@rhino-dev/rhino-nestjs 0.2.5

package/dist/policies/resource-policy.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Base authorization policy. Subclass and override per-resource.
+ * Matches Laravel's `Rhino\Policies\ResourcePolicy` semantics 1:1.
+ */
+export declare class ResourcePolicy {
+    /**
+     * Resource slug used in the `{slug}.{action}` permission lookup.
+     * If not set, the guard will inject it from the model registry at runtime.
+     */
+    resourceSlug?: string;
+    viewAny(user: any, organization?: any): boolean;
+    view(user: any, _model: any, organization?: any): boolean;
+    create(user: any, organization?: any): boolean;
+    update(user: any, _model: any, organization?: any): boolean;
+    delete(user: any, _model: any, organization?: any): boolean;
+    viewTrashed(user: any, organization?: any): boolean;
+    restore(user: any, _model: any, organization?: any): boolean;
+    forceDelete(user: any, _model: any, organization?: any): boolean;
+    permittedAttributesForShow(_user: any, _org?: any): string[];
+    hiddenAttributesForShow(_user: any, _org?: any): string[];
+    permittedAttributesForCreate(_user: any, _org?: any): string[];
+    permittedAttributesForUpdate(_user: any, _org?: any): string[];
+    protected checkPermission(user: any, action: string, organization?: any): boolean;
+    protected hasRole(user: any, role: string, organization?: any): boolean;
+}

package/dist/policies/resource-policy.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResourcePolicy = void 0;
+const permission_matcher_1 = require("../utils/permission-matcher");
+/**
+ * Base authorization policy. Subclass and override per-resource.
+ * Matches Laravel's `Rhino\Policies\ResourcePolicy` semantics 1:1.
+ */
+class ResourcePolicy {
+    /**
+     * Resource slug used in the `{slug}.{action}` permission lookup.
+     * If not set, the guard will inject it from the model registry at runtime.
+     */
+    resourceSlug;
+    // ---------------- CRUD ----------------
+    viewAny(user, organization) {
+        return this.checkPermission(user, 'index', organization);
+    }
+    view(user, _model, organization) {
+        return this.checkPermission(user, 'show', organization);
+    }
+    create(user, organization) {
+        return this.checkPermission(user, 'store', organization);
+    }
+    update(user, _model, organization) {
+        return this.checkPermission(user, 'update', organization);
+    }
+    delete(user, _model, organization) {
+        return this.checkPermission(user, 'destroy', organization);
+    }
+    // ---------------- Soft delete ----------------
+    viewTrashed(user, organization) {
+        return this.checkPermission(user, 'trashed', organization);
+    }
+    restore(user, _model, organization) {
+        return this.checkPermission(user, 'restore', organization);
+    }
+    forceDelete(user, _model, organization) {
+        return this.checkPermission(user, 'forceDelete', organization);
+    }
+    // ---------------- Attribute permissions ----------------
+    // `org` is optional so subclasses can use `this.hasRole(user, '...', org)`.
+    // The built-in SerializerService / ValidationService call these without org —
+    // leave org `undefined` in that path and rely on role detection from the user
+    // itself (Laravel parity).
+    permittedAttributesForShow(_user, _org) {
+        return ['*'];
+    }
+    hiddenAttributesForShow(_user, _org) {
+        return [];
+    }
+    permittedAttributesForCreate(_user, _org) {
+        return ['*'];
+    }
+    permittedAttributesForUpdate(_user, _org) {
+        return ['*'];
+    }
+    // ---------------- Helpers ----------------
+    checkPermission(user, action, organization) {
+        if (!user)
+            return false;
+        const slug = this.resourceSlug;
+        if (!slug)
+            return false;
+        return (0, permission_matcher_1.userHasPermission)(user, `${slug}.${action}`, organization ?? null);
+    }
+    hasRole(user, role, organization) {
+        if (!user)
+            return false;
+        const orgId = organization?.id;
+        if (orgId == null)
+            return false;
+        return (0, permission_matcher_1.resolveUserRoleSlug)(user, orgId) === role;
+    }
+}
+exports.ResourcePolicy = ResourcePolicy;
+//# sourceMappingURL=resource-policy.js.map

