@rhino-dev/rhino-nestjs 0.2.5

package/dist/exporters/typescript-exporter.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateTypeScriptTypes = generateTypeScriptTypes;
+exports.generate = generate;
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Generate a portable `.d.ts` string from an RhinoConfig.
+ *
+ * - One interface per registered model slug, using `allowedFields` for
+ *   properties when available.
+ * - A `${PascalSlug}Query` interface when `allowedFilters`, `allowedSorts`
+ *   or `allowedSearch` are set.
+ * - Generic helpers: `Paginated<T>`, `ApiResponse<T>`.
+ * - A top-level `RhinoModels` union of all registered slugs.
+ * - No Prisma-dependent imports.
+ */
+function generateTypeScriptTypes(config, options = {}) {
+    const lines = [];
+    // ---------- header ----------
+    const header = options.header ??
+        `// This file is auto-generated by Rhino. Do not edit manually.
+// Generated: ${new Date().toISOString()}`;
+    lines.push(header, '');
+    // ---------- shared generics ----------
+    lines.push('/** Paginated list response returned by Rhino list endpoints. */', 'export interface Paginated<T> {', '  data: T[];', '  meta: {', '    currentPage: number;', '    lastPage: number;', '    perPage: number;', '    total: number;', '  };', '}', '', '/** Generic API response wrapper used by single-resource endpoints. */', 'export interface ApiResponse<T> {', '  data: T;', '}', '');
+    // ---------- permission helpers ----------
+    lines.push('/** A dot-separated permission string in the form `slug.action`. */', 'export type Permission = string;', '', '/** Check whether `permission` appears in a list of `granted` permissions.', ' *  Supports wildcards: `*`, `{slug}.*`.', ' */', 'export declare function matchesPermission(', '  permission: Permission,', '  granted: Permission[] | null | undefined,', '): boolean;', '');
+    const models = config.models ?? {};
+    const slugs = Object.keys(models);
+    // ---------- per-model interfaces ----------
+    for (const slug of slugs) {
+        const reg = models[slug];
+        const ifaceName = slugToPascal(slug);
+        // Model interface
+        lines.push(`/** Rhino model interface for the '${slug}' resource. */`);
+        lines.push(`export interface ${ifaceName} {`);
+        const fields = reg.allowedFields ?? [];
+        if (fields.length > 0) {
+            for (const field of fields) {
+                lines.push(`  ${sanitizeKey(field)}: string | number | boolean | null;`);
+            }
+        }
+        else {
+            // Minimal fallback when no field hints are available
+            lines.push('  id: string | number;');
+            lines.push('  [key: string]: unknown;');
+        }
+        lines.push('}', '');
+        // Query interface — emit when there's at least one query hint
+        const filters = reg.allowedFilters ?? [];
+        const sorts = reg.allowedSorts ?? [];
+        const search = reg.allowedSearch ?? [];
+        const includes = reg.allowedIncludes ?? [];
+        if (filters.length > 0 || sorts.length > 0 || search.length > 0 || includes.length > 0) {
+            lines.push(`/** Query parameters accepted by the '${slug}' list endpoint. */`);
+            lines.push(`export interface ${ifaceName}Query {`);
+            if (filters.length > 0) {
+                for (const f of filters) {
+                    lines.push(`  'filter[${f}]'?: string | number;`);
+                }
+            }
+            if (sorts.length > 0) {
+                const sortLiterals = [
+                    ...sorts.map(s => `'${s}'`),
+                    ...sorts.map(s => `'-${s}'`),
+                ].join(' | ');
+                lines.push(`  sort?: ${sortLiterals};`);
+            }
+            if (search.length > 0) {
+                lines.push('  search?: string;');
+            }
+            if (includes.length > 0) {
+                const includeLiterals = includes.map(i => `'${i}'`).join(' | ');
+                lines.push(`  include?: ${includeLiterals};`);
+            }
+            if (reg.allowedFields && reg.allowedFields.length > 0) {
+                lines.push(`  'fields[${slug}]'?: string;`);
+            }
+            if (reg.paginationEnabled !== false) {
+                lines.push('  page?: number;');
+                lines.push('  per_page?: number;');
+            }
+            lines.push('}', '');
+        }
+    }
+    // ---------- RhinoModels union ----------
+    if (slugs.length > 0) {
+        const union = slugs.map(s => `'${s}'`).join(' | ');
+        lines.push('/** Union of all registered Rhino model slugs. */', `export type RhinoModels = ${union};`, '');
+    }
+    else {
+        lines.push('/** Union of all registered Rhino model slugs (none registered). */', 'export type RhinoModels = never;', '');
+    }
+    return lines.join('\n');
+}
+// ---------------------------------------------------------------------------
+// CLI-compatible alias
+// ---------------------------------------------------------------------------
+/**
+ * Alias for `generateTypeScriptTypes` used by the CLI command.
+ *
+ * @internal  Prefer `generateTypeScriptTypes` in library code.
+ */
+function generate(config, options = {}) {
+    return generateTypeScriptTypes(config, options);
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Convert a slug like `blog-posts` or `blog_posts` to `BlogPosts`.
+ */
+function slugToPascal(slug) {
+    return slug
+        .replace(/[-_](.)/g, (_, c) => c.toUpperCase())
+        .replace(/^(.)/, (_, c) => c.toUpperCase());
+}
+/**
+ * Wrap a property key in quotes if it contains characters that are not
+ * valid unquoted TypeScript identifiers.
+ */
+function sanitizeKey(key) {
+    if (/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(key))
+        return key;
+    return `'${key}'`;
+}
+//# sourceMappingURL=typescript-exporter.js.map

