@illustrisinteractive/sentinel-nest 0.0.1

package/dist/bin/migrations/4-create-model-roles.js

@@ -0,0 +1,46 @@
+'use strict';
+const { Sequelize } = require('sequelize');
+module.exports = {
+    async up({ context: queryInterface }) {
+        await queryInterface.createTable('ModelHasRoles', {
+            id: {
+                allowNull: false,
+                autoIncrement: true,
+                primaryKey: true,
+                type: Sequelize.INTEGER,
+            },
+            role: {
+                type: Sequelize.INTEGER,
+                references: {
+                    model: {
+                        tableName: 'Roles',
+                    },
+                    key: 'id',
+                },
+                allowNull: false,
+            },
+            model: {
+                type: Sequelize.INTEGER,
+                references: {
+                    model: {
+                        tableName: process.env.SENTINEL_MODEL_REFERENCE_TABLE || 'Roles',
+                    },
+                    key: process.env.SENTINEL_MODEL_REFERENCE_KEY || 'id',
+                },
+                allowNull: false,
+            },
+            createdAt: {
+                allowNull: false,
+                type: Sequelize.DATE,
+            },
+            updatedAt: {
+                allowNull: false,
+                type: Sequelize.DATE,
+            },
+        });
+    },
+    async down({ context: queryInterface }) {
+        await queryInterface.dropTable('ModelHasRoles');
+    },
+};
+//# sourceMappingURL=4-create-model-roles.js.map

package/dist/bin/migrations/4-create-model-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"4-create-model-roles.js","sourceRoot":"","sources":["../../../src/bin/migrations/4-create-model-roles.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;AACb,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAE3C,MAAM,CAAC,OAAO,GAAG;IACf,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE;QAClC,MAAM,cAAc,CAAC,WAAW,CAAC,eAAe,EAAE;YAChD,EAAE,EAAE;gBACF,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,IAAI;gBACnB,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,SAAS,CAAC,OAAO;aACxB;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,SAAS,CAAC,OAAO;gBACvB,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,SAAS,EAAE,OAAO;qBACnB;oBACD,GAAG,EAAE,IAAI;iBACV;gBACD,SAAS,EAAE,KAAK;aACjB;YACD,KAAK,EAAE;gBACL,IAAI,EAAE,SAAS,CAAC,OAAO;gBACvB,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,OAAO;qBACjE;oBACD,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,IAAI;iBACtD;gBACD,SAAS,EAAE,KAAK;aACjB;YACD,SAAS,EAAE;gBACT,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;aACrB;YACD,SAAS,EAAE;gBACT,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;aACrB;SACF,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE;QACpC,MAAM,cAAc,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAClD,CAAC;CACF,CAAC"}

package/dist/bin/resource.d.ts

@@ -0,0 +1 @@
+export declare const resource: (name: string, manage: boolean) => Promise<void>;