package/dist/policies/resource-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-policy.js","sourceRoot":"","sources":["../../src/policies/resource-policy.ts"],"names":[],"mappings":";;;AAAA,oEAAqF;AAErF;;;GAGG;AACH,MAAa,cAAc;IACzB;;;OAGG;IACH,YAAY,CAAU;IAEtB,yCAAyC;IACzC,OAAO,CAAC,IAAS,EAAE,YAAkB;QACnC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,IAAS,EAAE,MAAW,EAAE,YAAkB;QAC7C,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,CAAC,IAAS,EAAE,YAAkB;QAClC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,CAAC,IAAS,EAAE,MAAW,EAAE,YAAkB;QAC/C,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,CAAC,IAAS,EAAE,MAAW,EAAE,YAAkB;QAC/C,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC;IAED,gDAAgD;IAChD,WAAW,CAAC,IAAS,EAAE,YAAkB;QACvC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,IAAS,EAAE,MAAW,EAAE,YAAkB;QAChD,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC;IACD,WAAW,CAAC,IAAS,EAAE,MAAW,EAAE,YAAkB;QACpD,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;IACjE,CAAC;IAED,0DAA0D;IAC1D,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,2BAA2B;IAC3B,0BAA0B,CAAC,KAAU,EAAE,IAAU;QAC/C,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,uBAAuB,CAAC,KAAU,EAAE,IAAU;QAC5C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,4BAA4B,CAAC,KAAU,EAAE,IAAU;QACjD,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,4BAA4B,CAAC,KAAU,EAAE,IAAU;QACjD,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAED,4CAA4C;IAClC,eAAe,CAAC,IAAS,EAAE,MAAc,EAAE,YAAkB;QACrE,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,IAAA,sCAAiB,EAAC,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,EAAE,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC;IAC5E,CAAC;IAES,OAAO,CAAC,IAAS,EAAE,IAAY,EAAE,YAAkB;QAC3D,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,KAAK,GAAG,YAAY,EAAE,EAAE,CAAC;QAC/B,IAAI,KAAK,IAAI,IAAI;YAAE,OAAO,KAAK,CAAC;QAChC,OAAO,IAAA,wCAAmB,EAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;IACnD,CAAC;CACF;AAnED,wCAmEC"}

package/dist/prisma/prisma-soft-delete.extension.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Prisma client extension implementing Laravel-style soft deletes.
+ *
+ *   import { PrismaClient } from '@prisma/client';
+ *   import { withSoftDelete } from '@rhino-dev/rhino-nestjs';
+ *
+ *   const prisma = withSoftDelete(new PrismaClient(), ['post', 'comment']);
+ *
+ * When applied, the extension:
+ *   - auto-appends `deletedAt: null` to `findMany`, `findFirst`, `findUnique`, `count`
+ *   - rewrites `delete` to `update { deletedAt: new Date() }`
+ *   - leaves `deleteMany` untouched (hard delete) so the framework can offer forceDelete
+ */
+export declare function withSoftDelete<T extends {
+    $extends: Function;
+}>(prisma: T, softDeleteModels: string[]): T;

package/dist/prisma/prisma-soft-delete.extension.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withSoftDelete = withSoftDelete;
+/**
+ * Prisma client extension implementing Laravel-style soft deletes.
+ *
+ *   import { PrismaClient } from '@prisma/client';
+ *   import { withSoftDelete } from '@rhino-dev/rhino-nestjs';
+ *
+ *   const prisma = withSoftDelete(new PrismaClient(), ['post', 'comment']);
+ *
+ * When applied, the extension:
+ *   - auto-appends `deletedAt: null` to `findMany`, `findFirst`, `findUnique`, `count`
+ *   - rewrites `delete` to `update { deletedAt: new Date() }`
+ *   - leaves `deleteMany` untouched (hard delete) so the framework can offer forceDelete
+ */
+function withSoftDelete(prisma, softDeleteModels) {
+    const softSet = new Set(softDeleteModels.map((m) => m.toLowerCase()));
+    const isSoft = (model) => !!model && softSet.has(model.toLowerCase());
+    const applyFilter = (args) => {
+        const base = args.where ?? {};
+        if (base.deletedAt !== undefined)
+            return args;
+        return { ...args, where: { ...base, deletedAt: null } };
+    };
+    return prisma.$extends({
+        name: 'rhino-soft-delete',
+        query: {
+            $allModels: {
+                async findMany({ model, args, query }) {
+                    return isSoft(model) ? query(applyFilter(args)) : query(args);
+                },
+                async findFirst({ model, args, query }) {
+                    return isSoft(model) ? query(applyFilter(args)) : query(args);
+                },
+                async findFirstOrThrow({ model, args, query }) {
+                    return isSoft(model) ? query(applyFilter(args)) : query(args);
+                },
+                async count({ model, args, query }) {
+                    return isSoft(model) ? query(applyFilter(args ?? {})) : query(args);
+                },
+                async delete({ model, args, query }) {
+                    if (!isSoft(model))
+                        return query(args);
+                    return prisma[camel(model)].update({
+                        where: args.where,
+                        data: { deletedAt: new Date() },
+                    });
+                },
+            },
+        },
+    });
+}
+function camel(name) {
+    return name.charAt(0).toLowerCase() + name.slice(1);
+}
+//# sourceMappingURL=prisma-soft-delete.extension.js.map

