@rhino-dev/rhino-nestjs 0.2.5

package/dist/services/invitation.service.js

@@ -0,0 +1,143 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvitationService = void 0;
+const common_1 = require("@nestjs/common");
+const crypto_1 = require("crypto");
+const prisma_service_1 = require("../prisma/prisma.service");
+const rhino_config_1 = require("../rhino.config");
+/**
+ * Invitation lifecycle: create/resend/cancel/accept with token-based acceptance.
+ * Mirrors Laravel's InvitationController + OrganizationInvitation model.
+ */
+let InvitationService = class InvitationService {
+    prisma;
+    config;
+    constructor(prisma, config) {
+        this.prisma = prisma;
+        this.config = config;
+    }
+    delegate() {
+        return this.prisma.model('organizationInvitation');
+    }
+    generateToken() {
+        return (0, crypto_1.randomBytes)(32).toString('hex'); // 64 hex chars
+    }
+    expiresAt() {
+        const days = this.config.invitationsConfig().expiresDays;
+        const d = new Date();
+        d.setDate(d.getDate() + days);
+        return d;
+    }
+    async list(organizationId, status) {
+        const where = { organizationId };
+        if (status && status !== 'all')
+            where.status = status;
+        return this.delegate().findMany({ where, orderBy: { createdAt: 'desc' } });
+    }
+    async create(input) {
+        const cfg = this.config.invitationsConfig();
+        if (cfg.allowedRoles) {
+            const role = await this.prisma.model('role').findUnique({ where: { id: input.roleId } });
+            if (!role || !cfg.allowedRoles.includes(role.slug)) {
+                throw new common_1.BadRequestException('Role not allowed for invitations');
+            }
+        }
+        const token = this.generateToken();
+        const invitation = await this.delegate().create({
+            data: {
+                organizationId: input.organization.id,
+                email: input.email,
+                roleId: input.roleId,
+                token,
+                status: 'pending',
+                invitedById: input.invitedBy.id,
+                expiresAt: this.expiresAt(),
+            },
+        });
+        if (cfg.notificationHandler) {
+            await cfg.notificationHandler(invitation);
+        }
+        return invitation;
+    }
+    async resend(id) {
+        const invitation = await this.delegate().findUnique({ where: { id } });
+        if (!invitation)
+            throw new common_1.NotFoundException('Invitation not found');
+        if (invitation.status !== 'pending') {
+            throw new common_1.BadRequestException('Only pending invitations can be resent');
+        }
+        const refreshed = await this.delegate().update({
+            where: { id },
+            data: { token: this.generateToken(), expiresAt: this.expiresAt() },
+        });
+        const cfg = this.config.invitationsConfig();
+        if (cfg.notificationHandler)
+            await cfg.notificationHandler(refreshed);
+        return refreshed;
+    }
+    async cancel(id) {
+        const invitation = await this.delegate().findUnique({ where: { id } });
+        if (!invitation)
+            throw new common_1.NotFoundException('Invitation not found');
+        if (invitation.status !== 'pending') {
+            throw new common_1.BadRequestException('Only pending invitations can be cancelled');
+        }
+        return this.delegate().update({
+            where: { id },
+            data: { status: 'cancelled' },
+        });
+    }
+    async accept(token, userId) {
+        const invitation = await this.delegate().findUnique({
+            where: { token },
+            include: { organization: true, role: true },
+        });
+        if (!invitation)
+            throw new common_1.NotFoundException('Invitation not found');
+        const inv = invitation;
+        if (inv.status !== 'pending')
+            throw new common_1.BadRequestException('Invitation no longer valid');
+        if (inv.expiresAt < new Date()) {
+            await this.delegate().update({ where: { id: inv.id }, data: { status: 'expired' } });
+            throw new common_1.BadRequestException('Invitation expired');
+        }
+        if (!userId) {
+            // User is unauthenticated — return org/role so client can register
+            return {
+                requiresRegistration: true,
+                organization: inv.organization,
+                role: inv.role,
+                email: inv.email,
+            };
+        }
+        await this.prisma.model('userRole').create({
+            data: {
+                userId,
+                organizationId: inv.organizationId,
+                roleId: inv.roleId,
+                permissions: [],
+            },
+        });
+        await this.delegate().update({
+            where: { id: inv.id },
+            data: { status: 'accepted', acceptedAt: new Date() },
+        });
+        return { accepted: true, organization: inv.organization };
+    }
+};
+exports.InvitationService = InvitationService;
+exports.InvitationService = InvitationService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        rhino_config_1.RhinoConfigService])
+], InvitationService);
+//# sourceMappingURL=invitation.service.js.map