package/dist/exporters/typescript-exporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript-exporter.js","sourceRoot":"","sources":["../../src/exporters/typescript-exporter.ts"],"names":[],"mappings":";;AAsBA,0DAwIC;AAWD,4BAKC;AAvKD,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,SAAgB,uBAAuB,CACrC,MAAmB,EACnB,UAAqC,EAAE;IAEvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,+BAA+B;IAC/B,MAAM,MAAM,GACV,OAAO,CAAC,MAAM;QACd;gBACY,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEvB,wCAAwC;IACxC,KAAK,CAAC,IAAI,CACR,kEAAkE,EAClE,iCAAiC,EACjC,cAAc,EACd,WAAW,EACX,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,MAAM,EACN,GAAG,EACH,EAAE,EACF,wEAAwE,EACxE,mCAAmC,EACnC,YAAY,EACZ,GAAG,EACH,EAAE,CACH,CAAC;IAEF,2CAA2C;IAC3C,KAAK,CAAC,IAAI,CACR,qEAAqE,EACrE,kCAAkC,EAClC,EAAE,EACF,4EAA4E,EAC5E,0CAA0C,EAC1C,KAAK,EACL,4CAA4C,EAC5C,2BAA2B,EAC3B,6CAA6C,EAC7C,aAAa,EACb,EAAE,CACH,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAElC,6CAA6C;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAErC,kBAAkB;QAClB,KAAK,CAAC,IAAI,CAAC,sCAAsC,IAAI,gBAAgB,CAAC,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,oBAAoB,SAAS,IAAI,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,qDAAqD;YACrD,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAEpB,8DAA8D;QAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;QAE3C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvF,KAAK,CAAC,IAAI,CAAC,yCAAyC,IAAI,qBAAqB,CAAC,CAAC;YAC/E,KAAK,CAAC,IAAI,CAAC,oBAAoB,SAAS,SAAS,CAAC,CAAC;YAEnD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,YAAY,GAAG;oBACnB,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC3B,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;iBAC7B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,YAAY,YAAY,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACnC,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,eAAe,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAChE,KAAK,CAAC,IAAI,CAAC,eAAe,eAAe,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtD,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,cAAc,CAAC,CAAC;YAC9C,CAAC;YAED,IAAI,GAAG,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACrC,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CACR,mDAAmD,EACnD,6BAA6B,KAAK,GAAG,EACrC,EAAE,CACH,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,qEAAqE,EACrE,kCAAkC,EAClC,EAAE,CACH,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;GAIG;AACH,SAAgB,QAAQ,CACtB,MAAmB,EACnB,UAAqC,EAAE;IAEvC,OAAO,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;GAEG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI;SACR,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SACtD,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACvD,OAAO,IAAI,GAAG,GAAG,CAAC;AACpB,CAAC"}

package/dist/guards/jwt-auth.guard.d.ts

@@ -0,0 +1,16 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { AuthService } from '../services/auth.service';
+import { PrismaService } from '../prisma/prisma.service';
+import { RhinoConfigService } from '../rhino.config';
+/**
+ * Simple JWT guard that verifies the Bearer token, loads the user
+ * (with userRoles for permission checks), and attaches to `request.user`.
+ * If the route is in a public group, it is typically skipped at the registration layer.
+ */
+export declare class JwtAuthGuard implements CanActivate {
+    private readonly auth;
+    private readonly prisma;
+    private readonly config;
+    constructor(auth: AuthService, prisma: PrismaService, config: RhinoConfigService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}

package/dist/guards/jwt-auth.guard.js

@@ -0,0 +1,61 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtAuthGuard = void 0;
+const common_1 = require("@nestjs/common");
+const auth_service_1 = require("../services/auth.service");
+const prisma_service_1 = require("../prisma/prisma.service");
+const rhino_config_1 = require("../rhino.config");
+const rhino_exception_1 = require("../errors/rhino-exception");
+/**
+ * Simple JWT guard that verifies the Bearer token, loads the user
+ * (with userRoles for permission checks), and attaches to `request.user`.
+ * If the route is in a public group, it is typically skipped at the registration layer.
+ */
+let JwtAuthGuard = class JwtAuthGuard {
+    auth;
+    prisma;
+    config;
+    constructor(auth, prisma, config) {
+        this.auth = auth;
+        this.prisma = prisma;
+        this.config = config;
+    }
+    async canActivate(context) {
+        const req = context.switchToHttp().getRequest();
+        if (req.__skipAuth)
+            return true;
+        const header = String(req.headers?.authorization ?? '');
+        const [scheme, token] = header.split(' ');
+        if (scheme !== 'Bearer' || !token) {
+            throw rhino_exception_1.RhinoException.unauthorized('Missing bearer token');
+        }
+        const payload = this.auth.verifyToken(token);
+        const userModel = this.config.authConfig().userModel;
+        const delegate = this.prisma.model(userModel);
+        const user = await delegate.findUnique({
+            where: { id: payload.sub },
+            include: { userRoles: { include: { role: true } } },
+        });
+        if (!user)
+            throw rhino_exception_1.RhinoException.unauthorized('User not found');
+        req.user = user;
+        return true;
+    }
+};
+exports.JwtAuthGuard = JwtAuthGuard;
+exports.JwtAuthGuard = JwtAuthGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [auth_service_1.AuthService,
+        prisma_service_1.PrismaService,
+        rhino_config_1.RhinoConfigService])
+], JwtAuthGuard);
+//# sourceMappingURL=jwt-auth.guard.js.map

package/dist/guards/jwt-auth.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-auth.guard.js","sourceRoot":"","sources":["../../src/guards/jwt-auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAIwB;AACxB,2DAAuD;AACvD,6DAAyD;AACzD,kDAAqD;AACrD,+DAA2D;AAG3D;;;;GAIG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAY;IAEJ;IACA;IACA;IAHnB,YACmB,IAAiB,EACjB,MAAqB,EACrB,MAA0B;QAF1B,SAAI,GAAJ,IAAI,CAAa;QACjB,WAAM,GAAN,MAAM,CAAe;QACrB,WAAM,GAAN,MAAM,CAAoB;IAC1C,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAgB,CAAC;QAC9D,IAAI,GAAG,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,gCAAc,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC;YACrC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE;YAC1B,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,MAAM,gCAAc,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC/D,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA1BY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAGc,0BAAW;QACT,8BAAa;QACb,iCAAkB;GAJlC,YAAY,CA0BxB"}