package/dist/prisma/prisma-soft-delete.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-soft-delete.extension.js","sourceRoot":"","sources":["../../src/prisma/prisma-soft-delete.extension.ts"],"names":[],"mappings":";;AAaA,wCAwCC;AArDD;;;;;;;;;;;;GAYG;AACH,SAAgB,cAAc,CAC5B,MAAS,EACT,gBAA0B;IAE1B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAEtE,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAE/E,MAAM,WAAW,GAAG,CAAC,IAAS,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC9C,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;IAC1D,CAAC,CAAC;IAEF,OAAQ,MAAc,CAAC,QAAQ,CAAC;QAC9B,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE;YACL,UAAU,EAAE;gBACV,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAO;oBACxC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChE,CAAC;gBACD,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAO;oBACzC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChE,CAAC;gBACD,KAAK,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAO;oBAChD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChE,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAO;oBACrC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtE,CAAC;gBACD,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAO;oBACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;wBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;oBACvC,OAAQ,MAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;wBAC1C,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;qBAChC,CAAC,CAAC;gBACL,CAAC;aACF;SACF;KACF,CAAM,CAAC;AACV,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/dist/prisma/prisma-uuid.extension.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Prisma client extension that auto-generates UUIDs for models listed in `uuidModels`.
+ * This is a convenience wrapper — Prisma's `@default(uuid())` on the schema is
+ * the preferred approach, but this helper covers cases where the schema is not
+ * owned by the library or migration-controlled.
+ */
+export declare function withUuid<T extends {
+    $extends: Function;
+}>(prisma: T, uuidModels: string[]): T;

package/dist/prisma/prisma-uuid.extension.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withUuid = withUuid;
+const crypto_1 = require("crypto");
+/**
+ * Prisma client extension that auto-generates UUIDs for models listed in `uuidModels`.
+ * This is a convenience wrapper — Prisma's `@default(uuid())` on the schema is
+ * the preferred approach, but this helper covers cases where the schema is not
+ * owned by the library or migration-controlled.
+ */
+function withUuid(prisma, uuidModels) {
+    const uuidSet = new Set(uuidModels.map((m) => m.toLowerCase()));
+    const needsUuid = (model) => !!model && uuidSet.has(model.toLowerCase());
+    return prisma.$extends({
+        name: 'rhino-uuid',
+        query: {
+            $allModels: {
+                async create({ model, args, query }) {
+                    if (needsUuid(model) && args?.data && args.data.id == null) {
+                        args = { ...args, data: { ...args.data, id: (0, crypto_1.randomUUID)() } };
+                    }
+                    return query(args);
+                },
+            },
+        },
+    });
+}
+//# sourceMappingURL=prisma-uuid.extension.js.map

