@rhino-dev/rhino-nestjs 0.2.5

package/dist/services/resource.service.d.ts

@@ -0,0 +1,38 @@
+import { PrismaService } from '../prisma/prisma.service';
+import { RhinoConfigService } from '../rhino.config';
+import { QueryBuilderService } from './query-builder.service';
+import { ScopeService } from './scope.service';
+export interface FindAllResult {
+    items: any[];
+    total?: number;
+    page?: number;
+    perPage?: number;
+    lastPage?: number;
+}
+export interface ResourceContext {
+    user?: any;
+    organization?: any;
+    orgIdentifierColumn?: string;
+    includeTrashed?: boolean;
+    onlyTrashed?: boolean;
+}
+export declare class ResourceService {
+    private readonly prisma;
+    private readonly config;
+    private readonly queryBuilder;
+    private readonly scopes?;
+    constructor(prisma: PrismaService, config: RhinoConfigService, queryBuilder: QueryBuilderService, scopes?: ScopeService);
+    private applyScopes;
+    private delegate;
+    /** Resolve Prisma where filter for the current org context. */
+    protected orgFilter(modelSlug: string, org?: any): Record<string, any> | null;
+    findAll(modelSlug: string, rawQuery: Record<string, any>, ctx?: ResourceContext): Promise<FindAllResult>;
+    findOne(modelSlug: string, id: string | number, rawQuery: Record<string, any>, ctx?: ResourceContext): Promise<any>;
+    create(modelSlug: string, data: Record<string, any>, ctx?: ResourceContext): Promise<any>;
+    update(modelSlug: string, id: string | number, data: Record<string, any>, ctx?: ResourceContext): Promise<any>;
+    delete(modelSlug: string, id: string | number, ctx?: ResourceContext): Promise<boolean>;
+    restore(modelSlug: string, id: string | number, ctx?: ResourceContext): Promise<boolean>;
+    forceDelete(modelSlug: string, id: string | number, ctx?: ResourceContext): Promise<boolean>;
+    protected castId(id: string | number, hasUuid?: boolean): string | number;
+    protected mergeWhere(...parts: (Record<string, any> | null | undefined)[]): Record<string, any>;
+}

