@rhino-dev/rhino-nestjs 0.2.5

package/dist/rhino.module.js

@@ -0,0 +1,268 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var RhinoModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RhinoModule = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const rhino_config_1 = require("./rhino.config");
+const tokens_1 = require("./constants/tokens");
+const prisma_service_1 = require("./prisma/prisma.service");
+const resource_service_1 = require("./services/resource.service");
+const query_builder_service_1 = require("./services/query-builder.service");
+const serializer_service_1 = require("./services/serializer.service");
+const validation_service_1 = require("./services/validation.service");
+const organization_service_1 = require("./services/organization.service");
+const audit_service_1 = require("./services/audit.service");
+const nested_service_1 = require("./services/nested.service");
+const scope_service_1 = require("./services/scope.service");
+const auth_service_1 = require("./services/auth.service");
+const invitation_service_1 = require("./services/invitation.service");
+const jwt_auth_guard_1 = require("./guards/jwt-auth.guard");
+const resource_policy_guard_1 = require("./guards/resource-policy.guard");
+const global_controller_1 = require("./controllers/global.controller");
+const auth_controller_1 = require("./controllers/auth.controller");
+const invitation_controller_1 = require("./controllers/invitation.controller");
+const nested_controller_1 = require("./controllers/nested.controller");
+const route_group_middleware_1 = require("./middleware/route-group.middleware");
+const resolve_organization_middleware_1 = require("./middleware/resolve-organization.middleware");
+const ACTION_TO_METHOD = {
+    index: common_1.RequestMethod.GET,
+    show: common_1.RequestMethod.GET,
+    store: common_1.RequestMethod.POST,
+    update: common_1.RequestMethod.PUT,
+    destroy: common_1.RequestMethod.DELETE,
+    trashed: common_1.RequestMethod.GET,
+    restore: common_1.RequestMethod.POST,
+    forceDelete: common_1.RequestMethod.DELETE,
+};
+function actionPath(slug, action) {
+    switch (action) {
+        case 'index':
+        case 'store':
+            return slug;
+        case 'trashed':
+            return `${slug}/trashed`;
+        case 'show':
+        case 'update':
+        case 'destroy':
+            return `${slug}/:id`;
+        case 'restore':
+            return `${slug}/:id/restore`;
+        case 'forceDelete':
+            return `${slug}/:id/force-delete`;
+        default:
+            return slug;
+    }
+}
+/**
+ * Rhino NestJS dynamic module.
+ *
+ * Example (synchronous):
+ *
+ *   RhinoModule.forRoot({
+ *     prismaClient: new PrismaClient(),
+ *     models: {
+ *       posts: { model: 'post', policy: PostPolicy, belongsToOrganization: true },
+ *     },
+ *   });
+ *
+ * Example (async — reading from a ConfigService):
+ *
+ *   RhinoModule.forRootAsync({
+ *     imports: [ConfigModule],
+ *     inject: [ConfigService, PrismaService],
+ *     middleware: [MyRateLimitMw],      // <-- list middleware classes here
+ *     useFactory: (cfg, prisma) => ({
+ *       prismaClient: prisma,
+ *       models: { ... },
+ *     }),
+ *   });
+ */
+let RhinoModule = RhinoModule_1 = class RhinoModule {
+    config;
+    options;
+    constructor(config, options) {
+        this.config = config;
+        this.options = options;
+    }
+    configure(consumer) {
+        const opts = this.options ?? {};
+        const cfg = this.config;
+        if (!cfg)
+            return;
+        if (opts.autoRouteGroupMiddleware !== false) {
+            consumer.apply(route_group_middleware_1.RouteGroupMiddleware).forRoutes('*');
+        }
+        if (opts.autoModelMiddleware !== false) {
+            for (const [slug, reg] of Object.entries(cfg.models ?? {})) {
+                const baseMw = (reg.middleware ?? []);
+                if (baseMw.length > 0) {
+                    consumer.apply(...baseMw).forRoutes({ path: slug, method: common_1.RequestMethod.ALL }, { path: `${slug}/*`, method: common_1.RequestMethod.ALL });
+                }
+                for (const [action, mwList] of Object.entries(reg.actionMiddleware ?? {})) {
+                    const list = (mwList ?? []);
+                    if (list.length === 0)
+                        continue;
+                    const method = ACTION_TO_METHOD[action] ?? common_1.RequestMethod.ALL;
+                    consumer.apply(...list).forRoutes({ path: actionPath(slug, action), method });
+                }
+            }
+        }
+        if (opts.autoTenantMiddleware !== false &&
+            (cfg.multiTenant?.organizationIdentifierColumn || cfg.multiTenant?.enabled)) {
+            consumer.apply(resolve_organization_middleware_1.ResolveOrganizationMiddleware).forRoutes('*');
+        }
+    }
+    /**
+     * Synchronous registration. All middleware classes are collected from the
+     * passed config at build time, so no extra `middleware` option is needed.