package/dist/prisma/prisma-uuid.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-uuid.extension.js","sourceRoot":"","sources":["../../src/prisma/prisma-uuid.extension.ts"],"names":[],"mappings":";;AAQA,4BAiBC;AAzBD,mCAAoC;AAEpC;;;;;GAKG;AACH,SAAgB,QAAQ,CAAmC,MAAS,EAAE,UAAoB;IACxF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAElF,OAAQ,MAAc,CAAC,QAAQ,CAAC;QAC9B,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE;YACL,UAAU,EAAE;gBACV,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAO;oBACtC,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;wBAC3D,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAA,mBAAU,GAAE,EAAE,EAAE,CAAC;oBAC/D,CAAC;oBACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;aACF;SACF;KACF,CAAM,CAAC;AACV,CAAC"}

package/dist/prisma/prisma.service.d.ts

@@ -0,0 +1,38 @@
+import { OnModuleDestroy, OnModuleInit } from '@nestjs/common';
+/**
+ * Minimal PrismaClient surface Rhino relies on. Declared structurally so
+ * the library does not take a hard dep on `@prisma/client` (peer dep only).
+ */
+export interface PrismaClientLike {
+    $connect?: () => Promise<void>;
+    $disconnect?: () => Promise<void>;
+    $transaction?: <T>(fn: (tx: any) => Promise<T>) => Promise<T>;
+    [model: string]: any;
+}
+/**
+ * Wraps the consuming app's PrismaClient. The client is provided to
+ * `RhinoModule.forRoot({ prismaClient })` and injected via DI — no
+ * post-construction `setClient()` dance required.
+ *
+ * For type-safe access, declare a subclass typed over your generated client:
+ *
+ *   class AppPrisma extends PrismaService<PrismaClient> {}
+ *
+ * and inject `AppPrisma` instead of `PrismaService`.
+ */
+export declare class PrismaService<TClient extends PrismaClientLike = PrismaClientLike> implements OnModuleInit, OnModuleDestroy {
+    private readonly logger;
+    private _client;
+    constructor(client?: TClient);
+    onModuleInit(): Promise<void>;
+    onModuleDestroy(): Promise<void>;
+    /** Escape hatch for tests. Not intended for production code. */
+    setClient(client: TClient): void;
+    get client(): TClient;
+    /**
+     * Resolve a Prisma delegate by model name, trying original / camelCase / lowercase.
+     * Returns `any` at the library level; subclass with generics for type inference.
+     */
+    model(name: string): any;
+    $transaction<T>(fn: (tx: any) => Promise<T>): Promise<T>;
+}

package/dist/prisma/prisma.service.js

@@ -0,0 +1,100 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var PrismaService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrismaService = void 0;
+const common_1 = require("@nestjs/common");
+const tokens_1 = require("../constants/tokens");
+/**
+ * Wraps the consuming app's PrismaClient. The client is provided to
+ * `RhinoModule.forRoot({ prismaClient })` and injected via DI — no
+ * post-construction `setClient()` dance required.
+ *
+ * For type-safe access, declare a subclass typed over your generated client:
+ *
+ *   class AppPrisma extends PrismaService<PrismaClient> {}
+ *
+ * and inject `AppPrisma` instead of `PrismaService`.
+ */
+let PrismaService = PrismaService_1 = class PrismaService {
+    logger = new common_1.Logger(PrismaService_1.name);
+    _client;
+    constructor(client) {
+        this._client = client;
+    }
+    async onModuleInit() {
+        if (this._client?.$connect) {
+            try {
+                await this._client.$connect();
+            }
+            catch (err) {
+                this.logger.warn(`Prisma $connect failed: ${err.message}`);
+            }
+        }
+    }
+    async onModuleDestroy() {
+        if (this._client?.$disconnect) {
+            try {
+                await this._client.$disconnect();
+            }
+            catch (err) {
+                this.logger.warn(`Prisma $disconnect failed: ${err.message}`);
+            }
+        }
+    }
+    /** Escape hatch for tests. Not intended for production code. */
+    setClient(client) {
+        this._client = client;
+    }
+    get client() {
+        if (!this._client) {
+            throw new Error('PrismaService: no Prisma client configured. ' +
+                'Pass it via RhinoModule.forRoot({ prismaClient: new PrismaClient() }) ' +
+                'or RhinoModule.forRootAsync({ useFactory: () => ({ prismaClient, ... }) }).');
+        }
+        return this._client;
+    }
+    /**
+     * Resolve a Prisma delegate by model name, trying original / camelCase / lowercase.
+     * Returns `any` at the library level; subclass with generics for type inference.
+     */
+    model(name) {
+        const client = this.client;
+        const candidates = [
+            name,
+            name.charAt(0).toLowerCase() + name.slice(1),
+            name.toLowerCase(),
+        ];
+        for (const c of candidates) {
+            const d = client[c];
+            if (d && typeof d === 'object')
+                return d;
+        }
+        throw new Error(`PrismaService: unknown model "${name}"`);
+    }
+    $transaction(fn) {
+        const tx = this.client.$transaction;
+        if (!tx)
+            throw new Error('PrismaService: configured client does not support $transaction');
+        return tx(fn);
+    }
+};
+exports.PrismaService = PrismaService;
+exports.PrismaService = PrismaService = PrismaService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Optional)()),
+    __param(0, (0, common_1.Inject)(tokens_1.RHINO_PRISMA_CLIENT)),
+    __metadata("design:paramtypes", [Object])
+], PrismaService);
+//# sourceMappingURL=prisma.service.js.map