package/dist/guards/resource-policy.guard.d.ts

@@ -0,0 +1,12 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { RhinoConfigService } from '../rhino.config';
+/**
+ * Runs the model's ResourcePolicy (or convention-based default)
+ * to authorize the current request. Action derived from HTTP verb & route.
+ */
+export declare class ResourcePolicyGuard implements CanActivate {
+    private readonly config;
+    constructor(config: RhinoConfigService);
+    canActivate(context: ExecutionContext): boolean;
+    private resolveAction;
+}

package/dist/guards/resource-policy.guard.js

@@ -0,0 +1,111 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResourcePolicyGuard = void 0;
+const common_1 = require("@nestjs/common");
+const rhino_config_1 = require("../rhino.config");
+const resource_policy_1 = require("../policies/resource-policy");
+const permission_matcher_1 = require("../utils/permission-matcher");
+const rhino_exception_1 = require("../errors/rhino-exception");
+const METHOD_ACTIONS = {
+    GET_list: 'index',
+    GET_one: 'show',
+    POST: 'store',
+    PUT: 'update',
+    PATCH: 'update',
+    DELETE: 'destroy',
+};
+/**
+ * Runs the model's ResourcePolicy (or convention-based default)
+ * to authorize the current request. Action derived from HTTP verb & route.
+ */
+let ResourcePolicyGuard = class ResourcePolicyGuard {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    canActivate(context) {
+        const req = context.switchToHttp().getRequest();
+        const modelSlug = req.params?.modelSlug ?? req.params?.model;
+        if (!modelSlug)
+            return true; // non-model route — other guards handle it
+        const reg = this.config.model(modelSlug);
+        if (!reg)
+            throw rhino_exception_1.RhinoException.unknownResource(modelSlug);
+        const action = this.resolveAction(req);
+        const user = req.user;
+        const org = req.organization;
+        const PolicyClass = reg.policy;
+        const policy = PolicyClass ? new PolicyClass() : new resource_policy_1.ResourcePolicy();
+        policy.resourceSlug = modelSlug;
+        let allowed = false;
+        switch (action) {
+            case 'index':
+                allowed = policy.viewAny(user, org);
+                break;
+            case 'show':
+                allowed = policy.view(user, null, org);
+                break;
+            case 'store':
+                allowed = policy.create(user, org);
+                break;
+            case 'update':
+                allowed = policy.update(user, null, org);
+                break;
+            case 'destroy':
+                allowed = policy.delete(user, null, org);
+                break;
+            case 'trashed':
+                allowed = policy.viewTrashed(user, org);
+                break;
+            case 'restore':
+                allowed = policy.restore(user, null, org);
+                break;
+            case 'forceDelete':
+                allowed = policy.forceDelete(user, null, org);
+                break;
+            default:
+                allowed = (0, permission_matcher_1.userHasPermission)(user, `${modelSlug}.${action}`, org);
+        }
+        if (!allowed)
+            throw rhino_exception_1.RhinoException.forbidden();
+        req.__action = action;
+        return true;
+    }
+    resolveAction(req) {
+        const method = req.method;
+        const path = (req.url ?? req.originalUrl ?? '');
+        const hasId = req.params?.id != null;
+        const parts = path.split('?')[0].split('/').filter(Boolean);
+        const last = parts[parts.length - 1];
+        if (method === 'GET' && last === 'trashed')
+            return 'trashed';
+        if (method === 'POST' && last === 'restore')
+            return 'restore';
+        if (method === 'DELETE' && (last === 'force-delete' || last === 'force'))
+            return 'forceDelete';
+        if (method === 'GET')
+            return hasId ? 'show' : 'index';
+        if (method === 'POST')
+            return 'store';
+        if (method === 'PUT' || method === 'PATCH')
+            return 'update';
+        if (method === 'DELETE')
+            return 'destroy';
+        return 'unknown';
+    }
+};
+exports.ResourcePolicyGuard = ResourcePolicyGuard;
+exports.ResourcePolicyGuard = ResourcePolicyGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [rhino_config_1.RhinoConfigService])
+], ResourcePolicyGuard);
+//# sourceMappingURL=resource-policy.guard.js.map

package/dist/guards/resource-policy.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-policy.guard.js","sourceRoot":"","sources":["../../src/guards/resource-policy.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAIwB;AACxB,kDAAqD;AACrD,iEAA6D;AAC7D,oEAAgE;AAChE,+DAA2D;AAG3D,MAAM,cAAc,GAA2B;IAC7C,QAAQ,EAAE,OAAO;IACjB,OAAO,EAAE,MAAM;IACf,IAAI,EAAE,OAAO;IACb,GAAG,EAAE,QAAQ;IACb,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,SAAS;CAClB,CAAC;AAEF;;;GAGG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IACD;IAA7B,YAA6B,MAA0B;QAA1B,WAAM,GAAN,MAAM,CAAoB;IAAG,CAAC;IAE3D,WAAW,CAAC,OAAyB;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAgB,CAAC;QAC9D,MAAM,SAAS,GAAW,GAAG,CAAC,MAAM,EAAE,SAAS,IAAK,GAAG,CAAC,MAAc,EAAE,KAAK,CAAC;QAC9E,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,CAAC,2CAA2C;QAExE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,gCAAc,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC;QAE7B,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC;QAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,gCAAc,EAAE,CAAC;QACtE,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC;QAEhC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,OAAO;gBACV,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACpC,MAAM;YACR,KAAK,MAAM;gBACT,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACvC,MAAM;YACR,KAAK,OAAO;gBACV,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACnC,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACzC,MAAM;YACR,KAAK,SAAS;gBACZ,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACzC,MAAM;YACR,KAAK,SAAS;gBACZ,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACxC,MAAM;YACR,KAAK,SAAS;gBACZ,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC1C,MAAM;YACR,KAAK,aAAa;gBAChB,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9C,MAAM;YACR;gBACE,OAAO,GAAG,IAAA,sCAAiB,EAAC,IAAI,EAAE,GAAG,SAAS,IAAI,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,OAAO;YAAE,MAAM,gCAAc,CAAC,SAAS,EAAE,CAAC;QAC/C,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,aAAa,CAAC,GAAQ;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAgB,CAAC;QACpC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAW,CAAC;QAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC7D,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC9D,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,OAAO,CAAC;YAAE,OAAO,aAAa,CAAC;QAC/F,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACtD,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC;QACtC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,QAAQ,CAAC;QAC5D,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAA;AArEY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;qCAE0B,iCAAkB;GAD5C,mBAAmB,CAqE/B"}