+     */
+    static forRoot(config, options = {}) {
+        const normalized = (0, rhino_config_1.normalizeConfig)(config);
+        const middlewareFromConfig = RhinoModule_1.collectModelMiddleware(normalized);
+        return RhinoModule_1.build({
+            configProviders: [
+                { provide: tokens_1.RHINO_CONFIG, useValue: normalized },
+                {
+                    provide: tokens_1.RHINO_PRISMA_CLIENT,
+                    useValue: normalized.prismaClient ?? null,
+                },
+            ],
+            imports: [],
+            options,
+            middlewareClasses: middlewareFromConfig,
+        });
+    }
+    /**
+     * Asynchronous registration. Middleware classes referenced by models must
+     * be declared via `options.middleware` because NestJS providers cannot be
+     * resolved from an async useFactory.
+     */
+    static forRootAsync(options) {
+        const configProvider = {
+            provide: tokens_1.RHINO_CONFIG,
+            useFactory: async (...args) => (0, rhino_config_1.normalizeConfig)(await options.useFactory(...args)),
+            inject: options.inject ?? [],
+        };
+        const prismaProvider = {
+            provide: tokens_1.RHINO_PRISMA_CLIENT,
+            useFactory: (cfg) => cfg.prismaClient ?? null,
+            inject: [tokens_1.RHINO_CONFIG],
+        };
+        return RhinoModule_1.build({
+            configProviders: [configProvider, prismaProvider],
+            imports: options.imports ?? [],
+            options,
+            middlewareClasses: (options.middleware ?? []),
+        });
+    }
+    static build(args) {
+        const opts = args.options;
+        const guardProviders = [];
+        if (opts.autoAuthGuard)
+            guardProviders.push({ provide: core_1.APP_GUARD, useClass: jwt_auth_guard_1.JwtAuthGuard });
+        if (opts.autoPolicyGuard)
+            guardProviders.push({ provide: core_1.APP_GUARD, useClass: resource_policy_guard_1.ResourcePolicyGuard });
+        return {
+            module: RhinoModule_1,
+            imports: args.imports,
+            controllers: opts.registerControllers !== false
+                ? [global_controller_1.GlobalController, auth_controller_1.AuthController, invitation_controller_1.InvitationController, nested_controller_1.NestedController]
+                : [],
+            providers: [
+                ...args.configProviders,
+                { provide: tokens_1.RHINO_MODULE_OPTIONS, useValue: opts },
+                ...RhinoModule_1.coreProviders(),
+                jwt_auth_guard_1.JwtAuthGuard,
+                resource_policy_guard_1.ResourcePolicyGuard,
+                route_group_middleware_1.RouteGroupMiddleware,
+                resolve_organization_middleware_1.ResolveOrganizationMiddleware,
+                ...dedupeTypes(args.middlewareClasses),
+                ...guardProviders,
+            ],
+            exports: RhinoModule_1.coreExports(),
+        };
+    }
+    static collectModelMiddleware(config) {
+        const set = new Set();
+        for (const reg of Object.values(config.models ?? {})) {
+            for (const mw of (reg.middleware ?? []))
+                set.add(mw);
+            for (const mws of Object.values(reg.actionMiddleware ?? {})) {
+                for (const mw of (mws ?? []))