package/dist/prisma/prisma.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma.service.js","sourceRoot":"","sources":["../../src/prisma/prisma.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAOwB;AACxB,gDAA0D;AAa1D;;;;;;;;;;GAUG;AAEI,IAAM,aAAa,qBAAnB,MAAM,aAAa;IAGP,MAAM,GAAG,IAAI,eAAM,CAAC,eAAa,CAAC,IAAI,CAAC,CAAC;IACjD,OAAO,CAAsB;IAErC,YAAqD,MAAgB;QACnE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA4B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA+B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,SAAS,CAAC,MAAe;QACvB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,IAAI,MAAM;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,8CAA8C;gBAC5C,wEAAwE;gBACxE,6EAA6E,CAChF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAY;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAa,CAAC;QAClC,MAAM,UAAU,GAAG;YACjB,IAAI;YACJ,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,WAAW,EAAE;SACnB,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,YAAY,CAAI,EAA2B;QACzC,MAAM,EAAE,GAAI,IAAI,CAAC,MAAc,CAAC,YAAY,CAAC;QAC7C,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAC3F,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;CACF,CAAA;AArEY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;IAOE,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,4BAAmB,CAAC,CAAA;;GANzC,aAAa,CAqEzB"}

package/dist/rhino.config.d.ts

@@ -0,0 +1,43 @@
+import type { RhinoConfig, ModelRegistration, RouteGroupConfig } from './interfaces/rhino-config.interface';
+/**
+ * Injectable accessor for the consuming app's Rhino configuration.
+ * Wraps the raw config object with convenience lookup methods.
+ */
+export declare class RhinoConfigService {
+    private readonly config;
+    constructor(config: RhinoConfig);
+    raw(): RhinoConfig;
+    models(): Record<string, ModelRegistration>;
+    model(slug: string): ModelRegistration | undefined;
+    hasModel(slug: string): boolean;
+    routeGroups(): Record<string, RouteGroupConfig>;
+    routeGroup(name: string): RouteGroupConfig | undefined;
+    /**
+     * Get all model slugs registered inside a route group.
+     * `'*'` expands to every registered model.
+     */
+    modelsInRouteGroup(name: string): string[];
+    multiTenantEnabled(): boolean;
+    organizationIdentifierColumn(): string;
+    nestedConfig(): {
+        path: string;
+        maxOperations: number;
+        allowedModels: string[];
+    };
+    invitationsConfig(): {
+        expiresDays: number;
+        allowedRoles: string[];
+        notificationHandler: (invitation: any) => Promise<void> | void;
+    };
+    authConfig(): {
+        jwtSecret: string;
+        jwtExpiresIn: string;
+        userModel: string;
+        emailField: string;
+        passwordField: string;
+    };
+}
+/**
+ * Normalize a raw config value (defaults applied) — used by the module in forRoot.
+ */
+export declare function normalizeConfig(config: RhinoConfig): RhinoConfig;

