Jest等以及许多其他项目都选择把所有代码包放在一个仓库中进行开发。
+
+Lerna就是一种用于优化使用git和npm管理多应用包仓库工作流程的工具。
+
+Lerna还可以减少开发和构建环境中复制大量的重复npm依赖包的时间和空间，这通常是将项目分成许多单独的NPM依赖包的缺点。有关详细信息，请参见  [hoist documentation](https://github.com/lerna/lerna/blob/master/doc/hoist.md)。
+
+### Lerna项目的结构是怎样的?
+
+实际上非常轻量。您的文件结构如下所示：
+
+```shell
+my-lerna-repo/
+  package.json
+  packages/
+    package-1/
+      package.json
+    package-2/
+      package.json
+```
+
+### Lerna可以做什么？
+
+`bootstrap`将连接仓库中的依赖。`publish`用于发布任何有更新的包。
+
+### Lerna不能做什么？
+
+Lerna并不是 serverless monorepos的部署工具。Hoisting可能与传统的serverless monorepo部署技术不兼容。
+
+## 入门
+
+> 以下说明适用于Lerna3.x。对于新的Lerna项目，建议使用它而不是2.x。
+
+首先，使用[npm](https://www.npmjs.com/)将Lerna安装为项目的开发依赖。
+
+```shell
+$ mkdir lerna-repo &&  cd  $_ 
+$ npx lerna init
+```
+
+这将创建一个`lerna.json`配置文件以及一个`packages`文件夹，因此您的文件夹现在应如下所示：
+
+```shell
+lerna-repo/
+  packages/
+  package.json
+  lerna.json
+```
+
+## 如何运行
+
+Lerna允许您使用以下两种模式之一来管理项目：固定或独立。
+
+### 固定/锁定模式（默认）
+
+> 译者注：这种模式适用于多个目录模块属于同一个仓库的情形，比如一个React/Vue组件库
+
+固定模式的Lerna项目的所有包在单个版本库上操作。版本号通过项目根目录下`lerna.json`文件中`version`字段配置。当您运行时`lerna publish`，如果某个模块自上次发布以来已被更新，它将被更新为您要发布的新版本。这意味着您仅在需要时才发布packages的新版本。
+
+这是[Babel](https://github.com/babel/babel)当前使用的模式。如果要自动将所有packages版本捆绑在一起，请使用此选项。这种方法的一个问题是，对任何packages进行重大更改都会导致所有packages都具有新的主要版本。
+
+### 独立模式
+
+> 译者注：这种模式比较适用于一个包含前后端以及多端同构的应用，比如koa+react admin+taro小程序...
+
+```
+lerna init --independent
+```
+
+独立模式Lerna项目允许维护者彼此独立地增加packages的版本。每次发布时，都会提示您已更改的每个packages，以指定是补丁，次要，主要还是自定义更改。
+
+独立模式使您可以更具体地更新每个packages的版本，并使一组组件变得有意义。将该模式与[语义版本](https://github.com/semantic-release/semantic-release)类的东西相结合来解决痛点。（这个任务已经在[atlassian / lerna-semantic-release](https://github.com/atlassian/lerna-semantic-release)这个仓库上完成）。
+
+> 将`lerna.json`中的`version`字段设置为`independent`，以确保独立模式运行。
+
+## 故障排除
+
+如果您在使用Lerna时遇到任何问题，请查阅我们的[故障排除](https://github.com/lerna/lerna/blob/master/doc/troubleshooting.md)  文档，在这里您可以找到问题的答案。
+
+## 经常问的问题
+
+见 [FAQ.md](https://github.com/lerna/lerna/blob/master/FAQ.md).
+
+## 概念
+
+当Lerna 在运行命令遇到错误时，它将会记录到`lerna-debug.log`文件（与`npm-debug.log`类似）。
+
+Lerna还支持 [scoped packages](https://docs.npmjs.com/misc/scope)。
+
+运行`lerna --help`以查看所有可用的命令和选项。
+
+### lerna.json
+
+```json
+{
+  "version": "1.1.3",
+  "npmClient": "npm",
+  "command": {
+    "publish": {
+      "ignoreChanges": ["ignored-file", "*.md"],
+      "message": "chore(release): publish",
+      "registry": "https://npm.pkg.github.com"
+    },
+    "bootstrap": {
+      "ignore": "component-*",
+      "npmClientArgs": ["--no-package-lock"]
+    }
+  },
+  "packages": ["packages/*"]
+}
+```
+
+- `version`： 当前仓库的版本。
+- `npmClient`：指定运行命令的客户端 (也可以为每个命令指定). 如果想使用yarn来运行所有命令则改为 `"yarn"` 。默认为 "npm".
+- `command.publish.ignoreChanges`：不会包含在 `lerna changed/publish`命令中的globs数组。使用此功能可以防止不必要的更改发布在新版本中，例如修正`README.md`错字。
+- `command.publish.message`：发布更新版本时的自定义提交消息。有关更多详细信息，请参见[@ lerna / version](https://github.com/lerna/lerna/blob/master/commands/version#--message-msg)。
+- `command.publish.registry`：使用它来设置要发布到的自定义registry url来替代默认的npmjs.org，如果需要身份认证，请确保您能通过认证。
+- `command.bootstrap.ignore`：运行`lerna bootstrap`命令时不会被引导的glob数组。
+- `command.bootstrap.npmClientArgs`：在运行 `lerna bootstrap`的时候，将会被作为参数直接传递给`npm install`的字符串数组。
+- `command.bootstrap.scope`：指定在运行`lerna bootstrap`命令时将会引导的packages的globs数组。
+- `packages`: 存放package位置的globs数组。
+
+`lerna.json`中的packages配置是匹配到包含`package.json`文件的目录的globs列表，这个就是lerna识别“leaf” packages的方式（注意：根目录下的`package.json`用于管理整个仓库的dev依赖和脚本）。
+
+默认情况下，lerna将packages列表初始化为`["packages/*"]`，但是您也可以使用其他目录，例如`["modules/*"]`或`["package1", "package2"]`。定义好的globs变量是相对于`lerna.json`文件所在目录的，该目录`lerna.json`通常是仓库的根目录。唯一的限制是您不能直接嵌套packages位置，但这也是“正常的” npm packages所共有的一个限制。
+
+例如，`["packages/*", "src/**"]`匹配文件树：
+
+```shell
+packages/
+├── foo-pkg
+│   └── package.json
+├── bar-pkg
+│   └── package.json
+├── baz-pkg
+│   └── package.json
+└── qux-pkg
+    └── package.json
+src/
+├── admin
+│   ├── my-app
+│   │   └── package.json
+│   ├── stuff
+│   │   └── package.json
+│   └── things
+│       └── package.json
+├── profile
+│   └── more-things
+│       └── package.json
+├── property
+│   ├── more-stuff
+│   │   └── package.json
+│   └── other-things
+│       └── package.json
+└── upload
+    └── other-stuff
+        └── package.json
+```
+
+将leaf packages放在`packages/*`下被认为是“最佳实践”，但不是使用Lerna的要求。
+
+### 共享的 `devDependencies`
+
+大多数`devDependencies`可以通过`lerna link convert`命令推送到Lerna仓库的根目录
+
+上面的命令将自动吊装并使用相对目录的`file:`说明符。
+
+吊装有一些好处：
+
+- 所有软件包都使用给定依赖项的相同版本
+- 可以通过自动化工具（例如[GreenKeeper）](https://greenkeeper.io/)使根目录的依赖关系保持最新
+- 依赖包安装时间减少
+- 需要更少的存储空间
+
+请注意，`devDependencies`仍然需要将npm脚本使用的“二进制”可执行文件直接安装在使用它们的每个软件包中。
+
+请注意，`devDependencies`依赖包中如果有被npm scripts使用的”二进制“可执行文件的话，则仍然需要在需要它们的包中各自安装这些依赖。
+
+例如，在以下场景下`nsp`依赖对于`lerna run nsp` 的正常运行来说是必需的（`npm run nsp`在包目录中）。
+
+```json
+{
+  "scripts": {
+    "nsp": "nsp"
+  },
+  "devDependencies": {
+    "nsp": "^2.3.3"
+  }
+}
+```
+
+### Git主机的依赖项
+
+Lerna允许将本地独立包的目标版本写成`committish`格式的[git remote url](https://docs.npmjs.com/cli/install)，而不仅仅是普通的数字版本范围。当包必须是私有的并且[不使用私有的npm registry](https://www.dotconferences.com/2016/05/fabien-potencier-monolithic-repositories-vs-many-repositories)时，这允许包通过git仓库获取。`committish``#v1.0.0``#semver:^1.0.0`
+
+请注意，lerna并*没有*执行把git history实际分离到独立的只读存储库。这是仓库管理者的责任。（有关实现的详细信息，请参[见此评论](https://github.com/lerna/lerna/pull/1033#issuecomment-335894690)）
+
+```json
+// packages/pkg-1/package.json
+{
+  name: "pkg-1",
+  version: "1.0.0",
+  dependencies: {
+    "pkg-2": "github:example-user/pkg-2#v1.0.0"
+  }
+}
+
+// packages/pkg-2/package.json
+{
+  name: "pkg-2",
+  version: "1.0.0"
+}
+```
+
+在上面的示例中，
+
+- `lerna bootstrap`将正确链接`pkg-2`到`pkg-1`。
+- `lerna publishd`当`pkg-2`更改时，将会在`pkg-1`中更新committish(`#v1.0.0`)

src/assets/posts/php-di.md

@@ -0,0 +1,320 @@
+### 基本概念
+
+#### 依赖注入
+
+> 依赖注入是一种允许我们从硬编码的依赖中解耦出来，从而在运行时或者编译时能够修改的软件设计模式。
+
+以下代码解释了依赖注入的方便性
+
+```php
+// SendMessage.php
+<?php
+/**
+ * 在OneDriver中只要实现一个Xsend方法即可,代表了不同的短信发送提供商的驱动接口
+ */
+class SendMessage implements SendMessageInterface
+{
+    protected $sdk;
+    public function __construct(OneDriver $sdk)
+    {
+        $this->sdk = $sdk;
+    }
+    public function send($content)
+    {
+        $this->sdk->Xsend($this->phone,$content);
+    }
+  ...
+}
+```
+
+```php
+//SendController.php
+...
+public function sendMessage(SendMessageInterface $send)
+{
+    $content = 'Hello My God!';
+    $send->setPhone('+86.xxxxxxxxxxx')->send($content);
+}  
+```
+
+```php
+//index.php
+$controller = new SendController();
+$controller->sendMessage($container->make('send.message'));
+```
+
+依赖注入的优点:
+
+- 如果所有的类和函数直接类名或函数名来获取对象,那么由于高度的耦合度测试将显得相当困难。
+- 注入接口的好处是在类内部实现有所改变时我们将只需更改类本身而不需关心调用他的其它类或者代码
+
+#### 服务容器
+
+服务容器包含了2个东西。
+
+1. 用于实现依赖注入的服务解析器
+2. 用于管理依赖注入的容器
+
+由于PHP原生并不支持依赖注入,所以我们要实现依赖注入则首先必须实现服务的解析,可以解析后即可实现用于管理所有服务的容器。为了方便,一般在PHP框架及类库中一体化服务与容器.
+
+### 轻松实现
+
+> 具体代码请查看本课时源代码中的step1
+
+我们自己可以仿造Laravel或者Symfony的模式来轻松的实现一个自己的服务容器
+
+#### 创建容器
+
+整个服务容器的所有服务皆存储与Container容器类中的$app变量中
+
+```php
+// Container.php
+ ...
+  public function bind($name, $definition){} //绑定服务 
+  public function make($name){} //解析服务
+  public function alias($serviceName,$alias){} //设置服务的别名
+  public function all(){} //获取所有服务
+  public function has($name){} //判断服务是否存在在容器内
+```
+
+#### 实现容器
+
+> Reflection类库用于PHP的反转控制,是实现DI的核心
+
+在实现过程中,我们用的最多的是ReflectionClass类和ReflectionFunction类,这两个类用于处理PHP的类和函数的反射机制.
+
+它们都是Reflection类的子集,具体使用请查看[官方API](http://php.net/manual/zh/book.reflection.php),这里就不再赘述。。。
+
+我们假定服务有三种模式
+
+- 闭包函数服务
+- 对象绑定服务
+- 类解析服务
+
+那么我们要在bind(绑定方法)和make(解析方法)中分别对着三种模式进行处理
+
+比如我们添加了factory方法与getArguments方法
+
+factroy方法用于在解析的时候分别处理这三种模式
+
+1. 对象绑定模式则直接返回对象即可
+2. 闭包函数模式,则可能会在函数的参数中注入其它服务,所以要单独处理
+3. 类解析服务则可能会在类的构造函数中注入其它服务,所以要单独处理
+
+最后我们单独编写一个getArguments方法用于处理参数中含有其它服务的方法用于获取解析后的参数用于factory方法,还有一个值得注意的是alias,我们给一个处理绑定了服务名之后,我们添加一个alias方法,就可以为这个服务设置别名了.我们这里模仿laravel使alias可以为数组亦可为单个字符串别名(如果设置接口或者类名,在数组中会自动转换为字符串)
+
+#### 测试容器
+
+在实现服务容器后,我们编写一些代码用于测试服务容器是否有效
+
+> 我们这里的服务容器是参照Laravel的模式编写,但是建议大家尝试改进,可以模仿Symfony的方法.Symfony是用service.yaml的方式来标准化服务容器,代码较Laravel更加优雅亦读
+
+```php
+// services.php
+...
+$container = new Container();
+$container->bind('onedriver',function (){
+    return new OneDriver();
+});
+$container->bind('send.message',SendMessage::class);
+$container->alias('onedriver',OneDriver::class);
+$container->alias('send.message',[
+    SendMessageInterface::class
+]);
+```
+
+绑定所有服务和设置别名之后即可访问index.php看到效果
+
+上面我们自己写的服务容器为了简便起见很多没有实现，有兴趣的朋友可以结合Composer的自动加载类模式,参照Laravel和Symfony的方案自己扩展一下,就可以实现完整的服务容器方案咯
+
+### Laravel与依赖注入
+
+#### 容器方法
+
+在Laravel中,依赖注入也是采用服务容器的设计模式,以下是它的一些常用容器方法,具体可以去看他的[API文档](https://laravel-china.org/api/5.4/Illuminate/Container/Container.html)
+
+> 我们上面的实现为了方便简易的完成了,大家可以看到下面Laravel就做的比较细致了,比如闭包函数处理模式和普通的类绑定就用一个bind方法,而对象绑定就单独一个instance,设置还设置了singleton这种一次性解析方法,还有tag模式等,大家可以参考一下
+
+- $app->bound(判断服务是否存在)
+- $app->resolved(服务解析事件)
+- $app->bind(普通的绑定服务模式,当然通过最后一个shared参数就可以设置成共享服务)
+- $app->bindIf(按条件绑定)
+- $app->singleton(只解析一次，产生的对象后面就一直使用了,可以理解为共享服务)
+- $app->instance(直接以对象做为服务来绑定,那当然也是共享服务了)
+- $app->make(解析服务)
+- $app->tag(创建服务标签,用于归类服务)
+- $app->tagged(解析服务标签得到服务数组,并按绑定时候顺序可以通过整数键值获取服务)
+- $app->offsetXXX(用于设置,读取,判断一些全局变量,比如你要设置一个系统变量,那么就用他)
+- $app->alias(老朋友了,我们上面就自己实现了,用于设置服务别名)
+- $app->isAlias和$app->isShared(这就不用解释了)
+- $app->when,$app->needs,$app->give(画蛇添足的地方,其实按条件解析如果实现同一个接口注入后,在依赖类中使用一个give方法就解析不同服务不是更好吗？用when,needs不仅没解决问题还增加了耦合度。。。)
+- 。。。其它的自己看一下就明白了
+
+#### 具体使用
+
+因为Laravel是使用Composer机制,所以不需要像我们上面写的一样,自己require文件,设置好命名空间就能加载类了,这里重要讲解的是Laravel的Provider机制
+
+> 类似Facades这种样子货大家自己看一下[文档](https://laravel-china.org/docs/5.4/facades)就明白了
+
+首先大家要明白一点,Laravel中的Constract,Provider,Facades这些概念并不是什么高端的东西,非常好理解,我们还是回到我们上面自己写的服务容器案例。
+
+对比一下Laravel的文档可以清楚的知道,所谓Constract不过是interface而已-接口,用于提供一套公有的方法,让具体实现的类来继承,然后通过服务绑定就可以解析了
+
+##### 创建服务
+
+$app->bind(服务名,"具体实现")
+
+> "具体实现"可以是类,对象或者闭包什么的,绑定方法可以按自己的需要选择bind,singleton以及instance,
+>
+> 也可以根据条件绑定(bindIf),或者根据依赖类绑定(when,needs,give)
+
+接着$app->alias(服务名,[一些Contract接口])
+
+> 如果"具体实现"是一个类最好是继承这些接口,显得标准点,如果不是就别理会了
+
+```php
+/**
+ * 首先定义一个接口和一个类,这里省略命名空间
+ */
+namespace App\Services\Message\Contracts;
+interface SendMessage
+{
+    public function say();
+}
+
+namespace App\Services\Message;
+class SendMessage implements SendMessageInterface
+{
+    public function say()
+    {
+        echo 'Laravel is good!';
+    }
+}
+```
+
+##### 创建提供者
+
+在你的AppServiceProvider或者自定义的Provider中的register方法中这样做
+
+```php
+...
+use App\Services\Message\Contracts\SendMessage as SendMessageInterface;
+class MessageServiceProvider extends ServiceProvider
+{
+    public function register()
+    {
+        $this->app->singleton('message.send',SendMessage::class);
+        $this->app->alias('message.send',SendMessageInterface::class);
+    }
+}
+```
+
+##### 注册提供者
+
+> 如果你的绑定是放在AppServiceProvider或者其它Laravel应用自动生成的提供者里面则不用管这一步了,因为这些提供者已经注册好了
+
+有两种方法可以绑定注册提供者
+
+1. 可以选择在config/app.php的'providers'数组中加载你的MessageServiceProvider
+2. 在AppServiceProvider中的register方法里面用$this->app->register(MessageServiceProvider::class)注册
+
+```php
+//config/app.php
+...
+  'providers' => [
+      App\Services\Message\MessageServiceProvider::class,
+  ]
+```
+
+##### 使用门面
+
+如果你想要个Facades(门面)就文档自己弄一个Facades类就可以了,当然也可以在MessageServiceProvider的boot方法中使用
+
+```php
+public function boot()
+{
+    AliasLoader::getInstance
+}
+```
+
+> Laravel5.4可以自动让任何类变成门面
+
+你用5.4版本并且你的服务仅仅是一个类的话的话直接可以像这样调用门面,而不需要任何其它附加的注册
+
+```php
+ use Facades\ {
+    App\Services\Message\SendMessage;
+ };
+```
+
+##### 解析服务
+
+> 当然也可以使用门面,但是不建议多使用,这东西很废(在blade或twig模板里除外)
+
+在控制器中通过Constract接口注入请求方法
+
+```php
+use App\Services\Message\Contracts\SendMessage;
+class ArticleController extends Controller
+{
+    public function create(SendMessage $message)
+    {
+        $hello->say();
+    }
+}
+```
+
+在控制器中通过构造方法注入Application接口调用或者在构造方法中直接注入Contract接口
+
+```php
+  
+class ArticleController extends Controller
+{
+    protected $app;
+    public function __(Application $app)
+    {
+        $this->app = $app;
+    }
+    public function say()
+    {
+        $hello = $this->app->make('message.send'); //或者
+        $hello = $this->app['message.send'];   //或者
+        $hello = app('message.send');
+        // 链式写法
+        $this->app->make('hmessage.send')->say();
+    }
+}
+```
+
+在其它非控制器类中使用
+
+> 如果SendMessage使用的地方不方便注入Application的话,可以丢弃这个构造函数,直接使用app('message.send')获取服务
+
+```php
+/**
+ * 在其它非控制器类中使用
+ */
+  
+class CustomClass
+{
+    public function say(message.send $hello)
+    {
+        $hello->say();
+    }
+}
+  
+class UserSay
+{
+    protected $app;
+    public function __construct(Application $app)
+    {
+        $this->app = $app;
+    }
+    public function say()
+    {
+        $custom = new CustomClass();
+        $custom->say($this->app->make('message.send'));
+    }
+}
+```
+closure