+                    set.add(mw);
+            }
+        }
+        return Array.from(set);
+    }
+    static coreProviders() {
+        return [
+            rhino_config_1.RhinoConfigService,
+            prisma_service_1.PrismaService,
+            resource_service_1.ResourceService,
+            query_builder_service_1.QueryBuilderService,
+            serializer_service_1.SerializerService,
+            validation_service_1.ValidationService,
+            organization_service_1.OrganizationService,
+            audit_service_1.AuditService,
+            nested_service_1.NestedService,
+            scope_service_1.ScopeService,
+            auth_service_1.AuthService,
+            invitation_service_1.InvitationService,
+        ];
+    }
+    static coreExports() {
+        return [
+            // Injection tokens (BP-010 — surfaced for consumer middleware/services)
+            tokens_1.RHINO_CONFIG,
+            tokens_1.RHINO_PRISMA_CLIENT,
+            tokens_1.RHINO_MODULE_OPTIONS,
+            rhino_config_1.RhinoConfigService,
+            prisma_service_1.PrismaService,
+            resource_service_1.ResourceService,
+            query_builder_service_1.QueryBuilderService,
+            serializer_service_1.SerializerService,
+            validation_service_1.ValidationService,
+            organization_service_1.OrganizationService,
+            audit_service_1.AuditService,
+            nested_service_1.NestedService,
+            scope_service_1.ScopeService,
+            auth_service_1.AuthService,
+            invitation_service_1.InvitationService,
+            jwt_auth_guard_1.JwtAuthGuard,
+            resource_policy_guard_1.ResourcePolicyGuard,
+        ];
+    }
+};
+exports.RhinoModule = RhinoModule;
+exports.RhinoModule = RhinoModule = RhinoModule_1 = __decorate([
+    (0, common_1.Global)(),
+    (0, common_1.Module)({}),
+    __param(0, (0, common_1.Inject)(tokens_1.RHINO_CONFIG)),
+    __param(1, (0, common_1.Inject)(tokens_1.RHINO_MODULE_OPTIONS)),
+    __metadata("design:paramtypes", [Object, Object])
+], RhinoModule);
+function dedupeTypes(list) {
+    const seen = new Set();
+    const out = [];
+    for (const t of list) {
+        if (!seen.has(t)) {
+            seen.add(t);
+            out.push(t);
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=rhino.module.js.map

package/dist/rhino.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rhino.module.js","sourceRoot":"","sources":["../src/rhino.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAUwB;AACxB,uCAAyC;AACzC,iDAAqE;AACrE,+CAI4B;AAK5B,4DAAwD;AACxD,kEAA8D;AAC9D,4EAAuE;AACvE,sEAAkE;AAClE,sEAAkE;AAClE,0EAAsE;AACtE,4DAAwD;AACxD,8DAA0D;AAC1D,4DAAwD;AACxD,0DAAsD;AACtD,sEAAkE;AAClE,4DAAuD;AACvD,0EAAqE;AACrE,uEAAmE;AACnE,mEAA+D;AAC/D,+EAA2E;AAC3E,uEAAmE;AACnE,gFAA2E;AAC3E,kGAA6F;AAE7F,MAAM,gBAAgB,GAAkC;IACtD,KAAK,EAAE,sBAAa,CAAC,GAAG;IACxB,IAAI,EAAE,sBAAa,CAAC,GAAG;IACvB,KAAK,EAAE,sBAAa,CAAC,IAAI;IACzB,MAAM,EAAE,sBAAa,CAAC,GAAG;IACzB,OAAO,EAAE,sBAAa,CAAC,MAAM;IAC7B,OAAO,EAAE,sBAAa,CAAC,GAAG;IAC1B,OAAO,EAAE,sBAAa,CAAC,IAAI;IAC3B,WAAW,EAAE,sBAAa,CAAC,MAAM;CAClC,CAAC;AAEF,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc;IAC9C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO,CAAC;QACb,KAAK,OAAO;YACV,OAAO,IAAI,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,GAAG,IAAI,