package/dist/services/invitation.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.service.js","sourceRoot":"","sources":["../../src/services/invitation.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAIwB;AACxB,mCAAqC;AACrC,6DAAyD;AACzD,kDAAqD;AASrD;;;GAGG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAET;IACA;IAFnB,YACmB,MAAqB,EACrB,MAA0B;QAD1B,WAAM,GAAN,MAAM,CAAe;QACrB,WAAM,GAAN,MAAM,CAAoB;IAC1C,CAAC;IAEI,QAAQ;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACrD,CAAC;IAEO,aAAa;QACnB,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe;IACzD,CAAC;IAEO,SAAS;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC;QACzD,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,cAAsB,EAAE,MAAe;QAChD,MAAM,KAAK,GAAQ,EAAE,cAAc,EAAE,CAAC;QACtC,IAAI,MAAM,IAAI,MAAM,KAAK,KAAK;YAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QACtD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA4B;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC5C,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACzF,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAE,IAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,MAAM,IAAI,4BAAmB,CAAC,kCAAkC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC;YAC9C,IAAI,EAAE;gBACJ,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE;gBACrC,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK;gBACL,MAAM,EAAE,SAAS;gBACjB,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE;gBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;aAC5B;SACF,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,mBAAmB,EAAE,CAAC;YAC5B,MAAM,GAAG,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,0BAAiB,CAAC,sBAAsB,CAAC,CAAC;QACrE,IAAK,UAAkB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;SACnE,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC5C,IAAI,GAAG,CAAC,mBAAmB;YAAE,MAAM,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,0BAAiB,CAAC,sBAAsB,CAAC,CAAC;QACrE,IAAK,UAAkB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,IAAI,4BAAmB,CAAC,2CAA2C,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC;YAC5B,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,MAAe;QACzC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC;YAClD,KAAK,EAAE,EAAE,KAAK,EAAE;YAChB,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;SAC5C,CAAC,CAAC;QACH,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,0BAAiB,CAAC,sBAAsB,CAAC,CAAC;QACrE,MAAM,GAAG,GAAQ,UAAU,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC1F,IAAI,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YACrF,MAAM,IAAI,4BAAmB,CAAC,oBAAoB,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,mEAAmE;YACnE,OAAO;gBACL,oBAAoB,EAAE,IAAI;gBAC1B,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;YACzC,IAAI,EAAE;gBACJ,MAAM;gBACN,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,WAAW,EAAE,EAAE;aAChB;SACF,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC;YAC3B,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;YACrB,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE;SACrD,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;IAC5D,CAAC;CACF,CAAA;AArHY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAGgB,8BAAa;QACb,iCAAkB;GAHlC,iBAAiB,CAqH7B"}

package/dist/services/nested.service.d.ts

@@ -0,0 +1,34 @@
+import { PrismaService } from '../prisma/prisma.service';
+import { RhinoConfigService } from '../rhino.config';
+import { ValidationService } from './validation.service';
+export interface NestedOperation {
+    model: string;
+    action: 'create' | 'update' | 'delete';
+    id?: number | string;
+    data?: Record<string, any>;
+}
+export interface NestedExecContext {
+    user?: any;
+    organization?: any;
+}
+export interface NestedResult {
+    index: number;
+    model: string;
+    action: 'create' | 'update' | 'delete';
+    id: any;
+    data: any;
+}
+/**
+ * Executes a batch of nested CRUD operations atomically.
+ * Supports `$N.field` references to prior operations' return values.
+ */
+export declare class NestedService {
+    private readonly prisma;
+    private readonly config;
+    private readonly validation;
+    constructor(prisma: PrismaService, config: RhinoConfigService, validation: ValidationService);
+    execute(operations: NestedOperation[], ctx: NestedExecContext): Promise<NestedResult[]>;
+    private camelize;
+    resolveReferences(data: Record<string, any>, results: NestedResult[]): Record<string, any>;
+    private readPath;
+}