src/assets/posts/rbac.md

@@ -0,0 +1,372 @@
+<h1 align="center">
+    <a href="https://github.com/onury/accesscontrol"><img width="465" height="170" src="https://raw.github.com/onury/accesscontrol/master/ac-logo.png" alt="AccessControl.js" /></a>
+</h1>
+
+
+
+### 基于角色和属性的Node.js访问控制
+
+虽然许多[RBAC][rbac]（基于角色的访问控制）实现上有所不同，但基础知识都是一样的，这种模式也被广泛采用，因为它模拟了真实生活角色(任务)分配。 但是数据变得越来越复杂; 您需要在资源，功能甚至环境中定义策略。 这称为 [ABAC][abac] （基于属性的访问控制）。
+
+我们需要合并以上两者的最佳特性（见[NIST paper][nist-paper]）; 这个node库不仅实现了RBAC基础知识，并且还关注* resource *和* action *属性。
+
+## 核心功能
+
+- 链式的，友好的API。
+  例如`ac.can(role).create(resource)`
+- 角色分层**继承**。
+- 可**一次**定义授权（例如从数据库结果）也可以**逐个**定义授权。
+- 通过**glob表示法**定义的属性授予/拒绝权限（支持嵌套对象）。
+- 能够设置可允许的属性**过滤**数据（模型）实例。
+- 能够控制**自己创建**的或**任何**资源的访问。
+- 能够**锁定**基础授权模型。
+- 没有**静默**错误。
+- **快**。（授权存储在内存中，没有数据库查询。）
+- **经过**严格**测试**。
+- TypeScript支持。
+
+*为了构建更加健壮的应用，这个库（v1.5.0 +）完全用TypeScript重写*
+
+## 安装
+
+使用 [**npm**](https://www.npmjs.com/package/accesscontrol): `npm i accesscontrol --save`  
+使用 [**yarn**](https://yarn.pm/accesscontrol): `yarn add accesscontrol`
+
+## 使用指南
+
+```js
+const AccessControl = require('accesscontrol');
+// or:
+// import { AccessControl } from 'accesscontrol';
+```
+
+### 基础示例
+
+逐个定义 roles（权限） 和grants（角色）
+```js
+const ac = new AccessControl();
+ac.grant('user')                    // 定义新角色或修改现有角色。也可以是一个数组。
+    .createOwn('video')             // 与.createOwn('video', ['*'])相同 ['*']为默认参数
+    .deleteOwn('video')
+    .readAny('video')
+  .grant('admin')                   // 切换到另一个角色而不破坏操作链
+    .extend('user')                 // 继承角色功能。一样，也可以是一个数组 
+    .updateAny('video', ['title'])  // 明确定义可操作的属性 
+    .deleteAny('video');
+
+const permission = ac.can('user').createOwn('video');
+console.log(permission.granted);    // —> true
+console.log(permission.attributes); // —> ['*'] (所有属性)
+
+permission = ac.can('admin').updateAny('video');
+console.log(permission.granted);    // —> true
+console.log(permission.attributes); // —> ['title']
+```
+
+### Express.js 示例
+
+检查所请求资源和操作的角色权限，如果已授权则返回权限筛选出的属性进行响应
+
+```js
+const ac = new AccessControl(grants);
+// ...
+router.get('/videos/:title', function (req, res, next) {
+    const permission = ac.can(req.user.role).readAny('video');
+    if (permission.granted) {
+        Video.find(req.params.title, function (err, data) {
+            if (err || !data) return res.status(404).end();
+            // filter data by permission attributes and send.
+            res.json(permission.filter(data));
+        });
+    } else {
+        // resource is forbidden for this user/role
+        res.status(403).end();
+    }
+});
+```
+
+## 角色
+
+您可以通过轻松地调用`AccessControl`实例上的方法`.grant(<role>)`或`.deny(<role>)`方法来创建/定义角色。
+
+- 角色也可以继承自其它角色.
+
+```js
+// 用户角色继承查看者角色权限
+ac.grant('user').extend('viewer');
+// 管理员角色继承普通用户和编辑员的角色权限
+ac.grant('admin').extend(['user', 'editor']);
+// 管理员和超级管理员角色都继承了版主权限
+ac.grant(['admin', 'superadmin']).extend('moderator');
+```
+
+- 继承是通过引用完成的，因此您可以在继承角色之前或之后授予资源权限。
+
+```js
+// 案例 #1
+ac.grant('admin').extend('user') // 假设用户角色已经存在 
+  .grant('user').createOwn('video');
+
+// 案例 #2
+ac.grant('user').createOwn('video')
+  .grant('admin').extend('user');
+
+// 以下结果对于两种情况都是相同的
+const permission = ac.can('admin').createOwn('video');
+console.log(permission.granted); // true
+```
+
+
+继承说明：
+
+- 角色不能自我继承。
+- 不允许交叉继承。
+  例如`ac.grant('user').extend('admin').grant('admin').extend('user')`将抛出异常。
+- 角色不能（预）继承不存在的角色。换句话说，您应该首先创建基本角色。例如`ac.grant('baseRole').grant('role').extend('baseRole')`
+
+## 动作和动作属性
+
+[CRUD](https://en.wikipedia.org/wiki/Create,_read,_update_and_delete)操作是您可以对资源执行的操作。有两个动作属性定义了资源的**所有权**：*own*和*any*。
+
+例如，一个`admin`角色可以`create`，`read`，`update`或`delete`（CRUD）**任何** `account`资源。但是，一个`user`角色可能只`read`或`update`它**自己的** `account`资源。
+
+<table>
+    <thead>
+        <tr>
+            <th>操作</th>
+            <th>所有权</th>
+        </tr>
+    </thead>
+    <tbody>
+        <tr>
+            <td rowspan="2">
+            <b>C</b>reate<br />
+            <b>R</b>ead<br />
+            <b>U</b>pdate<br />
+            <b>D</b>elete<br />
+            </td>
+            <td>自己的资源</td>
+            <td>可以(或不可以)对当前请求的自己的资源执行C|R|U|D 操作。</td>
+        </tr>
+        <tr>
+            <td>任何资源</td>
+            <td>可以(或不可以)对任何资源执行C|R|U|D 操作,包括自己的资源。</td>
+        </tr>   
+    </tbody>
+</table>
+
+```js
+ac.grant('role').readOwn('resource');
+ac.deny('role').deleteAny('resource');
+```
+
+*请注意，操作**自己的资源**也要求您检查实际所有权。[查看此处](https://github.com/onury/accesscontrol/issues/14#issuecomment-328316670) 获取更多信息。*
+
+## 资源和资源属性
+
+多个角色可以访问特定资源。但是根据上下文，您可能需要限制特定角色可访问的资源内容。
+
+这可以通过资源属性实现。您可以使用Glob表示法来定义允许或拒绝的资源属性。
+
+例如，我们有一个`video`具有以下属性的资源：`id`，`title`和`runtime`。`admin`角色可以读取*任何* `video`资源的所有属性：
+
+```js
+ac.grant('admin').readAny('video', ['*']);
+// 也可以这样写:
+// ac.grant('admin').readAny('video');
+```
+但是`id`属性不应该被`user`角色读取。
+
+```js
+ac.grant('user').readOwn('video', ['*', '!id']);
+// 也可以这样写:
+// ac.grant('user').readOwn('video', ['title', 'runtime']);
+```
+
+你也可以嵌套对象 (属性).
+```js
+ac.grant('user').readOwn('account', ['*', '!record.id']);
+```
+
+## 检查权限和过滤属性
+
+你可以调用`AccessControl`实例的`.can(<role>).<action>(<resource>)`方法来检查对指定资源和行为的权限。
+
+```js
+const permission = ac.can('user').readOwn('account');
+permission.granted;       // true
+permission.attributes;    // ['*', '!record.id']
+permission.filter(data);  // filtered data (without record.id)
+```
+见 [express.js 示例](#expressjs-example).
+
+## 一次定义所有授权
+
+你可以一次把所有授权传递给 `AccessControl` 的构造方法.
+它也可以接受一个对象 `Object`:
+
+```js
+// 这实际上是如何在内部维护授权的方案
+let grantsObject = {
+    admin: {
+        video: {
+            'create:any': ['*', '!views'],
+            'read:any': ['*'],
+            'update:any': ['*', '!views'],
+            'delete:any': ['*']
+        }
+    },
+    user: {
+        video: {
+            'create:own': ['*', '!rating', '!views'],
+            'read:own': ['*'],
+            'update:own': ['*', '!rating', '!views'],
+            'delete:own': ['*']
+        }
+    }
+};
+const ac = new AccessControl(grantsObject);
+```
+... 也可以传递一个 数组 (从数据库中获取时很有用):
+```js
+// 从数据库获取的授权列表 (必须在内部转换为如下格式的有效的grants对象)
+let grantList = [
+    { role: 'admin', resource: 'video', action: 'create:any', attributes: '*, !views' },
+    { role: 'admin', resource: 'video', action: 'read:any', attributes: '*' },
+    { role: 'admin', resource: 'video', action: 'update:any', attributes: '*, !views' },
+    { role: 'admin', resource: 'video', action: 'delete:any', attributes: '*' },
+
+    { role: 'user', resource: 'video', action: 'create:own', attributes: '*, !rating, !views' },
+    { role: 'user', resource: 'video', action: 'read:any', attributes: '*' },
+    { role: 'user', resource: 'video', action: 'update:own', attributes: '*, !rating, !views' },
+    { role: 'user', resource: 'video', action: 'delete:own', attributes: '*' }
+];
+const ac = new AccessControl(grantList);
+```
+你可以随时设置授权...
+```js
+const ac = new AccessControl();
+ac.setGrants(grantsObject);
+console.log(ac.getGrants());
+```
+...除非你锁定它:
+```js
+ac.lock().setGrants({}); // throws after locked
+```
+
+## 适配nest.js
+
+#### 一个基于[onury/accesscontrol](https://github.com/onury/accesscontrol)实现的Nestjs权限控制模块
+
+#### 本模块提供什么 ?
+
+在这个模块中，您将拥有开箱即用的以下所有功能（只用于Nest.js）。
+
+* 它是**基于装饰器的，**因为大多数时候你会在你的路由中使用装饰器。
+* 内置**ACGuard**，您可以直接使用它。
+* 从任何地方都可以访问底层的**AccessControl**对象。
+
+## 安装
+
+* NPM:
+
+```bash
+npm install nest-access-control --save
+```
+
+* Yarn:
+
+```bash
+yarn add nest-access-control
+```
+
+---
+
+#### 示例
+
+> 查看示例目录以获取更多代码;
+
+加入我们需要构建视频服务，以便用户可以与他人分享视频，但我们需要一些`admins`来控制这些视频。
+
+1.  首先让我们定义角色:
+
+为了构建我们的角色，我们需要这个`RolesBuilder`类，它继承自`accesscontrol`包的`AccessControl`类。
+
+```ts
+// app.roles.ts
+
+export enum AppRoles {
+  USER_CREATE_ANY_VIDEO = 'USER_CREATE_ANY_VIDEO',
+  ADMIN_UPDATE_OWN_VIDEO = 'ADMIN_UPDATE_OWN_VIDEO',
+}
+
+export const roles: RolesBuilder = new RolesBuilder();
+
+roles
+  .grant(AppRoles.USER_CREATE_ANY_VIDEO) // define new or modify existing role. also takes an array.
+  .createOwn('video') // equivalent to .createOwn('video', ['*'])
+  .deleteOwn('video')
+  .readAny('video')
+  .grant(AppRoles.ADMIN_UPDATE_OWN_VIDEO) // switch to another role without breaking the chain
+  .extend(AppRoles.USER_CREATE_ANY_VIDEO) // inherit role capabilities. also takes an array
+  .updateAny('video', ['title']) // explicitly defined attributes
+  .deleteAny('video');
+```
+
+> 专家提示 👍 ：请将所有角色组织在一个文件中，例如： `app.roles.ts`。
+
+2. 接着让我们在跟模块中使用`AccessControlModule`注册角色：
+
+```ts
+// app.module.ts
+
+import { roles } from './app.roles';
+
+@Module({
+  imports: [AccessControlModule.forRoles(roles)],
+  controllers: [AppController],
+  providers: [AppService],
+})
+export class AppModule {}
+```
+
+直到现在一切都很好，现在让我们构建我们的应用程序，假设我们有视频名称列表，用户可以 - *根据我们的角色* - `create:own`新视频或`read:any`视频，好的，让我们开始构建它
+
+```ts
+// app.controller.ts
+...
+@Controller()
+export class AppController  {
+	constructor(private readonly appService: AppService)  {}
+	@UseGuards(AuthGuard, ACGuard)
+	@UseRoles({
+		resource:  'video',
+		action:  'read',
+		possession:  'any',
+	})
+	@Get()
+	root(@UserRoles() userRoles: any)  {
+		return this.appService.root(userRoles);
+	}
+}
+```
+
+那么让我们讨论一下发生了什么！
+
+首先我们介绍了两个新装饰器，实际上它们是三个，但让我们看看它们能做什么：
+
+- `@UseRoles({ ... })`：这是最常用的装饰器，它定义用户允许访问此路由的角色。它可以设置一个或多个角色，但请记住，**必须**满足所有角色。角色的结构非常简单，例如，我们在这里定义了我们拥有的资源，以及**ACGuard \*** - 将检查用户角色，然后如果用户角色具有访问此资源的权限，则守卫将返回`true`，否则将抛出一个`ForbiddenException`。关于角色的结构的更多信息请参阅`roles.interface.ts`文件或读取`accesscontrol`库的[原始文档](https://onury.io/accesscontrol/)。
+- `UserRoles(<prop>)`：如果你想直接访问用户角色，也许你就想手动检查它的角色，而不是让`ACGuard`为你做这些，然后你就会寻找`ACGuard`这个装饰器。这个装饰器它其实很简单，它只是获取`req.user.roles`从`request`对象返回值，但是等等，如果用户的角色中不存在`prop: role`，我们知道你会问这个问题，这样你就可以将一个可选的属性键传递给装饰器了以便从用户对象获取它，例如`@UserRoles('permissions')`将返回`req.user.permissions`。
+- `@InjectRolesBuilder()`: If you hate the `ACGuard` - _imo it's a good guard_ - and want to build your own Guard instead, you will likely need to access to the underlying `RolesBuilder` Object , then that decorator for you, it will inject the `Roles` you have defined before, i.e the object passed to the `AccessControlModule.forRoles(roles)`.
+- `@InjectRolesBuilder()`：如果你不喜欢的`ACGuard`- *这是一个很好的守卫* -如果你想建立自己的守卫代替它，您可能需要访问底层`RolesBuilder`对象，那么这个装饰器将会注入你之前已定义的`Roles`，即传递给`AccessControlModule.forRoles(roles)`的对象。
+
+#### 限制
+
+首先，这个模块假设以下情况
+
+1.  在 `req.user`存在用户对象
+2.  您可以自己构建`AuthGuard`将`user`对象附加到`req`对象的内容,[查看详细方法](https://docs.nestjs.com/guards)
+3.  the `AuthGuard` must be registered before roles guard, in this case it's `ACGuard`, and of course you can combine the `AuthGuard` and `ACGuard` in one guard, and use it everywhere.
+4.  `AuthGuard`必须在roles守卫之前注册，在这个案例中roles守卫就是`ACGuard`，当然你可以把`AuthGuard`和`ACGuard`放在一个守卫中，并在任何地方使用它。
+
+其次，我不认为这些是限制，因为你可以轻松地建立自己的守卫，而不再需要内置的了。

src/assets/posts/react-hooks.md

@@ -0,0 +1,326 @@
+## 内置hooks
+
+
+
+### UseState
+
+```typescript
+const App: FC = () => {
+  const [count, setCount] = useState(0);
+  const [isShow, toggleShow] = useState(true);
+  return (
+    <>
+      <p>{count}</p>
+      <button onClick={() => setCount(count + 1)}>increment +</button>
+      <p>{isShow ? <span> I'm show now </span> : null}</p>
+      <button onClick={() => toggleShow(!isShow)}>open sidebar</button>
+    </>
+  );
+};
+```
+
+
+
+![](https://pic.phpna.com/react-notes/20190920010500.gif)
+
+### UseEffect
+
+函数体用于注册事件,返回值用于注销事件
+
+#### 没有第二个参数
+
+1. 组件挂载(首次渲染)只执行useEffect函数体
+2. 组件更新先执行返回值函数,再执行函数体
+3. 组件卸载只执行返回值函数
+
+#### 第二个参数为空数组
+
+1. 组件挂载(首次渲染)只执行函数体
+2. 组件更新不执行,直接跳过
+3. 组件卸载只执行返回值函数
+
+#### 第二个参数为可变值
+
+1. 组件挂载(可变值初始化后)只执行函数体
+2. 只当可变值变化先执行返回值函数,再执行函数体
+3. 组件卸载只执行返回值函数
+
+![](https://pic.phpna.com/react-notes/20190920023556.png)
+
+示例: 写一个拖动浏览器实时显示窗口宽度的组件,注意不要忘记把这个组件放入`App`组件中
+
+```tsx
+const EffectComponent: FC = () => {
+  const [width, setWidth] = useState(window.innerWidth);
+  const resizeHandle = () => {
+    console.log(window.innerWidth);
+    setWidth(window.innerWidth);
+  };
+  useEffect(() => {
+    window.addEventListener("resize", resizeHandle);
+    return () => {
+      window.removeEventListener("resize", resizeHandle);
+    };
+  }, [width]);
+  return (
+    <>
+      <p>{width}</p>
+    </>
+  );
+};
+```
+
+看一下效果
+
+![](https://pic.phpna.com/react-notes/20190920034745.gif)
+
+
+
+### useContext
+
+创建演示组件
+
+```tsx
+// components/ContextDemo.tsx
+...
+import { LocalProps, LangType } from "../typing";
+
+const langs: LangType[] = [
+  { name: "en", label: "english" },
+  { name: "zh-CN", label: "简体中文" }
+];
+
+const localContext = createContext(langs[0]);
+
+const LocalContextProvider: FC<LocalProps> = props => {
+  const [localLang, setLocalLang] = useState<LangType>(
+    !props.lang ? props.lang! : langs[0]
+  );
+  useEffect(() => {
+    setLocalLang(props.lang!);
+  }, [props.lang]);
+  return (
+    <>
+      <localContext.Provider value={localLang}>
+        {props.children}
+      </localContext.Provider>
+    </>
+  );
+};
+
+const LocalSelector: FC<{ setLang: Function }> = props => {
+  const currentLang = useContext(localContext);
+  const changeCurrentLang = (event: ChangeEvent<HTMLSelectElement>) => {
+    props.setLang(langs.find(lang => lang.name === event.target.value));
+  };
+  return (
+    <>
+      <select name="LocalSelector" onChange={changeCurrentLang}>
+        {langs.map(lang => (
+          <option
+            value={lang.name}
+            key={lang.name}
+            selected={lang.name === currentLang.name}
+          >
+            {lang.label ? lang.label : lang.name}
+          </option>
+        ))}
+      </select>
+    </>
+  );
+};
+
+const contextDemo = {
+  langs,
+  localContext,
+  LocalContextProvider,
+  LocalSelector
+};
+export default contextDemo;
+
+```
+
+在根组件导入组件
+
+```tsx
+// index.tsx
+...
+const App: FC = () => {
+  const [lang, setLang] = useState(langs[0]);
+  return (
+    <ContextDemo.LocalContextProvider lang={lang}>
+      ...
+      <h2>useContext Demo</h2>
+      <ContextDemo.LocalSelector setLang={(lang: LangType) => setLang(lang)} />
+    </ContextDemo.LocalContextProvider>
+  );
+};
+
+```
+
+在`EffectDemo`组件使用`useContext`显示当前语言
+
+```tsx
+...
+const currentLang = useContext(ContextDemo.localContext);
+<p>
+    current lang is{" "}
+    {currentLang.label ? currentLang.label! : currentLang.name}
+</p>
+```
+
+看一下效果
+
+![](https://pic.phpna.com/react-notes/20190922195237.gif)
+
+
+
+### useReducer
+
+```tsx
+// components/ReducerDemo.tsx
+...
+// 初始化时默认主题名称
+const defaultThemeName: string = "dark";
+
+// 主题列表
+const themes: ThemeType[] = [
+  { name: "dark", label: "暗黑" },
+  { name: "light", label: "明亮" }
+];
+
+// 过滤主题列表(删除非默认主题的isDefault属性)
+const filterThemes = (data: ThemeType[]) =>
+  data.map(theme => {
+    if (theme.isDefault !== undefined && !theme.isDefault) {
+      delete theme.isDefault;
+    }
+    return theme;
+  });
+
+// 获取初始化主题列表(设置初始化默认主题为当前默认主题),此函数用于初始化reducer的值
+const getInitThemes = (data: ThemeType[]) => {
+  return filterThemes(
+    data.map(theme => {
+      theme.isDefault = theme.name === defaultThemeName;
+      return theme;
+    })
+  );
+};
+
+// 主题操作,为了便于演示这里我们只添加了一个切换默认主题的操作
+const ThemeReducer = (state: ThemeType[], action: ThemeActionType) => {
+  switch (action.type) {
+    case "CHANGE_THEME":
+      return filterThemes(
+        state.map(theme => {
+          if (theme.name === action.value.name) {
+            return { ...theme, isDefault: true };
+          }
+          return { ...theme, isDefault: false };
+        })
+      );
+    default:
+      return filterThemes(state);
+  }
+};
+
+// 获取默认当前主题
+const getDefaultTheme = (data: ThemeType[]) =>
+  filterThemes(data).find(theme => theme.isDefault!);
+
+// 创建主题列表的全局变量
+const themesContext = createContext<
+  [ThemeType[], Dispatch<ThemeActionType>] | null
+>(null);
+
+// 创建当前默认主题的全局变量
+const defaultThemeContext = createContext(
+  getInitThemes(themes).find(theme => theme.name === defaultThemeName)
+);
+
+// 创建一个Provider高阶组件
+const ThemeContextProvider: FC<{
+  children: ReactElement[] | ReactElement;
+}> = props => {
+  // 把{主题列表状态,触发状态改变的dispatch}包装为全局变量
+  const contextValue = useReducer(ThemeReducer, themes, getInitThemes);
+  // 根据主题列表状态的变化使用getDefaultTheme动态的获取当前默认主题
+  const [currentThemes] = contextValue;
+  return (
+    <>
+      <themesContext.Provider value={contextValue}>
+        <defaultThemeContext.Provider value={getDefaultTheme(currentThemes)!}>
+          {props.children}
+        </defaultThemeContext.Provider>
+      </themesContext.Provider>
+    </>
+  );
+};
+
+// 自定义一个hooks用于其它组件便捷地通过themesContext全局变量来获取主题列表的state和dispatch
+const useThemesReducer = () => {
+  const contextValue = useContext(themesContext);
+  return contextValue;
+};
+
+// 自定义一个Hooks通过全局变量defaultThemeContext来快捷地获取当前默认主题
+const useTheme = (): ThemeType => {
+  const contextValue = useContext(defaultThemeContext);
+  return contextValue!;
+};
+
+// 根据主题对象获取主题的显示名
+const getThemeText = (theme: ThemeType): string => {
+  return theme.label ? theme.label : theme.name;
+};
+
+// 主题选择器组件
+const ThemeSelector: FC = () => {
+  const [themes, dispatch] = useThemesReducer()!;
+  const defaultTheme = useTheme();
+  const changeDefaultTheme = (event: ChangeEvent<HTMLSelectElement>) => {
+    dispatch({
+      type: ThemeActionName.CHANGE_THEME,
+      value: themes.find(theme => theme.name === event.target.value)!
+    });
+  };
+  return (
+    <>
+      <p>{defaultTheme.name}</p>
+      <select name="LocalSelector" onChange={changeDefaultTheme}>
+        {themes.map(theme => (
+          <option value={theme.name} key={theme.name}>
+            {theme.label ? theme.label : theme.name}-
+          </option>
+        ))}
+      </select>
+    </>
+  );
+};
+
+export default {
+  useTheme,
+  useThemesReducer,
+  getThemeText,
+  ThemeContextProvider,
+  ThemeSelector
+};
+```
+
+```tsx
+// index.tsx
+<ReducerDemo.ThemeContextProvider>
+  ...
+  <ReducerDemo.ThemeSelector />
+</ReducerDemo.ThemeContextProvider>
+```
+
+在`EffectDemo`组件测试当前默认主题切换
+
+```tsx
+...
+<p>current theme is {ReducerDemo.getThemeText(currentTheme)}</p>
+```
+
+![](https://pic.phpna.com/react-notes/20190923005620.gif)

src/assets/posts/typeorm-fixtures-cli.md

@@ -0,0 +1,442 @@
+依赖于[faker.js](https://github.com/marak/Faker.js/)，typeorm-fixtures-cli允许您在开发或测试项目时创建大量的数据填充/假数据。它为您提供了一些基本工具，使您可以轻松地以编写用于生成复杂数据的易于读写的规则，以便团队中的每个人都可以根据需要生成自己的测试数据。
+
+## 安装
+
+#### NPM
+
+```bash
+npm install typeorm-fixtures-cli --save-dev
+```
+
+#### Yarn
+
+```bash
+yarn add typeorm-fixtures-cli --dev
+```
+
+## 开发步骤
+
+```bash
+# 安装依赖
+npm install
+
+# 构建编译文件
+npm run build
+```
+
+## 示例
+
+`fixtures/Comment.yml`
+
+```yaml
+entity: Comment
+items:
+  comment{1..10}:
+    fullName: '{{name.firstName}} {{name.lastName}}'
+    email: '{{internet.email}}'
+    text: '{{lorem.paragraphs}}'
+    post: '@post*'
+```
+
+`fixtures/Post.yml`
+
+```yaml
+entity: Post
+items:
+  post1:
+    title: '{{name.title}}'
+    description: '{{lorem.paragraphs}}'
+    user: '@user($current)'
+  post2:
+    title: '{{name.title}}'
+    description: '{{lorem.paragraphs}}'
+    user: '@user($current)'
+```
+
+`fixtures/User.yml`
+
+```yaml
+entity: User
+items:
+  user1:
+    firstName: '{{name.firstName}}'
+    lastName: '{{name.lastName}}'
+    email: '{{internet.email}}'
+    profile: '@profile1'
+    __call:
+      setPassword:
+        - foo
+  user2:
+    firstName: '{{name.firstName}}'
+    lastName: '{{name.lastName}}'
+    email: '{{internet.email}}'
+    profile: '@profile2'
+    __call:
+      setPassword:
+        - foo
+```
+
+`fixtures/Profile.yml`
+
+```yaml
+entity: Profile
+items:
+  profile1:
+    aboutMe: <%= ['about string', 'about string 2', 'about string 3'].join(", ") %>
+    skype: skype-account>
+    language: english
+  profile2:
+    aboutMe: <%= ['about string', 'about string 2', 'about string 3'].join(", ") %>
+    skype: skype-account
+    language: english
+```
+
+## 创建填充
+
+此库的最基本功能是将扁平的yaml文件转换为对象
+
+```yaml
+entity: User
+items:
+  user0:
+    username: bob
+    fullname: Bob
+    birthDate: 1980-10-10
+    email: bob@example.org
+    favoriteNumber: 42
+
+  user1:
+    username: alice
+    fullname: Alice
+    birthDate: 1978-07-12
+    email: alice@example.org
+    favoriteNumber: 27
+```
+
+### Fixture范围
+
+第一步是创建一个对象的多个副本，以便从yaml文件中删除重复的规则。
+
+您可以通过在fixture名称中定义范围来实现：
+
+```yaml
+entity: User
+items:
+  user{1..10}:
+    username: bob
+    fullname: Bob
+    birthDate: 1980-10-10
+    email: bob@example.org
+    favoriteNumber: 42
+```
+
+现在它将生成十个用户，ID为user1到user10。相当不错，但我们只有10条相同的名字，用户名和电子邮件的数据，这还不是很花哨。
+
+### Fixture引用
+
+您还可以指定对先前创建的fixture列表的引用：
+
+```yaml
+entity: Post
+items:
+  post1:
+    title: 'Post title'
+    description: 'Post description'
+    user: '@user1'
+```
+
+### Fixture列表
+
+您也可以指定值列表而不是范围：
+
+```yaml
+entity: Post
+items:
+  post{1..10}:
+    title: 'Post title'
+    description: 'Post description'
+    user: '@user($current)'
+```
+
+在一个设置了范围的案例中（例如，用户{1..10}），`($current)`将为user1返回1，为user2返回2。。。
+
+current在迭代中也可以用作字符串值：
+
+```yaml
+entity: Post
+items:
+  post{1..10}:
+    title: 'Post($current)'
+    description: 'Post description'
+```
+
+``Post($current)` 将返回Post1为post1，Post2为post2。。。
+
+您可以使用基本数学运算符来改变此输出：
+
+```yaml
+entity: Post
+items:
+  post{1..10}:
+    title: 'Post($current*100)'
+    description: 'Post description'
+```
+
+``Post($current*100)` 将返回post100 for post1，Post200 for post2。。。
+
+### 调用方法
+
+有时如果你想要调用一个方法来初始化更多数据，你可以像使用属性一样执行此操作，使用方法名称并为其提供一组参数。
+
+```yaml
+entity: User
+items:
+  user{1..10}:
+    username: bob
+    fullname: Bob
+    birthDate: 1980-10-10
+    email: bob@example.org
+    favoriteNumber: 42
+    _call:
+      setPassword:
+        - foo
+```
+
+## 处理关联
+
+```yaml
+entity: User
+items:
+  user1:
+    # ...
+
+entity: Group
+items:
+  group1:
+    name: '<{names.admin}>'
+    owner: '@user1'
+    members:
+      - '@user2'
+      - '@user3'
+
+```
+
+如果要创建10个user和10个group并让每个用户拥有一个组，则可以在使用fixture ranges时,使用`($current)`将其替换为每次迭代的当前ID：
+
+```yaml
+entity: User
+items:
+  user1:
+    # ...
+
+entity: Group
+items:
+  group{1..10}:
+    name: 'name'
+    owner: '@user($current)'
+    members:
+      - '@user2'
+      - '@user3'
+
+```
+
+如果您想要一个随机用户而不是一个固定用户，您可以使用通配符定义一个引用：
+
+```yaml
+entity: User
+items:
+  user1:
+    # ...
+
+entity: Group
+items:
+  group{1..10}:
+    name: 'name'
+    owner: '@user*'
+    members:
+      - '@user2'
+      - '@user3'
+
+```
+
+或者
+
+```yaml
+entity: User
+items:
+  user1:
+    # ...
+
+entity: Group
+items:
+  group{1..10}:
+    name: 'name'
+    owner: '@user{1..2}' # @user1 or @user2
+    members:
+      - '@user2'
+      - '@user3'
+
+```
+
+## 高级指南
+
+### Parameters
+
+You can set global parameters that will be inserted everywhere those values are used to help with readability. For example:
+
+```yaml
+entity: Group
+parameters:
+  names:
+    admin: Admin
+items:
+  group1:
+    name: '<{names.admin}>' # <--- set Admin
+    owner: '@user1'
+    members:
+      - '@user2'
+      - '@user3'
+```
+
+### Faker数据
+
+本库整合了[faker.js](https://github.com/marak/Faker.js/)库。使用{{foo}}，您可以调用Faker数据提供者来生成随机数据。
+
+```yaml
+entity: User
+items:
+  user{1..10}:
+    username: '{{internet.userName}}'
+    fullname: '{{name.firstName}} {{name.lastName}}'
+    birthDate: '{{date.past}}'
+    email: '{{internet.email}}'
+    favoriteNumber: '{{random.number}}'
+    _call:
+      setPassword:
+        - foo
+```
+
+### EJS模板
+
+本库与[EJS](https://github.com/mde/ejs)整合
+
+```yaml
+entity: Profile
+items:
+  profile1:
+    aboutMe: <%= ['about string', 'about string 2', 'about string 3'].join(", ") %>
+    skype: skype-account>
+    language: english
+```
+
+### 加载处理器
+
+处理器允许您在持久化之前和(或)之后处理对象。处理器必须实现：`IProcessor`
+
+```typescript
+import { IProcessor } from 'typeorm-fixtures-cli';
+```
+
+下面是一个示例：
+
+`processor/UserProcessor.ts`
+
+```typescript
+import { IProcessor } from 'typeorm-fixtures-cli';
+import { User } from '../entity/User';
+
+export default class UserProcessor implements IProcessor<User> {
+  preProcess(name: string, object: any): any {
+    return { ...object, firstName: 'foo' };
+  }
+
+  postProcess(name: string, object: { [key: string]: any }): void {
+    object.name = `${object.firstName} ${object.lastName}`;
+  }
+}
+```
+
+fixture 配置 `fixtures/user.yml`
+
+```yaml
+entity: User
+processor: ../processor/UserProcessor
+items:
+  user1:
+    firstName: '{{name.firstName}}'
+    lastName: '{{name.lastName}}'
+    email: '{{internet.email}}'
+```
+
+## 用法
+
+```
+Usage: fixtures [options] <path> Fixtures folder/file path
+
+Options:
+  -v, --version              output the version number
+  -c, --config <path>        TypeORM config path (default: "ormconfig.yml")
+  --require                  A list of additional modules. e.g. ts-node/register
+  -cn, --connection [value]  TypeORM connection name (default: "default")
+  -s --sync                  Database schema sync
+  -d --debug                 Enable debug
+  -h, --help                 output usage information
+  --no-color                 Disable color
+```
+
+##### 需要多个附加模块
+
+如果您一次使用多个模块（例如ts-node和tsconfig-paths），则可以提供多个require参数。例如：
+
+```
+fixtures ./fixtures --config ./typeorm.config.ts --sync --require=ts-node/register --require=tsconfig-paths/register
+```
+
+### 以编程方式加载fixtures
+
+虽然typeorm-fixtures-cli旨在用作CLI，但您仍然可以通过程序中的API加载fixture。
+
+例如，下面的代码片段将加载`./fixtures`目录中存在的所有fixture ：
+
+```typescript
+import * as path from 'path';
+import { Builder, fixturesIterator, Loader, Parser, Resolver } from 'typeorm-fixtures-cli/dist';
+import { createConnection, getRepository } from 'typeorm';
+
+const loadFixtures = async (fixturesPath: string) => {
+  let connection;
+
+  try {
+    connection = await createConnection();
+    await connection.synchronize(true);
+
+    const loader = new Loader();
+    loader.load(path.resolve(fixturesPath));
+
+    const resolver = new Resolver();
+    const fixtures = resolver.resolve(loader.fixtureConfigs);
+    const builder = new Builder(connection, new Parser());
+
+    for (const fixture of fixturesIterator(fixtures)) {
+      const entity = await builder.build(fixture);
+      await getRepository(entity.constructor.name).save(entity);
+    }
+  } catch (err) {
+    throw err;
+  } finally {
+    if (connection) {
+      await connection.close();
+    }
+  }
+};
+
+loadFixtures('./fixtures')
+  .then(() => {
+    console.log('Fixtures are successfully loaded.');
+  })
+  .catch(err => console.log(err));
+```
+
+## 简单示例
+
+- [typeorm-fixtures-sample](https://github.com/RobinCK/typeorm-fixtures-sample)