package/dist/services/resource.service.js

@@ -0,0 +1,230 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResourceService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../prisma/prisma.service");
+const rhino_config_1 = require("../rhino.config");
+const query_builder_service_1 = require("./query-builder.service");
+const scope_service_1 = require("./scope.service");
+const permission_matcher_1 = require("../utils/permission-matcher");
+let ResourceService = class ResourceService {
+    prisma;
+    config;
+    queryBuilder;
+    scopes;
+    constructor(prisma, config, queryBuilder, scopes) {
+        this.prisma = prisma;
+        this.config = config;
+        this.queryBuilder = queryBuilder;
+        this.scopes = scopes;
+    }
+    applyScopes(where, modelSlug, ctx) {
+        if (!this.scopes)
+            return where;
+        const reg = this.config.model(modelSlug);
+        if (!reg)
+            return where;
+        return this.scopes.apply(where, reg, {
+            user: ctx.user,
+            organization: ctx.organization,
+            userRole: (0, permission_matcher_1.resolveUserRoleSlug)(ctx.user, ctx.organization?.id),
+        });
+    }
+    delegate(modelSlug) {
+        const reg = this.config.model(modelSlug);
+        if (!reg)
+            throw new Error(`Unknown model: ${modelSlug}`);
+        return this.prisma.model(reg.model);
+    }
+    /** Resolve Prisma where filter for the current org context. */
+    orgFilter(modelSlug, org) {
+        if (!org)
+            return null;
+        const reg = this.config.model(modelSlug);
+        if (!reg?.belongsToOrganization)
+            return null;
+        return { organizationId: org.id };
+    }
+    async findAll(modelSlug, rawQuery, ctx = {}) {
+        const reg = this.config.model(modelSlug);
+        if (!reg)
+            throw new Error(`Unknown model: ${modelSlug}`);
+        const delegate = this.delegate(modelSlug);
+        const parsed = this.queryBuilder.build(rawQuery, reg);
+        let where = this.mergeWhere(parsed.where, this.orgFilter(modelSlug, ctx.organization));
+        where = this.applyScopes(where, modelSlug, ctx);
+        // soft delete visibility
+        if (reg.softDeletes) {
+            if (ctx.onlyTrashed) {
+                where.deletedAt = { not: null };
+            }
+            else if (!ctx.includeTrashed) {
+                where.deletedAt = null;
+            }
+        }
+        const paginate = reg.paginationEnabled !== false;
+        if (paginate) {
+            const perPage = parsed.perPage ?? reg.perPage ?? 25;
+            const page = parsed.page ?? 1;
+            const skip = (page - 1) * perPage;
+            const [items, total] = await Promise.all([
+                delegate.findMany({
+                    where,
+                    orderBy: parsed.orderBy,
+                    include: parsed.include,
+                    select: parsed.select,
+                    skip,
+                    take: perPage,
+                }),
+                delegate.count({ where }),
+            ]);
+            return {
+                items,
+                total,
+                page,
+                perPage,
+                lastPage: Math.max(1, Math.ceil(total / perPage)),
+            };
+        }
+        const items = await delegate.findMany({
+            where,
+            orderBy: parsed.orderBy,
+            include: parsed.include,
+            select: parsed.select,
+        });
+        return { items };
+    }
+    async findOne(modelSlug, id, rawQuery, ctx = {}) {
+        const reg = this.config.model(modelSlug);
+        if (!reg)
+            throw new Error(`Unknown model: ${modelSlug}`);
+        const delegate = this.delegate(modelSlug);
+        const parsed = this.queryBuilder.build(rawQuery, reg);
+        let where = { id: this.castId(id, reg.hasUuid) };
+        const orgScope = this.orgFilter(modelSlug, ctx.organization);
+        if (orgScope)
+            Object.assign(where, orgScope);
+        where = this.applyScopes(where, modelSlug, ctx);
+        if (reg.softDeletes && !ctx.includeTrashed)
+            where.deletedAt = null;
+        return delegate.findFirst({ where, include: parsed.include, select: parsed.select });
+    }
+    async create(modelSlug, data, ctx = {}) {
+        const reg = this.config.model(modelSlug);
+        if (!reg)
+            throw new Error(`Unknown model: ${modelSlug}`);
+        const delegate = this.delegate(modelSlug);
+        const payload = { ...data };
+        if (reg.belongsToOrganization && ctx.organization) {
+            payload.organizationId = ctx.organization.id;
+        }
+        return delegate.create({ data: payload });
+    }
+    async update(modelSlug, id, data, ctx = {}) {
+        const reg = this.config.model(modelSlug);
+        if (!reg)
+            throw new Error(`Unknown model: ${modelSlug}`);
+        const delegate = this.delegate(modelSlug);
+        const where = { id: this.castId(id, reg.hasUuid) };
+        const orgScope = this.orgFilter(modelSlug, ctx.organization);
+        if (orgScope)
+            Object.assign(where, orgScope);
+        // Reject attempts to change organizationId silently
+        const payload = { ...data };
+        delete payload.organizationId;
+        delete payload.organization_id;
+        // Prisma "update" doesn't allow extra where props; use updateMany + findFirst for org scope
+        if (orgScope) {
+            const res = await delegate.updateMany({ where, data: payload });
+            if (res.count === 0)
+                return null;
+            return delegate.findFirst({ where });
+        }
+        return delegate.update({ where: { id: this.castId(id, reg.hasUuid) }, data: payload });
+    }
+    async delete(modelSlug, id, ctx = {}) {
+        const reg = this.config.model(modelSlug);
+        if (!reg)
+            throw new Error(`Unknown model: ${modelSlug}`);
+        const delegate = this.delegate(modelSlug);
+        const where = { id: this.castId(id, reg.hasUuid) };
+        const orgScope = this.orgFilter(modelSlug, ctx.organization);
+        if (orgScope)
+            Object.assign(where, orgScope);
+        if (reg.softDeletes) {
+            const res = await delegate.updateMany({ where, data: { deletedAt: new Date() } });
+            return res.count > 0;
+        }
+        if (orgScope) {
+            const res = await delegate.deleteMany({ where });
+            return res.count > 0;
+        }
+        await delegate.delete({ where: { id: this.castId(id, reg.hasUuid) } });
+        return true;
+    }
+    async restore(modelSlug, id, ctx = {}) {
+        const reg = this.config.model(modelSlug);
+        if (!reg?.softDeletes)
+            throw new Error(`Model ${modelSlug} does not support soft deletes`);
+        const delegate = this.delegate(modelSlug);
+        const where = { id: this.castId(id, reg.hasUuid) };
+        const orgScope = this.orgFilter(modelSlug, ctx.organization);
+        if (orgScope)
+            Object.assign(where, orgScope);
+        const res = await delegate.updateMany({ where, data: { deletedAt: null } });
+        return res.count > 0;
+    }
+    async forceDelete(modelSlug, id, ctx = {}) {
+        const reg = this.config.model(modelSlug);
+        if (!reg)
+            throw new Error(`Unknown model: ${modelSlug}`);
+        const delegate = this.delegate(modelSlug);
+        const where = { id: this.castId(id, reg.hasUuid) };
+        const orgScope = this.orgFilter(modelSlug, ctx.organization);
+        if (orgScope)
+            Object.assign(where, orgScope);
+        if (orgScope) {
+            const res = await delegate.deleteMany({ where });
+            return res.count > 0;
+        }
+        await delegate.delete({ where: { id: this.castId(id, reg.hasUuid) } });
+        return true;
+    }
+    castId(id, hasUuid) {
+        if (hasUuid)
+            return String(id);
+        if (typeof id === 'string' && /^\d+$/.test(id))
+            return Number(id);
+        return id;
+    }
+    mergeWhere(...parts) {
+        const out = {};
+        for (const p of parts) {
+            if (p)
+                Object.assign(out, p);
+        }
+        return out;
+    }
+};
+exports.ResourceService = ResourceService;
+exports.ResourceService = ResourceService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(3, (0, common_1.Optional)()),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        rhino_config_1.RhinoConfigService,
+        query_builder_service_1.QueryBuilderService,
+        scope_service_1.ScopeService])
+], ResourceService);
+//# sourceMappingURL=resource.service.js.map