package/dist/services/nested.service.js

@@ -0,0 +1,163 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NestedService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const rhino_config_1 = require("../rhino.config");
+const validation_service_1 = require("./validation.service");
+const REF_PATTERN = /^\$(\d+)\.([\w.]+)$/;
+/**
+ * Executes a batch of nested CRUD operations atomically.
+ * Supports `$N.field` references to prior operations' return values.
+ */
+let NestedService = class NestedService {
+    prisma;
+    config;
+    validation;
+    constructor(prisma, config, validation) {
+        this.prisma = prisma;
+        this.config = config;
+        this.validation = validation;
+    }
+    async execute(operations, ctx) {
+        const maxOps = this.config.nestedConfig().maxOperations;
+        const allowed = this.config.nestedConfig().allowedModels;
+        if (operations.length === 0) {
+            throw new common_1.BadRequestException('No operations provided');
+        }
+        if (operations.length > maxOps) {
+            throw new common_1.BadRequestException(`Too many operations (max ${maxOps})`);
+        }
+        for (const op of operations) {
+            if (!op.model || !op.action) {
+                throw new common_1.BadRequestException('Each operation must have model and action');
+            }
+            if (!['create', 'update', 'delete'].includes(op.action)) {
+                throw new common_1.BadRequestException(`Unsupported action: ${op.action}`);
+            }
+            if ((op.action === 'update' || op.action === 'delete') && op.id == null) {
+                throw new common_1.BadRequestException(`Action ${op.action} requires an id`);
+            }
+            if (!this.config.hasModel(op.model)) {
+                throw new common_1.BadRequestException(`Unknown model: ${op.model}`);
+            }
+            if (allowed && !allowed.includes(op.model)) {
+                throw new common_1.BadRequestException(`Model not allowed for nested: ${op.model}`);
+            }
+        }
+        return this.prisma.$transaction(async (tx) => {
+            const results = [];
+            for (let i = 0; i < operations.length; i++) {
+                const op = operations[i];
+                const reg = this.config.model(op.model);
+                const delegate = tx[this.camelize(reg.model)] ?? tx[reg.model];
+                if (!delegate) {
+                    throw new common_1.BadRequestException(`Prisma delegate missing: ${reg.model}`);
+                }
+                if (op.action === 'delete') {
+                    const where = { id: op.id };
+                    if (reg.belongsToOrganization && ctx.organization) {
+                        where.organizationId = ctx.organization.id;
+                    }
+                    if (reg.softDeletes) {
+                        const res = await delegate.updateMany({ where, data: { deletedAt: new Date() } });
+                        if (res.count === 0) {
+                            throw new common_1.BadRequestException({
+                                message: 'Record not found or cross-tenant',
+                                operationIndex: i,
+                            });
+                        }
+                    }
+                    else {
+                        const res = await delegate.deleteMany({ where });
+                        if (res.count === 0) {
+                            throw new common_1.BadRequestException({
+                                message: 'Record not found or cross-tenant',
+                                operationIndex: i,
+                            });
+                        }
+                    }
+                    results.push({ index: i, model: op.model, action: 'delete', id: op.id, data: null });
+                    continue;
+                }
+                const resolvedData = this.resolveReferences(op.data ?? {}, results);
+                const validationResult = this.validation.validateForAction(resolvedData, reg, {
+                    action: op.action === 'create' ? 'store' : 'update',
+                    user: ctx.user,
+                    organization: ctx.organization,
+                });
+                if (!validationResult.valid) {
+                    throw new common_1.BadRequestException({
+                        message: 'Validation failed',
+                        operationIndex: i,
+                        errors: validationResult.errors,
+                    });
+                }
+                const payload = validationResult.data;
+                if (reg.belongsToOrganization && ctx.organization && op.action === 'create') {
+                    payload.organizationId = ctx.organization.id;
+                }
+                if (op.action === 'create') {
+                    const record = await delegate.create({ data: payload });
+                    results.push({ index: i, model: op.model, action: 'create', id: record.id, data: record });
+                }
+                else {
+                    const where = { id: op.id };
+                    if (reg.belongsToOrganization && ctx.organization) {
+                        where.organizationId = ctx.organization.id;
+                    }
+                    const res = await delegate.updateMany({ where, data: payload });
+                    if (res.count === 0) {
+                        throw new common_1.BadRequestException({
+                            message: 'Record not found or cross-tenant',
+                            operationIndex: i,
+                        });
+                    }
+                    const record = await delegate.findFirst({ where });
+                    results.push({ index: i, model: op.model, action: 'update', id: record.id, data: record });
+                }
+            }
+            return results;
+        });
+    }
+    camelize(name) {
+        return name.charAt(0).toLowerCase() + name.slice(1);
+    }
+    resolveReferences(data, results) {
+        const out = {};
+        for (const [k, v] of Object.entries(data)) {
+            if (typeof v === 'string') {
+                const match = v.match(REF_PATTERN);
+                if (match) {
+                    const idx = parseInt(match[1], 10);
+                    const path = match[2];
+                    const prior = results[idx]?.data;
+                    out[k] = prior ? this.readPath(prior, path) : undefined;
+                    continue;
+                }
+            }
+            out[k] = v;
+        }
+        return out;
+    }
+    readPath(obj, path) {
+        return path.split('.').reduce((acc, p) => (acc == null ? acc : acc[p]), obj);
+    }
+};
+exports.NestedService = NestedService;
+exports.NestedService = NestedService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        rhino_config_1.RhinoConfigService,
+        validation_service_1.ValidationService])
+], NestedService);
+//# sourceMappingURL=nested.service.js.map