package/dist/bin/resource.js

@@ -0,0 +1,91 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resource = void 0;
+const prompts_1 = require("@clack/prompts");
+const ts_morph_1 = require("ts-morph");
+const fs_1 = __importDefault(require("fs"));
+const process_1 = require("process");
+const resource = async (name, manage) => {
+    (0, prompts_1.intro)('Sentinel CLI');
+    prompts_1.log.info('Resource - Create a new Secured Resource');
+    let sentinelConfig = {
+        name: '',
+        sourceRoot: '',
+        sentinelConfigPath: '',
+    };
+    if (!fs_1.default.existsSync(process.cwd() + '\\src\\sentinel\\sentinel.config.json')) {
+        prompts_1.log.error(`"sentinel.config.json" was not found in (${process.cwd() + '\\src\\sentinel'}). Have you initialized Sentinel using "npx sentinel init"?`);
+    }
+    try {
+        sentinelConfig = (await import('file://' + process.cwd() + '\\src\\sentinel\\sentinel.config.json', {
+            with: { type: 'json' },
+        })).default;
+    }
+    catch (error) {
+        console.log(error);
+        (0, process_1.exit)(-1);
+    }
+    const project = new ts_morph_1.Project();
+    const resourceFile = project.createSourceFile(process.cwd() + '\\src\\sentinel\\resources\\' + name + '.ts', `export class ${name} {}`);
+    resourceFile.addImportDeclaration({
+        moduleSpecifier: '@luminotion/sentinel',
+        namedImports: [
+            { name: 'SecuredResource' },
+            { name: 'SecuredResourceAction' },
+        ],
+    });
+    resourceFile.getClass(name)?.setExtends('SecuredResource');
+    resourceFile.getClass(name)?.addProperties([
+        { name: 'static name', initializer: `"${name}"` },
+        {
+            name: 'static actions: Record<string, SecuredResourceAction>',
+            initializer: (writer) => {
+                if (manage) {
+                    writer.block(() => {
+                        writer.writeLine(`"manage": `).block(() => {
+                            writer.writeLine('description: "Allows all Actions in this Secured Resource"');
+                        });
+                    });
+                }
+                else
+                    writer.writeLine('{}');
+            },
+        },
+    ]);
+    resourceFile.getClass(name)?.addStaticBlock({
+        statements: [
+            `Object.keys(${name}.actions).forEach((key) => {
+      ${name}.actions[key].source = '${name}';
+    });`,
+        ],
+    });
+    resourceFile.saveSync();
+    const newResource = {
+        name,
+        actions: manage
+            ? {
+                manage: {
+                    description: 'Allows all Actions in this Secured Resource.',
+                },
+            }
+            : {},
+    };
+    if (sentinelConfig.resources) {
+        const matchIdx = sentinelConfig.resources.findIndex((res) => res.name == name);
+        if (matchIdx != -1) {
+            sentinelConfig.resources[matchIdx] = newResource;
+        }
+        else
+            sentinelConfig.resources.push(newResource);
+    }
+    else
+        sentinelConfig.resources = [newResource];
+    prompts_1.log.success(`New Secured Resource created in ${sentinelConfig.sentinelConfigPath}\\${name}`);
+    fs_1.default.writeFileSync(process.cwd() + '\\src\\sentinel\\sentinel.config.json', JSON.stringify(sentinelConfig, null, 2));
+    prompts_1.log.success(`${name} is ready to be committed. Edit the file with your Actions, then run "npx sentinel commit" to refresh all Secured Resource definitions.`);
+};
+exports.resource = resource;
+//# sourceMappingURL=resource.js.map

package/dist/bin/resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../src/bin/resource.ts"],"names":[],"mappings":";;;;;;AACA,4CAA4C;AAG5C,uCAAmC;AACnC,4CAAoB;AACpB,qCAA+B;AAExB,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAE,MAAe,EAAE,EAAE;IAC9D,IAAA,eAAK,EAAC,cAAc,CAAC,CAAC;IACtB,aAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAErD,IAAI,cAAc,GAAmB;QACnC,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,EAAE;QACd,kBAAkB,EAAE,EAAE;KACvB,CAAC;IACF,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,uCAAuC,CAAC,EAAE,CAAC;QAC5E,aAAG,CAAC,KAAK,CACP,4CAA4C,OAAO,CAAC,GAAG,EAAE,GAAG,iBAAiB,6DAA6D,CAC3I,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,cAAc,GAAG,CACf,MAAM,MAAM,CACV,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,uCAAuC,EACnE;YACE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACvB,CACF,CACF,CAAC,OAAyB,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,IAAA,cAAI,EAAC,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,kBAAO,EAAE,CAAC;IAC9B,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAC3C,OAAO,CAAC,GAAG,EAAE,GAAG,8BAA8B,GAAG,IAAI,GAAG,KAAK,EAC7D,gBAAgB,IAAI,KAAK,CAC1B,CAAC;IACF,YAAY,CAAC,oBAAoB,CAAC;QAChC,eAAe,EAAE,sBAAsB;QACvC,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,iBAAiB,EAAE;YAC3B,EAAE,IAAI,EAAE,uBAAuB,EAAE;SAClC;KACF,CAAC,CAAC;IACH,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC3D,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;QACzC,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,IAAI,GAAG,EAAE;QACjD;YACE,IAAI,EAAE,uDAAuD;YAC7D,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE;gBACtB,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;wBAChB,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;4BACxC,MAAM,CAAC,SAAS,CACd,4DAA4D,CAC7D,CAAC;wBACJ,CAAC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;;oBAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;SACF;KACF,CAAC,CAAC;IACH,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC;QAC1C,UAAU,EAAE;YACV,eAAe,IAAI;QACjB,IAAI,2BAA2B,IAAI;QACnC;SACH;KACF,CAAC,CAAC;IACH,YAAY,CAAC,QAAQ,EAAE,CAAC;IAExB,MAAM,WAAW,GAAoB;QACnC,IAAI;QACJ,OAAO,EAAE,MAAM;YACb,CAAC,CAAC;gBACE,MAAM,EAAE;oBACN,WAAW,EAAE,8CAA8C;iBAC5D;aACF;YACH,CAAC,CAAC,EAAE;KACP,CAAC;IACF,IAAI,cAAc,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,SAAS,CACjD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAC1B,CAAC;QACF,IAAI,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC;YACnB,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC;QACnD,CAAC;;YAAM,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;;QAAM,cAAc,CAAC,SAAS,GAAG,CAAC,WAAW,CAAC,CAAC;IAEhD,aAAG,CAAC,OAAO,CACT,mCAAmC,cAAc,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAChF,CAAC;IAEF,YAAE,CAAC,aAAa,CACd,OAAO,CAAC,GAAG,EAAE,GAAG,uCAAuC,EACvD,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CACxC,CAAC;IAEF,aAAG,CAAC,OAAO,CACT,GAAG,IAAI,yIAAyI,CACjJ,CAAC;AACJ,CAAC,CAAC;AAlGW,QAAA,QAAQ,YAkGnB"}