src/assets/posts/typescript-decorator.md

@@ -0,0 +1,892 @@
+> 在看本文前最好先看一下[《阮一峰-es6中的装饰器》](http://es6.ruanyifeng.com/#docs/decorator)
+
+装饰器用于给类,方法,属性以及方法参数等增加一些附属功能而不影响其原有特性。其在Typescript应用中的主要作用类似于Java中的注解,在AOP(面向切面编程)使用场景下非常有用。
+
+> **面向切面编程（AOP）** 是一种编程范式，它允许我们分离[横切关注点](https://zh.wikipedia.org/wiki/横切关注点)，藉此达到增加模块化程度的目标。它可以在不修改代码自身的前提下，给已有代码增加额外的行为（通知）
+
+**装饰器一般用于处理一些与类以及类属性本身无关的逻辑**,例如: 一个类方法的执行耗时统计或者记录日志,可以单独拿出来写成装饰器。
+
+看一下官方的解释更加清晰明了
+
+> 装饰器是一种特殊类型的声明，它能够被附加到类声明，方法， 访问符，属性或参数上。 装饰器使用 `@expression`这种形式，`expression`求值后必须为一个函数，它会在运行时被调用，被装饰的声明信息做为参数传入。
+
+如果有使用过spring boot或者php的symfony框架的话,就基本知道装饰器的作用分别类似于以上两者注解和annotation，而node中装饰器用的比较好的框架是nest.js。不过不了解也没关系,接下来我就按我的理解讲解一下装饰器的使用。
+
+不过目前装饰器还不属于标准，还在建议征集的第二阶段，但这并不妨碍我们在ts中的使用。只要在 `tsconfig.json`中开启 `experimentalDecorators`编译器选项就可以愉快地使用啦^^
+
+```json
+{
+    "compilerOptions": {
+        "target": "ES5",
+        "experimentalDecorators": true
+    }
+}
+```
+
+## 基本原理
+
+可能有些时候，我们会对传入参数的类型判断、对返回值的排序、过滤，对函数添加节流、防抖或其他的功能性代码，基于多个类的继承，各种各样的与函数逻辑本身无关的、重复性的代码。
+
+比如,我们要在用户登录的时候记录一下登录时间
+
+```typescript
+
+const logger = (now: number) => console.log(`lasted logged in ${now}`);
+
+class User {
+  async login() {
+    await setTimeout(() => console.log('login success'), 100);
+    logger(new Date().valueOf());
+  }
+}
+
+```
+
+以上代码把记录日志的代码强行写入登录的逻辑处理,这样代码量越高则代码越冗余。我们需要把日志逻辑单独拿出来，使login方法更专注于处理登录的逻辑,接下去我们用**高阶函数**模拟一下装饰器的原理,以便于后面更好的理解装饰器。
+
+```typescript
+type decoratorFunc = (
+  target: any,
+  key: string,
+  descriptor: PropertyDescriptor,
+) => void;
+
+// 模拟的装饰器工厂函数
+const createDecorator = (decorator: decoratorFunc) => {
+  return (Model: any, key: string) => {
+    // 获取即将使用装饰器的类原型
+    const target = Model.prototype;
+    // 获取这个原型上某个方法的描述
+    const descriptor = Object.getOwnPropertyDescriptor(target, key);
+    // 更改描述,生成新的方法
+    decorator(target, key, descriptor);
+  };
+};
+
+const logger: decoratorFunc = (target, key, descriptor) => {
+  // 将修改后的函数重新定义到原型链上
+  Object.defineProperty(target, key, {
+    ...descriptor,
+    value: async (...arg) => {
+      try {
+        return await descriptor.value.apply(this, arg); // 调用之前的函数
+      } finally {
+        const now = new Date().valueOf();
+        console.log(`lasted logged in ${now}`);
+      }
+    },
+  });
+};
+
+class User {
+  async login() {
+    console.log('login success');
+    await new Promise(resolve => setTimeout(resolve, 100));
+  }
+}
+
+const loggerDecorator = createDecorator(logger);
+loggerDecorator(User, 'login');
+const user = new User();
+user.login();
+
+// 控制台输出
+// login success
+// 停顿100ms
+// lasted logged in 1571771681793
+
+```
+
+了解了以上概念,接下去让我们学习真正的装饰器。
+
+## 装饰器类型
+
+TS中的装饰器有几种类型，如下：
+
+- 参数装饰器
+- 方法装饰器
+- 访问符装饰器
+- 属性装饰器
+- 类装饰器
+
+以上每中装饰器分别可以作用于类原型(*prototype*属性)和类本身
+
+### 类装饰器
+
+[TS官方文档](https://www.typescriptlang.org/docs/handbook/decorators.html)中举了一个类装饰器的例子,也可以看一下。类装饰器其实就是把我们本身的类传入装饰器注解中,并对这个类或类的原型进行一些处理，仅此而已。例如：
+
+```typescript
+const UserDerorator = <T extends new (...args: any[]) => {}>(
+  constructor: T,
+) => {
+  return class extends constructor {
+    newProperty = 'new property';
+    hello = 'override';
+    sayHello() {
+      return this.hello;
+    }
+  };
+};
+
+@HelloDerorator
+export class UserService {
+  [key: string]: any; //此处用于防止eslint提示sayHello方法不存在
+  hello: string;
+  constructor() {
+    this.hello = 'test';
+  }
+}
+
+const user = new UserService()
+console.log(user.sayHello())
+
+// 控制台打印 override
+```
+
+#### 装饰器工厂
+
+上面的方法我们为`UserService`添加了一个`HelloDerorator`装饰器，这个装饰器的属性将覆盖`UserService`的默认属性。为了方便给装饰器添加其它参数，我们把`HelloDerorator`改造成为一个装饰器工厂,如下：
+
+```typescript
+const WhoAmIDerorator = (firstname: string, lastname: string) => {
+  const name = `${firstname}.${lastname}`;
+  return <T extends new (...args: any[]) => {}>(target: T) => {
+    return class extends target {
+      _name: string = name;
+      getMyName() {
+        return this._name;
+      }
+    };
+  };
+};
+
+@WhoAmI('gkr', 'lichnow')
+export class UserService {...}
+
+const user = new UserService()
+console.log(user.getMyName())
+
+// 控制台打印 gkr.lichnow
+```
+
+#### 其它用法
+
+我们还可以对类原型链`property`上的属性/方法和类本身的静态属性/方法进行赋值或重载操作，还可以重载构造函数，如下：
+
+```typescript
+interface UserProfile {
+  phone?: number;
+  address?: string;
+}
+
+const ProfileDerorator = (profile: UserProfile) => {
+  return (target: any) => {
+    const original = target;
+    let userinfo: string = '';
+    Object.keys(profile).forEach(key => {
+      userinfo = `${userinfo}.${profile[key].toString()}`;
+    });
+    // 添加一个原型属性
+    original.prototype.userinfo = userinfo;
+    // 使用函数创建一个新的类(类构造器),返回值为传入类的对象,这样就重载了构造函数
+    function constructor(...args: any[]) {
+      console.log('contruct has been changed');
+      return new original(...args);
+    }
+    // 赋值原型链
+    constructor.prototype = original.prototype;
+    // 添加一个静态属性
+    constructor.myinfo = `myinfo ${userinfo}`;
+    return constructor as typeof original;
+  };
+};
+
+// 因为静态属性是无法通过[key: string]: any;获取类型提示的,所以这里添加一个接口用于动态各类添加静态属性
+interface StaticUser {
+  new (): UserService;
+  myinfo: string;
+}
+
+@ProfileDerorator({ phone: 133, address: 'zhejiang' })
+class UserService {...}
+
+console.log(((UserService as unknown) as StaticUser).myinfo);
+// 控制台输出 myinfo .133.zhejiang
+// 控制台输出 contruct has been changed
+
+const user = new UserService()
+console.log(user.userinfo)
+// 控制台输出 .133.zhejiang
+```
+
+### 属性装饰器
+
+属性装饰器一般不单独使用，主要用于配合类或方法装饰器进行组合装饰
+
+#### 参数
+
+属性装饰器函数有两个参数：
+
+**target**
+
+对于普通属性，target就是当前对象的原型，也就是说，假设 Employee 是对象，那么 target 就是 `Employee.prototype`
+
+对于静态属性，target就是当前对象的类
+
+**propertyKey**
+
+属性的名称
+
+#### 使用示例
+
+```typescript
+const userRoles = [];
+
+// 通过属性装饰器把角色赋值给userRoles
+const RoleDerorator = (roles: string[]) => {
+  return (target: any, propertyName: string) => {
+    roles.forEach(role => userRoles.push(role));
+  };
+};
+
+// 根据userRoles生成Roles对象并赋值给类原型的roles属性
+const SetRoleDerorator = <
+  T extends new (...args: any[]) => {
+    [key: string]: any;
+  }
+>(
+  constructor: T,
+) => {
+  const roles = [
+    { name: 'super-admin', desc: '超级管理员' },
+    { name: 'admin', desc: '管理员' },
+    { name: 'user', desc: '普通用户' },
+  ];
+  return class extends constructor {
+    constructor(...args) {
+      super(...args);
+      this.roles = roles.filter(role => userRoles.includes(role.name));
+    }
+  };
+};
+
+@SetRoleDerorator
+export class UserService {
+  @RoleDerorator(['admin', 'user'])
+  roles: string[] = [];
+}
+
+// 控制台输出 [ { name: 'admin', desc: '管理员' }, { name: 'user', desc: '普通用户' } ]
+```
+
+### 方法装饰器
+
+在一开始我们介绍了装饰器的原理,其实这就是方法装饰器的原始实现。与属性装饰器不同的是,方法装饰器接受三个参数
+
+> 方法装饰器重载的时候需要注意的一点是定义value务必使用function，而不是箭头函数，因为我们在调用原始的旧方法使用会使用到this，如：method.apply(this, args)，这里的this指向需要function来定义，具体原因可参考我的另一篇文章[apply,bind,call使用](https://lichnow.com)
+
+#### 参数
+
+**target**
+
+对于静态成员来说是类的构造函数，对于实例成员是类的原型对象。
+
+**key**
+
+方法名称
+
+**descriptor: PropertyDescriptor**
+
+方法的属性描述符(最重要的参数)
+
+#### 属性描述符
+
+属性描述包含以下几个属性
+
+- configurable?: boolean; // 能否使用delete、能否修改方法特性或修改访问器属性
+- enumerable?: boolean;  是否在遍历对象的时候存在
+- value?: any;  用于定义新的方法代替旧方法
+- writable?: boolean; 是否可写
+- get?(): any; // 访问器
+- set?(v: any): void; // 访问器
+
+接下来我们使用方法装饰器修改一开始的[装饰器原理中的登录日志记录器](#基本原理)
+
+```typescript
+const loggerDecorator = () => {
+  return function logMethod(
+    target: Object,
+    propertyName: string,
+    propertyDescriptor: PropertyDescriptor,
+  ): PropertyDescriptor {
+    const method = propertyDescriptor.value;
+
+    // 重载方法
+    propertyDescriptor.value = function async (...args: any[]) {
+      try {
+        return await method.apply(this, args); // 调用之前的函数
+      } finally {
+        const now = new Date().valueOf();
+        console.log(`lasted logged in ${now}`);
+      }
+    };
+    return propertyDescriptor;
+  };
+};
+
+class UserService {
+  ...
+  @loggerDecorator()
+  async login() {
+    console.log('login success');
+    await new Promise(resolve => setTimeout(resolve, 100));
+  }
+}
+
+const user = new UserService();
+user.login();
+// 控制台输出结果与前面的例子相同
+```
+
+### 参数装饰器
+
+一个类中每个方法的参数也可以有自己的装饰器。
+
+> 与属性装饰器类似，参数装饰器一般不单独使用，而是配合类或方法装饰器组合使用
+
+#### 参数
+
+1. **target**: 对于静态成员来说是类的构造函数，对于实例成员是类的原型对象。
+2. **key**:方法名称
+3. **index**: 参数数组中的位置
+
+比如我们需要格式化一个方法的参数,那么可以创建一个转么用于格式化的装饰器
+
+```typescript
+// 参数格式化配置
+const parseConf: Function[] = [];
+
+const parse = (parseTo: Function) => {
+  return (target: any, propertyName: string, index: number) => {
+    parseConf[index] = parseTo;
+  };
+};
+
+// 在函数调用前执行格式化操作
+const parseFunc = (
+  target: Object,
+  propertyName: string,
+  descriptor: PropertyDescriptor,
+): PropertyDescriptor => {
+  return {
+    ...descriptor,
+    value(...args: any[]) {
+      // 获取格式化后的参数列表
+      const newArgs = parseConf.map((toParse, index) => toParse(args[index]));
+
+      return descriptor.value.apply(this, newArgs);
+    },
+  };
+};
+
+interface UserEntity {
+  id: number;
+  username: string;
+}
+
+class User {
+  private users: UserEntity[] = [
+    { id: 1, username: 'admin' },
+    { id: 2, username: 'lichnow' },
+  ];
+  
+  getUsers() {
+    return this.users;
+  }
+
+  @parseDecorator
+  delete(@parse((arg: any) => Number(arg)) id): UserService {
+    this.users = this.users.filter(userObj => userObj.id !== id);
+    return this;
+  }
+}
+
+
+const user = new User();
+user.delete('1');
+console.log(user.getUsers());
+
+// 控制台输出: [ { id: 2, username: 'lichnow' } ]
+```
+
+### 访问器装饰器
+
+访问器其实只是那些添加了`get`,`set`前缀的方法，用于使用调用属性的方式获取和设置一些属性的方法，类似于PHP中的魔术方法`__get`,`__set`。其装饰器使用方法与普通方法并无差异，只是在获取值的时候是调用描述符的`get`和`set`来替代`value`而已。
+
+例如，我们添加一个*nickname*字段，给设置*nickname*添加一个自定义前缀，并禁止在遍历*user*对象时出现*nickname*的值，添加一个*fullname*字段，在设置*nickname*时添加一个字符串后缀生成。
+
+```typescript
+export const HiddenDecorator = () => {
+  return (
+    target: any,
+    propertyName: string,
+    descriptor: PropertyDescriptor,
+  ) => {
+    descriptor.enumerable = false;
+  };
+};
+
+export const PrefixDecorator = (prefix: string) => {
+  return (
+    target: any,
+    propertyName: string,
+    descriptor: PropertyDescriptor,
+  ) => {
+    return {
+      ...descriptor,
+      set(value: string) {
+        descriptor.set.apply(this, [`${prefix}_${value}`]);
+      },
+    };
+  };
+};
+
+export class UserService {
+  ...
+  private _nickname: string;
+  private fullname: string;
+  @HiddenDecorator()
+  @PrefixDecorator('gkr_')
+  get nickname() {
+    return this._nickname;
+  }
+
+  set nickname(value: string) {
+    this._nickname = value;
+    this.fullname = `${value}_fullname`;
+  }
+}
+
+const user = new UserService();
+user.password = '123456';
+user.nickname = 'lichnow';
+console.log(user);
+console.log(user.nickname);
+
+// 第一个console.log控制台输出,可以看到遍历对象后并没有nickname字段的值
+// UserService {
+//  users: [ { id: 1, username: 'admin' }, { id: 2, username: 'lichnow' } ],
+//  roles: [],
+//  hello: 'test',
+//  password: '123456',
+//  _nickname: 'gkr__lichnow',
+//  fullname: 'gkr__lichnow_fullname'
+//}
+// 第二个console.log控制台输出
+// gkr__lichnow
+```
+
+## 装饰器写法
+
+通过装饰器重载方法有许多写法，可以根据自己的喜好来，以下举例几种
+
+### 继承法
+
+一般用于类装饰器中添加属性或方法，例如：
+
+```typescript
+ return <T extends new (...args: any[]) => {}>(target: T) => {
+    return class extends target {
+      getMyName() {
+        return this._name;
+      }
+    };
+  };
+```
+
+### 原型法
+
+一般用于类装饰器上重载构造函数以及添加属性或方法，例如：
+
+```typescript
+const ProfileDerorator = (profile: UserProfile) => {
+  return (target: any) => {
+    const original = target;
+    function constructor(...args: any[]) {
+      console.log('contruct has been changed');
+      return new original(...args);
+    }
+    // 赋值原型链
+    constructor.prototype = original.prototype;
+    // 添加一个静态属性
+    constructor.myinfo = `myinfo ${userinfo}`;
+    return constructor as typeof original;
+  };
+};
+
+```
+
+### 赋值法
+
+一般用于方法装饰器上修改某个描述符，例如
+
+```typescript
+const loggerDecorator = () => {
+  return function logMethod(
+    target: Object,
+    propertyName: string,
+    propertyDescriptor: PropertyDescriptor,
+  ): PropertyDescriptor {
+    const method = propertyDescriptor.value;
+    // 重载方法
+    propertyDescriptor.value = function async (...args: any[]) {...};
+    return propertyDescriptor;
+  };
+};
+```
+
+### 展开法
+
+与赋值法类似，只不过使用ES6+的展开语法，更容易理解和使用，例如
+
+```typescript
+const parseFunc = (
+  target: Object,
+  propertyName: string,
+  descriptor: PropertyDescriptor,
+): PropertyDescriptor => {
+  return {
+    ...descriptor,
+    value(...args: any[]) {
+      // 获取格式化后的参数列表
+      const newArgs = parseConf.map((toParse, index) => toParse(args[index]));
+
+      return descriptor.value.apply(this, newArgs);
+    },
+  };
+};
+```
+
+## 元信息反射 API
+
+元信息反射 API （例如 `Reflect`）能够用来以标准方式组织元信息。而装饰器中的*元信息反射*使用非常简单，外观上仅仅可以看做在类的某个方法上附加一些随时可以获取的信息而已。
+
+使用之前我们必须先安装`reflect-metadata`这个库
+
+```typescript
+npm i reflect-metadata --save
+```
+
+并且在`tsconfig.json`中启用原信息配置
+
+```json
+{
+    "compilerOptions": {
+        "target": "ES5",
+        "experimentalDecorators": true,
+        "emitDecoratorMetadata": true
+    }
+}
+```
+
+### 基本使用
+
+我们看一下TS官方的[示例](https://https://www.typescriptlang.org/docs/handbook/decorators.html#metadata)是如何通过反射API获取属性设计阶段的类型信息的。
+
+**需要注意的是目前预定义的元信息只有三种**
+
+- **类型元信息**:  `design:type`。
+- **参数类型元信息**:  `design:paramtypes`。
+- **返回类型元信息**:  `design:returntype`。
+
+```typescript
+import "reflect-metadata";
+
+class Point {
+  x: number;
+  y: number;
+}
+
+class Line {
+  private _p0: Point;
+  private _p1: Point;
+
+  @validate
+  // 这句可以省略,因为design:type是预订属性
+  // @Reflect.metadata('design:type', Point)
+  set p0(value: Point) {
+    this._p0 = value;
+  }
+  get p0() {
+    return this._p0;
+  }
+
+  @validate
+  // @Reflect.metadata("design:type", Point)
+  set p1(value: Point) {
+    this._p1 = value;
+  }
+  get p1() {
+    return this._p1;
+  }
+}
+
+function validate<T>(
+  target: any,
+  propertyKey: string,
+  descriptor: TypedPropertyDescriptor<T>,
+) {
+  const set = descriptor.set;
+  descriptor.set = function(value: T) {
+    const type = Reflect.getMetadata('design:type', target, propertyKey);
+    if (!(value instanceof type)) {
+      throw new TypeError('Invalid type.');
+    }
+    set.apply(this, [value]);
+  };
+  return descriptor;
+}
+
+const line = new Line();
+const p0 = new Point();
+p0.x = 1;
+p0.y = 2;
+line.p1 = p0;
+console.log(line);
+
+// 控制台输出: Line { _p1: Point { x: 1, y: 2 } }
+```
+
+### 自定义元信息
+
+除了使用类似`design:type`这种预定义的原信息外，我们也可以自定义信息，因为一般我们都是用`reflect-metadata`来自定义原信息的。比如我们可以在**删除用户**的方法上添加一个**角色判断**，只有拥有我们设定角色的用户才能删除用户，比如**管理员角色**，具体可参考以下代码：
+
+```typescript
+// 角色守卫
+export const RoleGuardDecorator = (roles: string[]) => {
+  return function roleGuard(
+    target: any,
+    propertyKey: string,
+    descriptor: PropertyDescriptor,
+  ) {
+    // 根据传入的参数定义守卫所需的角色
+    Reflect.defineMetadata('roles', roles, target, propertyKey);
+    const method = descriptor.value;
+    descriptor.value = function(...args: any[]) {
+      // 获取当前用户的角色
+      const currentRoles = target.getRoles();
+      // 获取我们定义的操作此方法所需的角色
+      const needRoles = Reflect.getMetadata('roles', target, propertyKey);
+      // 判断当前用户是否拥有所需的角色,没有则抛出异常
+      for (const role of needRoles) {
+        if (!currentRoles.includes(role)) {
+          throw new Error(`you have not permission to run ${propertyKey}`);
+        }
+      }
+      return method.apply(this, args);
+    };
+    return descriptor;
+  };
+};
+
+class UserService {
+  ...
+  // 设定当前用户的角色
+  getRoles() {
+    return ['user'];
+  }
+
+  @RoleGuardDecorator(['admin'])
+  // 在装饰器中使用Reflect.defineMetadata()放定义roles只是为了方便封装
+  // 当然,我们也可以在方法上直接定义roles,如下
+  // Reflect.metadata('roles',['admin'])
+  @parseDecorator
+  delete(@parse((arg: any) => Number(arg)) id): UserService {
+    this.users = this.getUsers().filter(userObj => userObj.id !== id);
+    return this;
+  }
+}
+
+const user = new UserService();
+user.delete(1);
+console.log(user.getUsers());
+
+// 控制台将输出异常
+// Error: you have not permission to run delete
+```
+
+## 组合与顺序
+
+每一个属性,参数或方法都可以使用多组装饰器。每个类型的装饰器的调用顺序也是不同的。
+
+### 组合使用
+
+我们可以对任意一个被装饰者调用多组装饰器，多组装饰器一般书写在多行上(当然你也可以写在一行上，多行书写只不过是个约定俗成的惯例)，比如
+
+```typescript
+@RoleGuardDecorator
+@parseDecorator
+delete(@parse((arg: any) => Number(arg)) id): UserService 
+```
+
+当多个装饰器应用于一个声明上，它们求值方式与[高阶函数](http://en.wikipedia.org/wiki/Function_composition)相似。在这个模型下，当复合*RoleGuardDecorator*和*parseDecorator*时，复合的结果(*RoleGuardDecorator* ∘ *parseDecorator*)(*delete*)等同于*RoleGuardDecorator*(*parseDecorator*(*delete*))。
+
+同时，我们可以参考react中的[高阶](https://zh-hans.reactjs.org/docs/higher-order-components.html)，原理相似
+
+它们的调用步骤类似剥洋葱法，即：
+
+1. 由上至下依次对装饰器表达式求值。
+2. 求值的结果会被当作函数，由下至上依次调用。
+
+我们使用装饰器工厂来包装一下`@parseDecorator`(`@RoleGuardDecorator`已经在上面的代码中包装为工厂)，并且在调用和求值阶段`console.log`来测试一下
+
+```typescript
+export const parseDecorator = () => {
+  console.log('开始格式化数据');
+  return (
+    target: Object,
+    propertyName: string,
+    descriptor: PropertyDescriptor,
+  ): PropertyDescriptor => {
+    return {
+      ...descriptor,
+      value(...args: any[]) {
+        const newArgs = parseConf.map((toParse, index) => toParse(args[index]));
+        console.log('格式化完毕');
+        return descriptor.value.apply(this, newArgs);
+      },
+    };
+  };
+};
+
+export const RoleGuardDecorator = (roles: string[]) => {
+  return function roleGuard(
+    target: any,
+    propertyKey: string,
+    descriptor: PropertyDescriptor,
+  ) {
+    console.log('开始验证角色');
+    ...
+    descriptor.value = function(...args: any[]) {
+      ...
+      console.log('验证角色完毕');
+      return method.apply(this, args);
+    };
+    return descriptor;
+  };
+};
+
+export class UserService {
+  ...
+  @RoleGuardDecorator(['admin'])
+  // 把parseDecorator改成parseDecorator()
+  @parseDecorator()
+  getRoles() {
+    // 提供验证角色为admin
+    return ['admin'];
+  }
+}
+
+const user = new UserService();
+user.delete(1);
+console.log(user.getUsers());
+
+// 控制台输出
+// 开始格式化数据
+// 开始验证角色
+// 验证角色完毕
+// 格式化完毕
+// [ { id: 2, username: 'lichnow' } ]
+```
+
+### 调用顺序
+
+每种类型的装饰器的调用顺序是不同的，具体顺序如下：
+
+1. *参数装饰器*，然后依次是*方法装饰器*，*访问符装饰器*，或*属性装饰器*应用到每个实例成员(即类原型的成员)。
+2. *参数装饰器*，然后依次是*方法装饰器*，*访问符装饰器*，或*属性装饰器*应用到每个静态成员。
+3. *参数装饰器*应用到构造函数(即类原型)。
+4. *类装饰器*应用到类。
+
+例如：我们使用元信息结合方法和参数装饰器来验证参数的*required*，其调用顺序为*参数装饰器*->*方法装饰器*
+
+```typescript
+const requiredMetadataKey = Symbol('required');
+
+export const RequiredDecorator = (
+  target: Object,
+  propertyKey: string | symbol,
+  parameterIndex: number,
+) => {
+  const existingRequiredParameters: number[] =
+    Reflect.getOwnMetadata(requiredMetadataKey, target, propertyKey) || [];
+  existingRequiredParameters.push(parameterIndex);
+  Reflect.defineMetadata(
+    requiredMetadataKey,
+    existingRequiredParameters,
+    target,
+    propertyKey,
+  );
+};
+
+export const ValidateDecorator = (
+  target: any,
+  propertyName: string,
+  descriptor: TypedPropertyDescriptor<Function>,
+) => {
+  const method = descriptor.value;
+  descriptor.value = function() {
+    const requiredParameters: number[] = Reflect.getOwnMetadata(
+      requiredMetadataKey,
+      target,
+      propertyName,
+    );
+    if (requiredParameters) {
+      for (const parameterIndex of requiredParameters) {
+        if (
+          parameterIndex >= arguments.length ||
+          arguments[parameterIndex] === undefined
+        ) {
+          throw new Error('Missing required argument.');
+        }
+      }
+    }
+
+    return method.apply(this, arguments);
+  };
+};
+
+ @ValidateDecorator
+  createUser(@RequiredDecorator username?: string, id?: number) {
+    const ids: number[] = this.users.map(userEntity => userEntity.id);
+    const newUser: UserEntity = {
+      // 如果不提供ID参数,则新用户的ID为所有用户的最大ID + 1
+      id: id || Math.max(...ids) + 1,
+      // 如果不提供username参数,则生成随机字符串作为用户名
+      username:
+        username ||
+        Math.random()
+          .toString(36)
+          .substring(2, 15),
+    };
+    this.users.push(newUser);
+    return newUser;
+  }
+
+
+const user = new UserService();
+user.createUser();
+console.log(user.getUsers());
+
+// 控制台抛出异常: Error: Missing required argument.
+
+// 尝试去除required装饰器
+@ValidateDecorator
+  createUser(@RequiredDecorator username?: string, id?: number) {...}
+// 控制台输出
+// [
+//  { id: 1, username: 'admin' },
+//  { id: 2, username: 'lichnow' },
+//  { id: 3, username: 'q5cb3pgfdhq' }
+// ]
+```