package/dist/index.d.ts

@@ -0,0 +1,60 @@
+export { RhinoModule, type RhinoModuleOptions } from './rhino.module';
+export { RhinoException, type RhinoErrorCode, type RhinoErrorBody, } from './errors/rhino-exception';
+export type { RhinoRequest } from './interfaces/rhino-request.interface';
+export { RhinoConfigService, normalizeConfig, } from './rhino.config';
+export { RHINO_CONFIG, RHINO_PRISMA_CLIENT, RHINO_MODULE_OPTIONS, } from './constants/tokens';
+export * from './interfaces/rhino-config.interface';
+export { ResourcePolicy } from './policies/resource-policy';
+export { JwtAuthGuard } from './guards/jwt-auth.guard';
+export { ResourcePolicyGuard } from './guards/resource-policy.guard';
+export { ResponseInterceptor, paginated } from './interceptors/response.interceptor';
+export { HiddenColumnsInterceptor } from './interceptors/hidden-columns.interceptor';
+export { ResolveOrganizationMiddleware } from './middleware/resolve-organization.middleware';
+export { RouteGroupMiddleware } from './middleware/route-group.middleware';
+export { createTenantRouteRewrite, type TenantRouteRewriteOptions, } from './middleware/tenant-route-rewrite';
+export { GlobalController } from './controllers/global.controller';
+export { AuthController } from './controllers/auth.controller';
+export { InvitationController } from './controllers/invitation.controller';
+export { NestedController } from './controllers/nested.controller';
+export { PrismaService, type PrismaClientLike } from './prisma/prisma.service';
+export { ResourceService } from './services/resource.service';
+export { QueryBuilderService } from './services/query-builder.service';
+export { SerializerService, BASE_HIDDEN_COLUMNS } from './services/serializer.service';
+export { ValidationService } from './services/validation.service';
+export { AuditService } from './services/audit.service';
+export { AuthService } from './services/auth.service';
+export { InvitationService } from './services/invitation.service';
+export { NestedService } from './services/nested.service';
+export { OrganizationService } from './services/organization.service';
+export { ScopeService, type RhinoScope } from './services/scope.service';
+export { applyRhinoRouting, describeRoutes } from './services/route-registration.service';
+export { withSoftDelete } from './prisma/prisma-soft-delete.extension';
+export { withUuid } from './prisma/prisma-uuid.extension';
+export { RhinoModel, getRhinoModelMetadata, BelongsToOrganization, HasAuditTrail, HasUuid, HasSoftDeletes, ExceptActions, HidableColumns, PermittedAttrs, } from './decorators';
+export { coercePermissions, matchesPermission, resolveUserRoleSlug, resolveUserPermissions, userHasPermission, } from './utils/permission-matcher';
+export { formatPrice, type CurrencyCode } from './utils/format';
+export { autoDiscoverScopes, type ScopeDiscoveryOptions } from './utils/scope-discovery';
+export { defineModel, type ModelDefinition } from './utils/model-builder';
+export { findOrganizationFkChain, type FkRelation, type FkChainStep, type WalkOptions, } from './utils/fk-chain-walker';
+export { generatePostmanCollection, type PostmanExporterOptions, } from './exporters/postman-exporter';
+export { generateTypeScriptTypes, type TypeScriptExporterOptions, } from './exporters/typescript-exporter';
+export { parseFlags, extractCommand, printHelp } from './cli/index';
+export { runInstall } from './cli/commands/install.command';
+export { runGenerate } from './cli/commands/generate.command';
+export { runBlueprint } from './cli/commands/blueprint.command';
+export { runExportPostman } from './cli/commands/export-postman.command';
+export { runExportTypes } from './cli/commands/export-types.command';
+export { ask, confirm, selectFromList, createInterface as createReadlineInterface, } from './cli/utils/prompt';
+export { fileExists, writeFileSafely, appendIfMissing, } from './cli/utils/io';
+export { BlueprintParser } from './blueprint/blueprint-parser';
+export type { Blueprint, BlueprintColumn, BlueprintOptions, BlueprintPermission, BlueprintRelationship } from './blueprint/blueprint-parser';
+export { BlueprintValidator } from './blueprint/blueprint-validator';
+export type { ValidationResult } from './blueprint/blueprint-validator';
+export { ManifestManager } from './blueprint/manifest-manager';
+export { BlueprintRunner } from './blueprint/blueprint-runner';
+export type { RunnerOptions, RunnerResult } from './blueprint/blueprint-runner';
+export { PrismaSchemaGenerator } from './blueprint/generators/prisma-schema-generator';
+export { ResourceDefinitionGenerator } from './blueprint/generators/resource-definition-generator';
+export { PolicyGenerator } from './blueprint/generators/policy-generator';
+export { TestGenerator } from './blueprint/generators/test-generator';
+export { SeederGenerator } from './blueprint/generators/seeder-generator';