package/dist/services/nested.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nested.service.js","sourceRoot":"","sources":["../../src/services/nested.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAiE;AACjE,6DAAyD;AACzD,kDAAqD;AACrD,6DAAyD;AAsBzD,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAE1C;;;GAGG;AAEI,IAAM,aAAa,GAAnB,MAAM,aAAa;IAEL;IACA;IACA;IAHnB,YACmB,MAAqB,EACrB,MAA0B,EAC1B,UAA6B;QAF7B,WAAM,GAAN,MAAM,CAAe;QACrB,WAAM,GAAN,MAAM,CAAoB;QAC1B,eAAU,GAAV,UAAU,CAAmB;IAC7C,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,UAA6B,EAAE,GAAsB;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,aAAa,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,aAAa,CAAC;QACzD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,4BAAmB,CAAC,wBAAwB,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,MAAM,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,IAAI,4BAAmB,CAAC,2CAA2C,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;gBACxE,MAAM,IAAI,4BAAmB,CAAC,UAAU,EAAE,CAAC,MAAM,iBAAiB,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,4BAAmB,CAAC,iCAAiC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAO,EAAE,EAAE;YAChD,MAAM,OAAO,GAAmB,EAAE,CAAC;YACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBACzB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAE,CAAC;gBACzC,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzE,CAAC;gBAED,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC3B,MAAM,KAAK,GAAwB,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;oBACjD,IAAI,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;wBAClD,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC7C,CAAC;oBACD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;wBACpB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;wBAClF,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;4BACpB,MAAM,IAAI,4BAAmB,CAAC;gCAC5B,OAAO,EAAE,kCAAkC;gCAC3C,cAAc,EAAE,CAAC;6BAClB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;wBACjD,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;4BACpB,MAAM,IAAI,4BAAmB,CAAC;gCAC5B,OAAO,EAAE,kCAAkC;gCAC3C,cAAc,EAAE,CAAC;6BAClB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACrF,SAAS;gBACX,CAAC;gBAED,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;gBACpE,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,YAAY,EAAE,GAAG,EAAE;oBAC5E,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;oBACnD,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,YAAY,EAAE,GAAG,CAAC,YAAY;iBAC/B,CAAC,CAAC;gBACH,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;oBAC5B,MAAM,IAAI,4BAAmB,CAAC;wBAC5B,OAAO,EAAE,mBAAmB;wBAC5B,cAAc,EAAE,CAAC;wBACjB,MAAM,EAAE,gBAAgB,CAAC,MAAM;qBAChC,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAK,CAAC;gBACvC,IAAI,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC3E,OAAe,CAAC,cAAc,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBACxD,CAAC;gBAED,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;oBACxD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC7F,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAwB,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;oBACjD,IAAI,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;wBAClD,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC7C,CAAC;oBACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;oBAChE,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;wBACpB,MAAM,IAAI,4BAAmB,CAAC;4BAC5B,OAAO,EAAE,kCAAkC;4BAC3C,cAAc,EAAE,CAAC;yBAClB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;oBACnD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC7F,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,iBAAiB,CAAC,IAAyB,EAAE,OAAuB;QAClE,MAAM,GAAG,GAAwB,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBACnC,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACtB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;oBACjC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACxD,SAAS;gBACX,CAAC;YACH,CAAC;YACD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,QAAQ,CAAC,GAAQ,EAAE,IAAY;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/E,CAAC;CACF,CAAA;AAzIY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;qCAGgB,8BAAa;QACb,iCAAkB;QACd,sCAAiB;GAJrC,aAAa,CAyIzB"}