src/config/api.config.ts

@@ -1,9 +1,14 @@
 import { Configure } from '@/modules/config/configure';
 import { ConfigureFactory } from '@/modules/config/types';
-import * as contentControllers from '@/modules/content/controllers';
+import { createContentApi } from '@/modules/content/routes';
+import { createRbacApi } from '@/modules/rbac/routes';
 import { ApiConfig, VersionOption } from '@/modules/restful/types';
+import { createUserApi } from '@/modules/user/routes';
 
 export const v1 = async (configure: Configure): Promise<VersionOption> => {
+    const contentApi = createContentApi();
+    const userApi = createUserApi();
+    const rbacApi = createRbacApi();
     return {
         routes: [
             {
@@ -12,19 +17,26 @@ export const v1 = async (configure: Configure): Promise<VersionOption> => {
                 controllers: [],
                 doc: {
                     description: 'app name desc',
+                    tags: [...contentApi.tags.app, ...rbacApi.tags.app, ...userApi.tags.app],
+                },
+                children: [...contentApi.routes.app, ...rbacApi.routes.app, ...userApi.routes.app],
+            },
+            {
+                name: 'manager',
+                path: 'manager',
+                controllers: [],
+                doc: {
+                    description: '后台管理接口',
                     tags: [
-                        { name: '分类操作', description: '对分类进行CRUD操作' },
+                        ...contentApi.tags.manager,
-                        { name: '标签操作', description: '对标签进行CRUD操作' },
+                        ...rbacApi.tags.manager,
-                        { name: '文章操作', description: '对文章进行CRUD操作' },
+                        ...userApi.tags.manager,
-                        { name: '评论操作', description: '对评论进行CRUD操作' },
                     ],
                 },
                 children: [
-                    {
+                    ...contentApi.routes.manager,
-                        name: 'app.content',
+                    ...rbacApi.routes.manager,
-                        path: 'content',
+                    ...userApi.routes.manager,
-                        controllers: Object.values(contentControllers),
-                    },
                 ],
             },
         ],

src/config/database.config.ts

@@ -1,9 +1,17 @@
 import { toNumber } from 'lodash';
 
 import { createDBConfig } from '@/modules/database/config';
+import { ContentFactory } from '@/modules/database/factories/content.factory';
+import ContentSeeder from '@/modules/database/seeders/content.seeder';
 
 export const database = createDBConfig((configure) => ({
-    common: { synchronize: true },
+    common: {
+        synchronize: true,
+        // 启用详细日志以便调试 SQL 错误
+        logging: configure.env.get('NODE_ENV') === 'development' ? ['error', 'query'] : ['error'],
+        // 启用最大日志记录
+        maxQueryExecutionTime: 1000,
+    },
     connections: [
         {
             type: 'mysql',
@@ -12,6 +20,8 @@ export const database = createDBConfig((configure) => ({
             username: configure.env.get('DB_USERNAME', '3r'),
             password: configure.env.get('DB_PASSWORD', '12345678'),
             database: configure.env.get('DB_NAME', '3r'),
+            seeders: [ContentSeeder],
+            factories: [ContentFactory],
         },
     ],
 }));

src/config/index.ts

@@ -3,3 +3,7 @@ export * from './content.config';
 export * from './app.config';
 export * from './meili.config';
 export * from './api.config';
+export * from './sms.config';
+export * from './smtp.config';
+export * from './redis.config';
+export * from './queue.config';

src/config/meili.config.ts

@@ -1,4 +1,4 @@
-import { createMeiliConfig } from '../modules/meilisearch/config';
+import { createMeiliConfig } from '@/modules/meilisearch/config';
 
 export const meili = createMeiliConfig((configure) => [
     {

src/config/queue.config.ts

@@ -0,0 +1,5 @@
+import { QueueOptions } from '@/modules/core/types';
+
+export const queue: () => QueueOptions = () => ({
+    redis: 'default',
+});

src/config/redis.config.ts

@@ -0,0 +1,7 @@
+import { RedisOptions } from '@/modules/core/types';
+
+export const redis: () => RedisOptions = () => ({
+    host: '192.168.50.137',
+    port: 6379,
+    password: '123456&Qw',
+});

src/config/sms.config.ts

@@ -0,0 +1,10 @@
+import { Configure } from '@/modules/config/configure';
+import { SmsOptions } from '@/modules/core/types';
+
+export const sms: (configure: Configure) => SmsOptions = (configure) => ({
+    sign: configure.env.get('SMS_CLOUD_SING', 'liuyi'),
+    region: configure.env.get('SMS_CLOUD_REGION', 'ap-guangzhou'),
+    appid: configure.env.get('SMS_CLOUD_APPID', 'app-id'),
+    secretId: configure.env.get('SMS_CLOUD_ID', 'your-secret-id'),
+    secretKey: configure.env.get('SMS_CLOUD_KEY', 'your-secret-key'),
+});

src/config/smtp.config.ts

@@ -0,0 +1,15 @@
+import path from 'path';
+
+import { Configure } from '@/modules/config/configure';
+import { SmtpOptions } from '@/modules/core/types';
+
+export const smtp: (configure: Configure) => SmtpOptions = (configure) => ({
+    host: configure.env.get('SMTP_HOST', 'localhost'),
+    user: configure.env.get('SMTP_USER', 'test'),
+    password: configure.env.get('SMTP_PASSWORD', ''),
+    from: configure.env.get('SMTP_FROM', '平克小站<support@localhost>'),
+    port: configure.env.get('SMTP_PORT', (v) => Number(v), 25),
+    secure: configure.env.get('SMTP_SSL', (v) => JSON.parse(v), false),
+    // Email模板路径
+    resource: path.resolve(__dirname, '../../assets/emails'),
+});

src/config/user.config.ts

@@ -0,0 +1,5 @@
+import { createUserConfig } from '@/modules/user/config';
+
+export const user = createUserConfig(() => ({
+    hash: 10,
+}));

src/modules/content/content.module.ts

@@ -1,6 +1,7 @@
 import { DynamicModule, Module, ModuleMetadata } from '@nestjs/common';
 
 import * as entities from '@/modules/content/entities';
+import { ContentRbac } from '@/modules/content/rbac';
 import * as repositories from '@/modules/content/repositories';
 import * as services from '@/modules/content/services';
 import { SearchService } from '@/modules/content/services';
@@ -12,6 +13,8 @@ import { DatabaseModule } from '@/modules/database/database.module';
 
 import { addEntities, addSubscribers } from '@/modules/database/utils';
 
+import { UserRepository } from '@/modules/user/repositories';
+
 import { Configure } from '../config/configure';
 
 import { defauleContentConfig } from './config';
@@ -23,6 +26,7 @@ export class ContentModule {
     static async forRoot(configure: Configure): Promise<DynamicModule> {
         const config = await configure.get<ContentConfig>('content', defauleContentConfig);
         const providers: ModuleMetadata['providers'] = [
+            ContentRbac,
             ...Object.values(services),
             ...(await addSubscribers(configure, Object.values(subscribers))),
             {
@@ -32,6 +36,7 @@ export class ContentModule {
                     repositories.CategoryRepository,
                     repositories.TagRepository,
                     services.CategoryService,
+                    UserRepository,
                     { token: services.SearchService, optional: true },
                 ],
                 useFactory(
@@ -39,6 +44,7 @@ export class ContentModule {
                     categoryRepository: repositories.CategoryRepository,
                     tagRepository: repositories.TagRepository,
                     categoryService: services.CategoryService,
+                    userRepository: UserRepository,
                     searchService: SearchService,
                 ) {
                     return new PostService(
@@ -46,6 +52,7 @@ export class ContentModule {
                         categoryRepository,
                         categoryService,
                         tagRepository,
+                        userRepository,
                         searchService,
                         config.searchType,
                     );

src/modules/content/controllers/category.controller.ts

@@ -1,15 +1,4 @@
-import {
+import { Controller, Get, Param, ParseUUIDPipe, Query, SerializeOptions } from '@nestjs/common';
-    Body,
-    Controller,
-    Delete,
-    Get,
-    Param,
-    ParseUUIDPipe,
-    Patch,
-    Post,
-    Query,
-    SerializeOptions,
-} from '@nestjs/common';
 
 import { ApiTags } from '@nestjs/swagger';
 
@@ -17,11 +6,12 @@ import { Depends } from '@/modules/restful/decorators/depend.decorator';
 
 import { PaginateDto } from '@/modules/restful/dtos/paginate.dto';
 
+import { Guest } from '@/modules/user/decorators/guest.decorator';
+
 import { ContentModule } from '../content.module';
-import { CreateCategoryDto, UpdateCategoryDto } from '../dtos/category.dto';
 import { CategoryService } from '../services';
 
-@ApiTags('Category Operate')
+@ApiTags('分类查询')
 @Depends(ContentModule)
 @Controller('category')
 export class CategoryController {
@@ -31,6 +21,7 @@ export class CategoryController {
      * Search category tree
      */
     @Get('tree')
+    @Guest()
     @SerializeOptions({ groups: ['category-tree'] })
     async tree() {
         return this.service.findTrees();
@@ -41,6 +32,7 @@ export class CategoryController {
      * @param options
      */
     @Get()
+    @Guest()
     @SerializeOptions({ groups: ['category-list'] })
     async list(
         @Query()
@@ -54,32 +46,9 @@ export class CategoryController {
      * @param id
      */
     @Get(':id')
+    @Guest()
     @SerializeOptions({ groups: ['category-detail'] })
     async detail(@Param('id', new ParseUUIDPipe()) id: string) {
         return this.service.detail(id);
     }
-
-    @Post()
-    @SerializeOptions({ groups: ['category-detail'] })
-    async store(
-        @Body()
-        data: CreateCategoryDto,
-    ) {
-        return this.service.create(data);
-    }
-
-    @Patch()
-    @SerializeOptions({ groups: ['category-detail'] })
-    async update(
-        @Body()
-        data: UpdateCategoryDto,
-    ) {
-        return this.service.update(data);
-    }
-
-    @Delete(':id')
-    @SerializeOptions({ groups: ['category-detail'] })
-    async delete(@Param('id', new ParseUUIDPipe()) id: string) {
-        return this.service.delete([id]);
-    }
 }

src/modules/content/controllers/comment.controller.ts

@@ -1,7 +1,22 @@
 import { Body, Controller, Delete, Get, Post, Query, SerializeOptions } from '@nestjs/common';
 
+import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
+import { In } from 'typeorm';
+
+import { CommentEntity } from '@/modules/content/entities';
+import { CommentRepository } from '@/modules/content/repositories';
+import { PermissionAction } from '@/modules/rbac/constants';
+import { Permission } from '@/modules/rbac/decorators/permission.decorator';
+import { PermissionChecker } from '@/modules/rbac/types';
+import { checkOwnerPermission } from '@/modules/rbac/utils';
 import { Depends } from '@/modules/restful/decorators/depend.decorator';
 
+import { Guest } from '@/modules/user/decorators/guest.decorator';
+
+import { RequestUser } from '@/modules/user/decorators/user.request.decorator';
+
+import { UserEntity } from '@/modules/user/entities';
+
 import { ContentModule } from '../content.module';
 import {
     CreateCommentDto,
@@ -11,18 +26,41 @@ import {
 } from '../dtos/comment.dto';
 import { CommentService } from '../services';
 
+const permissions: Record<'create' | 'owner', PermissionChecker> = {
+    create: async (ab) => ab.can(PermissionAction.CREATE, CommentEntity.name),
+    owner: async (ab, ref, request) =>
+        checkOwnerPermission(ab, {
+            request,
+            getData: async (items) =>
+                ref.get(CommentRepository, { strict: false }).find({
+                    relations: ['user'],
+                    where: { id: In(items) },
+                }),
+        }),
+};
+
+@ApiTags('评论操作')
 @Depends(ContentModule)
 @Controller('comment')
 export class CommentController {
     constructor(protected service: CommentService) {}
-
+    /**
+     * 查询评论树
+     * @param options
+     */
     @Get('tree')
+    @Guest()
     @SerializeOptions({ groups: ['comment-tree'] })
     async tree(@Query() options: QueryCommentTreeDto) {
         return this.service.findTrees(options);
     }
 
+    /**
+     * 查询评论列表
+     * @param options
+     */
     @Get()
+    @Guest()
     @SerializeOptions({ groups: ['comment-list'] })
     async list(
         @Query()
@@ -31,13 +69,26 @@ export class CommentController {
         return this.service.paginate(options);
     }
 
+    /**
+     * 新增评论
+     * @param data
+     * @param author
+     */
     @Post()
+    @ApiBearerAuth()
+    @Permission(permissions.create)
     @SerializeOptions({ groups: ['comment-detail'] })
-    async store(@Body() data: CreateCommentDto) {
+    async store(@Body() data: CreateCommentDto, @RequestUser() author: ClassToPlain<UserEntity>) {
-        return this.service.create(data);
+        return this.service.create(data, author);
     }
 
+    /**
+     * 批量删除评论
+     * @param data
+     */
     @Delete()
+    @ApiBearerAuth()
+    @Permission(permissions.owner)
     @SerializeOptions({ groups: ['comment-detail'] })
     async delete(@Body() data: DeleteCommentDto) {
         return this.service.delete(data.ids);

src/modules/content/controllers/manager/category.controller.ts

@@ -0,0 +1,98 @@
+import {
+    Body,
+    Controller,
+    Delete,
+    Get,
+    Param,
+    ParseUUIDPipe,
+    Patch,
+    Post,
+    Query,
+    SerializeOptions,
+} from '@nestjs/common';
+
+import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
+
+import { ContentModule } from '@/modules/content/content.module';
+import { CreateCategoryDto, UpdateCategoryDto } from '@/modules/content/dtos/category.dto';
+import { CategoryEntity } from '@/modules/content/entities';
+import { CategoryService } from '@/modules/content/services';
+import { PermissionAction } from '@/modules/rbac/constants';
+import { Permission } from '@/modules/rbac/decorators/permission.decorator';
+import { PermissionChecker } from '@/modules/rbac/types';
+import { Depends } from '@/modules/restful/decorators/depend.decorator';
+
+import { PaginateDto } from '@/modules/restful/dtos/paginate.dto';
+
+const permission: PermissionChecker = async (ab) =>
+    ab.can(PermissionAction.MANAGE, CategoryEntity.name);
+
+@ApiTags('分类管理')
+@ApiBearerAuth()
+@Depends(ContentModule)
+@Controller('category')
+export class CategoryController {
+    constructor(protected service: CategoryService) {}
+
+    /**
+     * Search category tree
+     */
+    @Get('tree')
+    @Permission(permission)
+    @SerializeOptions({ groups: ['category-tree'] })
+    async tree() {
+        return this.service.findTrees();
+    }
+
+    /**
+     * 分页查询分类列表
+     * @param options
+     */
+    @Get()
+    @Permission(permission)
+    @SerializeOptions({ groups: ['category-list'] })
+    async list(
+        @Query()
+        options: PaginateDto,
+    ) {
+        return this.service.paginate(options);
+    }
+
+    /**
+     * 查询分类明细
+     * @param id
+     */
+    @Get(':id')
+    @Permission(permission)
+    @SerializeOptions({ groups: ['category-detail'] })
+    async detail(@Param('id', new ParseUUIDPipe()) id: string) {
+        return this.service.detail(id);
+    }
+
+    @Post()
+    @Permission(permission)
+    @SerializeOptions({ groups: ['category-detail'] })
+    async store(
+        @Body()
+        data: CreateCategoryDto,
+    ) {
+        return this.service.create(data);
+    }
+
+    @Patch()
+    @Permission(permission)
+    @SerializeOptions({ groups: ['category-detail'] })
+    async update(
+        @Body()
+        data: UpdateCategoryDto,
+    ) {
+        return this.service.update(data);
+    }
+
+    @Delete(':id')
+    @Permission(permission)
+    @SerializeOptions({ groups: ['category-detail'] })
+    async delete(@Param('id', new ParseUUIDPipe()) id: string) {
+        return this.service.delete([id]);
+    }
+}

src/modules/content/controllers/manager/comment.controller.ts

@@ -0,0 +1,53 @@
+import { Body, Controller, Delete, Get, Query, SerializeOptions } from '@nestjs/common';
+import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
+
+import { ContentModule } from '@/modules/content/content.module';
+import { QueryCommentDto } from '@/modules/content/dtos/comment.dto';
+import { DeleteDto } from '@/modules/content/dtos/delete.dto';
+import { CommentEntity } from '@/modules/content/entities';
+import { CommentService } from '@/modules/content/services';
+import { PermissionAction } from '@/modules/rbac/constants';
+import { Permission } from '@/modules/rbac/decorators/permission.decorator';
+import { PermissionChecker } from '@/modules/rbac/types';
+
+import { Depends } from '@/modules/restful/decorators/depend.decorator';
+
+const permission: PermissionChecker = async (ab) =>
+    ab.can(PermissionAction.MANAGE, CommentEntity.name);
+
+@ApiTags('评论管理')
+@ApiBearerAuth()
+@Depends(ContentModule)
+@Controller('comments')
+export class CommentController {
+    constructor(protected service: CommentService) {}
+
+    /**
+     * 查询评论列表
+     * @param query
+     */
+    @Get()
+    @SerializeOptions({ groups: ['comment-list'] })
+    @Permission(permission)
+    async list(
+        @Query()
+        query: QueryCommentDto,
+    ) {
+        return this.service.paginate(query);
+    }
+
+    /**
+     * 批量删除评论
+     * @param data
+     */
+    @Delete()
+    @SerializeOptions({ groups: ['comment-list'] })
+    @Permission(permission)
+    async delete(
+        @Body()
+        data: DeleteDto,
+    ) {
+        const { ids } = data;
+        return this.service.delete(ids);
+    }
+}

src/modules/content/controllers/manager/index.ts

@@ -0,0 +1,4 @@
+export * from './category.controller';
+export * from './tag.controller';
+export * from './post.controller';
+export * from './comment.controller';

src/modules/content/controllers/manager/post.controller.ts

@@ -0,0 +1,130 @@
+import {
+    Body,
+    Controller,
+    Delete,
+    Get,
+    Param,
+    ParseUUIDPipe,
+    Patch,
+    Post,
+    Query,
+    SerializeOptions,
+} from '@nestjs/common';
+
+import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
+import { isNil } from 'lodash';
+
+import { ContentModule } from '@/modules/content/content.module';
+import { DeleteWithTrashDto, RestoreDto } from '@/modules/content/dtos/delete.with.trash.dto';
+import { PostEntity } from '@/modules/content/entities';
+import { PostService } from '@/modules/content/services/post.service';
+import { PermissionAction } from '@/modules/rbac/constants';
+import { Permission } from '@/modules/rbac/decorators/permission.decorator';
+import { PermissionChecker } from '@/modules/rbac/types';
+import { Depends } from '@/modules/restful/decorators/depend.decorator';
+import { RequestUser } from '@/modules/user/decorators/user.request.decorator';
+import { UserEntity } from '@/modules/user/entities';
+
+import { CreatePostDto, QueryPostDto, UpdatePostDto } from '../../dtos/post.dto';
+
+const permission: PermissionChecker = async (ab) =>
+    ab.can(PermissionAction.MANAGE, PostEntity.name);
+
+@ApiTags('文章管理')
+@ApiBearerAuth()
+@Depends(ContentModule)
+@Controller('posts')
+export class PostController {
+    constructor(protected service: PostService) {}
+
+    /**
+     * 查询文章列表
+     * @param options
+     */
+    @Get()
+    @SerializeOptions({ groups: ['post-list'] })
+    @Permission(permission)
+    async manageList(
+        @Query()
+        options: QueryPostDto,
+    ) {
+        return this.service.paginate(options);
+    }
+
+    /**
+     * 查询文章详情
+     * @param id
+     */
+    @Get(':id')
+    @SerializeOptions({ groups: ['post-detail'] })
+    @Permission(permission)
+    async manageDetail(
+        @Param('id', new ParseUUIDPipe())
+        id: string,
+    ) {
+        return this.service.detail(id);
+    }
+
+    /**
+     * 新增文章
+     * @param author
+     * @param data
+     * @param user
+     */
+    @Post()
+    @SerializeOptions({ groups: ['post-detail'] })
+    @Permission(permission)
+    async storeManage(
+        @Body()
+        { author, ...data }: CreatePostDto,
+        @RequestUser() user: ClassToPlain<UserEntity>,
+    ) {
+        return this.service.create(data, {
+            id: isNil(author) ? user.id : author,
+        } as ClassToPlain<UserEntity>);
+    }
+
+    /**
+     * 更新文章
+     * @param data
+     */
+    @Patch()
+    @SerializeOptions({ groups: ['post-detail'] })
+    @Permission(permission)
+    async manageUpdate(
+        @Body()
+        data: UpdatePostDto,
+    ) {
+        return this.service.update(data);
+    }
+
+    /**
+     * 批量删除文章
+     * @param data
+     */
+    @Delete()
+    @SerializeOptions({ groups: ['post-list'] })
+    @Permission(permission)
+    async manageDelete(
+        @Body()
+        data: DeleteWithTrashDto,
+    ) {
+        const { ids, trash } = data;
+        return this.service.delete(ids, trash);
+    }
+
+    /**
+     * 批量恢复文章
+     * @param data
+     */
+    @Patch('restore')
+    @SerializeOptions({ groups: ['post-list'] })
+    @Permission(permission)
+    async manageRestore(
+        @Body()
+        data: RestoreDto,
+    ) {
+        const { ids } = data;
+        return this.service.restore(ids);
+    }
+}

src/modules/content/controllers/manager/tag.controller.ts

@@ -0,0 +1,99 @@
+import {
+    Body,
+    Controller,
+    Delete,
+    Get,
+    Param,
+    ParseUUIDPipe,
+    Patch,
+    Post,
+    Query,
+    SerializeOptions,
+} from '@nestjs/common';
+
+import { ApiTags } from '@nestjs/swagger';
+
+import { ContentModule } from '@/modules/content/content.module';
+import { DeleteDto } from '@/modules/content/dtos/delete.dto';
+import { CreateTagDto, UpdateTagDto } from '@/modules/content/dtos/tag.dto';
+import { TagEntity } from '@/modules/content/entities';
+import { TagService } from '@/modules/content/services';
+import { PermissionAction } from '@/modules/rbac/constants';
+import { Permission } from '@/modules/rbac/decorators/permission.decorator';
+import { PermissionChecker } from '@/modules/rbac/types';
+import { Depends } from '@/modules/restful/decorators/depend.decorator';
+
+import { PaginateDto } from '@/modules/restful/dtos/paginate.dto';
+
+const permission: PermissionChecker = async (ab) => ab.can(PermissionAction.MANAGE, TagEntity.name);
+
+@ApiTags('标签管理')
+@Depends(ContentModule)
+@Controller('tag')
+export class TagController {
+    constructor(protected service: TagService) {}
+
+    /**
+     * 分页查询标签列表
+     * @param options
+     */
+    @Get()
+    @Permission(permission)
+    @SerializeOptions({})
+    async list(
+        @Query()
+        options: PaginateDto,
+    ) {
+        return this.service.paginate(options);
+    }
+
+    /**
+     * 查询标签详情
+     * @param id
+     */
+    @Get(':id')
+    @Permission(permission)
+    @SerializeOptions({})
+    async detail(@Param('id', new ParseUUIDPipe()) id: string) {
+        return this.service.detail(id);
+    }
+
+    /**
+     * 添加新标签
+     * @param data
+     */
+    @Post()
+    @Permission(permission)
+    @SerializeOptions({})
+    async store(
+        @Body()
+        data: CreateTagDto,
+    ) {
+        return this.service.create(data);
+    }
+
+    /**
+     * 更新标签
+     * @param data
+     */
+    @Patch()
+    @Permission(permission)
+    @SerializeOptions({})
+    async update(
+        @Body()
+        data: UpdateTagDto,
+    ) {
+        return this.service.update(data);
+    }
+
+    /**
+     * 批量删除标签
+     * @param data
+     */
+    @Delete()
+    @Permission(permission)
+    @SerializeOptions({})
+    async delete(@Body() data: DeleteDto) {
+        return this.service.delete(data.ids);
+    }
+}

src/modules/content/controllers/post.controller.ts

@@ -11,64 +11,179 @@ import {
     SerializeOptions,
 } from '@nestjs/common';
 
-import { CreatePostDto, QueryPostDto, UpdatePostDto } from '@/modules/content/dtos/post.dto';
+import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
+
+import { In, IsNull, Not } from 'typeorm';
+
+import {
+    FrontendCreatePostDto,
+    FrontendQueryPostDto,
+    OwnerQueryPostDto,
+    OwnerUpdatePostDto,
+} from '@/modules/content/dtos/post.dto';
+import { PostEntity } from '@/modules/content/entities';
+import { PostRepository } from '@/modules/content/repositories';
 import { PostService } from '@/modules/content/services/post.service';
 
+import { SelectTrashMode } from '@/modules/database/constants';
+import { PermissionAction } from '@/modules/rbac/constants';
+import { Permission } from '@/modules/rbac/decorators/permission.decorator';
+import { PermissionChecker } from '@/modules/rbac/types';
+import { checkOwnerPermission } from '@/modules/rbac/utils';
 import { Depends } from '@/modules/restful/decorators/depend.decorator';
 
+import { Guest } from '@/modules/user/decorators/guest.decorator';
+
+import { RequestUser } from '@/modules/user/decorators/user.request.decorator';
+import { UserEntity } from '@/modules/user/entities';
+
 import { ContentModule } from '../content.module';
 import { DeleteWithTrashDto, RestoreDto } from '../dtos/delete.with.trash.dto';
 
+const permissions: Record<'create' | 'owner', PermissionChecker> = {
+    create: async (ab) => ab.can(PermissionAction.CREATE, PostEntity.name),
+    owner: async (ab, ref, request) =>
+        checkOwnerPermission(ab, {
+            request,
+            getData: async (items) =>
+                ref
+                    .get(PostRepository, { strict: false })
+                    .find({ relations: ['author'], where: { id: In(items) } }),
+        }),
+};
+
+@ApiTags('文章操作')
 @Depends(ContentModule)
 @Controller('posts')
 export class PostController {
     constructor(private postService: PostService) {}
 
+    /**
+     * 查询文章列表
+     * @param options
+     */
     @Get()
+    @Guest()
     @SerializeOptions({ groups: ['post-list'] })
     async list(
         @Query()
-        options: QueryPostDto,
+        options: FrontendQueryPostDto,
     ) {
-        return this.postService.paginate(options);
+        return this.postService.paginate({
+            ...options,
+            isPublished: true,
+            trashed: SelectTrashMode.NONE,
+        });
     }
 