package/dist/index.js

@@ -0,0 +1,171 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userHasPermission = exports.resolveUserPermissions = exports.resolveUserRoleSlug = exports.matchesPermission = exports.coercePermissions = exports.PermittedAttrs = exports.HidableColumns = exports.ExceptActions = exports.HasSoftDeletes = exports.HasUuid = exports.HasAuditTrail = exports.BelongsToOrganization = exports.getRhinoModelMetadata = exports.RhinoModel = exports.withUuid = exports.withSoftDelete = exports.describeRoutes = exports.applyRhinoRouting = exports.ScopeService = exports.OrganizationService = exports.NestedService = exports.InvitationService = exports.AuthService = exports.AuditService = exports.ValidationService = exports.BASE_HIDDEN_COLUMNS = exports.SerializerService = exports.QueryBuilderService = exports.ResourceService = exports.PrismaService = exports.NestedController = exports.InvitationController = exports.AuthController = exports.GlobalController = exports.createTenantRouteRewrite = exports.RouteGroupMiddleware = exports.ResolveOrganizationMiddleware = exports.HiddenColumnsInterceptor = exports.paginated = exports.ResponseInterceptor = exports.ResourcePolicyGuard = exports.JwtAuthGuard = exports.ResourcePolicy = exports.RHINO_MODULE_OPTIONS = exports.RHINO_PRISMA_CLIENT = exports.RHINO_CONFIG = exports.normalizeConfig = exports.RhinoConfigService = exports.RhinoException = exports.RhinoModule = void 0;
+exports.SeederGenerator = exports.TestGenerator = exports.PolicyGenerator = exports.ResourceDefinitionGenerator = exports.PrismaSchemaGenerator = exports.BlueprintRunner = exports.ManifestManager = exports.BlueprintValidator = exports.BlueprintParser = exports.appendIfMissing = exports.writeFileSafely = exports.fileExists = exports.createReadlineInterface = exports.selectFromList = exports.confirm = exports.ask = exports.runExportTypes = exports.runExportPostman = exports.runBlueprint = exports.runGenerate = exports.runInstall = exports.printHelp = exports.extractCommand = exports.parseFlags = exports.generateTypeScriptTypes = exports.generatePostmanCollection = exports.findOrganizationFkChain = exports.defineModel = exports.autoDiscoverScopes = exports.formatPrice = void 0;
+// Module
+var rhino_module_1 = require("./rhino.module");
+Object.defineProperty(exports, "RhinoModule", { enumerable: true, get: function () { return rhino_module_1.RhinoModule; } });
+// Errors
+var rhino_exception_1 = require("./errors/rhino-exception");
+Object.defineProperty(exports, "RhinoException", { enumerable: true, get: function () { return rhino_exception_1.RhinoException; } });
+var rhino_config_1 = require("./rhino.config");
+Object.defineProperty(exports, "RhinoConfigService", { enumerable: true, get: function () { return rhino_config_1.RhinoConfigService; } });
+Object.defineProperty(exports, "normalizeConfig", { enumerable: true, get: function () { return rhino_config_1.normalizeConfig; } });
+// Constants
+var tokens_1 = require("./constants/tokens");
+Object.defineProperty(exports, "RHINO_CONFIG", { enumerable: true, get: function () { return tokens_1.RHINO_CONFIG; } });
+Object.defineProperty(exports, "RHINO_PRISMA_CLIENT", { enumerable: true, get: function () { return tokens_1.RHINO_PRISMA_CLIENT; } });
+Object.defineProperty(exports, "RHINO_MODULE_OPTIONS", { enumerable: true, get: function () { return tokens_1.RHINO_MODULE_OPTIONS; } });
+// Interfaces
+__exportStar(require("./interfaces/rhino-config.interface"), exports);
+// Policies
+var resource_policy_1 = require("./policies/resource-policy");
+Object.defineProperty(exports, "ResourcePolicy", { enumerable: true, get: function () { return resource_policy_1.ResourcePolicy; } });
+// Guards
+var jwt_auth_guard_1 = require("./guards/jwt-auth.guard");
+Object.defineProperty(exports, "JwtAuthGuard", { enumerable: true, get: function () { return jwt_auth_guard_1.JwtAuthGuard; } });
+var resource_policy_guard_1 = require("./guards/resource-policy.guard");
+Object.defineProperty(exports, "ResourcePolicyGuard", { enumerable: true, get: function () { return resource_policy_guard_1.ResourcePolicyGuard; } });
+// Interceptors
+var response_interceptor_1 = require("./interceptors/response.interceptor");
+Object.defineProperty(exports, "ResponseInterceptor", { enumerable: true, get: function () { return response_interceptor_1.ResponseInterceptor; } });
+Object.defineProperty(exports, "paginated", { enumerable: true, get: function () { return response_interceptor_1.paginated; } });
+var hidden_columns_interceptor_1 = require("./interceptors/hidden-columns.interceptor");
+Object.defineProperty(exports, "HiddenColumnsInterceptor", { enumerable: true, get: function () { return hidden_columns_interceptor_1.HiddenColumnsInterceptor; } });
+// Middleware
+var resolve_organization_middleware_1 = require("./middleware/resolve-organization.middleware");
+Object.defineProperty(exports, "ResolveOrganizationMiddleware", { enumerable: true, get: function () { return resolve_organization_middleware_1.ResolveOrganizationMiddleware; } });
+var route_group_middleware_1 = require("./middleware/route-group.middleware");
+Object.defineProperty(exports, "RouteGroupMiddleware", { enumerable: true, get: function () { return route_group_middleware_1.RouteGroupMiddleware; } });
