@nest-boot/permission 7.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 nest-boot
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/decorators/can.decorator.d.ts

@@ -0,0 +1,21 @@
+import type { Subject } from "@casl/ability";
+import type { CustomDecorator } from "@nestjs/common";
+import type { PermissionAction } from "../enums/permission-action.enum";
+import type { CanOptions } from "../interfaces/can-options.interface";
+import { CAN_METADATA } from "../permission.constants";
+import type { CanSubject } from "../types/can-subject.type";
+/**
+ * Declares that the current route requires the given action on the given subject.
+ *
+ * @param action - Permission action that must be allowed.
+ * @param subject - Permission subject type or subject resolver factory to check.
+ * @returns Nest custom metadata decorator.
+ */
+export declare function Can<T extends Subject = Subject>(action: PermissionAction, subject: CanSubject<T>): CustomDecorator<typeof CAN_METADATA>;
+/**
+ * Declares route permission requirements using the full options object.
+ *
+ * @param options - Permission decorator options.
+ * @returns Nest custom metadata decorator.
+ */
+export declare function Can<T extends Subject = Subject>(options: CanOptions<T>): CustomDecorator<typeof CAN_METADATA>;

package/dist/decorators/can.decorator.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Can = Can;
+const common_1 = require("@nestjs/common");
+const permission_constants_1 = require("../permission.constants");
+/**
+ * Creates permission metadata for the current route handler.
+ *
+ * @param actionOrOptions - Permission action or full options object.
+ * @param subject - Permission subject used with the positional overload.
+ * @returns Nest custom metadata decorator.
+ */
+function Can(actionOrOptions, subject) {
+    if (typeof actionOrOptions === "object") {
+        return (0, common_1.SetMetadata)(permission_constants_1.CAN_METADATA, actionOrOptions);
+    }
+    if (!subject) {
+        throw new TypeError("Permission subject is required.");
+    }
+    const options = {
+        action: actionOrOptions,
+        subject,
+    };
+    return (0, common_1.SetMetadata)(permission_constants_1.CAN_METADATA, options);
+}
+//# sourceMappingURL=can.decorator.js.map

package/dist/decorators/can.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can.decorator.js","sourceRoot":"","sources":["../../src/decorators/can.decorator.ts"],"names":[],"mappings":";;AAsCA,kBAkBC;AAtDD,2CAA6C;AAI7C,kEAAuD;AAyBvD;;;;;;GAMG;AACH,SAAgB,GAAG,CACjB,eAAiD,EACjD,OAAuB;IAEvB,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAA,oBAAW,EAAC,mCAAY,EAAE,eAAe,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAkB;QAC7B,MAAM,EAAE,eAAe;QACvB,OAAO;KACR,CAAC;IAEF,OAAO,IAAA,oBAAW,EAAC,mCAAY,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC"}

package/dist/decorators/can.decorator.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/decorators/can.decorator.spec.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const common_1 = require("@nestjs/common");
+const permission_action_enum_1 = require("../enums/permission-action.enum");
+const permission_constants_1 = require("../permission.constants");
+const can_decorator_1 = require("./can.decorator");
+jest.mock("@nestjs/common", () => ({
+    SetMetadata: jest.fn((key, value) => ({ key, value })),
+}));
+class Subject {
+}
+describe("Can", () => {
+    beforeEach(() => {
+        jest.mocked(common_1.SetMetadata).mockClear();
+    });
+    it("stores action and subject metadata from positional arguments", () => {
+        expect((0, can_decorator_1.Can)(permission_action_enum_1.PermissionAction.READ, Subject)).toEqual({
+            key: permission_constants_1.CAN_METADATA,
+            value: {
+                action: permission_action_enum_1.PermissionAction.READ,
+                subject: Subject,
+            },
+        });
+    });
+    it("stores subject factory as positional subject argument", () => {
+        const subjectFactory = jest.fn();
+        expect((0, can_decorator_1.Can)(permission_action_enum_1.PermissionAction.READ, subjectFactory)).toEqual({
+            key: permission_constants_1.CAN_METADATA,
+            value: {
+                action: permission_action_enum_1.PermissionAction.READ,
+                subject: subjectFactory,
+            },
+        });
+    });
+    it("stores full permission options when an options object is provided", () => {
+        const options = {
+            action: permission_action_enum_1.PermissionAction.UPDATE,
+            subject: Subject,
+        };
+        expect((0, can_decorator_1.Can)(options)).toEqual({
+            key: permission_constants_1.CAN_METADATA,
+            value: options,
+        });
+    });
+});
+//# sourceMappingURL=can.decorator.spec.js.map