+    /**
+     * 分页查询自己发布的文章列表
+     * @param options
+     * @param author
+     */
+    @Get('owner')
+    @ApiBearerAuth()
+    @SerializeOptions({ groups: ['post-list'] })
+    async listOwner(
+        @Query()
+        options: OwnerQueryPostDto,
+        @RequestUser() author: ClassToPlain<UserEntity>,
+    ) {
+        return this.postService.paginate({
+            ...options,
+            author: author.id,
+        });
+    }
+
+    /**
+     * 查询文章详情
+     * @param id
+     */
     @Get(':id')
+    @Guest()
     @SerializeOptions({ groups: ['post-detail'] })
     async show(@Param('id', new ParseUUIDPipe()) id: string) {
-        return this.postService.detail(id);
+        return this.postService.detail(id, async (qb) =>
+            qb.andWhere({ publishedAt: Not(IsNull()), deletedAt: IsNull() }),
+        );
     }
 
-    @Post()
+    /**
+     * 查询自己发布的文章详情
+     * @param id
+     */
+    @Get('owner/:id')
+    @ApiBearerAuth()
     @SerializeOptions({ groups: ['post-detail'] })
+    @Permission(permissions.owner)
+    async detailOwner(
+        @Param('id', new ParseUUIDPipe())
+        id: string,
+    ) {
+        return this.postService.detail(id, async (qb) => qb.withDeleted());
+    }
+
+    /**
+     * 新增文章
+     * @param data
+     * @param author
+     */
+    @Post()
+    @ApiBearerAuth()
+    @SerializeOptions({ groups: ['post-detail'] })
+    @Permission(permissions.create)
     async store(
         @Body()
-        data: CreatePostDto,
+        data: FrontendCreatePostDto,
+        @RequestUser() author: ClassToPlain<UserEntity>,
     ) {
-        return this.postService.create(data);
+        return this.postService.create(data, author);
     }
 
+    /**
+     * 更新自己发布的文章
+     * @param data
+     */
     @Patch()
+    @ApiBearerAuth()
     @SerializeOptions({ groups: ['post-detail'] })
+    @Permission(permissions.owner)
     async update(
         @Body()
-        data: UpdatePostDto,
+        data: OwnerUpdatePostDto,
     ) {
         return this.postService.update(data);
     }
 
+    /**
+     * 批量删除自己发布的文章
+     * @param data
+     */
     @Delete()
-    @SerializeOptions({ groups: ['post-detail'] })
+    @ApiBearerAuth()
-    async delete(@Body() data: DeleteWithTrashDto) {
+    @SerializeOptions({ groups: ['post-list'] })
-        return this.postService.delete(data.ids, data.trash);
+    @Permission(permissions.owner)
+    async delete(
+        @Body()
+        data: DeleteWithTrashDto,
+    ) {
+        const { ids, trash } = data;
+        return this.postService.delete(ids, trash);
     }
 
+    /**
+     * 批量恢复自己发布的文章
+     * @param data
+     */
     @Patch('restore')
-    @SerializeOptions({ groups: ['post-detail'] })
+    @ApiBearerAuth()
+    @SerializeOptions({ groups: ['post-list'] })
+    @Permission(permissions.owner)
     async restore(
         @Body()
         data: RestoreDto,
     ) {
-        return this.postService.restore(data.ids);
+        const { ids } = data;
+        return this.postService.restore(ids);
     }
 }

src/modules/content/controllers/tag.controller.ts

@@ -1,32 +1,28 @@
-import {
+import { Controller, Get, Param, ParseUUIDPipe, Query, SerializeOptions } from '@nestjs/common';
-    Body,
-    Controller,
-    Delete,
-    Get,
-    Param,
-    ParseUUIDPipe,
-    Patch,
-    Post,
-    Query,
-    SerializeOptions,
-} from '@nestjs/common';
 
-import { DeleteDto } from '@/modules/content/dtos/delete.dto';
+import { ApiTags } from '@nestjs/swagger';
 
 import { Depends } from '@/modules/restful/decorators/depend.decorator';
 
 import { PaginateDto } from '@/modules/restful/dtos/paginate.dto';
 
+import { Guest } from '@/modules/user/decorators/guest.decorator';
+
 import { ContentModule } from '../content.module';
-import { CreateTagDto, UpdateTagDto } from '../dtos/tag.dto';
 import { TagService } from '../services';
 
+@ApiTags('标签查询')
 @Depends(ContentModule)
 @Controller('tag')
 export class TagController {
     constructor(protected service: TagService) {}
 
+    /**
+     * 分页查询标签列表
+     * @param options
+     */
     @Get()
+    @Guest()
     @SerializeOptions({})
     async list(
         @Query()
@@ -35,33 +31,14 @@ export class TagController {
         return this.service.paginate(options);
     }
 
+    /**
+     * 查询标签详情
+     * @param id
+     */
     @Get(':id')
+    @Guest()
     @SerializeOptions({})
     async detail(@Param('id', new ParseUUIDPipe()) id: string) {
         return this.service.detail(id);
     }
-
-    @Post()
-    @SerializeOptions({})
-    async store(
-        @Body()
-        data: CreateTagDto,
-    ) {
-        return this.service.create(data);
-    }
-
-    @Patch()
-    @SerializeOptions({})
-    async update(
-        @Body()
-        date: UpdateTagDto,
-    ) {
-        return this.service.update(date);
-    }
-
-    @Delete()
-    @SerializeOptions({})
-    async delete(@Body() data: DeleteDto) {
-        return this.service.delete(data.ids);
-    }
 }

src/modules/content/dtos/delete.dto.ts

@@ -1,4 +1,4 @@
-import { IsUUID, IsDefined } from 'class-validator';
+import { ArrayMinSize, IsArray, IsDefined, IsUUID } from 'class-validator';
 
 import { DtoValidation } from '@/modules/core/decorator/dto.validation.decorator';
 
@@ -6,5 +6,7 @@ import { DtoValidation } from '@/modules/core/decorator/dto.validation.decorator
 export class DeleteDto {
     @IsUUID(undefined, { each: true, always: true, message: 'The ID format is incorrect' })
     @IsDefined({ each: true, message: 'The ID must be specified' })
+    @IsArray()
+    @ArrayMinSize(1)
     ids: string[];
 }

src/modules/content/dtos/post.dto.ts

@@ -1,4 +1,4 @@
-import { PartialType } from '@nestjs/swagger';
+import { OmitType, PartialType } from '@nestjs/swagger';
 import { Transform } from 'class-transformer';
 
 import {
@@ -7,6 +7,7 @@ import {
     IsEnum,
     IsInt,
     IsNotEmpty,
+    IsNumber,
     IsOptional,
     IsUUID,
     MaxLength,
@@ -23,6 +24,8 @@ import { SelectTrashMode } from '@/modules/database/constants';
 import { IsDataExist } from '@/modules/database/constraints/data.exist.constraint';
 import { PaginateOptions } from '@/modules/database/types';
 
+import { UserEntity } from '@/modules/user/entities';
+
 import { CategoryEntity, PostEntity, TagEntity } from '../entities';
 
 /**
@@ -90,10 +93,23 @@ export class QueryPostDto implements PaginateOptions {
     @IsUUID(undefined, { message: 'The ID format is incorrect' })
     @IsOptional()
     tag?: string;
+
+    /**
+     * 根据文章作者ID查询
+     */
+    @IsDataExist(UserEntity, {
+        message: '指定的用户不存在',
+    })
+    @IsUUID(undefined, { message: '用户ID格式错误' })
+    @IsOptional()
+    author?: string;
 }
 
 @DtoValidation({ groups: ['create'] })
 export class CreatePostDto {
+    /**
+     * 文章标题
+     */
     @MaxLength(255, {
         always: true,
         message: 'The maximum length of the article title is $constraint1',
@@ -102,10 +118,16 @@ export class CreatePostDto {
     @IsOptional({ groups: ['update'] })
     title: string;
 
+    /**
+     * 文章内容
+     */
     @IsNotEmpty({ groups: ['create'], message: 'The content of the article must be filled in.' })
     @IsOptional({ groups: ['update'] })
     body: string;
 
+    /**
+     * 文章描述
+     */
     @MaxLength(500, {
         always: true,
         message: 'The maximum length of the article description is $constraint1',
@@ -113,12 +135,18 @@ export class CreatePostDto {
     @IsOptional({ always: true })
     summary?: string;
 
+    /**
+     * 是否发布(发布时间)
+     */
     @Transform(({ value }) => toBoolean(value))
     @IsBoolean({ always: true })
     @ValidateIf((value) => !isNil(value.publish))
     @IsOptional({ always: true })
     publish?: boolean;
 
+    /**
+     * SEO关键字
+     */
     @MaxLength(20, {
         always: true,
         each: true,
@@ -127,12 +155,18 @@ export class CreatePostDto {
     @IsOptional({ always: true })
     keywords?: string[];
 
+    /**
+     * 自定义排序
+     */
     @Transform(({ value }) => toNumber(value))
     @Min(0, { message: 'The sorted value must be greater than 0.', always: true })
     @IsInt({ always: true })
     @IsOptional({ always: true })
     customOrder?: number;
 
+    /**
+     * 所属分类ID
+     */
     @IsDataExist(CategoryEntity, { always: true, message: 'The category does not exist' })
     @IsUUID(undefined, {
         always: true,
@@ -141,6 +175,9 @@ export class CreatePostDto {
     @IsOptional({ always: true })
     category?: string;
 
+    /**
+     * 关联标签ID
+     */
     @IsDataExist(TagEntity, {
         always: true,
         each: true,
@@ -153,10 +190,30 @@ export class CreatePostDto {
     })
     @IsOptional({ always: true })
     tags?: string[];
+
+    /**
+     * 文章作者ID:可用于在管理员发布文章时分配给其它用户,如果不设置,则作者为当前管理员
+     */
+    @IsDataExist(UserEntity, {
+        always: true,
+        message: '用户不存在',
+    })
+    @IsUUID(undefined, {
+        always: true,
+        message: '用户ID格式不正确',
+    })
+    @IsOptional({ always: true })
+    author?: string;
 }
 
+/**
+ * 文章更新验证
+ */
 @DtoValidation({ groups: ['update'] })
 export class UpdatePostDto extends PartialType(CreatePostDto) {
+    /**
+     * 待更新ID
+     */
     @IsUUID(undefined, {
         groups: ['update'],
         message: 'The format of the article ID is incorrect.',
@@ -165,3 +222,45 @@ export class UpdatePostDto extends PartialType(CreatePostDto) {
     @IsDataExist(PostEntity, { groups: ['update'], message: 'post id not exist when update' })
     id: string;
 }
+
+/**
+ * 客户端查询文章列表验证
+ */
+@DtoValidation({ type: 'query' })
+export class FrontendQueryPostDto extends OmitType(QueryPostDto, ['isPublished', 'trashed']) {}
+
+/**
+ * 客户端创建文章验证
+ */
+@DtoValidation({ groups: ['create'] })
+export class FrontendCreatePostDto extends OmitType(CreatePostDto, ['author', 'customOrder']) {
+    /**
+     * 用户侧排序:文章在用户的文章管理而非后台中,列表的排序规则
+     */
+    @Transform(({ value }) => toNumber(value))
+    @Min(0, { always: true, message: '排序值必须大于0' })
+    @IsNumber(undefined, { always: true })
+    @IsOptional({ always: true })
+    userOrder?: number = 0;
+}
+
+/**
+ * 用户文章更新验证
+ */
+@DtoValidation({ groups: ['update'] })
+export class OwnerUpdatePostDto extends OmitType(UpdatePostDto, ['author', 'customOrder']) {
+    /**
+     * 用户侧排序:文章在用户的文章管理而非后台中,列表的排序规则
+     */
+    @Transform(({ value }) => toNumber(value))
+    @Min(0, { always: true, message: '排序值必须大于0' })
+    @IsNumber(undefined, { always: true })
+    @IsOptional({ always: true })
+    userOrder?: number = 0;
+}
+
+/**
+ * 用户查询自己的文章列表验证
+ */
+@DtoValidation({ type: 'query' })
+export class OwnerQueryPostDto extends OmitType(QueryPostDto, ['author']) {}

src/modules/content/entities/category.entity.ts

@@ -1,4 +1,5 @@
 import { Exclude, Expose, Type } from 'class-transformer';
+import type { Relation } from 'typeorm';
 import {
     BaseEntity,
     Column,
@@ -10,8 +11,6 @@ import {
     TreeParent,
 } from 'typeorm';
 
-import type { Relation } from 'typeorm';
-
 import { PostEntity } from '@/modules/content/entities/post.entity';
 
 @Exclude()

src/modules/content/entities/comment.entity.ts

@@ -1,4 +1,5 @@
 import { Exclude, Expose, Type } from 'class-transformer';
+import type { Relation } from 'typeorm';
 import {
     BaseEntity,
     Column,
@@ -11,9 +12,8 @@ import {
     TreeParent,
 } from 'typeorm';
 
-import type { Relation } from 'typeorm';
-
 import { PostEntity } from '@/modules/content/entities/post.entity';
+import { UserEntity } from '@/modules/user/entities/user.entity';
 
 @Exclude()
 @Entity('content_comment')
@@ -50,4 +50,11 @@ export class CommentEntity extends BaseEntity {
     @Expose({ groups: ['comment-tree'] })
     @TreeChildren({ cascade: true })
     children: Relation<CommentEntity>[];
+
+    @ManyToOne(() => UserEntity, (user) => user.comments, {
+        nullable: false,
+        onDelete: 'CASCADE',
+        onUpdate: 'CASCADE',
+    })
+    author: Relation<UserEntity>;
 }

src/modules/content/entities/post.entity.ts

@@ -1,4 +1,5 @@
 import { Exclude, Expose, Type } from 'class-transformer';
+import type { Relation } from 'typeorm';
 import {
     BaseEntity,
     Column,
@@ -13,12 +14,11 @@ import {
     UpdateDateColumn,
 } from 'typeorm';
 
-import type { Relation } from 'typeorm';
-
 import { PostBodyType } from '@/modules/content/constants';
 import { CategoryEntity } from '@/modules/content/entities/category.entity';
 import { CommentEntity } from '@/modules/content/entities/comment.entity';
 import { TagEntity } from '@/modules/content/entities/tag.entity';
+import { UserEntity } from '@/modules/user/entities/user.entity';
 
 @Exclude()
 @Entity('content_posts')
@@ -39,7 +39,6 @@ export class PostEntity extends BaseEntity {
     @Column({ comment: '文章描述', nullable: true })
     summary?: string;
 
-    @Expose()
     @Expose()
     @Column({ comment: '关键字', type: 'simple-array', nullable: true })
     keywords?: string[];
@@ -69,7 +68,7 @@ export class PostEntity extends BaseEntity {
     @Expose()
     @Type(() => Date)
     @DeleteDateColumn({ comment: '删除时间' })
-    deleteAt: Date;
+    deletedAt: Date;
 
     @Expose()
     commentCount: number;
@@ -89,4 +88,12 @@ export class PostEntity extends BaseEntity {
 
     @OneToMany(() => CommentEntity, (comment) => comment.post, { cascade: true })
     comments: Relation<CommentEntity>[];
+
+    @Expose()
+    @ManyToOne(() => UserEntity, (user) => user.posts, {
+        nullable: false,
+        onDelete: 'CASCADE',
+        onUpdate: 'CASCADE',
+    })
+    author: Relation<UserEntity>;
 }

src/modules/content/entities/tag.entity.ts

@@ -1,6 +1,6 @@
 import { Exclude, Expose } from 'class-transformer';
-import { Column, Entity, ManyToMany, PrimaryColumn } from 'typeorm';
 import type { Relation } from 'typeorm';
+import { Column, Entity, ManyToMany, PrimaryColumn } from 'typeorm';
 
 import { PostEntity } from '@/modules/content/entities/post.entity';
 

src/modules/content/rbac.ts

@@ -0,0 +1,120 @@
+import { Injectable, OnModuleInit } from '@nestjs/common';
+import { ModuleRef } from '@nestjs/core';
+
+import { CategoryEntity, CommentEntity, PostEntity, TagEntity } from '@/modules/content/entities';
+import { PermissionAction, SystemRoles } from '@/modules/rbac/constants';
+import { PermissionEntity, RoleEntity } from '@/modules/rbac/entities';
+import { RbacResolver } from '@/modules/rbac/rbac.resolver';
+import { UserEntity } from '@/modules/user/entities';
+
+@Injectable()
+export class ContentRbac implements OnModuleInit {
+    constructor(private ref: ModuleRef) {}
+    onModuleInit() {
+        const resolver = this.ref.get(RbacResolver, { strict: false });
+        resolver.addPermissions([
+            {
+                name: 'post.create',
+                rule: {
+                    action: PermissionAction.CREATE,
+                    subject: PostEntity,
+                },
+            },
+            {
+                name: 'post.owner',
+                rule: {
+                    action: PermissionAction.OWNER,
+                    subject: PostEntity,
+                    conditions: (user) => ({
+                        'author.id': user.id,
+                    }),
+                },
+            },
+            {
+                name: 'comment.create',
+                rule: {
+                    action: PermissionAction.CREATE,
+                    subject: CommentEntity,
+                },
+            },
+            {
+                name: 'comment.owner',
+                rule: {
+                    action: PermissionAction.OWNER,
+                    subject: CommentEntity,
+                    conditions: (user) => ({
+                        'author.id': user.id,
+                    }),
+                },
+            },
+            {
+                name: 'post.manage',
+                rule: {
+                    action: PermissionAction.MANAGE,
+                    subject: PostEntity,
+                },
+            },
+            {
+                name: 'tag.manage',
+                rule: {
+                    action: PermissionAction.MANAGE,
+                    subject: TagEntity,
+                },
+            },
+            {
+                name: 'category.manage',
+                rule: {
+                    action: PermissionAction.MANAGE,
+                    subject: CategoryEntity,
+                },
+            },
+            {
+                name: 'comment.manage',
+                rule: {
+                    action: PermissionAction.MANAGE,
+                    subject: CommentEntity,
+                },
+            },
+            {
+                name: 'permission.manage',
+                rule: {
+                    action: PermissionAction.MANAGE,
+                    subject: PermissionEntity,
+                },
+            },
+            {
+                name: 'role.manage',
+                rule: {
+                    action: PermissionAction.MANAGE,
+                    subject: RoleEntity,
+                },
+            },
+            {
+                name: 'user.manage',
+                rule: {
+                    action: PermissionAction.MANAGE,
+                    subject: UserEntity,
+                },
+            },
+        ]);
+
+        resolver.addRoles([
+            {
+                name: SystemRoles.USER,
+                permissions: [
+                    'post.read',
+                    'post.create',
+                    'post.owner',
+                    'comment.create',
+                    'comment.owner',
+                ],
+            },
+            {
+                name: 'content-manage',
+                label: '内容管理员',
+                description: '管理内容模块',
+                permissions: ['post.manage', 'category.manage', 'tag.manage', 'comment.manage'],
+            },
+        ]);
+    }
+}

src/modules/content/repositories/comment.repository.ts

@@ -8,6 +8,7 @@ import { QueryHook } from '@/modules/database/types';
 type FindCommentTreeOptions = FindTreeOptions & {
     addQuery?: QueryHook<CommentEntity>;
 };
+
 @CustomRepository(CommentEntity)
 export class CommentRepository extends BaseTreeRepository<CommentEntity> {
     protected _qbName = 'comment';

src/modules/content/repositories/post.repository.ts

@@ -11,12 +11,13 @@ export class PostRepository extends BaseRepository<PostEntity> {
         return this.createQueryBuilder(this.qbName)
             .leftJoinAndSelect(`${this.qbName}.category`, 'category')
             .leftJoinAndSelect(`${this.qbName}.tags`, 'tags')
+            .leftJoinAndSelect(`${this.qbName}.author`, 'author')
             .addSelect((query) => {
                 return query
                     .select('COUNT(c.id)', 'count')
                     .from(CommentEntity, 'c')
                     .where(`c.post.id = ${this.qbName}.id`);
             }, 'commentCount')
-            .loadRelationCountAndMap(`${this.qbName}.commentCOunt`, `${this.qbName}.comments`);
+            .loadRelationCountAndMap(`${this.qbName}.commentCount`, `${this.qbName}.comments`);
     }
 }

src/modules/content/routes.ts

@@ -0,0 +1,44 @@
+import { RouteOption, TagOption } from '@/modules/restful/types';
+
+import * as controllers from './controllers';
+import * as manageControllers from './controllers/manager';
+
+export const createContentApi = () => {
+    const routes: Record<'app' | 'manager', RouteOption[]> = {
+        app: [
+            {
+                name: 'app.content',
+                path: 'content',
+                controllers: Object.values(controllers),
+            },
+        ],
+        manager: [
+            {
+                name: 'manage.content',
+                path: 'content',
+                controllers: Object.values(manageControllers),
+            },
+        ],
+    };
+    const tags: Record<'app' | 'manager', Array<string | TagOption>> = {
+        app: [
+            { name: '分类查询', description: '查询分类信息' },
+            { name: '标签查询', description: '查询标签信息' },
+            {
+                name: '文章操作',
+                description: '查询文章以及对自己的文章进行CRUD操作',
+            },
+            {
+                name: '评论操作',
+                description: '查看评论以及对自己的评论进行CRD操作',
+            },
+        ],
+        manager: [
+            { name: '分类管理', description: '管理分类信息' },
+            { name: '标签管理', description: '管理标签信息' },
+            { name: '文章管理', description: '管理文章信息' },
+            { name: '评论管理', description: '管理评论信息' },
+        ],
+    };
+    return { routes, tags };
+};

src/modules/content/services/SanitizeService.ts

@@ -4,6 +4,7 @@ import { deepMerge } from '@/modules/core/helpers';
 
 export class SanitizeService {
     protected config: sanitizeHtml.IOptions = {};
+
     constructor() {
         this.config = {
             allowedTags: sanitizeHtml.defaults.allowedTags.concat(['img', 'code']),

src/modules/content/services/comment.service.ts

@@ -13,11 +13,14 @@ import { CommentEntity } from '@/modules/content/entities/comment.entity';
 import { CommentRepository, PostRepository } from '@/modules/content/repositories';
 import { BaseService } from '@/modules/database/base/service';
 import { treePaginate } from '@/modules/database/utils';
+import { UserEntity } from '@/modules/user/entities';
+import { UserRepository } from '@/modules/user/repositories';
 
 @Injectable()
 export class CommentService extends BaseService<CommentEntity, CommentRepository> {
     constructor(
         protected repository: CommentRepository,
+        protected userRepository: UserRepository,
         protected postRepository: PostRepository,
     ) {
         super(repository);
@@ -50,7 +53,7 @@ export class CommentService extends BaseService<CommentEntity, CommentRepository
         return treePaginate(query, comments);
     }
 
-    async create(data: CreateCommentDto) {
+    async create(data: CreateCommentDto, author: ClassToPlain<UserEntity>) {
         const parent = await this.getParent(undefined, data.parent);
         if (!isNil(parent) && parent.post.id !== data.post) {
             throw new ForbiddenException('Parent comment and child comment must belong same post!');
@@ -59,6 +62,7 @@ export class CommentService extends BaseService<CommentEntity, CommentRepository
             ...data,
             parent,
             post: await this.getPost(data.post),
+            author: await this.userRepository.findOneByOrFail({ id: author.id }),
         });
         return this.repository.findOneOrFail({
             where: { id: item.id },

src/modules/content/services/post.service.ts

@@ -5,7 +5,12 @@ import { isArray, isFunction, omit, pick } from 'lodash';
 import { EntityNotFoundError, In, IsNull, Not, SelectQueryBuilder } from 'typeorm';
 
 import { PostOrder } from '@/modules/content/constants';
-import { CreatePostDto, QueryPostDto, UpdatePostDto } from '@/modules/content/dtos/post.dto';
+import {
+    CreatePostDto,
+    FrontendCreatePostDto,
+    QueryPostDto,
+    UpdatePostDto,
+} from '@/modules/content/dtos/post.dto';
 import { PostEntity } from '@/modules/content/entities/post.entity';
 import { CategoryRepository } from '@/modules/content/repositories';
 import { PostRepository } from '@/modules/content/repositories/post.repository';
@@ -16,6 +21,10 @@ import { SelectTrashMode } from '@/modules/database/constants';
 import { QueryHook } from '@/modules/database/types';
 import { paginate } from '@/modules/database/utils';
 
+import { UserEntity } from '@/modules/user/entities';
+
+import { UserRepository } from '@/modules/user/repositories';
+
 import { TagRepository } from '../repositories/tag.repository';
 
 import { CategoryService } from './category.service';
@@ -33,6 +42,7 @@ export class PostService extends BaseService<PostEntity, PostRepository, FindPar
         protected categoryRepository: CategoryRepository,
         protected categoryService: CategoryService,
         protected tagRepository: TagRepository,
+        protected userRepository: UserRepository,
         protected searchService?: SearchService,
         protected searchType: SearchType = 'mysql',
     ) {
@@ -61,11 +71,19 @@ export class PostService extends BaseService<PostEntity, PostRepository, FindPar
         return item;
     }
 
-    async create(data: CreatePostDto) {
+    /**
+     * 创建文章
+     * @param data
+     * @param author
+     */
+    async create(data: CreatePostDto | FrontendCreatePostDto, author: ClassToPlain<UserEntity>) {
         let publishedAt: Date | null;
         if (!isNil(data.publish)) {
             publishedAt = data.publish ? new Date() : null;
         }
+        const authorId = isNil((data as CreatePostDto).author)
+            ? author.id
+            : (data as CreatePostDto).author;
         const createPostDto = {
             ...omit(data, ['publish']),
             category: isNil(data.category)
@@ -73,6 +91,7 @@ export class PostService extends BaseService<PostEntity, PostRepository, FindPar
                 : await this.categoryRepository.findOneOrFail({ where: { id: data.category } }),
             tags: isArray(data.tags) ? await this.tagRepository.findBy({ id: In(data.tags) }) : [],
             publishedAt,
+            author: await this.userRepository.findOneByOrFail({ id: authorId }),
         };
         const item = await this.repository.save(createPostDto);
         const result = await this.detail(item.id);
@@ -82,12 +101,20 @@ export class PostService extends BaseService<PostEntity, PostRepository, FindPar
         return result;
     }
 