package/dist/services/resource.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.service.js","sourceRoot":"","sources":["../../src/services/resource.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA8D;AAC9D,6DAAyD;AACzD,kDAAqD;AACrD,mEAA2E;AAC3E,mDAA+C;AAC/C,oEAAkE;AAmB3D,IAAM,eAAe,GAArB,MAAM,eAAe;IAEP;IACA;IACA;IACY;IAJ/B,YACmB,MAAqB,EACrB,MAA0B,EAC1B,YAAiC,EACrB,MAAqB;QAHjC,WAAM,GAAN,MAAM,CAAe;QACrB,WAAM,GAAN,MAAM,CAAoB;QAC1B,iBAAY,GAAZ,YAAY,CAAqB;QACrB,WAAM,GAAN,MAAM,CAAe;IACjD,CAAC;IAEI,WAAW,CACjB,KAA0B,EAC1B,SAAiB,EACjB,GAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE;YACnC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,QAAQ,EAAE,IAAA,wCAAmB,EAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,SAAiB;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,+DAA+D;IACrD,SAAS,CAAC,SAAiB,EAAE,GAAS;QAC9C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,qBAAqB;YAAE,OAAO,IAAI,CAAC;QAC7C,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,QAA6B,EAAE,MAAuB,EAAE;QACvF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAgB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnE,IAAI,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QACvF,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAEhD,yBAAyB;QACzB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,KAAK,CAAC,SAAS,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;YAClC,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;gBAC/B,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;YACzB,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,KAAK,KAAK,CAAC;QACjD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC;YAClC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACvC,QAAQ,CAAC,QAAQ,CAAC;oBAChB,KAAK;oBACL,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,IAAI;oBACJ,IAAI,EAAE,OAAO;iBACd,CAAC;gBACF,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;aAC1B,CAAC,CAAC;YACH,OAAO;gBACL,KAAK;gBACL,KAAK;gBACL,IAAI;gBACJ,OAAO;gBACP,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;YACpC,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,EAAmB,EAAE,QAA6B,EAAE,MAAuB,EAAE;QAC5G,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACtD,IAAI,KAAK,GAAwB,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,QAAQ;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7C,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,cAAc;YAAE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QACnE,OAAO,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,IAAyB,EAAE,MAAuB,EAAE;QAClF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAwB,EAAE,GAAG,IAAI,EAAE,CAAC;QACjD,IAAI,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YAClD,OAAO,CAAC,cAAc,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,EAAmB,EAAE,IAAyB,EAAE,MAAuB,EAAE;QACvG,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAwB,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,QAAQ;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAE7C,oDAAoD;QACpD,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,cAAc,CAAC;QAC9B,OAAO,OAAO,CAAC,eAAe,CAAC;QAE/B,4FAA4F;QAC5F,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjC,OAAO,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,EAAmB,EAAE,MAAuB,EAAE;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAwB,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,QAAQ;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAE7C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAClF,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,EAAmB,EAAE,MAAuB,EAAE;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,SAAS,gCAAgC,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAwB,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,QAAQ;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,EAAmB,EAAE,MAAuB,EAAE;QACjF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAwB,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,QAAQ;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IAES,MAAM,CAAC,EAAmB,EAAE,OAAiB;QACrD,IAAI,OAAO;YAAE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QAClE,OAAO,EAAE,CAAC;IACZ,CAAC;IAES,UAAU,CAAC,GAAG,KAAiD;QACvE,MAAM,GAAG,GAAwB,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAA;AAhMY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,iBAAQ,GAAE,CAAA;qCAHc,8BAAa;QACb,iCAAkB;QACZ,2CAAmB;QACZ,4BAAY;GALzC,eAAe,CAgM3B"}