package/dist/services/organization.service.d.ts

@@ -0,0 +1,13 @@
+import { PrismaService } from '../prisma/prisma.service';
+import { RhinoConfigService } from '../rhino.config';
+/**
+ * Resolves a route's `organization` parameter to a concrete organization record.
+ * Mirrors Laravel's `ResolveOrganizationFromRoute` middleware.
+ */
+export declare class OrganizationService {
+    private readonly prisma;
+    private readonly config;
+    constructor(prisma: PrismaService, config: RhinoConfigService);
+    resolve(identifier: string | number, user?: any): Promise<any>;
+    ensureMembership(user: any, org: any): Promise<void>;
+}

package/dist/services/organization.service.js

@@ -0,0 +1,60 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const rhino_config_1 = require("../rhino.config");
+/**
+ * Resolves a route's `organization` parameter to a concrete organization record.
+ * Mirrors Laravel's `ResolveOrganizationFromRoute` middleware.
+ */
+let OrganizationService = class OrganizationService {
+    prisma;
+    config;
+    constructor(prisma, config) {
+        this.prisma = prisma;
+        this.config = config;
+    }
+    async resolve(identifier, user) {
+        const column = this.config.organizationIdentifierColumn();
+        const modelName = this.config.raw().multiTenant?.organizationModel ?? 'organization';
+        const value = column === 'id' || /^\d+$/.test(String(identifier))
+            ? column === 'id'
+                ? Number(identifier)
+                : identifier
+            : identifier;
+        const delegate = this.prisma.model(modelName);
+        const org = await delegate.findFirst({ where: { [column]: value } });
+        if (!org)
+            throw new common_1.NotFoundException('Organization not found');
+        if (user) {
+            await this.ensureMembership(user, org);
+        }
+        return org;
+    }
+    async ensureMembership(user, org) {
+        const userOrgModel = this.config.raw().multiTenant?.userOrganizationModel ?? 'userRole';
+        const delegate = this.prisma.model(userOrgModel);
+        const membership = await delegate.findFirst({
+            where: { userId: user.id, organizationId: org.id },
+        });
+        if (!membership)
+            throw new common_1.NotFoundException('Organization not found');
+    }
+};
+exports.OrganizationService = OrganizationService;
+exports.OrganizationService = OrganizationService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        rhino_config_1.RhinoConfigService])
+], OrganizationService);
+//# sourceMappingURL=organization.service.js.map

package/dist/services/organization.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.service.js","sourceRoot":"","sources":["../../src/services/organization.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+D;AAC/D,6DAAyD;AACzD,kDAAqD;AAErD;;;GAGG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAEX;IACA;IAFnB,YACmB,MAAqB,EACrB,MAA0B;QAD1B,WAAM,GAAN,MAAM,CAAe;QACrB,WAAM,GAAN,MAAM,CAAoB;IAC1C,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,UAA2B,EAAE,IAAU;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,4BAA4B,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,iBAAiB,IAAI,cAAc,CAAC;QACrF,MAAM,KAAK,GACT,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACjD,CAAC,CAAC,MAAM,KAAK,IAAI;gBACf,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACpB,CAAC,CAAC,UAAU;YACd,CAAC,CAAC,UAAU,CAAC;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,0BAAiB,CAAC,wBAAwB,CAAC,CAAC;QAEhE,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAS,EAAE,GAAQ;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,qBAAqB,IAAI,UAAU,CAAC;QACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC;YAC1C,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,0BAAiB,CAAC,wBAAwB,CAAC,CAAC;IACzE,CAAC;CACF,CAAA;AAnCY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;qCAGgB,8BAAa;QACb,iCAAkB;GAHlC,mBAAmB,CAmC/B"}