package/dist/bin/sentinel.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin/sentinel.js

@@ -0,0 +1,52 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const init_1 = require("./init");
+const resource_1 = require("./resource");
+const commit_1 = require("./commit");
+const program = new commander_1.Command();
+program
+    .name('Sentinel CLI')
+    .description('RBAC implementation for Nest.js powered by CASL and Postgres')
+    .version('0.0.1');
+program
+    .command('init')
+    .description('Prepares your Nest.js project for Sentinel. Run this command where your `nest-cli.json` file is located.')
+    .requiredOption('--model-table <model>', 'Determines which table to reference when logging which Roles a Model has been given with. This will often be your Users or Clients table.')
+    .option('--nx-read-from <path>', 'Determines the path to read Nest projects from in an Nx monorepo. (Ie. apps/backend)')
+    .option('--model-key <key>', 'The primary key of your Model Table. Defaults to "id".', 'id')
+    .option('--env-from <path>', 'Optionally configure the CLI to load required ENV values from a file.')
+    .option('--skip-migration', 'Configures the CLI to skip running the migration files required by Sentinel')
+    .option('--verbose', 'If true, Sequelize logs are printed to the console.')
+    .action((opts) => {
+    (0, init_1.init)(opts.modelTable, opts.modelKey, opts.nxReadFrom, opts.envFrom, opts.skipMigration, opts.verbose);
+});
+program
+    .command('resource')
+    .description('Creates a new Secured Resource without pushing it to your database. Afterwards, you can add Actions by editing the generated file, then run `npx sentinel commit` to save them to your database.')
+    .argument('<resource>', 'Name of the Secured Resource')
+    .option('--no-manage', 'Skips generating the "manage" Action in the new Secured Resource')
+    .action((name, opts) => {
+    (0, resource_1.resource)(name, opts.manage);
+});
+program
+    .command('commit')
+    .description('Commits all new and modified Secured Resources to your database.')
+    .option('--env-from <path>', 'Optionally configure the CLI to load required ENV values from a file.')
+    .option('--review', 'Generate a list of all detected Secured Resources and their Actions.')
+    .option('--refresh', 'Refreshes the local Secured Resource definitions in the "sentinel.config.json" without committing to the database.')
+    .option('--skip-prompts', 'Skips all confirmation prompts and directly performs operations.')
+    .action((opts) => {
+    (0, commit_1.commit)(opts.envFrom);
+});
+program
+    .command('clean')
+    .description('Add flags to remove configurations and/or drop tables related to Sentinel. Does not modify any of your Nest.js code.')
+    .option('--migration', 'Resets the internal SequelizeMeta table to allow migrations to re-run again.')
+    .option('--tables', 'Drops all tables related to Sentinel (Roles, RoleHasPermissions, PermissionKeys)')
+    .option('--role-permissions <name>', 'Removes all Permissions assigned to a certain Role.')
+    .option('--role <name>', 'Deletes a Role completely.')
+    .option('--all', 'Removes all Roles, PermissionKeys, and role assignments (RoleHasPermissions)');
+program.parse();
+//# sourceMappingURL=sentinel.js.map