package/dist/services/route-registration.service.d.ts

@@ -0,0 +1,40 @@
+import { INestApplication } from '@nestjs/common';
+import { RhinoConfigService } from '../rhino.config';
+export interface RegisterRoutesOptions {
+    /** Global prefix for all routes (default: "api"). */
+    prefix?: string;
+    /** Apply the authentication guard globally. Set `false` to skip. */
+    enableAuth?: boolean;
+}
+/**
+ * Utility helper invoked during `main.ts` bootstrap to wire up Rhino
+ * routing conventions that can't be expressed purely via @Controller decorators
+ * (route group prefixes, tenant resolution middleware, skip-auth for public groups).
+ *
+ * NestJS has no built-in "register the same controller at multiple prefixes" API,
+ * so the pattern here is:
+ *
+ *  1. Users register RhinoModule with their model + routeGroup config.
+ *  2. Users expose a single Global/Auth/Invitation/Nested controller set
+ *     (either by re-exporting from this library or by subclassing).
+ *  3. The helper returns the metadata needed to install middleware chains.
+ *
+ * Route group expansion is done at request time by the `ResolveOrganization`
+ * middleware — the tenant group's `:organization` param is the discriminator.
+ */
+export declare function applyRhinoRouting(app: INestApplication, options?: RegisterRoutesOptions): {
+    prefix: string;
+    enableAuth: boolean;
+};
+/**
+ * Describe the resolved route table for documentation / postman export.
+ */
+export declare function describeRoutes(config: RhinoConfigService): Array<{
+    group: string;
+    slug: string;
+    prefix: string;
+    model: string;
+    softDeletes: boolean;
+    hasAuditTrail: boolean;
+    exceptActions: string[];
+}>;

package/dist/services/route-registration.service.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyRhinoRouting = applyRhinoRouting;
+exports.describeRoutes = describeRoutes;
+/**
+ * Utility helper invoked during `main.ts` bootstrap to wire up Rhino
+ * routing conventions that can't be expressed purely via @Controller decorators
+ * (route group prefixes, tenant resolution middleware, skip-auth for public groups).
+ *
+ * NestJS has no built-in "register the same controller at multiple prefixes" API,
+ * so the pattern here is:
+ *
+ *  1. Users register RhinoModule with their model + routeGroup config.
+ *  2. Users expose a single Global/Auth/Invitation/Nested controller set
+ *     (either by re-exporting from this library or by subclassing).
+ *  3. The helper returns the metadata needed to install middleware chains.
+ *
+ * Route group expansion is done at request time by the `ResolveOrganization`
+ * middleware — the tenant group's `:organization` param is the discriminator.
+ */
+function applyRhinoRouting(app, options = {}) {
+    const prefix = options.prefix ?? 'api';
+    app.setGlobalPrefix(prefix);
+    return { prefix, enableAuth: options.enableAuth ?? true };
+}
+/**
+ * Describe the resolved route table for documentation / postman export.
+ */
+function describeRoutes(config) {
+    const routes = [];
+    const models = config.models();
+    const groups = config.routeGroups();
+    const groupNames = Object.keys(groups);
+    const fallback = groupNames.length === 0 ? [[undefined, undefined]] : [];
+    for (const name of groupNames) {
+        const group = groups[name];
+        const slugList = group.models === '*' ? Object.keys(models) : group.models;
+        for (const slug of slugList) {
+            const reg = models[slug];
+            if (!reg)
+                continue;
+            routes.push({
+                group: name,
+                slug,
+                prefix: group.prefix ?? '',
+                model: reg.model,
+                softDeletes: !!reg.softDeletes,
+                hasAuditTrail: !!reg.hasAuditTrail,
+                exceptActions: reg.exceptActions ?? [],
+            });
+        }
+    }
+    if (fallback.length > 0) {
+        for (const [slug, reg] of Object.entries(models)) {
+            routes.push({
+                group: '(default)',
+                slug,
+                prefix: '',
+                model: reg.model,
+                softDeletes: !!reg.softDeletes,
+                hasAuditTrail: !!reg.hasAuditTrail,
+                exceptActions: reg.exceptActions ?? [],
+            });
+        }
+    }
+    return routes;
+}
+//# sourceMappingURL=route-registration.service.js.map

