feat: add product variant management functionality

- Implemented CreateProductVariantDto and UpdateProductVariantDto for product variant data transfer.
- Developed ProductVariantsController to handle CRUD operations for product variants.
- Created ProductVariantsService to interact with the database using Prisma.
- Added ProductVariantsModule to encapsulate the product variant feature.
- Included response mapping for consistent API responses.

scripts/generate-permissions.ts

@@ -0,0 +1,66 @@
+#!/usr/bin/env ts-node
+import * as fs from 'fs'
+import * as path from 'path'
+import { prisma } from '../src/lib/prisma'
+
+function findModules(dir: string): string[] {
+  const results: string[] = []
+  const entries = fs.readdirSync(dir, { withFileTypes: true })
+  for (const e of entries) {
+    const full = path.join(dir, e.name)
+    if (e.isDirectory()) {
+      results.push(...findModules(full))
+    } else if (e.isFile() && e.name.endsWith('.module.ts')) {
+      results.push(full)
+    }
+  }
+  return results
+}
+
+function moduleNameFromFile(filePath: string) {
+  const name = path.basename(filePath).replace('.module.ts', '')
+  return name.replace(/-module$|\.module$/i, '')
+}
+
+function makePermissionsFor(moduleName: string) {
+  const base = moduleName.replace(/\W+/g, '_').toLowerCase()
+  return [`${base}:create`, `${base}:read`, `${base}:update`, `${base}:delete`]
+}
+
+async function main() {
+  const srcDir = path.resolve(__dirname, '..', 'src')
+  const moduleFiles = findModules(srcDir)
+  const modules = moduleFiles.map(moduleNameFromFile)
+
+  const permsMap: Record<string, boolean> = {}
+  for (const m of modules) {
+    for (const p of makePermissionsFor(m)) permsMap[p] = false
+  }
+
+  // Upsert roles: ensure admin has full permissions, others get entries added
+  const roles = await prisma.role.findMany()
+  for (const r of roles) {
+    const current: Record<string, any> = (r.permissions as any) || {}
+    const merged = { ...permsMap, ...current }
+
+    // If role name is admin (case-insensitive), set all permissions to true
+    if (r.name && r.name.toLowerCase() === 'admin') {
+      for (const key of Object.keys(merged)) merged[key] = true
+    } else {
+      // keep existing truthy values, otherwise false
+      for (const key of Object.keys(merged)) merged[key] = merged[key] || false
+    }
+
+    await prisma.role.update({ where: { id: r.id }, data: { permissions: merged } })
+    console.log(
+      `Updated role ${r.name} (id=${r.id}) with ${Object.keys(merged).length} permissions`,
+    )
+  }
+
+  await prisma.$disconnect()
+}
+
+main().catch(e => {
+  console.error(e)
+  process.exit(1)
+})