+    /**
+     * 更新文章
+     * @param data
+     */
     async update(data: UpdatePostDto) {
         let publishedAt: Date | null;
         if (!isNil(data.publish)) {
             publishedAt = data.publish ? new Date() : null;
         }
         const post = await this.detail(data.id);
+        if (!isNil(data.author)) {
+            post.author = await this.userRepository.findOneByOrFail({ id: data.author });
+            await this.repository.save(post);
+        }
         if (data.category !== undefined) {
             post.category = isNil(data.category)
                 ? null
@@ -102,7 +129,7 @@ export class PostService extends BaseService<PostEntity, PostRepository, FindPar
                 .addAndRemove(data.tags, post.tags ?? []);
         }
         await this.repository.update(data.id, {
-            ...omit(data, ['id', 'publish', 'tags', 'category']),
+            ...omit(data, ['id', 'publish', 'tags', 'category', 'author']),
             publishedAt,
         });
         const result = await this.detail(data.id);
@@ -120,8 +147,8 @@ export class PostService extends BaseService<PostEntity, PostRepository, FindPar
             .getMany();
         let result: PostEntity[];
         if (trash) {
-            const directs = items.filter((item) => !isNil(item.deleteAt));
+            const directs = items.filter((item) => !isNil(item.deletedAt));
-            const softs = items.filter((item) => isNil(item.deleteAt));
+            const softs = items.filter((item) => isNil(item.deletedAt));
             result = [
                 ...(await this.repository.remove(directs)),
                 ...(await this.repository.softRemove(softs)),
@@ -145,7 +172,7 @@ export class PostService extends BaseService<PostEntity, PostRepository, FindPar
             .where('post.id IN (:...ids)', { ids })
             .withDeleted()
             .getMany();
-        const trashes = items.filter((item) => !isNil(item.deleteAt));
+        const trashes = items.filter((item) => !isNil(item.deletedAt));
         await this.searchService.update(trashes);
         const trashedIds = trashes.map((item) => item.id);
         if (trashedIds.length < 1) {
@@ -163,7 +190,7 @@ export class PostService extends BaseService<PostEntity, PostRepository, FindPar
         options: FindParams,
         callback?: QueryHook<PostEntity>,
     ) {
-        const { orderBy, isPublished, category, tag, trashed, search } = options;
+        const { orderBy, isPublished, category, tag, trashed, search, author } = options;
         if (typeof isPublished === 'boolean') {
             isPublished
                 ? qb.where({ publishedAt: Not(IsNull()) })
@@ -185,6 +212,9 @@ export class PostService extends BaseService<PostEntity, PostRepository, FindPar
         if (tag) {
             qb.where('tags.id = :id', { id: tag });
         }
+        if (author) {
+            qb.where('author.id = :id', { id: author });
+        }
         if (callback) {
             return callback(qb);
         }
@@ -225,6 +255,6 @@ export class PostService extends BaseService<PostEntity, PostRepository, FindPar
         const tree = await this.categoryRepository.findDescendantsTree(root);
         const flatDes = await this.categoryRepository.toFlatTrees(tree.children);
         const ids = [tree.id, ...flatDes.map((item) => item.id)];
-        return qb.where('categoryRepository.id IN (:...ids)', { ids });
+        return qb.where('category.id IN (:...ids)', { ids });
     }
 }

src/modules/content/services/search.service.ts

@@ -48,7 +48,7 @@ export class SearchService implements OnModuleInit {
     }
 
     async search(text: string, param: SearchOption = {}): Promise<any> {
-        const option = { page: 1, limit: 10, trashed: SelectTrashMode.ONLY, ...param };
+        const option = { page: 1, limit: 10, trashed: SelectTrashMode.NONE, ...param };
         const limit = isNil(option.limit) || option.limit < 1 ? 1 : option.limit;
         const page = isNil(option.page) || option.page < 1 ? 1 : option.page;
         let filter = ['deletedAt IS NULL'];
@@ -64,7 +64,7 @@ export class SearchService implements OnModuleInit {
             .index(this.index)
             .search(text, { page, limit, sort: ['updatedAt:desc', 'commentCount:desc'], filter });
         return {
-            item: result.hits,
+            items: result.hits,
             currentPage: result.page,
             perPage: result.hitsPerPage,
             totalItems: result.estimatedTotalHits,

src/modules/content/utils.ts

@@ -29,7 +29,7 @@ export async function getSearchItem(
                 'body',
                 'summary',
                 'commentCount',
-                'deleteAt',
+                'deletedAt',
                 'publishedAt',
                 'createdAt',
                 'updatedAt',

src/modules/core/config.ts

@@ -14,6 +14,7 @@ export const getDefaultAppConfig = (configure: Configure) => ({
     https: configure.env.get('APP_SSL', (v) => toBoolean(v), false),
     locale: configure.env.get('APP_LOCALE', 'zh_CN'),
     fallbackLocale: configure.env.get('APP_FALLBACK_LOCALE', 'en'),
+    timezone: configure.env.get('APP_TIMEZONE', 'Asia/Shanghai'),
 });
 
 export const createAppConfig: (

src/modules/core/constraints/match.constraint.ts

@@ -13,6 +13,7 @@ export class MatchConstraint implements ValidatorConstraintInterface {
         const relatedValue = (validationArguments.object as any)[relatedProperty];
         return (value === relatedValue) !== reverse;
     }
+
     defaultMessage?(validationArguments?: ValidationArguments): string {
         const [relatedProperty, reverse] = validationArguments.constraints;
         return `${relatedProperty} and ${validationArguments.property} ${
@@ -21,7 +22,7 @@ export class MatchConstraint implements ValidatorConstraintInterface {
     }
 }
 
-export function isMatch(
+export function IsMatch(
     relatedProperty: string,
     reverse = false,
     validationOptions?: ValidationOptions,

src/modules/core/constraints/password.constraint.ts

@@ -1,8 +1,8 @@
 import {
-    ValidationArguments,
-    ValidatorConstraintInterface,
-    ValidationOptions,
     registerDecorator,
+    ValidationArguments,
+    ValidationOptions,
+    ValidatorConstraintInterface,
 } from 'class-validator';
 
 type ModelType = 1 | 2 | 3 | 4 | 5;
@@ -30,6 +30,7 @@ export class PasswordConstraint implements ValidatorConstraintInterface {
                 return /\d/.test(value) && /[A-Za-z]/.test(value);
         }
     }
+
     defaultMessage?(validationArguments?: ValidationArguments): string {
         return "($value) 's format error";
     }

src/modules/core/contants.ts

@@ -1 +1,3 @@
 export const DTO_VALIDATION_OPTIONS = 'dto_validation_options';
+
+export const ADDTIONAL_RELATIONSHIPS = 'addtional_relationships';

src/modules/core/core.module.ts

@@ -1,4 +1,18 @@
-import { DynamicModule, Module } from '@nestjs/common';
+import { BullModule } from '@nestjs/bullmq';
+import { DynamicModule, Module, ModuleMetadata } from '@nestjs/common';
+
+import { isArray, isNil, omit } from 'lodash';
+
+import { RedisService, SmsService, SmtpService } from '@/modules/core/services';
+import type {
+    QueueOptions,
+    RedisOption,
+    RedisOptions,
+    SmsOptions,
+    SmtpOptions,
+} from '@/modules/core/types';
+
+import { createQueueOptions, createRedisOptions } from '@/options';
 
 import { Configure } from '../config/configure';
 
@@ -6,11 +20,56 @@ import { Configure } from '../config/configure';
 export class CoreModule {
     static async forRoot(configure: Configure): Promise<DynamicModule> {
         await configure.store('app.name');
+        const providers: ModuleMetadata['providers'] = [];
+        const exports: ModuleMetadata['exports'] = [];
+        let imports: ModuleMetadata['imports'] = [];
+        const redis: RedisOption[] | undefined = createRedisOptions(
+            await configure.get<RedisOptions>('redis'),
+        );
+        if (!isNil(redis)) {
+            providers.push({
+                provide: RedisService,
+                useFactory: () => {
+                    const service = new RedisService(redis);
+                    service.createClients();
+                    return service;
+                },
+            });
+            exports.push(RedisService);
+
+            const queues = createQueueOptions(await configure.get<QueueOptions>('queue'), redis);
+            if (!isNil(queues)) {
+                if (isArray(queues)) {
+                    imports = queues.map((v) => BullModule.forRoot(v.name, omit(v, 'name')));
+                } else {
+                    imports.push(BullModule.forRoot(queues));
+                }
+            }
+        }
+
+        const sms = await configure.get<SmsOptions>('sms');
+        if (!isNil(sms)) {
+            providers.push({
+                provide: SmsService,
+                useFactory: () => new SmsService(sms),
+            });
+            exports.push(SmsService);
+        }
+
+        const smtp = await configure.get<SmtpOptions>('smtp');
+        if (!isNil(smtp)) {
+            providers.push({
+                provide: SmtpService,
+                useFactory: () => new SmtpService(smtp),
+            });
+            exports.push(SmtpService);
+        }
         return {
             module: CoreModule,
             global: true,
-            providers: [],
+            providers,
-            exports: [],
+            exports,
+            imports,
         };
     }
 }

src/modules/core/decorator/dto.validation.decorator.ts

@@ -1,11 +1,11 @@
 import { Paramtype, SetMetadata } from '@nestjs/common';
-import { ClassTransformOptions } from 'class-transformer';
+import { ClassTransformOptions } from '@nestjs/common/interfaces/external/class-transform-options.interface';
-import { ValidationOptions } from 'class-validator';
+import { ValidatorOptions } from '@nestjs/common/interfaces/external/validator-options.interface';
 
 import { DTO_VALIDATION_OPTIONS } from '../contants';
 
 export const DtoValidation = (
-    options?: ValidationOptions & { transformOptions?: ClassTransformOptions } & {
+    options?: ValidatorOptions & { transformOptions?: ClassTransformOptions } & {
         type?: Paramtype;
     },
 ) => SetMetadata(DTO_VALIDATION_OPTIONS, options ?? {});

src/modules/core/decorator/dynamic.relationship.decorator.ts

@@ -0,0 +1,11 @@
+import { ObjectLiteral } from 'typeorm';
+
+import { ADDTIONAL_RELATIONSHIPS } from '../contants';
+import { DynamicRelation } from '../types';
+
+export function AddRelations(relations: () => Array<DynamicRelation>) {
+    return <T extends ObjectLiteral>(target: T) => {
+        Reflect.defineMetadata(ADDTIONAL_RELATIONSHIPS, relations, target);
+        return target;
+    };
+}

src/modules/core/filters/global-exception.filter.ts

@@ -0,0 +1,98 @@
+import {
+    ArgumentsHost,
+    Catch,
+    ExceptionFilter,
+    HttpException,
+    HttpStatus,
+    Logger,
+} from '@nestjs/common';
+import { FastifyReply, FastifyRequest } from 'fastify';
+import { QueryFailedError } from 'typeorm';
+
+@Catch()
+export class GlobalExceptionFilter implements ExceptionFilter {
+    private readonly logger = new Logger(GlobalExceptionFilter.name);
+
+    catch(exception: unknown, host: ArgumentsHost) {
+        const ctx = host.switchToHttp();
+        const request = ctx.getRequest<FastifyRequest>();
+        const response = ctx.getResponse<FastifyReply>();
+
+        let status = HttpStatus.INTERNAL_SERVER_ERROR;
+        let message = 'Internal server error';
+        let details: any = null;
+
+        // 记录完整的错误信息
+        this.logError(exception, request);
+
+        if (exception instanceof HttpException) {
+            status = exception.getStatus();
+            const exceptionResponse = exception.getResponse();
+            message =
+                typeof exceptionResponse === 'string'
+                    ? exceptionResponse
+                    : (exceptionResponse as any).message || exception.message;
+        } else if (exception instanceof QueryFailedError) {
+            // 专门处理 TypeORM 查询错误
+            status = HttpStatus.BAD_REQUEST;
+            message = 'Database query failed';
+            details = {
+                query: exception.query,
+                parameters: exception.parameters,
+                driverError: exception.driverError?.message,
+                sqlMessage: (exception as any).sqlMessage,
+                code: (exception as any).code,
+                errno: (exception as any).errno,
+            };
+        } else if (exception instanceof Error) {
+            message = exception.message;
+        }
+
+        const errorResponse = {
+            statusCode: status,
+            timestamp: new Date().toISOString(),
+            path: request.url,
+            method: request.method,
+            message,
+            ...(details && { details }),
+        };
+
+        response.status(status).send(errorResponse);
+    }
+
+    private logError(exception: unknown, request: FastifyRequest) {
+        const errorInfo = {
+            timestamp: new Date().toISOString(),
+            method: request.method,
+            url: request.url,
+            headers: request.headers,
+            body: request.body,
+            query: request.query,
+            params: request.params,
+        };
+
+        if (exception instanceof QueryFailedError) {
+            this.logger.error(`Database Query Failed: ${exception.message}`, {
+                ...errorInfo,
+                query: exception.query,
+                parameters: exception.parameters,
+                driverError: exception.driverError,
+                stack: exception.stack,
+                sqlMessage: (exception as any).sqlMessage,
+                code: (exception as any).code,
+                errno: (exception as any).errno,
+            });
+        } else if (exception instanceof Error) {
+            this.logger.error(`Unhandled Exception: ${exception.message}`, {
+                ...errorInfo,
+                stack: exception.stack,
+                name: exception.name,
+            });
+        } else {
+            this.logger.error('Unknown Exception', {
+                ...errorInfo,
+                exception,
+            });
+        }
+    }
+}

src/modules/core/helpers/app.ts

@@ -1,9 +1,9 @@
 import { BadGatewayException, Global, Module, ModuleMetadata, Type } from '@nestjs/common';
 
-import { APP_FILTER, APP_INTERCEPTOR, APP_PIPE } from '@nestjs/core';
+import { APP_FILTER, APP_GUARD, APP_INTERCEPTOR, APP_PIPE } from '@nestjs/core';
 import { useContainer } from 'class-validator';
 
-import { omit } from 'lodash';
+import { isNil, omit } from 'lodash';
 
 import { ConfigModule } from '@/modules/config/config.module';
 import { Configure } from '@/modules/config/configure';
@@ -85,6 +85,13 @@ export async function createBootModule(
         });
     }
 
+    if (!isNil(globals.guard)) {
+        providers.push({
+            provide: APP_GUARD,
+            useClass: globals.guard,
+        });
+    }
+
     return CreateModule('BootModule', () => ({
         imports,
         providers,

src/modules/core/helpers/time.ts

@@ -0,0 +1,30 @@
+import dayjs from 'dayjs';
+
+import advancedFormat from 'dayjs/plugin/advancedFormat';
+import customParseFormat from 'dayjs/plugin/customParseFormat';
+import dayOfYear from 'dayjs/plugin/dayOfYear';
+import localeData from 'dayjs/plugin/localeData';
+import timezone from 'dayjs/plugin/timezone';
+import utc from 'dayjs/plugin/utc';
+
+import { Configure } from '@/modules/config/configure';
+import { AppConfig, TimeOptions } from '@/modules/core/types';
+
+dayjs.extend(localeData);
+dayjs.extend(utc);
+dayjs.extend(advancedFormat);
+dayjs.extend(customParseFormat);
+dayjs.extend(dayOfYear);
+dayjs.extend(timezone);
+
+/**
+ * 获取一个dayjs时间对象
+ * @param configure
+ * @param options
+ */
+export async function getTime(configure: Configure, options?: TimeOptions) {
+    const { date, format, locale, strict, zonetime } = options ?? {};
+    const config = await configure.get<AppConfig>('app');
+    const now = dayjs(date, format, locale ?? config.locale, strict).clone();
+    return now.tz(zonetime ?? config.timezone);
+}

src/modules/core/helpers/utils.ts

@@ -88,3 +88,40 @@ export async function panic(option: PanicOption | string) {
         process.exit(1);
     }
 }
+
+/**
+ * 获取小于N的随机整数
+ * @param count
+ */
+export function getRandomIndex(count: number) {
+    return Math.floor(Math.random() * count);
+}
+
+/**
+ * 从列表中获取一个随机项
+ * @param list
+ */
+export function getRandomItemData<T extends RecordAny>(list: T[]) {
+    if (isNil(list) || list.length === 0) {
+        throw new Error('list is empty');
+    }
+    return list[getRandomIndex(list.length)];
+}
+
+/**
+ * 从列表中获取多个随机项组成一个新列表
+ * @param list
+ */
+export function getRandomListData<T extends RecordAny>(list: T[]) {
+    if (isNil(list) || list.length === 0) {
+        throw new Error('list is empty');
+    }
+    const result: T[] = [];
+    for (let i = 0; i < getRandomIndex(list.length); i++) {
+        const random = getRandomItemData(list);
+        if (!result.find((p) => p.id === random.id)) {
+            result.push(random);
+        }
+    }
+    return result.length === 0 ? [list[0]] : result;
+}

src/modules/core/services/index.ts

@@ -0,0 +1,3 @@
+export * from './redis.service';
+export * from './sms.service';
+export * from './smtp.service';

src/modules/core/services/redis.service.ts

@@ -0,0 +1,36 @@
+import { Injectable } from '@nestjs/common';
+
+import Redis from 'ioredis';
+
+import { isNil } from 'lodash';
+
+import { RedisOption } from '@/modules/core/types';
+
+@Injectable()
+export class RedisService {
+    protected options: RedisOption[];
+
+    protected clients: Record<string, Redis> = {};
+
+    constructor(protected _options: RedisOption[]) {
+        this.options = _options;
+    }
+
+    async createClients() {
+        this.options.map(async (option) => {
+            this.clients[option.name] = new Redis(option);
+        });
+    }
+
+    getClient(name?: string): Redis {
+        const key = isNil(name) ? 'default' : name;
+        if (this.clients[key]) {
+            return this.clients[key];
+        }
+        throw new Error(`Unknown client ${key}`);
+    }
+
+    getClients() {
+        return this.clients;
+    }
+}

src/modules/core/services/sms.service.ts

@@ -0,0 +1,71 @@
+import { Injectable } from '@nestjs/common';
+import * as tencentcloud from 'tencentcloud-sdk-nodejs';
+
+import { deepMerge } from '@/modules/core/helpers';
+import { SmsOptions, SmsSendParams } from '@/modules/core/types';
+
+const SmsClient = tencentcloud.sms.v20210111.Client;
+
+/**
+ * 腾讯云短信驱动
+ */
+@Injectable()
+export class SmsService {
+    /**
+     * 初始化配置
+     * @param options 短信发送选项
+     */
+    constructor(protected options: SmsOptions) {}
+
+    /**
+     * 创建短信发送驱动实例
+     * @param options 驱动选项
+     */
+    protected makeClient(options: SmsOptions) {
+        const { secretId, secretKey, region, endpoint } = options;
+        return new SmsClient({
+            credential: { secretId, secretKey },
+            region,
+            profile: {
+                httpProfile: { endpoint: endpoint ?? 'sms.tencentcloudapi.com' },
+            },
+        });
+    }
+
+    /**
+     * 转义通用发送参数为腾讯云短信服务发送参数
+     * @param params 发送参数
+     * @param options 驱动选项
+     */
+    protected transSendParams(params: SmsSendParams, options: SmsOptions) {
+        const { numbers, template, vars, appid, sign, ...others } = params;
+        let paramSet: RecordAny = {};
+        if (vars) {
+            paramSet = Object.fromEntries(
+                Object.entries(vars).map(([key, value]) => [key, value.toString()]),
+            );
+        }
+        return {
+            PhoneNumberSet: numbers.map((n) => {
+                const phone: string[] = n.split('.');
+                return `${phone[0]}${phone[1]}`;
+            }),
+            TemplateId: template,
+            SmsSdkAppId: appid ?? options.appid,
+            SignName: sign ?? options.sign,
+            TemplateParamSet: Object.values(paramSet),
+            ...(others ?? {}),
+        };
+    }
+
+    /**
+     * 合并配置并发送短信
+     * @param params 短信发送参数
+     * @param options 自定义驱动选项(可用于临时覆盖默认选项)
+     */
+    async send<T>(params: SmsSendParams & T, options?: SmsSendParams) {
+        const newOptions = deepMerge(this.options, options ?? {}) as SmsOptions;
+        const client = this.makeClient(newOptions);
+        return client.SendSms(this.transSendParams(params, newOptions));
+    }
+}

src/modules/core/services/smtp.service.ts

@@ -0,0 +1,93 @@
+import path from 'path';
+
+import { Injectable } from '@nestjs/common';
+
+import Email from 'email-templates';
+import { pick } from 'lodash';
+import mailer from 'nodemailer';
+import Mail from 'nodemailer/lib/mailer';
+import SMTPConnection from 'nodemailer/lib/smtp-connection';
+
+import { deepMerge } from '@/modules/core/helpers';
+import { SmtpOptions, SmtpSendParams } from '@/modules/core/types';
+
+/**
+ * SMTP邮件发送驱动
+ */
+@Injectable()
+export class SmtpService {
+    /**
+     * 初始化配置
+     * @param options
+     */
+    constructor(protected readonly options: SmtpOptions) {}
+
+    /**
+     * 合并配置并发送邮件
+     * @param params
+     * @param options
+     */
+    async send<T>(params: SmtpSendParams & T, options?: SmtpOptions) {
+        const newOptions = deepMerge(this.options, options ?? {}) as SmtpOptions;
+        const client = this.makeClient(newOptions);
+        return this.makeSend(client, params, newOptions);
+    }
+
+    /**
+     * 创建NodeMailer客户端
+     * @param options
+     */
+    protected makeClient(options: SmtpOptions) {
+        const { host, secure, user, password, port } = options;
+        const clientOptions: SMTPConnection.Options = {
+            host,
+            secure: secure ?? false,
+            auth: {
+                user,
+                pass: password,
+            },
+        };
+        if (!clientOptions.secure) {
+            clientOptions.port = port ?? 25;
+        }
+        return mailer.createTransport(clientOptions);
+    }
+
+    /**
+     * 转义通用发送参数为NodeMailer发送参数
+     * @param client
+     * @param params
+     * @param options
+     */
+    protected async makeSend(client: Mail, params: SmtpSendParams, options: SmtpOptions) {
+        const tplPath = path.resolve(options.resource, params.name ?? 'custom');
+        const textOnly = !params.html && params.text;
+        const noHtmlToText = params.html && params.text;
+        const configd: Email.EmailConfig = {
+            preview: params.preview ?? false,
+            send: !params.preview,
+            message: { from: params.from ?? options.from ?? options.user },
+            transport: client,
+            subjectPrefix: params.subjectPrefix,
+            textOnly,
+            juiceResources: {
+                preserveImportant: true,
+                webResources: {
+                    relativeTo: tplPath,
+                },
+            },
+        };
+        if (noHtmlToText) {
+            configd.htmlToText = false;
+        }
+        const email = new Email(configd);
+        const message = {
+            ...pick(params, ['from', 'to', 'reply', 'attachments', 'subject']),
+            locals: params.vars,
+        };
+        return email.send({
+            template: tplPath,
+            message,
+        });
+    }
+}

src/modules/core/types.ts

@@ -1,8 +1,17 @@
+/* eslint-disable @typescript-eslint/no-duplicate-type-constituents */
 import { ModuleMetadata, PipeTransform, Type } from '@nestjs/common';
+import { IAuthGuard } from '@nestjs/passport';
 import { NestFastifyApplication } from '@nestjs/platform-fastify';
 
+import { TypeOrmModuleOptions } from '@nestjs/typeorm';
+import { QueueOptions as BullMQOptions } from 'bullmq';
+import dayjs from 'dayjs';
+import Email from 'email-templates';
+import { RedisOptions as IORedisOptions } from 'ioredis';
+import { Attachment } from 'nodemailer/lib/mailer';
 import { Ora } from 'ora';
 import { StartOptions } from 'pm2';
+import { ManyToMany, ManyToOne, OneToMany, OneToOne } from 'typeorm';
 import { CommandModule } from 'yargs';
 
 import { Configure } from '../config/configure';
@@ -27,6 +36,11 @@ export interface CreateOptions {
         interceptor?: Type<any> | null;
 
         filter?: Type<any> | null;
+
+        /**
+         * 全局守卫
+         */
+        guard?: Type<IAuthGuard>;
     };
 
     providers?: ModuleMetadata['providers'];
@@ -53,10 +67,21 @@ export interface AppConfig {
 
     https: boolean;
 
+    /**
+     * 语言,默认zh-cn
+     */
     locale: string;
 
+    /**
+     * 备用语言
+     */
     fallbackLocale: string;
 
+    /**
+     * 时区,默认Asia/Shanghai
+     */
+    timezone: string;
+
     url?: string;
 
     prefix?: string;
@@ -64,6 +89,32 @@ export interface AppConfig {
     pm2?: Omit<StartOptions, 'name' | 'cwd' | 'script' | 'args' | 'interpreter' | 'watch'>;
 }
 
+/**
+ * 时间参数选项类型
+ */
+export interface TimeOptions {
+    /**
+     * 时间属性，如果不传入则获取当前属性
+     */
+    date?: dayjs.ConfigType;
+    /**
+     * 输出时间格式
+     */
+    format?: dayjs.OptionType;
+    /**
+     * 语言，如果不传入则使用app配置中设置的默认语言
+     */
+    locale?: string;
+    /**
+     * 是否开启严格模式
+     */
+    strict?: boolean;
+    /**
+     * 时区。如果不传入则使用app配置中设置的默认时区
+     */
+    zonetime?: string;
+}
+
 export interface PanicOption {
     message: string;
 
@@ -87,3 +138,121 @@ export type CommandCollection = Array<CommandItem<any, any>>;
 export interface CreateOption {
     commands: () => CommandCollection;
 }
+
+export interface DynamicRelation {
+    relation:
+        | ReturnType<typeof OneToOne>
+        | ReturnType<typeof OneToMany>
+        | ReturnType<typeof ManyToOne>
+        | ReturnType<typeof ManyToMany>;
+    column: string;
+}
+
+/**
+ * 嵌套对象
+ */
+export type NestedRecord = Record<string, RecordAny>;
+
+/**
+ * core模块参数选项
+ */
+export interface CoreOptions {
+    database?: () => TypeOrmModuleOptions;
+    sms?: () => SmsOptions;
+    smtp?: () => SmtpOptions;
+    redis?: () => RedisOptions;
+    queue?: () => QueueOptions;
+}
+/**
+ * 腾讯云短信驱动配置
+ */
+export type SmsOptions<T extends NestedRecord = RecordNever> = {
+    secretId: string;
+    secretKey: string;
+    sign: string;
+    appid: string;
+    region: string;
+    endpoint?: string;
+} & T;
+
+/**
+ * 发送接口参数
+ */
+export interface SmsSendParams {
+    appid?: string;
+    numbers: string[];
+    template: string;
+    sign?: string;
+    endpoint?: string;
+    vars?: Record<string, any>;
+    ExtendCode?: string;
+    SessionContext?: string;
+    SenderId?: string;
+}
+
+/**
+ * SMTP邮件发送配置
+ */
+export type SmtpOptions<T extends NestedRecord = RecordNever> = {
+    host: string;
+    user: string;
+    password: string;
+    // Email模板总路径
+    resource: string;
+    from?: string;
+    port?: number;
+    secure?: boolean;
+} & T;
+
+/**
+ * 公共发送接口配置
+ */
+export interface SmtpSendParams {
+    // 模板名称
+    name?: string;
+    // 发信地址
+    from?: string;
+    // 主题
+    subject?: string;
+    // 目标地址
+    to: string | string[];
+    // 回信地址
+    reply?: string;
+    // 是否加载html模板
+    html?: boolean;
+    // 是否加载text模板
+    text?: boolean;
+    // 模板变量
+    vars?: Record<string, any>;
+    // 是否预览
+    preview?: boolean | Email.PreviewEmailOpts;
+    // 主题前缀
+    subjectPrefix?: string;
+    // 附件
+    attachments?: Attachment[];
+}
+
+/**
+ * Redis连接配置
+ */
+export type RedisOption = Omit<IORedisOptions, 'name'> & { name: string };
+
+/**
+ * Redis配置
+ */
+export type RedisOptions = IORedisOptions | Array<RedisOption>;
+
+/**
+ * 队列项配置
+ */
+export type QueueOption = Omit<BullMQOptions, 'connection'> & { redis?: string };
+
+/**
+ * 队列配置
+ */
+export type QueueOptions = QueueOption | Array<{ name: string } & QueueOption>;
+
+/**
+ * BullMQ模块注册配置
+ */
+export type BullOptions = BullMQOptions | Array<{ name: string } & BullMQOptions>;

src/modules/database/base/BaseSeeder.ts

@@ -0,0 +1,96 @@
+import { isNil } from 'lodash';
+import { Ora } from 'ora';
+
+import { DataSource, EntityManager, EntityTarget, ObjectLiteral } from 'typeorm';
+
+import { Configure } from '@/modules/config/configure';
+import { panic } from '@/modules/core/helpers';
+import {
+    DBFactory,
+    Seeder,
+    SeederConstructor,
+    SeederLoadParams,
+    SeederOptions,
+} from '@/modules/database/commands/types';
+import { DBFactoryOption, DBOptions } from '@/modules/database/types';
+import { factoryBuilder } from '@/modules/database/utils';
+
+/**
+ * 数据填充基类
+ */
+export abstract class BaseSeeder implements Seeder {
+    protected connection: string;
+    protected dataSource: DataSource;
+    protected em: EntityManager;
+    protected configure: Configure;
+    protected ignoreLock: boolean;
+    protected truncates: EntityTarget<ObjectLiteral>[] = [];
+    protected factories: { [entityName: string]: DBFactoryOption<any, any> };
+
+    constructor(
+        protected readonly spinner: Ora,
+        protected readonly args: SeederOptions,
+    ) {}
+
+    /**
+     * 清空原数据并重新加载数据
+     * @param params
+     */
+    async load(params: SeederLoadParams): Promise<any> {
+        const { connection, dataSource, em, configure, ignoreLock, factory, factories } = params;
+        this.connection = connection;
+        this.dataSource = dataSource;
+        this.em = em;
+        this.configure = configure;
+        this.ignoreLock = ignoreLock;
+        this.factories = factories;
+
+        if (this.ignoreLock) {
+            for (const option of this.truncates) {
+                await this.em.clear(option);
+            }
+        }
+
+        return this.run(factory, this.dataSource);
+    }
+
+    /**
+     * 运行seeder的关键方法
+     * @param factory
+     * @param dataSource
+     * @param em
+     * @protected
+     */
+    protected abstract run(
+        factory?: DBFactory,
+        dataSource?: DataSource,
+        em?: EntityManager,
+    ): Promise<any>;
+
+    protected async getDBConfig() {
+        const { connections = [] }: DBOptions = await this.configure.get<DBOptions>('database');
+        const dbConfig = connections.find(({ name }) => name === this.connection);
+        if (isNil(dbConfig)) {
+            await panic(`Database connection named ${this.connection} not exists!`);
+        }
+        return dbConfig;
+    }
+
+    /**
+     * 运行子seeder
+     * @param SubSeeder
+     * @protected
+     */
+    protected async call(SubSeeder: SeederConstructor) {
+        const subSeeder: Seeder = new SubSeeder(this.spinner, this.args);
+        await subSeeder.load({
+            connection: this.connection,
+            dataSource: this.dataSource,
+            em: this.em,
+            configure: this.configure,
+            ignoreLock: this.ignoreLock,
+            factories: this.factories,
+            factory: factoryBuilder(this.configure, this.dataSource, this.factories),
+        });
+    }
+}

src/modules/database/base/service.ts

@@ -83,7 +83,7 @@ export abstract class BaseService<
 
     async detail(id: string, callback?: QueryHook<T>) {
         const qb = await this.buildItemQB(id, this.repository.buildBaseQB(), callback);
-        const item = qb.getOne();
+        const item = await qb.getOne();
         if (!item) {
             throw new NotFoundException(`${this.repository.qbName} ${id} NOT FOUND`);
         }

src/modules/database/base/subscriber.ts

@@ -18,6 +18,8 @@ import {
     UpdateEvent,
 } from 'typeorm';
 