package/dist/services/route-registration.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-registration.service.js","sourceRoot":"","sources":["../../src/services/route-registration.service.ts"],"names":[],"mappings":";;AA0BA,8CAOC;AAKD,wCA6CC;AAzED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,iBAAiB,CAC/B,GAAqB,EACrB,UAAiC,EAAE;IAEnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,MAA0B;IASvD,MAAM,MAAM,GAAU,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QAC3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,IAAI;gBACX,IAAI;gBACJ,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;gBAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW;gBAC9B,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa;gBAClC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,WAAW;gBAClB,IAAI;gBACJ,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW;gBAC9B,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa;gBAClC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/services/scope.service.d.ts

@@ -0,0 +1,16 @@
+import type { ModelRegistration } from '../interfaces/rhino-config.interface';
+export interface ScopeContext {
+    user?: any;
+    organization?: any;
+    userRole?: string | null;
+}
+export interface RhinoScope {
+    apply(where: Record<string, any>, context: ScopeContext): Record<string, any>;
+}
+/**
+ * Applies all registered scopes for a model in order.
+ * Scopes are classes implementing `RhinoScope`.
+ */
+export declare class ScopeService {
+    apply(where: Record<string, any>, reg: ModelRegistration, ctx: ScopeContext): Record<string, any>;
+}

package/dist/services/scope.service.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeService = void 0;
+const common_1 = require("@nestjs/common");
+/**
+ * Applies all registered scopes for a model in order.
+ * Scopes are classes implementing `RhinoScope`.
+ */
+let ScopeService = class ScopeService {
+    apply(where, reg, ctx) {
+        const scopes = reg.scopes ?? [];
+        let merged = { ...where };
+        for (const ScopeClass of scopes) {
+            const scope = new ScopeClass();
+            if (typeof scope.apply === 'function') {
+                merged = scope.apply(merged, ctx) ?? merged;
+            }
+        }
+        return merged;
+    }
+};
+exports.ScopeService = ScopeService;
+exports.ScopeService = ScopeService = __decorate([
+    (0, common_1.Injectable)()
+], ScopeService);
+//# sourceMappingURL=scope.service.js.map

package/dist/services/scope.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.service.js","sourceRoot":"","sources":["../../src/services/scope.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAa5C;;;GAGG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAY;IACvB,KAAK,CAAC,KAA0B,EAAE,GAAsB,EAAE,GAAiB;QACzE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QAChC,IAAI,MAAM,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC1B,KAAK,MAAM,UAAU,IAAI,MAAM,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAK,UAAkB,EAAE,CAAC;YACxC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACtC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AAZY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;GACA,YAAY,CAYxB"}