+var tenant_route_rewrite_1 = require("./middleware/tenant-route-rewrite");
+Object.defineProperty(exports, "createTenantRouteRewrite", { enumerable: true, get: function () { return tenant_route_rewrite_1.createTenantRouteRewrite; } });
+// Controllers (consuming apps can re-export under their own routes)
+var global_controller_1 = require("./controllers/global.controller");
+Object.defineProperty(exports, "GlobalController", { enumerable: true, get: function () { return global_controller_1.GlobalController; } });
+var auth_controller_1 = require("./controllers/auth.controller");
+Object.defineProperty(exports, "AuthController", { enumerable: true, get: function () { return auth_controller_1.AuthController; } });
+var invitation_controller_1 = require("./controllers/invitation.controller");
+Object.defineProperty(exports, "InvitationController", { enumerable: true, get: function () { return invitation_controller_1.InvitationController; } });
+var nested_controller_1 = require("./controllers/nested.controller");
+Object.defineProperty(exports, "NestedController", { enumerable: true, get: function () { return nested_controller_1.NestedController; } });
+// Services
+var prisma_service_1 = require("./prisma/prisma.service");
+Object.defineProperty(exports, "PrismaService", { enumerable: true, get: function () { return prisma_service_1.PrismaService; } });
+var resource_service_1 = require("./services/resource.service");
+Object.defineProperty(exports, "ResourceService", { enumerable: true, get: function () { return resource_service_1.ResourceService; } });
+var query_builder_service_1 = require("./services/query-builder.service");
+Object.defineProperty(exports, "QueryBuilderService", { enumerable: true, get: function () { return query_builder_service_1.QueryBuilderService; } });
+var serializer_service_1 = require("./services/serializer.service");
+Object.defineProperty(exports, "SerializerService", { enumerable: true, get: function () { return serializer_service_1.SerializerService; } });
+Object.defineProperty(exports, "BASE_HIDDEN_COLUMNS", { enumerable: true, get: function () { return serializer_service_1.BASE_HIDDEN_COLUMNS; } });
+var validation_service_1 = require("./services/validation.service");
+Object.defineProperty(exports, "ValidationService", { enumerable: true, get: function () { return validation_service_1.ValidationService; } });
+var audit_service_1 = require("./services/audit.service");
+Object.defineProperty(exports, "AuditService", { enumerable: true, get: function () { return audit_service_1.AuditService; } });
+var auth_service_1 = require("./services/auth.service");
+Object.defineProperty(exports, "AuthService", { enumerable: true, get: function () { return auth_service_1.AuthService; } });
+var invitation_service_1 = require("./services/invitation.service");
+Object.defineProperty(exports, "InvitationService", { enumerable: true, get: function () { return invitation_service_1.InvitationService; } });
+var nested_service_1 = require("./services/nested.service");
+Object.defineProperty(exports, "NestedService", { enumerable: true, get: function () { return nested_service_1.NestedService; } });
+var organization_service_1 = require("./services/organization.service");
+Object.defineProperty(exports, "OrganizationService", { enumerable: true, get: function () { return organization_service_1.OrganizationService; } });
+var scope_service_1 = require("./services/scope.service");
+Object.defineProperty(exports, "ScopeService", { enumerable: true, get: function () { return scope_service_1.ScopeService; } });
+var route_registration_service_1 = require("./services/route-registration.service");
+Object.defineProperty(exports, "applyRhinoRouting", { enumerable: true, get: function () { return route_registration_service_1.applyRhinoRouting; } });
+Object.defineProperty(exports, "describeRoutes", { enumerable: true, get: function () { return route_registration_service_1.describeRoutes; } });
+// Prisma extensions
+var prisma_soft_delete_extension_1 = require("./prisma/prisma-soft-delete.extension");
+Object.defineProperty(exports, "withSoftDelete", { enumerable: true, get: function () { return prisma_soft_delete_extension_1.withSoftDelete; } });
+var prisma_uuid_extension_1 = require("./prisma/prisma-uuid.extension");
+Object.defineProperty(exports, "withUuid", { enumerable: true, get: function () { return prisma_uuid_extension_1.withUuid; } });
+// Decorators
+var decorators_1 = require("./decorators");
+Object.defineProperty(exports, "RhinoModel", { enumerable: true, get: function () { return decorators_1.RhinoModel; } });
+Object.defineProperty(exports, "getRhinoModelMetadata", { enumerable: true, get: function () { return decorators_1.getRhinoModelMetadata; } });
+Object.defineProperty(exports, "BelongsToOrganization", { enumerable: true, get: function () { return decorators_1.BelongsToOrganization; } });
+Object.defineProperty(exports, "HasAuditTrail", { enumerable: true, get: function () { return decorators_1.HasAuditTrail; } });
+Object.defineProperty(exports, "HasUuid", { enumerable: true, get: function () { return decorators_1.HasUuid; } });
+Object.defineProperty(exports, "HasSoftDeletes", { enumerable: true, get: function () { return decorators_1.HasSoftDeletes; } });