+import { LoadEvent } from 'typeorm/subscriber/event/LoadEvent';
+
 import { Configure } from '@/modules/config/configure';
 
 import { app } from '@/modules/core/helpers/app';
@@ -41,7 +43,7 @@ export abstract class BaseSubscriber<T extends ObjectLiteral>
 {
     protected abstract entity: ObjectType<T>;
 
-    protected constructor(
+    constructor(
         @Optional() protected dataSource?: DataSource,
         @Optional() protected _configure?: Configure,
     ) {
@@ -72,7 +74,7 @@ export abstract class BaseSubscriber<T extends ObjectLiteral>
         return this.entity;
     }
 
-    async afterLoad(entity: any) {
+    async afterLoad(entity: any, event?: LoadEvent<T>) {
         if ('parent' in entity && isNil(entity.depth)) {
             entity.depth = 0;
         }

src/modules/database/commands/index.ts

@@ -2,3 +2,4 @@ export * from './migration.create.command';
 export * from './migration.revert.command';
 export * from './migration.generate.command';
 export * from './migration.run.command';
+export * from './seeder.command';

src/modules/database/commands/migration.generate.handler.ts

@@ -30,6 +30,7 @@ export async function MigrationGenerateHandler(
         }
         console.log();
         const runner = new TypeormMigrationGenerate();
+        console.log('dbConfig', dbConfig);
         const dataSource = new DataSource({ ...dbConfig } as DataSourceOptions);
         console.log();
         await runner.handler({

src/modules/database/commands/seeder.command.ts

@@ -0,0 +1,36 @@
+import { Arguments } from 'yargs';
+
+import { CommandItem } from '@/modules/core/types';
+import { SeederHandler } from '@/modules/database/commands/seeder.handler';
+import { SeederArguments } from '@/modules/database/commands/types';
+
+export const SeederCommand: CommandItem<any, SeederArguments> = async ({ configure }) => ({
+    command: ['db:seed', 'dbs'],
+    describe: 'Runs all seeds data.',
+    builder: {
+        clear: {
+            type: 'boolean',
+            alias: 'r',
+            describe: 'Clear which tables will truncated specified by seeder class.',
+            default: true,
+        },
+        connection: {
+            type: 'string',
+            alias: 'c',
+            describe: 'Connection name of typeorm to connect database.',
+        },
+        transaction: {
+            type: 'boolean',
+            alias: 't',
+            describe: 'If is seed data in transaction,default is true',
+            default: true,
+        },
+        ignorelock: {
+            type: 'boolean',
+            alias: 'i',
+            describe: 'Ignore seed lock and reset all seeds, not do it in production',
+            default: false,
+        },
+    } as const,
+    handler: async (args: Arguments<SeederArguments>) => SeederHandler(configure, args),
+});

src/modules/database/commands/seeder.handler.ts

@@ -0,0 +1,29 @@
+import chalk from 'chalk';
+import { isNil } from 'lodash';
+
+import ora from 'ora';
+
+import { Configure } from '@/modules/config/configure';
+import { panic } from '@/modules/core/helpers';
+import { SeederOptions } from '@/modules/database/commands/types';
+import { DBOptions } from '@/modules/database/types';
+import { runSeeder } from '@/modules/database/utils';
+
+export async function SeederHandler(configure: Configure, args: SeederOptions) {
+    const cname = args.connection ?? 'default';
+    const { connections = [] }: DBOptions = await configure.get<DBOptions>('database');
+    const dbConfig = connections.find(({ name }) => name === cname);
+    if (isNil(dbConfig)) {
+        await panic(`Database connection named ${cname} not exists!`);
+    }
+
+    const runner = dbConfig.seedRunner;
+    const spinner = ora('Start run seeder...');
+    try {
+        spinner.start();
+        await runSeeder(runner, args, spinner, configure, dbConfig);
+        spinner.succeed(`\n 👍 ${chalk.greenBright.underline(`Finished Seeding`)}`);
+    } catch (error) {
+        await panic({ spinner, message: `Run seeder failed`, error });
+    }
+}

src/modules/database/commands/typeorm.migration.create.ts

@@ -22,9 +22,8 @@ export class TypeormMigrationCreate {
             const fileName = `${timestamp}-${args.name}`;
             const filePath = `${directory}/${fileName}`;
             await CommandUtils.createFile(`${filePath}.ts`, fileContent);
-            console.log(
+            console.log();
-                `Migration ${chalk.blue(`${filePath}.ts`)} has been generated successfully.`,
+            console.log(`Migration ${chalk.blue(`${filePath}.ts`)} has been created successfully.`);
-            );
         } catch (e) {
             PlatformTools.logCmdErr('Error during migration creation:', e);
             process.exit(1);

src/modules/database/commands/typeorm.migration.generate.ts

@@ -96,7 +96,7 @@ export class TypeormMigrationGenerate {
                 );
             } else {
                 await CommandUtils.createFile(filePath, fileContent);
-
+                console.log();
                 console.log(
                     chalk.green(
                         `Migration ${chalk.blue(filePath)} has been generated successfully.`,

src/modules/database/commands/types.ts

@@ -1,5 +1,11 @@
+import { Ora } from 'ora';
+import { DataSource, EntityManager, EntityTarget } from 'typeorm';
 import { Arguments } from 'yargs';
 
+import { Configure } from '@/modules/config/configure';
+import { DataFactory } from '@/modules/database/resolver/data.factory';
+import { DBFactoryOption } from '@/modules/database/types';
+
 /**
  * 基础数据库命令参数类型
  */
@@ -60,3 +66,97 @@ export interface MigrationRevertOptions {
  * 恢复迁移的命令参数
  */
 export type MigrationRevertArguments = TypeOrmArguments & MigrationRevertOptions;
+
+/**
+ * 数据填充处理器选项
+ */
+export interface SeederOptions {
+    /**
+     * 数据库连接名称
+     */
+    connection?: string;
+    /**
+     * 是否通过事务来运行填充
+     */
+    transaction?: boolean;
+    /**
+     * 是否忽略已经被执行过的填充类
+     */
+    ignorelock?: boolean;
+}
+
+/**
+ * 数据填充类接口
+ */
+export interface SeederConstructor {
+    new (spinner: Ora, args: SeederOptions): Seeder;
+}
+
+/**
+ * 数据填充类方法对象
+ */
+export interface Seeder {
+    load: (params: SeederLoadParams) => Promise<void>;
+}
+
+/**
+ * 数据填充类的load函数参数
+ */
+export interface SeederLoadParams {
+    /**
+     * 数据库连接名称
+     */
+    connection: string;
+    /**
+     * 数据库连接
+     */
+    dataSource: DataSource;
+    /**
+     * EntityManager实例
+     */
+    em: EntityManager;
+    /**
+     * 项目配置类
+     */
+    configure: Configure;
+    /**
+     * 是否忽略锁定
+     */
+    ignoreLock: boolean;
+    /**
+     * Factory解析器
+     */
+    factory?: DBFactory;
+    /**
+     * Factory函数列表
+     */
+    factories: FactoryOptions;
+}
+
+/**
+ * 数据填充命令参数
+ */
+export type SeederArguments = TypeOrmArguments & SeederOptions;
+
+/**
+ * Factory解析器
+ */
+export interface DBFactory {
+    <P>(entity: EntityTarget<P>): <T>(options?: T) => DataFactory<P, T>;
+}
+
+/**
+ * 数据填充函数映射对象
+ */
+export type FactoryOptions = {
+    [entityName: string]: DBFactoryOption<any, any>;
+};
+
+/**
+ * Factory构造器
+ */
+export type DBFactoryBuilder = (
+    configure: Configure,
+    dataSource: DataSource,
+    factories: { [entityName: string]: DBFactoryOption<any, any> },
+) => DBFactory;

src/modules/database/config.ts

@@ -1,5 +1,7 @@
 import { resolve } from 'path';
 
+import { SeederRunner } from '@/modules/database/resolver/seeder.runner';
+
 import { ConfigureFactory, ConfigureRegister } from '../config/types';
 import { createConnectionOptions } from '../config/utils';
 import { deepMerge } from '../core/helpers';
@@ -12,7 +14,13 @@ export const createDBConfig: (
     register,
     hook: (configure, value) => createDBOptions(value),
     defaultRegister: () => ({
-        common: { charset: 'utf8mb4', logging: ['error'] },
+        common: {
+            charset: 'utf8mb4',
+            logging: ['error'],
+            seeders: [],
+            seedRunner: SeederRunner,
+            factories: [],
+        },
         connections: [],
     }),
 });
@@ -23,6 +31,7 @@ export const createDBOptions = (options: DBConfig) => {
             {
                 charset: 'utf8mb4',
                 logging: ['error'],
+                autoMigrate: true,
                 paths: { migration: resolve(__dirname, '../../database/migrations') },
             },
             options.common ?? {},

src/modules/database/constraints/data.exist.constraint.ts

@@ -1,13 +1,13 @@
 import { Injectable } from '@nestjs/common';
 import {
+    registerDecorator,
     ValidationArguments,
+    ValidationOptions,
     ValidatorConstraint,
     ValidatorConstraintInterface,
-    ValidationOptions,
-    registerDecorator,
 } from 'class-validator';
 import { isArray, isNil } from 'lodash';
-import { ObjectType, Repository, DataSource } from 'typeorm';
+import { DataSource, ObjectType, Repository } from 'typeorm';
 
 type Condition = {
     entity: ObjectType<any>;
@@ -52,6 +52,7 @@ export class DataExistConstraint implements ValidatorConstraintInterface {
         const item = await repo.findOne({ where: { [map]: value } });
         return !!item;
     }
+
     defaultMessage?(validationArguments?: ValidationArguments): string {
         if (!validationArguments.constraints[0]) {
             return 'Model not been specified!';

src/modules/database/constraints/tree.unique.constraint.ts

@@ -1,12 +1,12 @@
 import { Injectable } from '@nestjs/common';
 import {
+    registerDecorator,
+    ValidationArguments,
+    ValidationOptions,
     ValidatorConstraint,
     ValidatorConstraintInterface,
-    ValidationArguments,
-    registerDecorator,
-    ValidationOptions,
 } from 'class-validator';
-import { merge, isNil } from 'lodash';
+import { isNil, merge } from 'lodash';
 import { DataSource, ObjectType } from 'typeorm';
 
 type Condition = {

src/modules/database/constraints/tree.unique.exist.constraint.ts

@@ -21,7 +21,7 @@ type Condition = {
 
 @ValidatorConstraint({ name: 'treeDataUniqueExist', async: true })
 @Injectable()
-export class TreeUniqueExistContraint implements ValidatorConstraintInterface {
+export class TreeUniqueExistConstraint implements ValidatorConstraintInterface {
     constructor(private dataSource: DataSource) {}
 
     async validate(value: any, args: ValidationArguments) {
@@ -93,7 +93,7 @@ export function IsTreeUniqueExist(
             propertyName,
             options: validationOptions,
             constraints: [params],
-            validator: TreeUniqueExistContraint,
+            validator: TreeUniqueExistConstraint,
         });
     };
 }

src/modules/database/constraints/unique.constraint.ts

@@ -2,9 +2,9 @@ import { Injectable } from '@nestjs/common';
 import {
     registerDecorator,
     ValidationArguments,
+    ValidationOptions,
     ValidatorConstraint,
     ValidatorConstraintInterface,
-    ValidationOptions,
 } from 'class-validator';
 import { isNil, merge } from 'lodash';
 import { DataSource, ObjectType } from 'typeorm';
@@ -20,6 +20,9 @@ export class UniqueConstraint implements ValidatorConstraintInterface {
     constructor(private dataSource: DataSource) {}
 
     async validate(value: any, validationArguments?: ValidationArguments): Promise<boolean> {
+        if (isNil(value)) {
+            return true;
+        }
         const config: Omit<Condition, 'entity'> = { property: validationArguments.property };
         const condition = ('entity' in validationArguments.constraints[0]
             ? merge(config, validationArguments.constraints[0])
@@ -39,6 +42,7 @@ export class UniqueConstraint implements ValidatorConstraintInterface {
             return false;
         }
     }
+
     defaultMessage?(validationArguments?: ValidationArguments): string {
         const { entity, property } = validationArguments.constraints[0];
         const queryProperty = property ?? validationArguments.property;

src/modules/database/constraints/unique.exist.constraint.ts

@@ -18,6 +18,7 @@ type Condition = {
 
     property?: string;
 };
+
 @Injectable()
 @ValidatorConstraint({ name: 'dataUniqueExist', async: true })
 export class UniqueExistConstraint implements ValidatorConstraintInterface {
@@ -48,6 +49,7 @@ export class UniqueExistConstraint implements ValidatorConstraintInterface {
             }),
         );
     }
+
     defaultMessage?(args?: ValidationArguments): string {
         const { entity, property } = args.constraints[0];
         const queryProperty = property ?? args.property;

src/modules/database/database.module.ts

@@ -5,6 +5,8 @@ import { DataSource, ObjectType } from 'typeorm';
 
 import { CUSTOM_REPOSITORY_METADATA } from '@/modules/database/constants';
 
+import { AutoMigrateResolver } from '@/modules/database/resolver/auto.migrate';
+
 import { Configure } from '../config/configure';
 
 import { panic } from '../core/helpers';
@@ -12,7 +14,7 @@ import { panic } from '../core/helpers';
 import {
     DataExistConstraint,
     TreeUniqueConstraint,
-    TreeUniqueExistContraint,
+    TreeUniqueExistConstraint,
     UniqueConstraint,
     UniqueExistConstraint,
 } from './constraints';
@@ -22,7 +24,7 @@ import { DBOptions } from './types';
 export class DatabaseModule {
     static async forRoot(configure: Configure): Promise<DynamicModule> {
         if (!configure.has('database')) {
-            panic({ message: 'Database config not exists' });
+            await panic({ message: 'Database config not exists' });
         }
         const { connections } = await configure.get<DBOptions>('database');
         const imports: ModuleMetadata['imports'] = [];
@@ -34,7 +36,8 @@ export class DatabaseModule {
             UniqueConstraint,
             UniqueExistConstraint,
             TreeUniqueConstraint,
-            TreeUniqueExistContraint,
+            TreeUniqueExistConstraint,
+            AutoMigrateResolver,
         ];
         return {
             global: true,
@@ -43,6 +46,7 @@ export class DatabaseModule {
             providers,
         };
     }
+
     static forRepository<T extends Type<any>>(
         repositories: T[],
         datasourceName?: string,

src/modules/database/factories/content.data.ts

@@ -0,0 +1,134 @@
+export interface PostData {
+    title: string;
+    contentFile: string;
+    summary?: string;
+    category?: string;
+    tags?: string[];
+}
+
+export interface CategoryData {
+    name: string;
+    children?: CategoryData[];
+}
+
+export interface TagData {
+    name: string;
+}
+
+export interface ContentConfig {
+    fixture?: {
+        categories: CategoryData[];
+        posts: PostData[];
+    };
+}
+
+export const posts: PostData[] = [
+    {
+        title: '基于角色和属性的Node.js访问控制',
+        contentFile: 'rbac.md',
+        category: '后端',
+        tags: ['node'],
+    },
+    {
+        title: 'docker简介',
+        contentFile: 'docker-introduce.md',
+        category: '运维',
+        tags: ['devops'],
+    },
+    {
+        title: 'go协程入门',
+        contentFile: 'goroutings.md',
+        category: '后端',
+        tags: ['go'],
+    },
+    {
+        title: '基于lerna.js构建monorepo',
+        contentFile: 'lerna.md',
+        category: '后端',
+        tags: ['ts'],
+    },
+    {
+        title: '通过PHP理解IOC编程',
+        contentFile: 'php-di.md',
+        category: '后端',
+        tags: ['php'],
+    },
+    {
+        title: '玩转React Hooks',
+        contentFile: 'react-hooks.md',
+        category: '前端',
+        tags: ['react'],
+    },
+    {
+        title: 'TypeORM fixtures cli中文说明',
+        contentFile: 'typeorm-fixtures-cli.md',
+        category: '后端',
+        tags: ['ts', 'node'],
+    },
+    {
+        title: '使用yargs构建node命令行(翻译)',
+        contentFile: 'yargs.md',
+        category: '后端',
+        tags: ['ts', 'node'],
+    },
+    {
+        title: 'Typescript装饰器详解',
+        summary:
+            '装饰器用于给类,方法,属性以及方法参数等增加一些附属功能而不影响其原有特性。其在Typescript应用中的主要作用类似于Java中的注解,在AOP(面向切面编程)使用场景下非常有用',
+        contentFile: 'typescript-decorator.md',
+        category: '基础',
+        tags: ['ts'],
+    },
+];
+
+export const categories: CategoryData[] = [
+    {
+        name: '技术文档',
+        children: [
+            {
+                name: '基础',
+            },
+            {
+                name: '前端',
+            },
+            {
+                name: '后端',
+            },
+            {
+                name: '运维',
+            },
+        ],
+    },
+    {
+        name: '随笔记忆',
+        children: [
+            {
+                name: '工作历程',
+            },
+            {
+                name: '网站收藏',
+            },
+        ],
+    },
+];
+
+export const tags: TagData[] = [
+    {
+        name: 'ts',
+    },
+    {
+        name: 'react',
+    },
+    {
+        name: 'node',
+    },
+    {
+        name: 'go',
+    },
+    {
+        name: 'php',
+    },
+    {
+        name: 'devops',
+    },
+];

src/modules/database/factories/content.factory.ts

@@ -0,0 +1,44 @@
+// eslint-disable-next-line import/no-extraneous-dependencies
+import * as fakerjs from '@faker-js/faker';
+
+import { Configure } from '@/modules/config/configure';
+import { CategoryEntity, CommentEntity, PostEntity, TagEntity } from '@/modules/content/entities';
+import { getTime } from '@/modules/core/helpers/time';
+import { defineFactory, getFakerLocales } from '@/modules/database/utils';
+
+export type IPostFactoryOptions = Partial<{
+    title: string;
+    summary: string;
+    body: string;
+    isPublished: boolean;
+    category: CategoryEntity;
+    tags: TagEntity[];
+    comments: CommentEntity[];
+}>;
+
+export const ContentFactory = defineFactory(
+    PostEntity,
+    async (configure: Configure, options: IPostFactoryOptions) => {
+        const faker = new fakerjs.Faker({ locale: await getFakerLocales(configure) });
+        const post = new PostEntity();
+        const { title, summary, body, category, tags } = options;
+        post.title = title ?? faker.lorem.sentence(Math.floor(Math.random() * 10) + 6);
+        if (summary) {
+            post.summary = summary;
+        }
+        post.body = body ?? faker.lorem.paragraph(Math.floor(Math.random() * 500) + 1);
+        if (Math.random() > 0.5) {
+            post.publishedAt = (await getTime(configure)).toDate();
+        }
+        if (Math.random() > 0.5) {
+            post.deletedAt = (await getTime(configure)).toDate();
+        }
+        if (category) {
+            post.category = category;
+        }
+        if (tags) {
+            post.tags = tags;
+        }
+        return post;
+    },
+);

src/modules/database/resolver/auto.migrate.ts

@@ -0,0 +1,52 @@
+import { join } from 'path';
+
+import { Injectable, OnModuleInit } from '@nestjs/common';
+import { ModuleRef } from '@nestjs/core';
+
+import { DataSource, DataSourceOptions } from 'typeorm';
+
+import { Configure } from '@/modules/config/configure';
+import { panic } from '@/modules/core/helpers';
+import { TypeormMigrationRun } from '@/modules/database/commands/typeorm.migration.run';
+import { DBOptions } from '@/modules/database/types';
+
+@Injectable()
+export class AutoMigrateResolver implements OnModuleInit {
+    constructor(private ref: ModuleRef) {}
+
+    async onModuleInit() {
+        const configure = this.ref.get(Configure, { strict: false });
+        const { connections = [] }: DBOptions = await configure.get<DBOptions>('database');
+        for (const conn of connections) {
+            let dataSource: DataSource | undefined;
+            if (conn.autoMigrate) {
+                try {
+                    dataSource = new DataSource(conn as DataSourceOptions);
+                    const runner = new TypeormMigrationRun();
+                    if (dataSource && dataSource.isInitialized) {
+                        await dataSource.destroy();
+                    }
+                    dataSource.setOptions({
+                        subscribers: [],
+                        synchronize: false,
+                        migrationsRun: false,
+                        logging: ['error'],
+                        migrations: [
+                            join(conn.paths.migration, '**/*.ts'),
+                            join(conn.paths.migration, '**/*.js'),
+                        ],
+                        dropSchema: false,
+                    });
+                    await dataSource.initialize();
+                    await runner.handler({ dataSource });
+                } catch (error) {
+                    await panic({ message: 'Run migrations failed!', error });
+                } finally {
+                    if (dataSource && dataSource.isInitialized) {
+                        await dataSource.destroy();
+                    }
+                }
+            }
+        }
+    }
+}

src/modules/database/resolver/data.factory.ts

@@ -0,0 +1,108 @@
+import { isPromise } from 'node:util/types';
+
+import { isNil } from 'lodash';
+import { EntityManager, EntityTarget } from 'typeorm';
+
+import { Configure } from '@/modules/config/configure';
+import { panic } from '@/modules/core/helpers';
+import { DBFactoryHandler, FactoryOverride } from '@/modules/database/types';
+
+export class DataFactory<P, T> {
+    private mapFunction!: (entity: P) => Promise<P>;
+
+    constructor(
+        public name: string,
+        public configure: Configure,
+        public entity: EntityTarget<P>,
+        protected em: EntityManager,
+        protected factory: DBFactoryHandler<P, T>,
+        protected settings: T,
+    ) {}
+
+    map(mapFunction: (entity: P) => Promise<P>): DataFactory<P, T> {
+        this.mapFunction = mapFunction;
+        return this;
+    }
+
+    async make(params: FactoryOverride<P> = {}): Promise<P> {
+        if (this.factory) {
+            let entity: P = await this.resolveEntity(
+                await this.factory(this.configure, this.settings),
+            );
+            if (this.mapFunction) {
+                entity = await this.mapFunction(entity);
+            }
+            for (const key in params) {
+                if (params[key]) {
+                    entity[key] = params[key];
+                }
+            }
+            return entity;
+        }
+        throw new Error('Could not found entity');
+    }
+
+    async create(params: FactoryOverride<P> = {}, existsCheck?: string): Promise<P> {
+        try {
+            const entity = await this.make(params);
+            if (!isNil(existsCheck)) {
+                const repo = this.em.getRepository(this.entity);
+                const value = (entity as any)[existsCheck];
+                if (!isNil(value)) {
+                    const item = await repo.findOneBy({ [existsCheck]: value } as any);
+                    if (isNil(item)) {
+                        return await this.em.save(entity);
+                    }
+                    return item;
+                }
+            }
+            return await this.em.save(entity);
+        } catch (error) {
+            const message = 'Could not save entity';
+            await panic({ message, error });
+            throw new Error(message);
+        }
+    }
+
+    async makeMany(amount: number, params: FactoryOverride<P> = {}): Promise<P[]> {
+        const list = [];
+        for (let i = 0; i < amount; i++) {
+            list[i] = await this.make(params);
+        }
+        return list;
+    }
+
+    async createMany(
+        amount: number,
+        params: FactoryOverride<P> = {},
+        existsCheck?: string,
+    ): Promise<P[]> {
+        const list = [];
+        for (let i = 0; i < amount; i++) {
+            list[i] = await this.create(params, existsCheck);
+        }
+        return list;
+    }
+
+    private async resolveEntity(entity: P): Promise<P> {
+        for (const attr in entity) {
+            if (entity[attr]) {
+                if (isPromise(entity[attr])) {
+                    entity[attr] = await entity[attr];
+                } else if (typeof entity[attr] === 'object' && !(entity[attr] instanceof Date)) {
+                    const item = entity[attr];
+                    try {
+                        if (typeof (item as any).make === 'function') {
+                            entity[attr] = await (item as any).make();
+                        }
+                    } catch (error) {
+                        const message = `Could not make ${(item as any).name}`;
+                        await panic({ message, error });
+                        throw new Error(message);
+                    }
+                }
+            }
+        }
+        return entity;
+    }
+}