UAAU,CAAC;QAC3B,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,GAAG,IAAI,MAAM,CAAC;QACvB,KAAK,SAAS;YACZ,OAAO,GAAG,IAAI,cAAc,CAAC;QAC/B,KAAK,aAAa;YAChB,OAAO,GAAG,IAAI,mBAAmB,CAAC;QACpC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAiBD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGI,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAEmB;IACQ;IAFjD,YACyC,MAAmB,EACX,OAA2B;QADnC,WAAM,GAAN,MAAM,CAAa;QACX,YAAO,GAAP,OAAO,CAAoB;IACzE,CAAC;IAEJ,SAAS,CAAC,QAA4B;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;QACxB,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,IAAI,IAAI,CAAC,wBAAwB,KAAK,KAAK,EAAE,CAAC;YAC5C,QAAQ,CAAC,KAAK,CAAC,6CAAoB,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,IAAI,CAAC,mBAAmB,KAAK,KAAK,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC3D,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAgB,CAAC;gBACrD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,QAAQ,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,CACjC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAa,CAAC,GAAG,EAAE,EACzC,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,MAAM,EAAE,sBAAa,CAAC,GAAG,EAAE,CACjD,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC1E,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAgB,CAAC;oBAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;wBAAE,SAAS;oBAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,sBAAa,CAAC,GAAG,CAAC;oBAC7D,QAAQ,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;QACH,CAAC;QAED,IACE,IAAI,CAAC,oBAAoB,KAAK,KAAK;YACnC,CAAC,GAAG,CAAC,WAAW,EAAE,4BAA4B,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,EAC3E,CAAC;YACD,QAAQ,CAAC,KAAK,CAAC,+DAA6B,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,OAAO,CACZ,MAAmB,EACnB,UAA8B,EAAE;QAEhC,MAAM,UAAU,GAAG,IAAA,8BAAe,EAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,oBAAoB,GAAG,aAAW,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAC5E,OAAO,aAAW,CAAC,KAAK,CAAC;YACvB,eAAe,EAAE;gBACf,EAAE,OAAO,EAAE,qBAAY,EAAE,QAAQ,EAAE,UAAU,EAAE;gBAC/C;oBACE,OAAO,EAAE,4BAAmB;oBAC5B,QAAQ,EAAE,UAAU,CAAC,YAAY,IAAI,IAAI;iBAC1C;aACF;YACD,OAAO,EAAE,EAAE;YACX,OAAO;YACP,iBAAiB,EAAE,oBAAoB;SACxC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,YAAY,CACjB,OAAqD;QAErD,MAAM,cAAc,GAAa;YAC/B,OAAO,EAAE,qBAAY;YACrB,UAAU,EAAE,KAAK,EAAE,GAAG,IAAW,EAAE,EAAE,CAAC,IAAA,8BAAe,EAAC,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;YACxF,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;SAC7B,CAAC;QACF,MAAM,cAAc,GAAa;YAC/B,OAAO,EAAE,4BAAmB;YAC5B,UAAU,EAAE,CAAC,GAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI;YAC1D,MAAM,EAAE,CAAC,qBAAY,CAAC;SACvB,CAAC;QACF,OAAO,aAAW,CAAC,KAAK,CAAC;YACvB,eAAe,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;YACjD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,OAAO;YACP,iBAAiB,EAAE,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAgB;SAC7D,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,IAKpB;QACC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,MAAM,cAAc,GAAe,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,aAAa;YAAE,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAS,EAAE,QAAQ,EAAE,6BAAY,EAAE,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,eAAe;YAAE,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAS,EAAE,QAAQ,EAAE,2CAAmB,EAAE,CAAC,CAAC;QAErG,OAAO;YACL,MAAM,EAAE,aAAW;