package/dist/services/query-builder.service.d.ts

@@ -0,0 +1,31 @@
+import type { ModelRegistration } from '../interfaces/rhino-config.interface';
+export interface ParsedQuery {
+    where: Record<string, any>;
+    orderBy: any;
+    include?: Record<string, any>;
+    select?: Record<string, any>;
+    page?: number;
+    perPage?: number;
+}
+/**
+ * Parses query string parameters into Prisma-compatible `findMany` args.
+ *
+ * Supported shape (match Laravel + Spatie QueryBuilder semantics):
+ *   ?filter[field]=value           — AND match, comma-separated values become IN
+ *   ?sort=-created_at,title        — leading `-` reverses direction
+ *   ?search=term                   — fuzzy search across allowedSearch fields
+ *   ?per_page=25&page=2            — pagination
+ *   ?fields[slug]=id,title         — field selection (Prisma `select`)
+ *   ?include=user,comments.author  — eager loading with dot-notation
+ */
+export declare class QueryBuilderService {
+    build(query: Record<string, any>, reg: ModelRegistration): ParsedQuery;
+    buildWhere(query: Record<string, any>, reg: ModelRegistration): Record<string, any>;
+    private parseFilterValue;
+    private buildRelationContains;
+    buildOrderBy(query: Record<string, any>, reg: ModelRegistration): any;
+    buildInclude(query: Record<string, any>, reg: ModelRegistration): Record<string, any> | undefined;
+    private assignInclude;
+    buildSelect(query: Record<string, any>, reg: ModelRegistration): Record<string, any> | undefined;
+    private parseInt;
+}