package/dist/rhino.config.js

@@ -0,0 +1,130 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RhinoConfigService = void 0;
+exports.normalizeConfig = normalizeConfig;
+const common_1 = require("@nestjs/common");
+const tokens_1 = require("./constants/tokens");
+/**
+ * Injectable accessor for the consuming app's Rhino configuration.
+ * Wraps the raw config object with convenience lookup methods.
+ */
+let RhinoConfigService = class RhinoConfigService {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    raw() {
+        return this.config;
+    }
+    models() {
+        return this.config.models ?? {};
+    }
+    model(slug) {
+        return this.config.models?.[slug];
+    }
+    hasModel(slug) {
+        return Boolean(this.config.models?.[slug]);
+    }
+    routeGroups() {
+        return this.config.routeGroups ?? {};
+    }
+    routeGroup(name) {
+        return this.config.routeGroups?.[name];
+    }
+    /**
+     * Get all model slugs registered inside a route group.
+     * `'*'` expands to every registered model.
+     */
+    modelsInRouteGroup(name) {
+        const group = this.routeGroup(name);
+        if (!group)
+            return [];
+        if (group.models === '*')
+            return Object.keys(this.models());
+        return group.models;
+    }
+    multiTenantEnabled() {
+        const mt = this.config.multiTenant;
+        if (!mt)
+            return false;
+        if (mt.enabled === false)
+            return false;
+        return Boolean(mt.organizationIdentifierColumn) || mt.enabled === true;
+    }
+    organizationIdentifierColumn() {
+        return this.config.multiTenant?.organizationIdentifierColumn ?? 'id';
+    }
+    nestedConfig() {
+        return {
+            path: this.config.nested?.path ?? 'nested',
+            maxOperations: this.config.nested?.maxOperations ?? 50,
+            allowedModels: this.config.nested?.allowedModels ?? null,
+        };
+    }
+    invitationsConfig() {
+        return {
+            expiresDays: this.config.invitations?.expiresDays ?? 7,
+            allowedRoles: this.config.invitations?.allowedRoles ?? null,
+            notificationHandler: this.config.invitations?.notificationHandler,
+        };
+    }
+    authConfig() {
+        return {
+            jwtSecret: this.config.auth?.jwtSecret ??
+                process.env.JWT_SECRET ??
+                'change-me-in-production',
+            jwtExpiresIn: this.config.auth?.jwtExpiresIn ?? '7d',
+            userModel: this.config.auth?.userModel ?? 'user',
+            emailField: this.config.auth?.emailField ?? 'email',
+            passwordField: this.config.auth?.passwordField ?? 'password',
+        };
+    }
+};
+exports.RhinoConfigService = RhinoConfigService;
+exports.RhinoConfigService = RhinoConfigService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(tokens_1.RHINO_CONFIG)),
+    __metadata("design:paramtypes", [Object])
+], RhinoConfigService);
+/**
+ * Normalize a raw config value (defaults applied) — used by the module in forRoot.
+ */
+function normalizeConfig(config) {
+    return {
+        ...config,
+        models: config.models ?? {},
+        routeGroups: config.routeGroups ?? {},
+        multiTenant: config.multiTenant ?? { enabled: false },
+        nested: {
+            path: 'nested',
+            maxOperations: 50,
+            allowedModels: null,
+            ...(config.nested ?? {}),
+        },
+        invitations: {
+            expiresDays: 7,
+            allowedRoles: null,
+            ...(config.invitations ?? {}),
+        },
+        auth: {
+            jwtExpiresIn: '7d',
+            userModel: 'user',
+            emailField: 'email',
+            passwordField: 'password',
+            ...(config.auth ?? {}),
+        },
+    };
+}
+//# sourceMappingURL=rhino.config.js.map