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,mBAAmB,KAAK,KAAK;gBAC7C,CAAC,CAAC,CAAC,oCAAgB,EAAE,gCAAc,EAAE,4CAAoB,EAAE,oCAAgB,CAAC;gBAC5E,CAAC,CAAC,EAAE;YACN,SAAS,EAAE;gBACT,GAAG,IAAI,CAAC,eAAe;gBACvB,EAAE,OAAO,EAAE,6BAAoB,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACjD,GAAG,aAAW,CAAC,aAAa,EAAE;gBAC9B,6BAAY;gBACZ,2CAAmB;gBACnB,6CAAoB;gBACpB,+DAA6B;gBAC7B,GAAG,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACtC,GAAG,cAAc;aAClB;YACD,OAAO,EAAE,aAAW,CAAC,WAAW,EAAE;SACnC,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,sBAAsB,CAAC,MAAmB;QACvD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAa,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YACrD,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAgB;gBAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC5D,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,CAAgB;oBAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAEO,MAAM,CAAC,aAAa;QAC1B,OAAO;YACL,iCAAkB;YAClB,8BAAa;YACb,kCAAe;YACf,2CAAmB;YACnB,sCAAiB;YACjB,sCAAiB;YACjB,0CAAmB;YACnB,4BAAY;YACZ,8BAAa;YACb,4BAAY;YACZ,0BAAW;YACX,sCAAiB;SAClB,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,WAAW;QACxB,OAAO;YACL,wEAAwE;YACxE,qBAAY;YACZ,4BAAmB;YACnB,6BAAoB;YACpB,iCAAkB;YAClB,8BAAa;YACb,kCAAe;YACf,2CAAmB;YACnB,sCAAiB;YACjB,sCAAiB;YACjB,0CAAmB;YACnB,4BAAY;YACZ,8BAAa;YACb,4BAAY;YACZ,0BAAW;YACX,sCAAiB;YACjB,6BAAY;YACZ,2CAAmB;SACpB,CAAC;IACJ,CAAC;CACF,CAAA;AA7KY,kCAAW;sBAAX,WAAW;IAFvB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC,EAAE,CAAC;IAGN,WAAA,IAAA,eAAM,EAAC,qBAAY,CAAC,CAAA;IACpB,WAAA,IAAA,eAAM,EAAC,6BAAoB,CAAC,CAAA;;GAHpB,WAAW,CA6KvB;AAED,SAAS,WAAW,CAAC,IAAiB;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAO,CAAC;IAC5B,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/services/audit.service.d.ts

@@ -0,0 +1,35 @@
+import { PrismaService } from '../prisma/prisma.service';
+import type { ModelRegistration } from '../interfaces/rhino-config.interface';
+export interface AuditContext {
+    user?: any;
+    organization?: any;
+    ipAddress?: string;
+    userAgent?: string;
+}
+/**
+ * Writes audit log entries. One audit row per CRUD mutation with
+ * action ∈ {created, updated, deleted, forceDeleted, restored}.
+ */
+export declare class AuditService {
+    private readonly prisma;
+    private readonly logger;
+    constructor(prisma: PrismaService);
+    private delegate;
+    log(params: {
+        auditableType: string;
+        auditableId: any;
+        action: 'created' | 'updated' | 'deleted' | 'forceDeleted' | 'restored';
+        oldValues?: any;
+        newValues?: any;
+        ctx?: AuditContext;
+        excludeFields?: string[];
+    }): Promise<void>;
+    /**
+     * Return the subset of changed fields from a Prisma update.
+     * Returns null if no meaningful changes (beyond excluded fields).
+     */
+    diff(oldRecord: any, newRecord: any, reg: ModelRegistration): {
+        old: any;
+        new: any;
+    } | null;
+}

package/dist/services/audit.service.js

@@ -0,0 +1,92 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AuditService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const BASE_AUDIT_EXCLUDE = ['password', 'rememberToken', 'remember_token'];
+/**
+ * Writes audit log entries. One audit row per CRUD mutation with
+ * action ∈ {created, updated, deleted, forceDeleted, restored}.