+Object.defineProperty(exports, "ExceptActions", { enumerable: true, get: function () { return decorators_1.ExceptActions; } });
+Object.defineProperty(exports, "HidableColumns", { enumerable: true, get: function () { return decorators_1.HidableColumns; } });
+Object.defineProperty(exports, "PermittedAttrs", { enumerable: true, get: function () { return decorators_1.PermittedAttrs; } });
+// Utils
+var permission_matcher_1 = require("./utils/permission-matcher");
+Object.defineProperty(exports, "coercePermissions", { enumerable: true, get: function () { return permission_matcher_1.coercePermissions; } });
+Object.defineProperty(exports, "matchesPermission", { enumerable: true, get: function () { return permission_matcher_1.matchesPermission; } });
+Object.defineProperty(exports, "resolveUserRoleSlug", { enumerable: true, get: function () { return permission_matcher_1.resolveUserRoleSlug; } });
+Object.defineProperty(exports, "resolveUserPermissions", { enumerable: true, get: function () { return permission_matcher_1.resolveUserPermissions; } });
+Object.defineProperty(exports, "userHasPermission", { enumerable: true, get: function () { return permission_matcher_1.userHasPermission; } });
+var format_1 = require("./utils/format");
+Object.defineProperty(exports, "formatPrice", { enumerable: true, get: function () { return format_1.formatPrice; } });
+var scope_discovery_1 = require("./utils/scope-discovery");
+Object.defineProperty(exports, "autoDiscoverScopes", { enumerable: true, get: function () { return scope_discovery_1.autoDiscoverScopes; } });
+var model_builder_1 = require("./utils/model-builder");
+Object.defineProperty(exports, "defineModel", { enumerable: true, get: function () { return model_builder_1.defineModel; } });
+var fk_chain_walker_1 = require("./utils/fk-chain-walker");
+Object.defineProperty(exports, "findOrganizationFkChain", { enumerable: true, get: function () { return fk_chain_walker_1.findOrganizationFkChain; } });
+// Exporters
+var postman_exporter_1 = require("./exporters/postman-exporter");
+Object.defineProperty(exports, "generatePostmanCollection", { enumerable: true, get: function () { return postman_exporter_1.generatePostmanCollection; } });
+var typescript_exporter_1 = require("./exporters/typescript-exporter");
+Object.defineProperty(exports, "generateTypeScriptTypes", { enumerable: true, get: function () { return typescript_exporter_1.generateTypeScriptTypes; } });
+// CLI utilities (re-exported for programmatic use)
+var index_1 = require("./cli/index");
+Object.defineProperty(exports, "parseFlags", { enumerable: true, get: function () { return index_1.parseFlags; } });
+Object.defineProperty(exports, "extractCommand", { enumerable: true, get: function () { return index_1.extractCommand; } });
+Object.defineProperty(exports, "printHelp", { enumerable: true, get: function () { return index_1.printHelp; } });
+var install_command_1 = require("./cli/commands/install.command");
+Object.defineProperty(exports, "runInstall", { enumerable: true, get: function () { return install_command_1.runInstall; } });
+var generate_command_1 = require("./cli/commands/generate.command");
+Object.defineProperty(exports, "runGenerate", { enumerable: true, get: function () { return generate_command_1.runGenerate; } });
+var blueprint_command_1 = require("./cli/commands/blueprint.command");
+Object.defineProperty(exports, "runBlueprint", { enumerable: true, get: function () { return blueprint_command_1.runBlueprint; } });
+var export_postman_command_1 = require("./cli/commands/export-postman.command");
+Object.defineProperty(exports, "runExportPostman", { enumerable: true, get: function () { return export_postman_command_1.runExportPostman; } });
+var export_types_command_1 = require("./cli/commands/export-types.command");
+Object.defineProperty(exports, "runExportTypes", { enumerable: true, get: function () { return export_types_command_1.runExportTypes; } });
+var prompt_1 = require("./cli/utils/prompt");
+Object.defineProperty(exports, "ask", { enumerable: true, get: function () { return prompt_1.ask; } });
+Object.defineProperty(exports, "confirm", { enumerable: true, get: function () { return prompt_1.confirm; } });
+Object.defineProperty(exports, "selectFromList", { enumerable: true, get: function () { return prompt_1.selectFromList; } });
+Object.defineProperty(exports, "createReadlineInterface", { enumerable: true, get: function () { return prompt_1.createInterface; } });
+var io_1 = require("./cli/utils/io");
+Object.defineProperty(exports, "fileExists", { enumerable: true, get: function () { return io_1.fileExists; } });
+Object.defineProperty(exports, "writeFileSafely", { enumerable: true, get: function () { return io_1.writeFileSafely; } });
+Object.defineProperty(exports, "appendIfMissing", { enumerable: true, get: function () { return io_1.appendIfMissing; } });
+// Blueprint system
+var blueprint_parser_1 = require("./blueprint/blueprint-parser");
+Object.defineProperty(exports, "BlueprintParser", { enumerable: true, get: function () { return blueprint_parser_1.BlueprintParser; } });
+var blueprint_validator_1 = require("./blueprint/blueprint-validator");
+Object.defineProperty(exports, "BlueprintValidator", { enumerable: true, get: function () { return blueprint_validator_1.BlueprintValidator; } });