src/modules/database/resolver/seeder.runner.ts

@@ -0,0 +1,42 @@
+import { resolve } from 'path';
+
+import { Type } from '@nestjs/common';
+import { ensureFileSync, readFileSync, writeFileSync } from 'fs-extra';
+import { get, isNil, set } from 'lodash';
+import { DataSource, EntityManager } from 'typeorm';
+import YAML from 'yaml';
+
+import { BaseSeeder } from '@/modules/database/base/BaseSeeder';
+import { DBFactory } from '@/modules/database/commands/types';
+
+/**
+ * 默认的Seed Runner
+ */
+export class SeederRunner extends BaseSeeder {
+    protected async run(
+        factory: DBFactory,
+        dataSource: DataSource,
+        em: EntityManager,
+    ): Promise<any> {
+        let seeders: Type<any>[] = ((await this.getDBConfig()) as any).seeders ?? [];
+        const seedLockFile = resolve(__dirname, '../../../..', 'seed-lock.yml');
+        ensureFileSync(seedLockFile);
+        const lockFileYml = YAML.parse(readFileSync(seedLockFile, 'utf8'));
+        const locked = isNil(lockFileYml) ? {} : lockFileYml;
+        const lockNames = get<string[]>(locked, this.connection, []);
+        if (!this.ignoreLock) {
+            seeders = seeders.filter((s) => !lockNames.includes(s.name));
+        }
+        for (const seeder of seeders) {
+            await this.call(seeder);
+        }
+        set(
+            locked,
+            this.connection,
+            this.ignoreLock
+                ? seeders.map((s) => s.name)
+                : [...lockNames, ...seeders.map((s) => s.name)],
+        );
+        writeFileSync(seedLockFile, JSON.stringify(locked, null, 4));
+    }
+}

src/modules/database/seeders/content.seeder.ts

@@ -0,0 +1,128 @@
+import * as fs from 'node:fs';
+import path from 'node:path';
+
+// eslint-disable-next-line import/no-extraneous-dependencies
+import * as fakerjs from '@faker-js/faker';
+import { existsSync } from 'fs-extra';
+import { DataSource, EntityManager, In } from 'typeorm';
+
+import { CategoryEntity, CommentEntity, PostEntity, TagEntity } from '@/modules/content/entities';
+import { CategoryRepository, TagRepository } from '@/modules/content/repositories';
+import { getRandomItemData, getRandomListData, panic } from '@/modules/core/helpers';
+import { BaseSeeder } from '@/modules/database/base/BaseSeeder';
+
+import {
+    categories,
+    CategoryData,
+    PostData,
+    posts,
+    TagData,
+    tags,
+} from '@/modules/database/factories/content.data';
+
+import { IPostFactoryOptions } from '@/modules/database/factories/content.factory';
+
+import { getCustomRepository, getFakerLocales } from '@/modules/database/utils';
+
+import { DBFactory } from '../commands/types';
+
+export default class ContentSeeder extends BaseSeeder {
+    protected truncates = [PostEntity, CategoryEntity, TagEntity, CommentEntity];
+    protected factory: DBFactory;
+
+    async run(factory?: DBFactory, dataSource?: DataSource, em?: EntityManager): Promise<any> {
+        this.factory = factory;
+        await this.loadCategory(categories);
+        await this.loadTag(tags);
+        await this.loadPosts(posts);
+    }
+
+    private async getRandomComment(post: PostEntity, count: number, parent?: CommentEntity) {
+        const comments: CommentEntity[] = [];
+        const faker = new fakerjs.Faker({ locale: await getFakerLocales(this.configure) });
+        for (let i = 0; i < count; i++) {
+            const comment = new CommentEntity();
+            comment.body = faker.lorem.paragraph(Math.floor(Math.random() * 18) + 6);
+            comment.post = post;
+            if (parent) {
+                comment.parent = parent;
+            }
+            comments.push(await this.em.save(comment));
+            if (Math.random() >= 0.7) {
+                comment.children = await this.getRandomComment(
+                    post,
+                    Math.floor(Math.random() * 5),
+                    comment,
+                );
+                await this.em.save(comment);
+            }
+        }
+        return comments;
+    }
+
+    private async loadCategory(data: CategoryData[], parent?: CategoryEntity) {
+        let order = 0;
+        for (const item of data) {
+            const category = new CategoryEntity();
+            category.name = item.name;
+            category.customOrder = order;
+            if (parent) {
+                category.parent = parent;
+            }
+            await this.em.save(category);
+            order += 1;
+            if (item.children) {
+                await this.loadCategory(item.children, category);
+            }
+        }
+    }
+
+    private async loadTag(data: TagData[]) {
+        for (const item of data) {
+            const tag = new TagEntity();
+            tag.name = item.name;
+            await this.em.save(tag);
+        }
+    }
+
+    private async loadPosts(data: PostData[]) {
+        const allCategories: CategoryEntity[] = await this.em.find(CategoryEntity);
+        const allTags = await this.em.find(TagEntity);
+        for (const item of data) {
+            const filePath = path.join(__dirname, '../../../assets/posts', item.contentFile);
+            if (!existsSync(filePath)) {
+                await panic({
+                    spinner: this.spinner,
+                    message: `post content file ${filePath} not exits!`,
+                });
+            }
+
+            const options: IPostFactoryOptions = {
+                title: item.title,
+                body: fs.readFileSync(filePath, 'utf8'),
+                isPublished: true,
+            };
+            if (item.summary) {
+                options.summary = item.summary;
+            }
+            if (item.category) {
+                options.category = await getCustomRepository(
+                    this.dataSource,
+                    CategoryRepository,
+                ).findOneBy({ id: item.category });
+            }
+            if (item.tags) {
+                options.tags = await getCustomRepository(this.dataSource, TagRepository).find({
+                    where: { name: In(item.tags) },
+                });
+            }
+            const post = await this.factory(PostEntity)(options).create();
+            await this.getRandomComment(post, Math.floor(Math.random() * 8));
+        }
+
+        await this.factory(PostEntity)<IPostFactoryOptions>({
+            tags: getRandomListData(allTags),
+            category: getRandomItemData(allCategories),
+        }).createMany(10);
+    }
+}

src/modules/database/types.ts

@@ -2,11 +2,14 @@ import { TypeOrmModuleOptions } from '@nestjs/typeorm';
 import {
     FindTreeOptions,
     ObjectLiteral,
+    ObjectType,
     Repository,
     SelectQueryBuilder,
     TreeRepository,
 } from 'typeorm';
 
+import { Configure } from '@/modules/config/configure';
+import { SeederConstructor } from '@/modules/database/commands/types';
 import { OrderType, SelectTrashMode } from '@/modules/database/constants';
 
 import { BaseRepository } from './base/repository';
@@ -87,4 +90,38 @@ type DBAdditionalOption = {
     paths?: {
         migration?: string;
     };
+
+    /**
+     * 是否在启动应用后自动运行迁移
+     */
+    autoMigrate?: boolean;
+
+    /**
+     * 数据填充类列表
+     */
+    seeders?: SeederConstructor[];
+    /**
+     * 数据填充入口类
+     */
+    seedRunner?: SeederConstructor;
+    /**
+     * 定义数据工厂列表
+     */
+    factories?: (() => DBFactoryOption<any, any>)[];
+};
+
+export type DBFactoryHandler<P, T> = (configure: Configure, options: T) => Promise<P>;
+
+export type DBFactoryOption<P, T> = {
+    entity: ObjectType<P>;
+    handler: DBFactoryHandler<P, T>;
+};
+
+export type DefineFactory = <P, T>(
+    entity: ObjectType<P>,
+    handler: DBFactoryHandler<P, T>,
+) => () => DBFactoryOption<P, T>;
+
+export type FactoryOverride<Entity> = {
+    [Property in keyof Entity]?: Entity[Property];
 };

src/modules/database/utils.ts

@@ -1,15 +1,37 @@
+import * as fakerjs from '@faker-js/faker';
 import { Type } from '@nestjs/common';
 import { TypeOrmModule } from '@nestjs/typeorm';
 import { EntityClassOrSchema } from '@nestjs/typeorm/dist/interfaces/entity-class-or-schema.type';
 import { isArray, isNil } from 'lodash';
-import { DataSource, ObjectLiteral, ObjectType, Repository, SelectQueryBuilder } from 'typeorm';
+import { Ora } from 'ora';
+import {
+    DataSource,
+    DataSourceOptions,
+    EntityManager,
+    EntityTarget,
+    ObjectLiteral,
+    ObjectType,
+    Repository,
+    SelectQueryBuilder,
+} from 'typeorm';
 
 import { Configure } from '@/modules/config/configure';
+import { AppConfig } from '@/modules/core/types';
+import {
+    DBFactoryBuilder,
+    FactoryOptions,
+    Seeder,
+    SeederConstructor,
+    SeederOptions,
+} from '@/modules/database/commands/types';
+import { DataFactory } from '@/modules/database/resolver/data.factory';
 import {
     DBOptions,
+    DefineFactory,
     OrderQueryType,
     PaginateOptions,
     PaginateReturn,
+    TypeormOption,
 } from '@/modules/database/types';
 
 import { CUSTOM_REPOSITORY_METADATA } from './constants';
@@ -151,3 +173,152 @@ export async function addSubscribers(
     configure.set('database.connections', newSubscribers);
     return subscribers;
 }
+
+/**
+ * 忽略外键
+ * @param em EntityManager实例
+ * @param type 数据库类型
+ * @param disabled 是否禁用外键
+ */
+export async function resetForeignKey(
+    em: EntityManager,
+    type = 'mysql',
+    disabled = true,
+): Promise<EntityManager> {
+    let key: string;
+    let query: string;
+    if (type === 'sqlite') {
+        key = disabled ? 'OFF' : 'ON';
+        query = `PRAGMA foreign_keys = ${key}`;
+    } else {
+        key = disabled ? '0' : '1';
+        query = `SET FOREIGN_KEY_CHECKS = ${key}`;
+    }
+    await em.query(query);
+    return em;
+}
+
+/**
+ * 数据填充函数
+ * @param Clazz 填充类
+ * @param args 填充命令参数
+ * @param spinner Ora雪碧图标
+ * @param configure 配置对象
+ * @param dbConfig 当前数据库连接池的配置
+ */
+export async function runSeeder(
+    Clazz: SeederConstructor,
+    args: SeederOptions,
+    spinner: Ora,
+    configure: Configure,
+    dbConfig: TypeormOption,
+): Promise<DataSource> {
+    const seeder: Seeder = new Clazz(spinner, args);
+    const dataSource: DataSource = new DataSource({ ...dbConfig } as DataSourceOptions);
+
+    await dataSource.initialize();
+
+    const factoryMaps: FactoryOptions = {};
+    for (const factory of dbConfig.factories) {
+        const { entity, handler } = factory();
+        factoryMaps[entity.name] = { entity, handler };
+    }
+
+    if (typeof args.transaction === 'boolean' && !args.transaction) {
+        const em = await resetForeignKey(dataSource.manager, dataSource.options.type);
+        await seeder.load({
+            dataSource,
+            em,
+            configure,
+            connection: args.connection ?? 'default',
+            ignoreLock: args.ignorelock,
+            factory: factoryBuilder(configure, dataSource, factoryMaps),
+            factories: factoryMaps,
+        });
+        await resetForeignKey(em, dataSource.options.type, false);
+    } else {
+        // 在事务中运行
+        const queryRunner = dataSource.createQueryRunner();
+        await queryRunner.connect();
+        await queryRunner.startTransaction();
+        try {
+            const em = await resetForeignKey(dataSource.manager, dataSource.options.type);
+            await seeder.load({
+                dataSource,
+                em,
+                configure,
+                connection: args.connection ?? 'default',
+                ignoreLock: args.ignorelock,
+                factory: factoryBuilder(configure, dataSource, factoryMaps),
+                factories: factoryMaps,
+            });
+            await resetForeignKey(em, dataSource.options.type, false);
+            await queryRunner.commitTransaction();
+        } catch (e) {
+            console.error(e);
+            await queryRunner.rollbackTransaction();
+        } finally {
+            await queryRunner.release();
+        }
+    }
+
+    if (dataSource && dataSource.isInitialized) {
+        await dataSource.destroy();
+    }
+    return dataSource;
+}
+
+/**
+ * 定义factory用于生成数据
+ * @param entity
+ * @param handler
+ */
+export const defineFactory: DefineFactory = (entity, handler) => () => ({ entity, handler });
+
+/**
+ * 获取Entity类名
+ * @param entity
+ */
+export function entityName<T>(entity: EntityTarget<T>): string {
+    if (isNil(entity)) {
+        throw new Error('Entity is not defined');
+    }
+    if (entity instanceof Function) {
+        return entity.name;
+    }
+    return new (entity as any)().constructor.name;
+}
+
+export const factoryBuilder: DBFactoryBuilder =
+    (configure, dataSource, factories) => (entity) => (settings) => {
+        const name = entityName(entity);
+        if (!factories[name]) {
+            throw new Error(`has none factory for entity named ${name}`);
+        }
+        return new DataFactory(
+            name,
+            configure,
+            entity,
+            dataSource.createEntityManager(),
+            factories[name].handler,
+            settings,
+        );
+    };
+
+/**
+ * 本地化假数据
+ * @param configure
+ */
+export async function getFakerLocales(configure: Configure) {
+    const app = await configure.get<AppConfig>('app');
+    const locales: fakerjs.LocaleDefinition[] = [];
+    const locale = app.locale as keyof typeof fakerjs;
+    const fallbackLocale = app.fallbackLocale as keyof typeof fakerjs;
+    if (!isNil(fakerjs[locale])) {
+        locales.push(fakerjs[locale] as fakerjs.LocaleDefinition);
+    }
+    if (!isNil(fakerjs[fallbackLocale])) {
+        locales.push(fakerjs[fallbackLocale] as fakerjs.LocaleDefinition);
+    }
+    return locales;
+}

src/modules/rbac/constants.ts

@@ -0,0 +1,17 @@
+export enum SystemRoles {
+    USER = 'user',
+    SUPER_ADMIN = 'super_admin',
+}
+
+export const SYSTEM_PERMISSION = 'system-manage';
+
+export const PERMISSION_CHECKERS = 'permission_checkers';
+
+export enum PermissionAction {
+    CREATE = 'create',
+    READ = 'read',
+    UPDATE = 'update',
+    DELETE = 'delete',
+    MANAGE = 'manage',
+    OWNER = 'owner',
+}

src/modules/rbac/controllers/index.ts

@@ -0,0 +1 @@
+export * from './role.controller';

src/modules/rbac/controllers/manager/index.ts

@@ -0,0 +1,2 @@
+export * from './role.controller';
+export * from './permission.controller';

src/modules/rbac/controllers/manager/permission.controller.ts

@@ -0,0 +1,44 @@
+import { Controller, Get, Param, ParseUUIDPipe, Query, SerializeOptions } from '@nestjs/common';
+import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
+
+import { PermissionAction } from '@/modules/rbac/constants';
+import { Permission } from '@/modules/rbac/decorators/permission.decorator';
+import { PermissionEntity } from '@/modules/rbac/entities';
+import { RbacModule } from '@/modules/rbac/rbac.module';
+import { PermissionService } from '@/modules/rbac/services';
+import { PermissionChecker } from '@/modules/rbac/types';
+import { Depends } from '@/modules/restful/decorators/depend.decorator';
+import { PaginateWithTrashedDto } from '@/modules/restful/dtos/paginate-width-trashed.dto';
+
+const permission: PermissionChecker = async (ab) =>
+    ab.can(PermissionAction.MANAGE, PermissionEntity.name);
+
+@ApiTags('权限管理')
+@ApiBearerAuth()
+@Depends(RbacModule)
+@Controller('permissions')
+export class PermissionController {
+    constructor(private service: PermissionService) {}
+
+    /**
+     * 分页列表查询
+     * @param options
+     */
+    @Get()
+    @SerializeOptions({ groups: ['permission-list'] })
+    @Permission(permission)
+    async list(@Query() options: PaginateWithTrashedDto) {
+        return this.service.paginate(options);
+    }
+
+    /**
+     * 分页列表查询
+     * @param id
+     */
+    @Get(':id')
+    @SerializeOptions({ groups: ['permission-detail'] })
+    @Permission(permission)
+    async detail(@Param('id', new ParseUUIDPipe()) id: string) {
+        return this.service.detail(id);
+    }
+}

src/modules/rbac/controllers/manager/role.controller.ts

@@ -0,0 +1,82 @@
+import { Body, Controller, Delete, Patch, Post, SerializeOptions } from '@nestjs/common';
+import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
+
+import { DeleteWithTrashDto, RestoreDto } from '@/modules/content/dtos/delete.with.trash.dto';
+import { PermissionAction } from '@/modules/rbac/constants';
+import { RoleEntity } from '@/modules/rbac/entities';
+import { RbacModule } from '@/modules/rbac/rbac.module';
+import { RoleService } from '@/modules/rbac/services';
+import { PermissionChecker } from '@/modules/rbac/types';
+import { Depends } from '@/modules/restful/decorators/depend.decorator';
+
+import { Permission } from '../../decorators/permission.decorator';
+import { CreateRoleDto, UpdateRoleDto } from '../../dtos/role.dtos';
+
+const permission: PermissionChecker = async (ab) =>
+    ab.can(PermissionAction.MANAGE, RoleEntity.name);
+
+@ApiTags('角色管理')
+@ApiBearerAuth()
+@Depends(RbacModule)
+@Controller('roles')
+export class RoleController {
+    constructor(private service: RoleService) {}
+
+    /**
+     * 新增角色
+     * @param data
+     */
+    @Post()
+    @SerializeOptions({ groups: ['role-detail'] })
+    @Permission(permission)
+    async store(
+        @Body()
+        data: CreateRoleDto,
+    ) {
+        return this.service.create(data);
+    }
+
+    /**
+     * 更新角色
+     * @param data
+     */
+    @Patch()
+    @SerializeOptions({ groups: ['role-detail'] })
+    @Permission(permission)
+    async update(
+        @Body()
+        data: UpdateRoleDto,
+    ) {
+        return this.service.update(data);
+    }
+
+    /**
+     * 批量删除角色
+     * @param data
+     */
+    @Delete()
+    @SerializeOptions({ groups: ['role-list'] })
+    @Permission(permission)
+    async delete(
+        @Body()
+        data: DeleteWithTrashDto,
+    ) {
+        const { ids, trash } = data;
+        return this.service.delete(ids, trash);
+    }
+
+    /**
+     * 批量恢复角色
+     * @param data
+     */
+    @Patch('restore')
+    @SerializeOptions({ groups: ['role-list'] })
+    @Permission(permission)
+    async restore(
+        @Body()
+        data: RestoreDto,
+    ) {
+        const { ids } = data;
+        return this.service.restore(ids);
+    }
+}

src/modules/rbac/controllers/role.controller.ts

@@ -0,0 +1,37 @@
+import { Controller, Get, Param, ParseUUIDPipe, Query, SerializeOptions } from '@nestjs/common';
+import { ApiTags } from '@nestjs/swagger';
+
+import { RbacModule } from '@/modules/rbac/rbac.module';
+import { RoleService } from '@/modules/rbac/services';
+import { Depends } from '@/modules/restful/decorators/depend.decorator';
+import { PaginateWithTrashedDto } from '@/modules/restful/dtos/paginate-width-trashed.dto';
+import { Guest } from '@/modules/user/decorators/guest.decorator';
+
+@ApiTags('角色查询')
+@Depends(RbacModule)
+@Controller('roles')
+export class RoleController {
+    constructor(private service: RoleService) {}
+
+    /**
+     * 角色列表查询
+     * @param options
+     */
+    @Get()
+    @SerializeOptions({ groups: ['role-list'] })
+    @Guest()
+    async list(@Query() options: PaginateWithTrashedDto) {
+        return this.service.paginate(options);
+    }
+
+    /**
+     * 角色详解查询
+     * @param id
+     */
+    @Get(':id')
+    @SerializeOptions({ groups: ['role-detail'] })
+    @Guest()
+    async detail(@Param('id', new ParseUUIDPipe()) id: string) {
+        return this.service.detail(id);
+    }
+}

src/modules/rbac/decorators/permission.decorator.ts

@@ -0,0 +1,7 @@
+import { SetMetadata } from '@nestjs/common';
+
+import { PERMISSION_CHECKERS } from '../constants';
+import { PermissionChecker } from '../types';
+
+export const Permission = (...checkers: PermissionChecker[]) =>
+    SetMetadata(PERMISSION_CHECKERS, checkers);

src/modules/rbac/dtos/permission.dto.ts

@@ -0,0 +1,18 @@
+import { IsOptional, IsUUID } from 'class-validator';
+
+import { DtoValidation } from '@/modules/core/decorator/dto.validation.decorator';
+import { IsDataExist } from '@/modules/database/constraints';
+import { PaginateDto } from '@/modules/restful/dtos/paginate.dto';
+
+import { RoleEntity } from '../entities/role.entity';
+
+@DtoValidation({ type: 'query' })
+export class QueryPermissionDto extends PaginateDto {
+    /**
+     * 角色ID:通过角色过滤权限列表
+     */
+    @IsDataExist(RoleEntity, { groups: ['update'], message: '指定的角色不存在' })
+    @IsUUID(undefined, { message: '角色ID格式错误' })
+    @IsOptional()
+    role?: string;
+}

src/modules/rbac/dtos/role.dtos.ts

@@ -0,0 +1,56 @@
+import { PartialType } from '@nestjs/swagger';
+import { IsDefined, IsNotEmpty, IsOptional, IsUUID, MaxLength } from 'class-validator';
+
+import { DtoValidation } from '@/modules/core/decorator/dto.validation.decorator';
+import { IsDataExist } from '@/modules/database/constraints';
+import { PaginateWithTrashedDto } from '@/modules/restful/dtos/paginate-width-trashed.dto';
+import { UserEntity } from '@/modules/user/entities';
+
+import { PermissionEntity } from '../entities/permission.entity';
+
+@DtoValidation({ type: 'query' })
+export class QueryRoleDto extends PaginateWithTrashedDto {
+    /**
+     * 用户ID:通过用户过滤角色列表
+     */
+    @IsDataExist(UserEntity, { groups: ['update'], message: '指定的用户不存在' })
+    @IsUUID(undefined, { message: '用户ID格式错误' })
+    @IsOptional()
+    user?: string;
+}
+
+@DtoValidation({ groups: ['create'] })
+export class CreateRoleDto {
+    /**
+     * 权限名称
+     */
+    @MaxLength(100, { always: true, message: '名称长度最大为$constraint1' })
+    @IsNotEmpty({ groups: ['create'], message: '名称必须填写' })
+    @IsOptional({ groups: ['update'] })
+    name: string;
+
+    /**
+     * 权限标识:如果没有设置则在查询后为权限名称
+     */
+    @MaxLength(100, { always: true, message: 'Label长度最大为$constraint1' })
+    @IsOptional({ always: true })
+    label?: string;
+
+    /**
+     * 关联权限ID列表:一个角色可以关联多个权限,一个权限也可以属于多个角色
+     */
+    @IsDataExist(PermissionEntity, { each: true, always: true, message: '权限不存在' })
+    @IsUUID(undefined, { each: true, always: true, message: '权限ID格式不正确' })
+    @IsOptional({ always: true })
+    permissions?: string[];
+}
+
+@DtoValidation({ groups: ['update'] })
+export class UpdateRoleDto extends PartialType(CreateRoleDto) {
+    /**
+     * 待更新的角色ID
+     */
+    @IsUUID(undefined, { message: 'ID格式错误', groups: ['update'] })
+    @IsDefined({ groups: ['update'], message: 'ID必须指定' })
+    id: string;
+}

src/modules/rbac/entities/index.ts

@@ -0,0 +1,2 @@
+export * from './permission.entity';
+export * from './role.entity';

src/modules/rbac/entities/permission.entity.ts

@@ -0,0 +1,67 @@
+import { AbilityTuple, MongoQuery, RawRuleFrom } from '@casl/ability';
+import { Exclude, Expose } from 'class-transformer';
+import type { Relation } from 'typeorm';
+import { Column, Entity, JoinTable, ManyToMany, PrimaryGeneratedColumn } from 'typeorm';
+
+import { UserEntity } from '@/modules/user/entities';
+
+import { RoleEntity } from './role.entity';
+
+/**
+ * 权限实体
+ */
+@Exclude()
+@Entity('rbac_permission')
+export class PermissionEntity<
+    P extends AbilityTuple = AbilityTuple,
+    T extends MongoQuery = MongoQuery,
+> {
+    /**
+     * 权限ID
+     */
+    @Expose()
+    @PrimaryGeneratedColumn('uuid')
+    id: string;
+
+    /**
+     * 权限名称
+     */
+    @Expose()
+    @Column({ comment: '权限名称' })
+    name: string;
+
+    /**
+     * 权限显示名
+     */
+    @Expose()
+    @Column({ comment: '权限显示名', nullable: true })
+    label?: string;
+
+    /**
+     * 权限描述
+     */
+    @Expose()
+    @Column({ comment: '权限描述', nullable: true, type: 'text' })
+    description?: string;
+
+    /**
+     * 权限规则
+     */
+    @Column({ type: 'simple-json', comment: '权限规则' })
+    rule: Omit<RawRuleFrom<P, T>, 'conditions'>;
+
+    /**
+     * 权限角色
+     */
+    @Expose({ groups: ['permission-list', 'permission-detail'] })
+    @ManyToMany(() => RoleEntity, (role) => role.permissions)
+    @JoinTable()
+    roles: Relation<RoleEntity>[];
+
+    /**
+     * 权限用户
+     */
+    @ManyToMany(() => UserEntity, (user) => user.permissions)
+    @JoinTable()
+    users: Relation<UserEntity>[];
+}

src/modules/rbac/entities/role.entity.ts

@@ -0,0 +1,82 @@
+import { Exclude, Expose, Type } from 'class-transformer';
+import type { Relation } from 'typeorm';
+import {
+    BaseEntity,
+    Column,
+    DeleteDateColumn,
+    Entity,
+    JoinTable,
+    ManyToMany,
+    PrimaryGeneratedColumn,
+} from 'typeorm';
+
+import { UserEntity } from '@/modules/user/entities';
+
+import { PermissionEntity } from './permission.entity';
+
+/**
+ * 角色信息
+ */
+@Exclude()
+@Entity('rbac_role')
+export class RoleEntity extends BaseEntity {
+    /**
+     * 角色ID
+     */
+    @Expose()
+    @PrimaryGeneratedColumn('uuid')
+    id: string;
+
+    /**
+     * 角色名称
+     */
+    @Expose()
+    @Column({ comment: '角色名称' })
+    name: string;
+
+    /**
+     * 显示名称
+     */
+    @Expose()
+    @Column({ comment: '显示名称', nullable: true })
+    label?: string;
+
+    /**
+     * 角色描述
+     */
+    @Expose({ groups: ['role-detail'] })
+    @Column({ comment: '角色描述', nullable: true, type: 'text' })
+    description?: string;
+
+    /**
+     * 是否为不可更改的系统权限
+     */
+    @Column({ comment: '是否为不可更改的系统权限', default: false })
+    systemed?: boolean;
+
+    /**
+     * 删除时间
+     */
+    @Expose({ groups: ['role-detail', 'role-list'] })
+    @Type(() => Date)
+    @DeleteDateColumn({ comment: '删除时间' })
+    deletedAt: Date;
+
+    /**
+     * 角色权限
+     */
+    @Expose({ groups: ['role-detail'] })
+    @Type(() => PermissionEntity)
+    @ManyToMany(() => PermissionEntity, (permission) => permission.roles, {
+        cascade: true,
+        eager: true,
+    })
+    permissions: Relation<PermissionEntity>[];
+
+    /**
+     * 角色关联用户
+     */
+    @ManyToMany(() => UserEntity, (user) => user.roles, { deferrable: 'INITIALLY IMMEDIATE' })
+    @JoinTable()
+    users: Relation<UserEntity>[];
+}