+ */
+let AuditService = AuditService_1 = class AuditService {
+    prisma;
+    logger = new common_1.Logger(AuditService_1.name);
+    constructor(prisma) {
+        this.prisma = prisma;
+    }
+    delegate() {
+        return this.prisma.model('auditLog');
+    }
+    async log(params) {
+        const excluded = new Set([...(params.excludeFields ?? []), ...BASE_AUDIT_EXCLUDE]);
+        const filterExcluded = (obj) => {
+            if (!obj)
+                return obj;
+            const out = {};
+            for (const [k, v] of Object.entries(obj)) {
+                if (!excluded.has(k))
+                    out[k] = v;
+            }
+            return out;
+        };
+        try {
+            await this.delegate().create({
+                data: {
+                    auditableType: params.auditableType,
+                    auditableId: params.auditableId,
+                    action: params.action,
+                    oldValues: filterExcluded(params.oldValues),
+                    newValues: filterExcluded(params.newValues),
+                    userId: params.ctx?.user?.id ?? null,
+                    organizationId: params.ctx?.organization?.id ?? null,
+                    ipAddress: params.ctx?.ipAddress ?? null,
+                    userAgent: params.ctx?.userAgent ?? null,
+                },
+            });
+        }
+        catch (err) {
+            this.logger.warn(`AuditService: failed to write audit entry for ${params.auditableType}#${params.auditableId} (${params.action}): ${err.message}`);
+        }
+    }
+    /**
+     * Return the subset of changed fields from a Prisma update.
+     * Returns null if no meaningful changes (beyond excluded fields).
+     */
+    diff(oldRecord, newRecord, reg) {
+        if (!oldRecord || !newRecord)
+            return null;
+        const excluded = new Set([...(reg.auditExclude ?? []), ...BASE_AUDIT_EXCLUDE, 'updatedAt', 'updated_at']);
+        const oldOut = {};
+        const newOut = {};
+        const keys = new Set([...Object.keys(oldRecord), ...Object.keys(newRecord)]);
+        for (const k of keys) {
+            if (excluded.has(k))
+                continue;
+            const o = oldRecord[k];
+            const n = newRecord[k];
+            if (JSON.stringify(o) !== JSON.stringify(n)) {
+                oldOut[k] = o;
+                newOut[k] = n;
+            }
+        }
+        if (Object.keys(newOut).length === 0)
+            return null;
+        return { old: oldOut, new: newOut };
+    }
+};
+exports.AuditService = AuditService;
+exports.AuditService = AuditService = AuditService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService])
+], AuditService);
+//# sourceMappingURL=audit.service.js.map

package/dist/services/audit.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.service.js","sourceRoot":"","sources":["../../src/services/audit.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,6DAAyD;AAUzD,MAAM,kBAAkB,GAAG,CAAC,UAAU,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;AAE3E;;;GAGG;AAEI,IAAM,YAAY,oBAAlB,MAAM,YAAY;IAGM;IAFZ,MAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;IAExD,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAE9C,QAAQ;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAQT;QACC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC;QACnF,MAAM,cAAc,GAAG,CAAC,GAAQ,EAAE,EAAE;YAClC,IAAI,CAAC,GAAG;gBAAE,OAAO,GAAG,CAAC;YACrB,MAAM,GAAG,GAAQ,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAC3B,IAAI,EAAE;oBACJ,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC;oBAC3C,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC;oBAC3C,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;oBACpC,cAAc,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,IAAI,IAAI;oBACpD,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,IAAI,IAAI;oBACxC,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,IAAI,IAAI;iBACzC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iDAAiD,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,MAAM,MAAO,GAAa,CAAC,OAAO,EAAE,CAC5I,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,SAAc,EAAE,SAAc,EAAE,GAAsB;QACzD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,kBAAkB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;QAC1G,MAAM,MAAM,GAAQ,EAAE,CAAC;QACvB,MAAM,MAAM,GAAQ,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7E,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC9B,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACd,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;CACF,CAAA;AAtEY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAI0B,8BAAa;GAHvC,YAAY,CAsExB"}

package/dist/services/auth.service.d.ts

@@ -0,0 +1,33 @@
+import { PrismaService } from '../prisma/prisma.service';
+import { RhinoConfigService } from '../rhino.config';
+export interface LoginResult {
+    token: string;
+    organizationSlug?: string;
+    user: any;
+}
+export interface TokenPayload {
+    sub: number | string;
+    email?: string;
+    iat?: number;
+}
+/**
+ * Authentication primitives: login, logout, password hashing,
+ * token issuance, password recovery flow.