package/dist/decorators/can.decorator.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can.decorator.spec.js","sourceRoot":"","sources":["../../src/decorators/can.decorator.spec.ts"],"names":[],"mappings":";;AAAA,2CAA6C;AAE7C,4EAAmE;AACnE,kEAAuD;AACvD,mDAAsC;AAEtC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;CACvD,CAAC,CAAC,CAAC;AAEJ,MAAM,OAAO;CAAG;AAEhB,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE;IACnB,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,MAAM,CAAC,oBAAW,CAAC,CAAC,SAAS,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,IAAA,mBAAG,EAAC,yCAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAClD,GAAG,EAAE,mCAAY;YACjB,KAAK,EAAE;gBACL,MAAM,EAAE,yCAAgB,CAAC,IAAI;gBAC7B,OAAO,EAAE,OAAO;aACjB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,cAAc,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAEjC,MAAM,CAAC,IAAA,mBAAG,EAAC,yCAAgB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,GAAG,EAAE,mCAAY;YACjB,KAAK,EAAE;gBACL,MAAM,EAAE,yCAAgB,CAAC,IAAI;gBAC7B,OAAO,EAAE,cAAc;aACxB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,yCAAgB,CAAC,MAAM;YAC/B,OAAO,EAAE,OAAO;SACjB,CAAC;QAEF,MAAM,CAAC,IAAA,mBAAG,EAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3B,GAAG,EAAE,mCAAY;YACjB,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/enums/permission-action.enum.d.ts

@@ -0,0 +1,13 @@
+/** Common permission actions used by `PermissionAbility`. */
+export declare enum PermissionAction {
+    /** Create a resource. */
+    CREATE = "create",
+    /** Read a resource. */
+    READ = "read",
+    /** Update a resource. */
+    UPDATE = "update",
+    /** Delete a resource. */
+    DELETE = "delete",
+    /** Manage a resource, including all actions. */
+    MANAGE = "manage"
+}

package/dist/enums/permission-action.enum.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionAction = void 0;
+/** Common permission actions used by `PermissionAbility`. */
+var PermissionAction;
+(function (PermissionAction) {
+    /** Create a resource. */
+    PermissionAction["CREATE"] = "create";
+    /** Read a resource. */
+    PermissionAction["READ"] = "read";
+    /** Update a resource. */
+    PermissionAction["UPDATE"] = "update";
+    /** Delete a resource. */
+    PermissionAction["DELETE"] = "delete";
+    /** Manage a resource, including all actions. */
+    PermissionAction["MANAGE"] = "manage";
+})(PermissionAction || (exports.PermissionAction = PermissionAction = {}));
+//# sourceMappingURL=permission-action.enum.js.map

package/dist/enums/permission-action.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-action.enum.js","sourceRoot":"","sources":["../../src/enums/permission-action.enum.ts"],"names":[],"mappings":";;;AAAA,6DAA6D;AAC7D,IAAY,gBAWX;AAXD,WAAY,gBAAgB;IAC1B,yBAAyB;IACzB,qCAAiB,CAAA;IACjB,uBAAuB;IACvB,iCAAa,CAAA;IACb,yBAAyB;IACzB,qCAAiB,CAAA;IACjB,yBAAyB;IACzB,qCAAiB,CAAA;IACjB,gDAAgD;IAChD,qCAAiB,CAAA;AACnB,CAAC,EAXW,gBAAgB,gCAAhB,gBAAgB,QAW3B"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+export * from "./decorators/can.decorator";
+export * from "./enums/permission-action.enum";
+export * from "./interfaces/can-options.interface";
+export * from "./interfaces/permission-module-options.interface";
+export * from "./interfaces/route-argument-metadata-value.interface";
+export * from "./permission.ability-builder";
+export * from "./permission.constants";
+export * from "./permission.guard";
+export * from "./permission.module";
+export * from "./types/build-ability-callback.type";
+export * from "./types/can-subject.type";
+export * from "./types/can-subject-factory.type";
+export * from "./types/permission-ability.type";
+export * from "./types/route-argument-metadata.type";
+export * from "./utils/can.util";
+export * from "./utils/get-permission-ability.util";