package/dist/rhino.config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rhino.config.js","sourceRoot":"","sources":["../src/rhino.config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AA+FA,0CAyBC;AAxHD,2CAAoD;AACpD,+CAAkD;AAOlD;;;GAGG;AAEI,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IACsB;IAAnD,YAAmD,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAE1E,GAAG;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,IAAY;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,QAAQ,CAAC,IAAY;QACnB,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,IAAY;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,kBAAkB;QAChB,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACnC,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACtB,IAAI,EAAE,CAAC,OAAO,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QACvC,OAAO,OAAO,CAAC,EAAE,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC;IACzE,CAAC;IAED,4BAA4B;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,4BAA4B,IAAI,IAAI,CAAC;IACvE,CAAC;IAED,YAAY;QACV,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,QAAQ;YAC1C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE;YACtD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,IAAI,IAAI;SACzD,CAAC;IACJ,CAAC;IAED,iBAAiB;QACf,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,IAAI,CAAC;YACtD,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,IAAI,IAAI;YAC3D,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,mBAAmB;SAClE,CAAC;IACJ,CAAC;IAED,UAAU;QACR,OAAO;YACL,SAAS,EACP,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS;gBAC3B,OAAO,CAAC,GAAG,CAAC,UAAU;gBACtB,yBAAyB;YAC3B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,IAAI,IAAI;YACpD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,MAAM;YAChD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,IAAI,OAAO;YACnD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,IAAI,UAAU;SAC7D,CAAC;IACJ,CAAC;CACF,CAAA;AA7EY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;IAEE,WAAA,IAAA,eAAM,EAAC,qBAAY,CAAC,CAAA;;GADtB,kBAAkB,CA6E9B;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,MAAmB;IACjD,OAAO;QACL,GAAG,MAAM;QACT,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACrC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;QACrD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,aAAa,EAAE,EAAE;YACjB,aAAa,EAAE,IAAI;YACnB,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;SACzB;QACD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,IAAI;YAClB,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;SAC9B;QACD,IAAI,EAAE;YACJ,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,OAAO;YACnB,aAAa,EAAE,UAAU;YACzB,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SACvB;KACF,CAAC;AACJ,CAAC"}

package/dist/rhino.module.d.ts

@@ -0,0 +1,61 @@
+import { DynamicModule, MiddlewareConsumer, NestModule } from '@nestjs/common';
+import type { RhinoConfig, RhinoModuleAsyncOptions } from './interfaces/rhino-config.interface';
+export interface RhinoModuleOptions {
+    /** Register the library's controllers automatically. Default true. */
+    registerControllers?: boolean;
+    /** Install JwtAuthGuard globally as APP_GUARD. Default false (opt-in). */
+    autoAuthGuard?: boolean;
+    /** Install ResourcePolicyGuard globally as APP_GUARD. Default false (opt-in). */
+    autoPolicyGuard?: boolean;
+    /** Install RouteGroupMiddleware globally. Default true. */
+    autoRouteGroupMiddleware?: boolean;
+    /** Wire per-model `middleware` / `actionMiddleware` via NestModule.configure. Default true. */
+    autoModelMiddleware?: boolean;
+    /** Wire ResolveOrganizationMiddleware for all routes when multiTenant enabled. Default true. */
+    autoTenantMiddleware?: boolean;
+}
+/**
+ * Rhino NestJS dynamic module.
+ *
+ * Example (synchronous):
+ *
+ *   RhinoModule.forRoot({
+ *     prismaClient: new PrismaClient(),
+ *     models: {
+ *       posts: { model: 'post', policy: PostPolicy, belongsToOrganization: true },
+ *     },
+ *   });
+ *
+ * Example (async — reading from a ConfigService):
+ *
+ *   RhinoModule.forRootAsync({
+ *     imports: [ConfigModule],
+ *     inject: [ConfigService, PrismaService],
+ *     middleware: [MyRateLimitMw],      // <-- list middleware classes here
+ *     useFactory: (cfg, prisma) => ({
+ *       prismaClient: prisma,
+ *       models: { ... },
+ *     }),
+ *   });
+ */
+export declare class RhinoModule implements NestModule {
+    private readonly config;
+    private readonly options;
+    constructor(config: RhinoConfig, options: RhinoModuleOptions);
+    configure(consumer: MiddlewareConsumer): void;
+    /**
+     * Synchronous registration. All middleware classes are collected from the
+     * passed config at build time, so no extra `middleware` option is needed.
+     */
+    static forRoot(config: RhinoConfig, options?: RhinoModuleOptions): DynamicModule;
+    /**
+     * Asynchronous registration. Middleware classes referenced by models must
+     * be declared via `options.middleware` because NestJS providers cannot be
+     * resolved from an async useFactory.
+     */
+    static forRootAsync(options: RhinoModuleAsyncOptions & RhinoModuleOptions): DynamicModule;
+    private static build;
+    private static collectModelMiddleware;
+    private static coreProviders;
+    private static coreExports;
+}