package/dist/services/query-builder.service.js

@@ -0,0 +1,151 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QueryBuilderService = void 0;
+const common_1 = require("@nestjs/common");
+/**
+ * Parses query string parameters into Prisma-compatible `findMany` args.
+ *
+ * Supported shape (match Laravel + Spatie QueryBuilder semantics):
+ *   ?filter[field]=value           — AND match, comma-separated values become IN
+ *   ?sort=-created_at,title        — leading `-` reverses direction
+ *   ?search=term                   — fuzzy search across allowedSearch fields
+ *   ?per_page=25&page=2            — pagination
+ *   ?fields[slug]=id,title         — field selection (Prisma `select`)
+ *   ?include=user,comments.author  — eager loading with dot-notation
+ */
+let QueryBuilderService = class QueryBuilderService {
+    build(query, reg) {
+        return {
+            where: this.buildWhere(query, reg),
+            orderBy: this.buildOrderBy(query, reg),
+            include: this.buildInclude(query, reg),
+            select: this.buildSelect(query, reg),
+            page: this.parseInt(query.page),
+            perPage: this.parseInt(query.per_page ?? query.perPage),
+        };
+    }
+    buildWhere(query, reg) {
+        const where = {};
+        const filter = query.filter ?? {};
+        const allowed = new Set(reg.allowedFilters ?? []);
+        if (filter && typeof filter === 'object') {
+            for (const [key, rawVal] of Object.entries(filter)) {
+                if (!allowed.has(key))
+                    continue;
+                where[key] = this.parseFilterValue(rawVal);
+            }
+        }
+        const search = query.search;
+        if (search && reg.allowedSearch && reg.allowedSearch.length > 0) {
+            const fragments = reg.allowedSearch.map((field) => {
+                if (field.includes('.')) {
+                    return this.buildRelationContains(field, String(search));
+                }
+                return { [field]: { contains: String(search), mode: 'insensitive' } };
+            });
+            where.OR = fragments;
+        }
+        return where;
+    }
+    parseFilterValue(v) {
+        if (Array.isArray(v))
+            return { in: v };
+        if (typeof v === 'string' && v.includes(',')) {
+            return { in: v.split(',').filter(Boolean) };
+        }
+        return v;
+    }
+    buildRelationContains(path, value) {
+        const parts = path.split('.');
+        const leaf = parts.pop();
+        let inner = { [leaf]: { contains: value, mode: 'insensitive' } };
+        while (parts.length) {
+            const seg = parts.pop();
+            inner = { [seg]: { is: inner } };
+        }
+        return inner;
+    }
+    buildOrderBy(query, reg) {
+        const raw = query.sort ?? reg.defaultSort;
+        if (!raw)
+            return undefined;
+        const allowed = new Set(reg.allowedSorts ?? []);
+        const tokens = String(raw).split(',').map((s) => s.trim()).filter(Boolean);
+        const orderings = [];
+        for (const tok of tokens) {
+            const desc = tok.startsWith('-');
+            const field = desc ? tok.slice(1) : tok;
+            if (allowed.size > 0 && !allowed.has(field)) {
+                throw new common_1.BadRequestException(`Sort not allowed: ${field}`);
+            }
+            orderings.push({ [field]: desc ? 'desc' : 'asc' });
+        }
+        return orderings;
+    }
+    buildInclude(query, reg) {
+        const raw = query.include;
+        if (!raw)
+            return undefined;
+        const allowed = new Set(reg.allowedIncludes ?? []);
+        const paths = String(raw).split(',').map((s) => s.trim()).filter(Boolean);
+        const include = {};
+        for (const path of paths) {
+            if (allowed.size > 0 && !allowed.has(path) && !allowed.has(path.split('.')[0])) {
+                throw new common_1.BadRequestException(`Include not allowed: ${path}`);
+            }
+            this.assignInclude(include, path.split('.'));
+        }
+        return include;
+    }
+    assignInclude(target, parts) {
+        const [head, ...rest] = parts;
+        if (!head)
+            return;
+        if (rest.length === 0) {
+            if (!target[head])
+                target[head] = true;
+            return;
+        }
+        if (target[head] === true || !target[head])
+            target[head] = { include: {} };
+        if (!target[head].include)
+            target[head].include = {};
+        this.assignInclude(target[head].include, rest);
+    }
+    buildSelect(query, reg) {
+        const fields = query.fields;
+        if (!fields || typeof fields !== 'object')
+            return undefined;
+        // Support either ?fields[slug]=... or ?fields[_]=...; pick first non-empty
+        const raw = Object.values(fields)[0];
+        if (!raw)
+            return undefined;
+        const allowed = new Set(reg.allowedFields ?? []);
+        const names = String(raw).split(',').map((s) => s.trim()).filter(Boolean);
+        const select = { id: true };
+        for (const name of names) {
+            if (allowed.size > 0 && !allowed.has(name)) {
+                throw new common_1.BadRequestException(`Field not allowed: ${name}`);
+            }
+            select[name] = true;
+        }
+        return select;
+    }
+    parseInt(v) {
+        if (v == null)
+            return undefined;
+        const n = parseInt(String(v), 10);
+        return Number.isFinite(n) && n > 0 ? n : undefined;
+    }
+};
+exports.QueryBuilderService = QueryBuilderService;
+exports.QueryBuilderService = QueryBuilderService = __decorate([
+    (0, common_1.Injectable)()
+], QueryBuilderService);
+//# sourceMappingURL=query-builder.service.js.map

package/dist/services/query-builder.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-builder.service.js","sourceRoot":"","sources":["../../src/services/query-builder.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAiE;AAYjE;;;;;;;;;;GAUG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,KAAK,CAAC,KAA0B,EAAE,GAAsB;QACtD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC;YAClC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC;YACtC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC;YACtC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAC/B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,KAA0B,EAAE,GAAsB;QAC3D,MAAM,KAAK,GAAwB,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAChC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,MAAM,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;YACxE,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC;QACvB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,CAAM;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,qBAAqB,CAAC,IAAY,EAAE,KAAa;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAC1B,IAAI,KAAK,GAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;YACzB,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,YAAY,CAAC,KAA0B,EAAE,GAAsB;QAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAU,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACxC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,4BAAmB,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,YAAY,CAAC,KAA0B,EAAE,GAAsB;QAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,MAAM,IAAI,4BAAmB,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,MAA2B,EAAE,KAAe;QAChE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACvC,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC;QACrD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,WAAW,CAAC,KAA0B,EAAE,GAAsB;QAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5D,2EAA2E;QAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAwB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,4BAAmB,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,QAAQ,CAAC,CAAM;QACrB,IAAI,CAAC,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;CACF,CAAA;AAzHY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;GACA,mBAAmB,CAyH/B"}