package/dist/index.js

@@ -0,0 +1,33 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./decorators/can.decorator"), exports);
+__exportStar(require("./enums/permission-action.enum"), exports);
+__exportStar(require("./interfaces/can-options.interface"), exports);
+__exportStar(require("./interfaces/permission-module-options.interface"), exports);
+__exportStar(require("./interfaces/route-argument-metadata-value.interface"), exports);
+__exportStar(require("./permission.ability-builder"), exports);
+__exportStar(require("./permission.constants"), exports);
+__exportStar(require("./permission.guard"), exports);
+__exportStar(require("./permission.module"), exports);
+__exportStar(require("./types/build-ability-callback.type"), exports);
+__exportStar(require("./types/can-subject.type"), exports);
+__exportStar(require("./types/can-subject-factory.type"), exports);
+__exportStar(require("./types/permission-ability.type"), exports);
+__exportStar(require("./types/route-argument-metadata.type"), exports);
+__exportStar(require("./utils/can.util"), exports);
+__exportStar(require("./utils/get-permission-ability.util"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6DAA2C;AAC3C,iEAA+C;AAC/C,qEAAmD;AACnD,mFAAiE;AACjE,uFAAqE;AACrE,+DAA6C;AAC7C,yDAAuC;AACvC,qDAAmC;AACnC,sDAAoC;AACpC,sEAAoD;AACpD,2DAAyC;AACzC,mEAAiD;AACjD,kEAAgD;AAChD,uEAAqD;AACrD,mDAAiC;AACjC,sEAAoD"}

package/dist/interfaces/can-options.interface.d.ts

@@ -0,0 +1,10 @@
+import type { Subject } from "@casl/ability";
+import type { PermissionAction } from "../enums/permission-action.enum";
+import type { CanSubject } from "../types/can-subject.type";
+/** Full `Can` decorator options. */
+export interface CanOptions<T extends Subject = Subject> {
+    /** Permission action that must be allowed. */
+    action: PermissionAction;
+    /** Permission subject type or subject resolver factory to check. */
+    subject: CanSubject<T>;
+}

package/dist/interfaces/can-options.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=can-options.interface.js.map

package/dist/interfaces/can-options.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-options.interface.js","sourceRoot":"","sources":["../../src/interfaces/can-options.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/permission-module-options.interface.d.ts

@@ -0,0 +1,6 @@
+import type { BuildAbilityCallback } from "../types/build-ability-callback.type";
+/** Permission module options. */
+export interface PermissionModuleOptions {
+    /** Builds a permission ability from the current execution context. */
+    buildAbility: BuildAbilityCallback;
+}

package/dist/interfaces/permission-module-options.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=permission-module-options.interface.js.map

package/dist/interfaces/permission-module-options.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-module-options.interface.js","sourceRoot":"","sources":["../../src/interfaces/permission-module-options.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/route-argument-metadata-value.interface.d.ts

@@ -0,0 +1,10 @@
+import type { ExecutionContext } from "@nestjs/common";
+/** Nest route parameter metadata used to reconstruct decorated method arguments. */
+export interface RouteArgumentMetadataValue {
+    /** Decorated method parameter index. */
+    index: number;
+    /** Optional parameter decorator data. */
+    data?: unknown;
+    /** Custom parameter decorator factory. */
+    factory?: (data: unknown, context: ExecutionContext) => unknown;
+}

package/dist/interfaces/route-argument-metadata-value.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=route-argument-metadata-value.interface.js.map

package/dist/interfaces/route-argument-metadata-value.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-argument-metadata-value.interface.js","sourceRoot":"","sources":["../../src/interfaces/route-argument-metadata-value.interface.ts"],"names":[],"mappings":""}

package/dist/permission.ability-builder.d.ts

@@ -0,0 +1,7 @@
+import { AbilityBuilder } from "@casl/ability";
+import type { PermissionAbility } from "./types/permission-ability.type";
+/** CASL ability builder configured for `PermissionAbility`. */
+export declare class PermissionAbilityBuilder extends AbilityBuilder<PermissionAbility> {
+    /** Creates an ability builder backed by CASL Mongo ability. */
+    constructor();
+}

package/dist/permission.ability-builder.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionAbilityBuilder = void 0;
+const ability_1 = require("@casl/ability");
+/** CASL ability builder configured for `PermissionAbility`. */
+class PermissionAbilityBuilder extends ability_1.AbilityBuilder {
+    /** Creates an ability builder backed by CASL Mongo ability. */
+    constructor() {
+        super(ability_1.createMongoAbility);
+    }
+}
+exports.PermissionAbilityBuilder = PermissionAbilityBuilder;
+//# sourceMappingURL=permission.ability-builder.js.map

package/dist/permission.ability-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.ability-builder.js","sourceRoot":"","sources":["../src/permission.ability-builder.ts"],"names":[],"mappings":";;;AAAA,2CAAmE;AAInE,+DAA+D;AAC/D,MAAa,wBAAyB,SAAQ,wBAAiC;IAC7E,+DAA+D;IAC/D;QACE,KAAK,CAAC,4BAAkB,CAAC,CAAC;IAC5B,CAAC;CACF;AALD,4DAKC"}