package/dist/bin/sentinel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.js","sourceRoot":"","sources":["../../src/bin/sentinel.ts"],"names":[],"mappings":";;;AAEA,yCAA4C;AAC5C,iCAA8B;AAC9B,yCAAsC;AACtC,qCAAkC;AAElC,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,cAAc,CAAC;KACpB,WAAW,CAAC,8DAA8D,CAAC;KAC3E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CACV,0GAA0G,CAC3G;KACA,cAAc,CACb,uBAAuB,EACvB,2IAA2I,CAC5I;KACA,MAAM,CACL,uBAAuB,EACvB,sFAAsF,CACvF;KACA,MAAM,CACL,mBAAmB,EACnB,wDAAwD,EACxD,IAAI,CACL;KACA,MAAM,CACL,mBAAmB,EACnB,uEAAuE,CACxE;KACA,MAAM,CACL,kBAAkB,EAClB,6EAA6E,CAC9E;KACA,MAAM,CAAC,WAAW,EAAE,qDAAqD,CAAC;KAC1E,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;IACf,IAAA,WAAI,EACF,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,OAAO,CACb,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CACV,kMAAkM,CACnM;KACA,QAAQ,CAAC,YAAY,EAAE,8BAA8B,CAAC;KACtD,MAAM,CACL,aAAa,EACb,kEAAkE,CACnE;KACA,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;IACrB,IAAA,mBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CACV,kEAAkE,CACnE;KACA,MAAM,CACL,mBAAmB,EACnB,uEAAuE,CACxE;KACA,MAAM,CACL,UAAU,EACV,sEAAsE,CACvE;KACA,MAAM,CACL,WAAW,EACX,oHAAoH,CACrH;KACA,MAAM,CACL,gBAAgB,EAChB,kEAAkE,CACnE;KACA,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;IACf,IAAA,eAAM,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CACV,sHAAsH,CACvH;KACA,MAAM,CACL,aAAa,EACb,8EAA8E,CAC/E;KACA,MAAM,CACL,UAAU,EACV,kFAAkF,CACnF;KACA,MAAM,CACL,2BAA2B,EAC3B,qDAAqD,CACtD;KACA,MAAM,CAAC,eAAe,EAAE,4BAA4B,CAAC;KACrD,MAAM,CACL,OAAO,EACP,8EAA8E,CAC/E,CAAC;AAEJ,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/models/SecuredResource.d.ts

@@ -0,0 +1,8 @@
+export declare abstract class SecuredResource {
+    name: string;
+    actions: Record<string, SecuredResourceAction>;
+}
+export interface SecuredResourceAction {
+    description?: string;
+    source?: string;
+}

package/dist/models/SecuredResource.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecuredResource = void 0;
+class SecuredResource {
+    name;
+    actions;
+}
+exports.SecuredResource = SecuredResource;
+//# sourceMappingURL=SecuredResource.js.map

package/dist/models/SecuredResource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecuredResource.js","sourceRoot":"","sources":["../../src/models/SecuredResource.ts"],"names":[],"mappings":";;;AAAA,MAAsB,eAAe;IACnC,IAAI,CAAS;IACb,OAAO,CAAwC;CAChD;AAHD,0CAGC"}

package/dist/models/SentinelConfig.d.ts

@@ -0,0 +1,7 @@
+import { SecuredResource } from './SecuredResource';
+export interface SentinelConfig {
+    name: string;
+    sourceRoot: string;
+    sentinelConfigPath: string;
+    resources?: SecuredResource[];
+}

package/dist/models/SentinelConfig.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=SentinelConfig.js.map

package/dist/models/SentinelConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SentinelConfig.js","sourceRoot":"","sources":["../../src/models/SentinelConfig.ts"],"names":[],"mappings":""}