package/dist/services/serializer.service.d.ts

@@ -0,0 +1,36 @@
+import type { ModelRegistration } from '../interfaces/rhino-config.interface';
+export declare const BASE_HIDDEN_COLUMNS: string[];
+/**
+ * Context object for serialization. `organization` is required for role-based
+ * policy attribute filtering — without it, `hasRole(user, role, org)` in
+ * consumer policies can never resolve the active role and every request
+ * would collapse to the "no role" fallback (BP-007).
+ *
+ * Legacy signature: `serializeOne(record, reg, user)` is still accepted for
+ * backwards compatibility. New callers should pass the object form.
+ */
+export interface SerializeContext {
+    user?: any;
+    organization?: any;
+}
+/**
+ * Serializes a record according to the Laravel `asRhinoJson` contract:
+ *
+ * 1. Merge computed attributes
+ * 2. Remove base-hidden columns
+ * 3. Remove model-level `additionalHiddenColumns`
+ * 4. Apply policy blacklist (`hiddenAttributesForShow`)
+ * 5. Apply policy whitelist (`permittedAttributesForShow`) — `id` always kept
+ */
+export declare class SerializerService {
+    /**
+     * @param record  The raw record to serialize (from Prisma).
+     * @param reg     The model registration driving policy + computed attrs.
+     * @param ctx     Either a `SerializeContext` object (preferred) or a
+     *                legacy `user` value (backwards-compat shim — org will
+     *                be undefined and role-keyed policies will collapse).
+     */
+    serializeOne(record: Record<string, any> | null | undefined, reg: ModelRegistration, ctx?: SerializeContext | any): Record<string, any> | null;
+    serializeMany(records: any[], reg: ModelRegistration, ctx?: SerializeContext | any): any[];
+    private normalizeCtx;
+}

package/dist/services/serializer.service.js

@@ -0,0 +1,90 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SerializerService = exports.BASE_HIDDEN_COLUMNS = void 0;
+const common_1 = require("@nestjs/common");
+exports.BASE_HIDDEN_COLUMNS = [
+    'password',
+    'rememberToken',
+    'remember_token',
+    'hasTemporaryPassword',
+    'has_temporary_password',
+    'updatedAt',
+    'updated_at',
+    'createdAt',
+    'created_at',
+    'deletedAt',
+    'deleted_at',
+    'emailVerifiedAt',
+    'email_verified_at',
+];
+/**
+ * Serializes a record according to the Laravel `asRhinoJson` contract:
+ *
+ * 1. Merge computed attributes
+ * 2. Remove base-hidden columns
+ * 3. Remove model-level `additionalHiddenColumns`
+ * 4. Apply policy blacklist (`hiddenAttributesForShow`)
+ * 5. Apply policy whitelist (`permittedAttributesForShow`) — `id` always kept
+ */
+let SerializerService = class SerializerService {
+    /**
+     * @param record  The raw record to serialize (from Prisma).
+     * @param reg     The model registration driving policy + computed attrs.
+     * @param ctx     Either a `SerializeContext` object (preferred) or a
+     *                legacy `user` value (backwards-compat shim — org will
+     *                be undefined and role-keyed policies will collapse).
+     */
+    serializeOne(record, reg, ctx) {
+        if (!record)
+            return record;
+        const { user, organization } = this.normalizeCtx(ctx);
+        let result = { ...record };
+        if (reg.computedAttributes) {
+            Object.assign(result, reg.computedAttributes(record, user));
+        }
+        for (const col of exports.BASE_HIDDEN_COLUMNS) {
+            delete result[col];
+        }
+        if (reg.additionalHiddenColumns?.length) {
+            for (const col of reg.additionalHiddenColumns)
+                delete result[col];
+        }
+        if (reg.policy) {
+            const policy = new reg.policy();
+            // BP-007: pass organization as the second argument so policy methods
+            // that call `this.hasRole(user, 'admin', org)` can resolve the active
+            // role. Base ResourcePolicy signatures accept an optional org.
+            const hidden = policy.hiddenAttributesForShow(user, organization) ?? [];
+            for (const col of hidden)
+                delete result[col];
+            const permitted = policy.permittedAttributesForShow(user, organization) ?? ['*'];
+            if (!(permitted.length === 1 && permitted[0] === '*')) {
+                const keep = new Set([...permitted, 'id']);
+                result = Object.fromEntries(Object.entries(result).filter(([k]) => keep.has(k)));
+            }
+        }
+        return result;
+    }
+    serializeMany(records, reg, ctx) {
+        return records.map((r) => this.serializeOne(r, reg, ctx));
+    }
+    normalizeCtx(ctx) {
+        // New call shape: { user, organization }
+        if (ctx && typeof ctx === 'object' && ('user' in ctx || 'organization' in ctx)) {
+            return { user: ctx.user, organization: ctx.organization };
+        }
+        // Legacy call shape: a bare user (or null/undefined)
+        return { user: ctx, organization: undefined };
+    }
+};
+exports.SerializerService = SerializerService;
+exports.SerializerService = SerializerService = __decorate([
+    (0, common_1.Injectable)()
+], SerializerService);
+//# sourceMappingURL=serializer.service.js.map