package/dist/permission.constants.d.ts

@@ -0,0 +1,50 @@
+/** Reflection metadata key used by the `Can` decorator. */
+export declare const CAN_METADATA: unique symbol;
+/** Request context key that stores the resolved permission ability. */
+export declare const PERMISSION_ABILITY: unique symbol;
+/** Request context key that stores the in-flight permission ability promise. */
+export declare const PERMISSION_ABILITY_PROMISE: unique symbol;
+/** Nest route arguments metadata key. */
+export declare const ROUTE_ARGS_METADATA = "__routeArguments__";
+/** Nest custom route arguments metadata key suffix. */
+export declare const CUSTOM_ROUTE_ARGS_METADATA = "__customRouteArgs__";
+/** GraphQL route parameter type ids used by Nest GraphQL. */
+export declare const GQL_PARAM_TYPES: {
+    /** GraphQL root object parameter type id. */
+    readonly ROOT: 0;
+    /** GraphQL context parameter type id. */
+    readonly CONTEXT: 1;
+    /** GraphQL resolve info parameter type id. */
+    readonly INFO: 2;
+    /** GraphQL arguments parameter type id. */
+    readonly ARGS: 3;
+};
+/** HTTP route parameter type ids used by Nest. */
+export declare const ROUTE_PARAM_TYPES: {
+    /** HTTP request parameter type id. */
+    readonly REQUEST: 0;
+    /** HTTP response parameter type id. */
+    readonly RESPONSE: 1;
+    /** HTTP next callback parameter type id. */
+    readonly NEXT: 2;
+    /** HTTP body parameter type id. */
+    readonly BODY: 3;
+    /** HTTP query parameter type id. */
+    readonly QUERY: 4;
+    /** HTTP route params parameter type id. */
+    readonly PARAM: 5;
+    /** HTTP headers parameter type id. */
+    readonly HEADERS: 6;
+    /** HTTP session parameter type id. */
+    readonly SESSION: 7;
+    /** HTTP uploaded file parameter type id. */
+    readonly FILE: 8;
+    /** HTTP uploaded files parameter type id. */
+    readonly FILES: 9;
+    /** HTTP host parameter type id. */
+    readonly HOST: 10;
+    /** HTTP IP parameter type id. */
+    readonly IP: 11;
+    /** HTTP raw body parameter type id. */
+    readonly RAW_BODY: 12;
+};

package/dist/permission.constants.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ROUTE_PARAM_TYPES = exports.GQL_PARAM_TYPES = exports.CUSTOM_ROUTE_ARGS_METADATA = exports.ROUTE_ARGS_METADATA = exports.PERMISSION_ABILITY_PROMISE = exports.PERMISSION_ABILITY = exports.CAN_METADATA = void 0;
+/** Reflection metadata key used by the `Can` decorator. */
+exports.CAN_METADATA = Symbol("CAN_METADATA");
+/** Request context key that stores the resolved permission ability. */
+exports.PERMISSION_ABILITY = Symbol("PERMISSION_ABILITY");
+/** Request context key that stores the in-flight permission ability promise. */
+exports.PERMISSION_ABILITY_PROMISE = Symbol("PERMISSION_ABILITY_PROMISE");
+/** Nest route arguments metadata key. */
+exports.ROUTE_ARGS_METADATA = "__routeArguments__";
+/** Nest custom route arguments metadata key suffix. */
+exports.CUSTOM_ROUTE_ARGS_METADATA = "__customRouteArgs__";
+/** GraphQL route parameter type ids used by Nest GraphQL. */
+exports.GQL_PARAM_TYPES = {
+    /** GraphQL root object parameter type id. */
+    ROOT: 0,
+    /** GraphQL context parameter type id. */
+    CONTEXT: 1,
+    /** GraphQL resolve info parameter type id. */
+    INFO: 2,
+    /** GraphQL arguments parameter type id. */
+    ARGS: 3,
+};
+/** HTTP route parameter type ids used by Nest. */
+exports.ROUTE_PARAM_TYPES = {
+    /** HTTP request parameter type id. */
+    REQUEST: 0,
+    /** HTTP response parameter type id. */
+    RESPONSE: 1,
+    /** HTTP next callback parameter type id. */
+    NEXT: 2,
+    /** HTTP body parameter type id. */
+    BODY: 3,
+    /** HTTP query parameter type id. */
+    QUERY: 4,
+    /** HTTP route params parameter type id. */
+    PARAM: 5,
+    /** HTTP headers parameter type id. */
+    HEADERS: 6,
+    /** HTTP session parameter type id. */
+    SESSION: 7,
+    /** HTTP uploaded file parameter type id. */
+    FILE: 8,
+    /** HTTP uploaded files parameter type id. */
+    FILES: 9,
+    /** HTTP host parameter type id. */
+    HOST: 10,
+    /** HTTP IP parameter type id. */
+    IP: 11,
+    /** HTTP raw body parameter type id. */
+    RAW_BODY: 12,
+};
+//# sourceMappingURL=permission.constants.js.map