package/dist/models/sequelize/PermissionKey.d.ts

@@ -0,0 +1,7 @@
+import { Model } from 'sequelize-typescript';
+export declare class PermissionKey extends Model {
+    id: string;
+    resource: string;
+    action: string;
+    description: string;
+}

package/dist/models/sequelize/PermissionKey.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionKey = void 0;
+const sequelize_typescript_1 = require("sequelize-typescript");
+let PermissionKey = class PermissionKey extends sequelize_typescript_1.Model {
+    resource;
+    action;
+    description;
+};
+exports.PermissionKey = PermissionKey;
+__decorate([
+    (0, sequelize_typescript_1.Column)({ primaryKey: true, type: sequelize_typescript_1.DataType.STRING }),
+    __metadata("design:type", String)
+], PermissionKey.prototype, "id", void 0);
+__decorate([
+    (0, sequelize_typescript_1.Column)({ type: sequelize_typescript_1.DataType.STRING }),
+    __metadata("design:type", String)
+], PermissionKey.prototype, "resource", void 0);
+__decorate([
+    (0, sequelize_typescript_1.Column)({ type: sequelize_typescript_1.DataType.STRING }),
+    __metadata("design:type", String)
+], PermissionKey.prototype, "action", void 0);
+__decorate([
+    (0, sequelize_typescript_1.Column)({ type: sequelize_typescript_1.DataType.STRING }),
+    __metadata("design:type", String)
+], PermissionKey.prototype, "description", void 0);
+exports.PermissionKey = PermissionKey = __decorate([
+    (0, sequelize_typescript_1.Table)({ tableName: 'PermissionKeys' })
+], PermissionKey);
+//# sourceMappingURL=PermissionKey.js.map

package/dist/models/sequelize/PermissionKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionKey.js","sourceRoot":"","sources":["../../../src/models/sequelize/PermissionKey.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+DAM8B;AAGvB,IAAM,aAAa,GAAnB,MAAM,aAAc,SAAQ,4BAAK;IAKtC,QAAQ,CAAS;IAGjB,MAAM,CAAS;IAGf,WAAW,CAAS;CACrB,CAAA;AAZY,sCAAa;AAEhB;IADP,IAAA,6BAAM,EAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,+BAAQ,CAAC,MAAM,EAAE,CAAC;;yCACjC;AAGnB;IADC,IAAA,6BAAM,EAAC,EAAE,IAAI,EAAE,+BAAQ,CAAC,MAAM,EAAE,CAAC;;+CACjB;AAGjB;IADC,IAAA,6BAAM,EAAC,EAAE,IAAI,EAAE,+BAAQ,CAAC,MAAM,EAAE,CAAC;;6CACnB;AAGf;IADC,IAAA,6BAAM,EAAC,EAAE,IAAI,EAAE,+BAAQ,CAAC,MAAM,EAAE,CAAC;;kDACd;wBAXT,aAAa;IADzB,IAAA,4BAAK,EAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;GAC1B,aAAa,CAYzB"}

package/dist/prisma.config.d.ts

@@ -0,0 +1,3 @@
+import 'dotenv/config';
+declare const _default: import("@prisma/config").PrismaConfigInternal;
+export default _default;

package/dist/prisma.config.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+require("dotenv/config");
+const config_1 = require("prisma/config");
+exports.default = (0, config_1.defineConfig)({
+    schema: 'prisma/schema.prisma',
+    migrations: {
+        path: 'prisma/migrations',
+    },
+    datasource: {
+        url: `postgres://${process.env.SENTINEL_DB_USER}:${process.env.SENTINEL_DB_PASS}@${process.env.SENTINEL_DB_HOST}:${process.env.SENTINEL_DB_PORT}/${process.env.SENTINEL_DB_DATABASE}`,
+    },
+});
+//# sourceMappingURL=prisma.config.js.map

package/dist/prisma.config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma.config.js","sourceRoot":"","sources":["../prisma.config.ts"],"names":[],"mappings":";;AAEA,yBAAuB;AACvB,0CAA6C;AAE7C,kBAAe,IAAA,qBAAY,EAAC;IAC1B,MAAM,EAAE,sBAAsB;IAC9B,UAAU,EAAE;QACV,IAAI,EAAE,mBAAmB;KAC1B;IACD,UAAU,EAAE;QACV,GAAG,EAAE,cAAc,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE;KACtL;CACF,CAAC,CAAC"}