+ */
+export declare class AuthService {
+    private readonly prisma;
+    private readonly config;
+    private readonly logger;
+    constructor(prisma: PrismaService, config: RhinoConfigService);
+    private userDelegate;
+    hashPassword(plain: string): Promise<string>;
+    checkPassword(plain: string, hashed: string): Promise<boolean>;
+    signToken(payload: TokenPayload): string;
+    verifyToken(token: string): TokenPayload;
+    login(email: string, password: string): Promise<LoginResult>;
+    logout(_user: any): Promise<void>;
+    requestPasswordRecovery(email: string): Promise<{
+        token: string;
+    } | null>;
+    resetPassword(email: string, token: string, newPassword: string): Promise<void>;
+}

package/dist/services/auth.service.js

@@ -0,0 +1,157 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AuthService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthService = void 0;
+const common_1 = require("@nestjs/common");
+const rhino_exception_1 = require("../errors/rhino-exception");
+const bcrypt = __importStar(require("bcryptjs"));
+const jwt = __importStar(require("jsonwebtoken"));
+const crypto_1 = require("crypto");
+const prisma_service_1 = require("../prisma/prisma.service");
+const rhino_config_1 = require("../rhino.config");
+/**
+ * Authentication primitives: login, logout, password hashing,
+ * token issuance, password recovery flow.
+ */
+let AuthService = AuthService_1 = class AuthService {
+    prisma;
+    config;
+    logger = new common_1.Logger(AuthService_1.name);
+    constructor(prisma, config) {
+        this.prisma = prisma;
+        this.config = config;
+    }
+    userDelegate() {
+        const modelName = this.config.authConfig().userModel;
+        return this.prisma.model(modelName);
+    }
+    async hashPassword(plain) {
+        return bcrypt.hash(plain, 10);
+    }
+    async checkPassword(plain, hashed) {
+        if (!hashed)
+            return false;
+        return bcrypt.compare(plain, hashed);
+    }
+    signToken(payload) {
+        const { jwtSecret, jwtExpiresIn } = this.config.authConfig();
+        return jwt.sign(payload, jwtSecret, { expiresIn: jwtExpiresIn });
+    }
+    verifyToken(token) {
+        const { jwtSecret } = this.config.authConfig();
+        try {
+            return jwt.verify(token, jwtSecret);
+        }
+        catch {
+            throw rhino_exception_1.RhinoException.unauthorized('Invalid or expired token');
+        }
+    }
+    async login(email, password) {
+        const auth = this.config.authConfig();
+        const user = await this.userDelegate().findFirst({
+            where: { [auth.emailField]: email },
+            include: { userRoles: { include: { organization: true, role: true } } },
+        }).catch(() => null);
+        if (!user)
+            throw rhino_exception_1.RhinoException.unauthorized('Invalid credentials');
+        const hashed = user[auth.passwordField];
+        const ok = await this.checkPassword(password, hashed);
+        if (!ok)
+            throw rhino_exception_1.RhinoException.unauthorized('Invalid credentials');
+        const token = this.signToken({ sub: user.id, email });
+        const organizationSlug = user.userRoles?.[0]?.organization?.slug;
+        return { token, organizationSlug, user };
+    }
+    async logout(_user) {
+        // JWT stateless; consumer can add blacklist logic via hooks.