package/dist/permission.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.constants.js","sourceRoot":"","sources":["../src/permission.constants.ts"],"names":[],"mappings":";;;AAAA,2DAA2D;AAC9C,QAAA,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;AAEnD,uEAAuE;AAC1D,QAAA,kBAAkB,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAE/D,gFAAgF;AACnE,QAAA,0BAA0B,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAE/E,yCAAyC;AAC5B,QAAA,mBAAmB,GAAG,oBAAoB,CAAC;AAExD,uDAAuD;AAC1C,QAAA,0BAA0B,GAAG,qBAAqB,CAAC;AAEhE,6DAA6D;AAChD,QAAA,eAAe,GAAG;IAC7B,6CAA6C;IAC7C,IAAI,EAAE,CAAC;IACP,yCAAyC;IACzC,OAAO,EAAE,CAAC;IACV,8CAA8C;IAC9C,IAAI,EAAE,CAAC;IACP,2CAA2C;IAC3C,IAAI,EAAE,CAAC;CACC,CAAC;AAEX,kDAAkD;AACrC,QAAA,iBAAiB,GAAG;IAC/B,sCAAsC;IACtC,OAAO,EAAE,CAAC;IACV,uCAAuC;IACvC,QAAQ,EAAE,CAAC;IACX,4CAA4C;IAC5C,IAAI,EAAE,CAAC;IACP,mCAAmC;IACnC,IAAI,EAAE,CAAC;IACP,oCAAoC;IACpC,KAAK,EAAE,CAAC;IACR,2CAA2C;IAC3C,KAAK,EAAE,CAAC;IACR,sCAAsC;IACtC,OAAO,EAAE,CAAC;IACV,sCAAsC;IACtC,OAAO,EAAE,CAAC;IACV,4CAA4C;IAC5C,IAAI,EAAE,CAAC;IACP,6CAA6C;IAC7C,KAAK,EAAE,CAAC;IACR,mCAAmC;IACnC,IAAI,EAAE,EAAE;IACR,iCAAiC;IACjC,EAAE,EAAE,EAAE;IACN,uCAAuC;IACvC,QAAQ,EAAE,EAAE;CACJ,CAAC"}

package/dist/permission.guard.d.ts

@@ -0,0 +1,51 @@
+import type { CanActivate, ExecutionContext } from "@nestjs/common";
+import { ModuleRef, Reflector } from "@nestjs/core";
+import type { PermissionModuleOptions } from "./interfaces/permission-module-options.interface";
+/** Guard that evaluates CASL permissions from `Can` metadata. */
+export declare class PermissionGuard implements CanActivate {
+    /** Nest metadata reflector. */
+    private readonly reflector;
+    /** Permission module options. */
+    private readonly options;
+    /** Nest module reference used to resolve the current handler instance. */
+    private readonly moduleRef;
+    /**
+     * Creates the permission guard.
+     *
+     * @param reflector - Nest metadata reflector.
+     * @param options - Permission module options.
+     */
+    constructor(
+    /** Nest metadata reflector. */
+    reflector: Reflector, options: PermissionModuleOptions, 
+    /** Nest module reference used to resolve the current handler instance. */
+    moduleRef: ModuleRef);
+    /**
+     * Checks whether the current request satisfies the route permission metadata.
+     *
+     * @param context - Current Nest execution context.
+     * @returns `true` when access is allowed.
+     */
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    private getOrBuildAbility;
+    private getCachedAbility;
+    private getCachedAbilityPromise;
+    private buildAndCacheAbility;
+    private resolveSubject;
+    private isSubjectType;
+    private resolveProvider;
+    private resolveSubjectFactory;
+    private resolveHandlerSelf;
+    private getContextId;
+    private getRequest;
+    private getSubjectFactoryArgs;
+    private getRouteArgsMetadata;
+    private getHandlerMethodName;
+    private createRouteArguments;
+    private extractRouteArgument;
+    private resolveGraphqlRouteArgument;
+    private resolveHttpRouteArgument;
+    private getObjectValue;
+    private getStringData;
+    private getRecord;
+}