package/dist/services/serializer.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializer.service.js","sourceRoot":"","sources":["../../src/services/serializer.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAG/B,QAAA,mBAAmB,GAAG;IACjC,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,sBAAsB;IACtB,wBAAwB;IACxB,WAAW;IACX,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,iBAAiB;IACjB,mBAAmB;CACpB,CAAC;AAgBF;;;;;;;;GAQG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC5B;;;;;;OAMG;IACH,YAAY,CACV,MAA8C,EAC9C,GAAsB,EACtB,GAA4B;QAE5B,IAAI,CAAC,MAAM;YAAE,OAAO,MAAa,CAAC;QAClC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAE3B,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,2BAAmB,EAAE,CAAC;YACtC,OAAQ,MAAc,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,EAAE,CAAC;YACxC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,uBAAuB;gBAAE,OAAQ,MAAc,CAAC,GAAG,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAChC,qEAAqE;YACrE,sEAAsE;YACtE,+DAA+D;YAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC;YACxE,KAAK,MAAM,GAAG,IAAI,MAAM;gBAAE,OAAQ,MAAc,CAAC,GAAG,CAAC,CAAC;YAEtD,MAAM,SAAS,GAAG,MAAM,CAAC,0BAA0B,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjF,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC3C,MAAM,GAAG,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC7C,CAAC;YACX,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,aAAa,CACX,OAAc,EACd,GAAsB,EACtB,GAA4B;QAE5B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5D,CAAC;IAEO,YAAY,CAAC,GAA2B;QAC9C,yCAAyC;QACzC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,cAAc,IAAI,GAAG,CAAC,EAAE,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAG,GAAwB,CAAC,IAAI,EAAE,YAAY,EAAG,GAAwB,CAAC,YAAY,EAAE,CAAC;QACxG,CAAC;QACD,qDAAqD;QACrD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IAChD,CAAC;CACF,CAAA;AAjEY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;GACA,iBAAiB,CAiE7B"}

package/dist/services/validation.service.d.ts

@@ -0,0 +1,50 @@
+import type { ModelRegistration } from '../interfaces/rhino-config.interface';
+import { PrismaService } from '../prisma/prisma.service';
+import { RhinoConfigService } from '../rhino.config';
+export interface ValidationResult<T = Record<string, any>> {
+    valid: boolean;
+    data?: T;
+    errors?: Record<string, string[]>;
+    forbiddenFields?: string[];
+}
+export interface ValidationContext {
+    user?: any;
+    organization?: any;
+    action: 'store' | 'update';
+}
+/**
+ * Validates request data against a registered model's Zod schema.
+ *
+ * Responsibilities mirror Laravel's HasValidation trait:
+ *   - Pick schema based on action (store/update), with role-keyed overrides
+ *   - Intersect fields with policy's `permittedAttributesFor{Create,Update}`
+ *   - Reject forbidden fields (HTTP 403 semantics; returned in errors)
+ *   - Strip the `organizationId` field from user-supplied input when in tenant context
+ */
+export interface FkConstraint {
+    field: string;
+    model: string;
+}
+export declare class ValidationService {
+    private readonly prisma?;
+    private readonly config?;
+    constructor(prisma?: PrismaService, config?: RhinoConfigService);
+    /**
+     * Verify that every foreign-key in `data` references a record that lives
+     * inside the current organization (directly or through an FK chain). This
+     * implements Laravel's `scopeExistsRulesToOrganization` semantics for Prisma.
+     *
+     * Constraints are declared per model via:
+     *   ModelRegistration.fkConstraints?: Array<{ field: 'postId', model: 'post' }>
+     */
+    verifyTenantFks(data: Record<string, any>, reg: ModelRegistration, organization?: any): Promise<{
+        valid: boolean;
+        errors?: Record<string, string[]>;
+    }>;
+    private isFkInOrg;
+    private walkFkChainForRecord;
+    validateForAction<T = Record<string, any>>(data: Record<string, any>, reg: ModelRegistration, ctx: ValidationContext): ValidationResult<T>;
+    private pickSchema;
+    private resolvePermittedFields;
+    private formatErrors;
+}