+    }
+    async requestPasswordRecovery(email) {
+        const user = await this.userDelegate().findFirst({ where: { email } }).catch(() => null);
+        if (!user)
+            return null;
+        const token = (0, crypto_1.randomBytes)(32).toString('hex');
+        try {
+            await this.prisma.model('passwordResetToken').upsert({
+                where: { email },
+                update: { token, createdAt: new Date() },
+                create: { email, token, createdAt: new Date() },
+            });
+        }
+        catch (err) {
+            this.logger.warn(`AuthService: could not persist password reset token (${err.message}). ` +
+                'Add a `PasswordResetToken` model to your Prisma schema to enable this feature.');
+        }
+        return { token };
+    }
+    async resetPassword(email, token, newPassword) {
+        let reset = null;
+        try {
+            reset = await this.prisma.model('passwordResetToken').findFirst({
+                where: { email, token },
+            });
+        }
+        catch {
+            throw new common_1.BadRequestException('Password reset not available');
+        }
+        if (!reset)
+            throw new common_1.BadRequestException('Invalid token');
+        const hashed = await this.hashPassword(newPassword);
+        await this.userDelegate().update({
+            where: { email },
+            data: { password: hashed },
+        });
+        try {
+            await this.prisma.model('passwordResetToken').delete({ where: { email } });
+        }
+        catch { /* ignore */ }
+    }
+};
+exports.AuthService = AuthService;
+exports.AuthService = AuthService = AuthService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        rhino_config_1.RhinoConfigService])
+], AuthService);
+//# sourceMappingURL=auth.service.js.map

package/dist/services/auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAIwB;AACxB,+DAA2D;AAC3D,iDAAmC;AACnC,kDAAoC;AACpC,mCAAqC;AACrC,6DAAyD;AACzD,kDAAqD;AAcrD;;;GAGG;AAEI,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAIH;IACA;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAEvD,YACmB,MAAqB,EACrB,MAA0B;QAD1B,WAAM,GAAN,MAAM,CAAe;QACrB,WAAM,GAAN,MAAM,CAAoB;IAC1C,CAAC;IAEI,YAAY;QAClB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC;QACrD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,MAAc;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,SAAS,CAAC,OAAqB;QAC7B,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC7D,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,EAAS,CAAC,CAAC;IAC1E,CAAC;IAED,WAAW,CAAC,KAAa;QACvB,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAiB,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,gCAAc,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,QAAgB;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,SAAS,CAAC;YAC/C,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE;YACnC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;SACxE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAErB,IAAI,CAAC,IAAI;YAAE,MAAM,gCAAc,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC;QACpE,MAAM,MAAM,GAAI,IAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,EAAE;YAAE,MAAM,gCAAc,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC;QAElE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAG,IAAY,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,gBAAgB,GAAI,IAAY,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC;QAC1E,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAU;QACrB,6DAA6D;IAC/D,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,KAAa;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;gBACnD,KAAK,EAAE,EAAE,KAAK,EAAE;gBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;gBACxC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,wDAAyD,GAAa,CAAC,OAAO,KAAK;gBACjF,gFAAgF,CACnF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,KAAa,EAAE,WAAmB;QACnE,IAAI,KAAK,GAAQ,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,SAAS,CAAC;gBAC9D,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,4BAAmB,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC;YAC/B,KAAK,EAAE,EAAE,KAAK,EAAE;YAChB,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC;CACF,CAAA;AA/FY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAKgB,8BAAa;QACb,iCAAkB;GALlC,WAAW,CA+FvB"}

package/dist/services/invitation.service.d.ts

@@ -0,0 +1,37 @@
+import { PrismaService } from '../prisma/prisma.service';
+import { RhinoConfigService } from '../rhino.config';
+export interface CreateInvitationInput {
+    email: string;
+    roleId: number;
+    organization: any;
+    invitedBy: any;
+}
+/**
+ * Invitation lifecycle: create/resend/cancel/accept with token-based acceptance.
+ * Mirrors Laravel's InvitationController + OrganizationInvitation model.
+ */
+export declare class InvitationService {
+    private readonly prisma;
+    private readonly config;
+    constructor(prisma: PrismaService, config: RhinoConfigService);
+    private delegate;
+    private generateToken;
+    private expiresAt;
+    list(organizationId: number, status?: string): Promise<any>;
+    create(input: CreateInvitationInput): Promise<any>;
+    resend(id: number): Promise<any>;
+    cancel(id: number): Promise<any>;
+    accept(token: string, userId?: number): Promise<{
+        requiresRegistration: boolean;
+        organization: any;
+        role: any;
+        email: any;
+        accepted?: undefined;
+    } | {
+        accepted: boolean;
+        organization: any;
+        requiresRegistration?: undefined;
+        role?: undefined;
+        email?: undefined;
+    }>;
+}