package/dist/src/can.decorator.d.ts

@@ -0,0 +1,2 @@
+import { SecuredResourceAction } from './main';
+export declare const Can: import("@nestjs/core").ReflectableDecorator<SecuredResourceAction[], SecuredResourceAction[]>;

package/dist/src/can.decorator.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Can = void 0;
+const core_1 = require("@nestjs/core");
+exports.Can = core_1.Reflector.createDecorator();
+//# sourceMappingURL=can.decorator.js.map

package/dist/src/can.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can.decorator.js","sourceRoot":"","sources":["../../src/can.decorator.ts"],"names":[],"mappings":";;;AACA,uCAAyC;AAE5B,QAAA,GAAG,GAAG,gBAAS,CAAC,eAAe,EAA2B,CAAC"}

package/dist/src/generated/prisma/browser.d.ts

@@ -0,0 +1,10 @@
+import * as Prisma from './internal/prismaNamespaceBrowser.js';
+export { Prisma };
+export * as $Enums from './enums.js';
+export * from './enums.js';
+export type ModelHasRoles = Prisma.ModelHasRolesModel;
+export type PermissionKeys = Prisma.PermissionKeysModel;
+export type RoleHasPermissions = Prisma.RoleHasPermissionsModel;
+export type Roles = Prisma.RolesModel;
+export type SequelizeMeta = Prisma.SequelizeMetaModel;
+export type Users = Prisma.UsersModel;

package/dist/src/generated/prisma/browser.js

@@ -0,0 +1,44 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.$Enums = exports.Prisma = void 0;
+const Prisma = __importStar(require("./internal/prismaNamespaceBrowser.js"));
+exports.Prisma = Prisma;
+exports.$Enums = __importStar(require("./enums.js"));
+__exportStar(require("./enums.js"), exports);
+//# sourceMappingURL=browser.js.map

package/dist/src/generated/prisma/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../../../src/generated/prisma/browser.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeA,6EAA8D;AACrD,wBAAM;AACf,qDAAoC;AACpC,6CAA2B"}

package/dist/src/generated/prisma/client.d.ts

@@ -0,0 +1,14 @@
+import * as runtime from "@prisma/client/runtime/client";
+import * as $Class from "./internal/class.js";
+import * as Prisma from "./internal/prismaNamespace.js";
+export * as $Enums from './enums.js';
+export * from "./enums.js";
+export declare const PrismaClient: $Class.PrismaClientConstructor;
+export type PrismaClient<LogOpts extends Prisma.LogLevel = never, OmitOpts extends Prisma.PrismaClientOptions["omit"] = Prisma.PrismaClientOptions["omit"], ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = $Class.PrismaClient<LogOpts, OmitOpts, ExtArgs>;
+export { Prisma };
+export type ModelHasRoles = Prisma.ModelHasRolesModel;
+export type PermissionKeys = Prisma.PermissionKeysModel;
+export type RoleHasPermissions = Prisma.RoleHasPermissionsModel;
+export type Roles = Prisma.RolesModel;
+export type SequelizeMeta = Prisma.SequelizeMetaModel;
+export type Users = Prisma.UsersModel;

package/dist/src/generated/prisma/client.js

@@ -0,0 +1,46 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Prisma = exports.PrismaClient = exports.$Enums = void 0;
+const $Class = __importStar(require("./internal/class.js"));
+const Prisma = __importStar(require("./internal/prismaNamespace.js"));
+exports.Prisma = Prisma;
+exports.$Enums = __importStar(require("./enums.js"));
+__exportStar(require("./enums.js"), exports);
+exports.PrismaClient = $Class.getPrismaClientClass();
+//# sourceMappingURL=client.js.map

package/dist/src/generated/prisma/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../../src/generated/prisma/client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,4DAA6C;AAC7C,sEAAuD;AAmB9C,wBAAM;AAjBf,qDAAoC;AACpC,6CAA0B;AAcb,QAAA,YAAY,GAAG,MAAM,CAAC,oBAAoB,EAAE,CAAA"}