+var manifest_manager_1 = require("./blueprint/manifest-manager");
+Object.defineProperty(exports, "ManifestManager", { enumerable: true, get: function () { return manifest_manager_1.ManifestManager; } });
+var blueprint_runner_1 = require("./blueprint/blueprint-runner");
+Object.defineProperty(exports, "BlueprintRunner", { enumerable: true, get: function () { return blueprint_runner_1.BlueprintRunner; } });
+var prisma_schema_generator_1 = require("./blueprint/generators/prisma-schema-generator");
+Object.defineProperty(exports, "PrismaSchemaGenerator", { enumerable: true, get: function () { return prisma_schema_generator_1.PrismaSchemaGenerator; } });
+var resource_definition_generator_1 = require("./blueprint/generators/resource-definition-generator");
+Object.defineProperty(exports, "ResourceDefinitionGenerator", { enumerable: true, get: function () { return resource_definition_generator_1.ResourceDefinitionGenerator; } });
+var policy_generator_1 = require("./blueprint/generators/policy-generator");
+Object.defineProperty(exports, "PolicyGenerator", { enumerable: true, get: function () { return policy_generator_1.PolicyGenerator; } });
+var test_generator_1 = require("./blueprint/generators/test-generator");
+Object.defineProperty(exports, "TestGenerator", { enumerable: true, get: function () { return test_generator_1.TestGenerator; } });
+var seeder_generator_1 = require("./blueprint/generators/seeder-generator");
+Object.defineProperty(exports, "SeederGenerator", { enumerable: true, get: function () { return seeder_generator_1.SeederGenerator; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS;AACT,+CAAsE;AAA7D,2GAAA,WAAW,OAAA;AAEpB,SAAS;AACT,4DAIkC;AAHhC,iHAAA,cAAc,OAAA;AAOhB,+CAGwB;AAFtB,kHAAA,kBAAkB,OAAA;AAClB,+GAAA,eAAe,OAAA;AAGjB,YAAY;AACZ,6CAI4B;AAH1B,sGAAA,YAAY,OAAA;AACZ,6GAAA,mBAAmB,OAAA;AACnB,8GAAA,oBAAoB,OAAA;AAGtB,aAAa;AACb,sEAAoD;AAEpD,WAAW;AACX,8DAA4D;AAAnD,iHAAA,cAAc,OAAA;AAEvB,SAAS;AACT,0DAAuD;AAA9C,8GAAA,YAAY,OAAA;AACrB,wEAAqE;AAA5D,4HAAA,mBAAmB,OAAA;AAE5B,eAAe;AACf,4EAAqF;AAA5E,2HAAA,mBAAmB,OAAA;AAAE,iHAAA,SAAS,OAAA;AACvC,wFAAqF;AAA5E,sIAAA,wBAAwB,OAAA;AAEjC,aAAa;AACb,gGAA6F;AAApF,gJAAA,6BAA6B,OAAA;AACtC,8EAA2E;AAAlE,8HAAA,oBAAoB,OAAA;AAC7B,0EAG2C;AAFzC,gIAAA,wBAAwB,OAAA;AAI1B,oEAAoE;AACpE,qEAAmE;AAA1D,qHAAA,gBAAgB,OAAA;AACzB,iEAA+D;AAAtD,iHAAA,cAAc,OAAA;AACvB,6EAA2E;AAAlE,6HAAA,oBAAoB,OAAA;AAC7B,qEAAmE;AAA1D,qHAAA,gBAAgB,OAAA;AAEzB,WAAW;AACX,0DAA+E;AAAtE,+GAAA,aAAa,OAAA;AACtB,gEAA8D;AAArD,mHAAA,eAAe,OAAA;AACxB,0EAAuE;AAA9D,4HAAA,mBAAmB,OAAA;AAC5B,oEAAuF;AAA9E,uHAAA,iBAAiB,OAAA;AAAE,yHAAA,mBAAmB,OAAA;AAC/C,oEAAkE;AAAzD,uHAAA,iBAAiB,OAAA;AAC1B,0DAAwD;AAA/C,6GAAA,YAAY,OAAA;AACrB,wDAAsD;AAA7C,2GAAA,WAAW,OAAA;AACpB,oEAAkE;AAAzD,uHAAA,iBAAiB,OAAA;AAC1B,4DAA0D;AAAjD,+GAAA,aAAa,OAAA;AACtB,wEAAsE;AAA7D,2HAAA,mBAAmB,OAAA;AAC5B,0DAAyE;AAAhE,6GAAA,YAAY,OAAA;AACrB,oFAA0F;AAAjF,+HAAA,iBAAiB,OAAA;AAAE,4HAAA,cAAc,OAAA;AAE1C,oBAAoB;AACpB,sFAAuE;AAA9D,8HAAA,cAAc,OAAA;AACvB,wEAA0D;AAAjD,iHAAA,QAAQ,OAAA;AAEjB,aAAa;AACb,2CAUsB;AATpB,wGAAA,UAAU,OAAA;AACV,mHAAA,qBAAqB,OAAA;AACrB,mHAAA,qBAAqB,OAAA;AACrB,2GAAA,aAAa,OAAA;AACb,qGAAA,OAAO,OAAA;AACP,4GAAA,cAAc,OAAA;AACd,2GAAA,aAAa,OAAA;AACb,4GAAA,cAAc,OAAA;AACd,4GAAA,cAAc,OAAA;AAGhB,QAAQ;AACR,iEAMoC;AALlC,uHAAA,iBAAiB,OAAA;AACjB,uHAAA,iBAAiB,OAAA;AACjB,yHAAA,mBAAmB,OAAA;AACnB,4HAAA,sBAAsB,OAAA;AACtB,uHAAA,iBAAiB,OAAA;AAEnB,yCAAgE;AAAvD,qGAAA,WAAW,OAAA;AACpB,2DAAyF;AAAhF,qHAAA,kBAAkB,OAAA;AAC3B,uDAA0E;AAAjE,4GAAA,WAAW,OAAA;AACpB,2DAKiC;AAJ/B,0HAAA,uBAAuB,OAAA;AAMzB,YAAY;AACZ,iEAGsC;AAFpC,6HAAA,yBAAyB,OAAA;AAG3B,uEAGyC;AAFvC,8HAAA,uBAAuB,OAAA;AAIzB,mDAAmD;AACnD,qCAAoE;AAA3D,mGAAA,UAAU,OAAA;AAAE,uGAAA,cAAc,OAAA;AAAE,kGAAA,SAAS,OAAA;AAC9C,kEAA4D;AAAnD,6GAAA,UAAU,OAAA;AACnB,oEAA8D;AAArD,+GAAA,WAAW,OAAA;AACpB,sEAAgE;AAAvD,iHAAA,YAAY,OAAA;AACrB,gFAAyE;AAAhE,0HAAA,gBAAgB,OAAA;AACzB,4EAAqE;AAA5D,sHAAA,cAAc,OAAA;AACvB,6CAK4B;AAJ1B,6FAAA,GAAG,OAAA;AACH,iGAAA,OAAO,OAAA;AACP,wGAAA,cAAc,OAAA;AACd,iHAAA,eAAe,OAA2B;AAE5C,qCAIwB;AAHtB,gGAAA,UAAU,OAAA;AACV,qGAAA,eAAe,OAAA;AACf,qGAAA,eAAe,OAAA;AAGjB,mBAAmB;AACnB,iEAA+D;AAAtD,mHAAA,eAAe,OAAA;AAExB,uEAAqE;AAA5D,yHAAA,kBAAkB,OAAA;AAE3B,iEAA+D;AAAtD,mHAAA,eAAe,OAAA;AACxB,iEAA+D;AAAtD,mHAAA,eAAe,OAAA;AAExB,0FAAuF;AAA9E,gIAAA,qBAAqB,OAAA;AAC9B,sGAAmG;AAA1F,4IAAA,2BAA2B,OAAA;AACpC,4EAA0E;AAAjE,mHAAA,eAAe,OAAA;AACxB,wEAAsE;AAA7D,+GAAA,aAAa,OAAA;AACtB,4EAA0E;AAAjE,mHAAA,eAAe,OAAA"}

package/dist/interceptors/hidden-columns.interceptor.d.ts

@@ -0,0 +1,18 @@
+import { CallHandler, ExecutionContext, NestInterceptor } from '@nestjs/common';
+import { Observable } from 'rxjs';
+import { RhinoConfigService } from '../rhino.config';
+import { SerializerService } from '../services/serializer.service';
+/**
+ * Applies serializer filtering (base hidden, additional hidden, policy-driven
+ * whitelist/blacklist, computed attributes) when a non-serialized record is
+ * returned from a handler.
+ *
+ * Order with ResponseInterceptor: register this interceptor BEFORE
+ * ResponseInterceptor in the provider chain.
+ */
+export declare class HiddenColumnsInterceptor implements NestInterceptor {
+    private readonly config;
+    private readonly serializer;
+    constructor(config: RhinoConfigService, serializer: SerializerService);
+    intercept(context: ExecutionContext, next: CallHandler): Observable<any>;
+}