@rhino-dev/rhino-nestjs 0.2.5

package/dist/controllers/global.controller.js

@@ -0,0 +1,357 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GlobalController = void 0;
+const common_1 = require("@nestjs/common");
+const rhino_config_1 = require("../rhino.config");
+const resource_service_1 = require("../services/resource.service");
+const serializer_service_1 = require("../services/serializer.service");
+const validation_service_1 = require("../services/validation.service");
+const audit_service_1 = require("../services/audit.service");
+const response_interceptor_1 = require("../interceptors/response.interceptor");
+const resource_policy_1 = require("../policies/resource-policy");
+const rhino_exception_1 = require("../errors/rhino-exception");
+/**
+ * The automatic CRUD controller. Registered with the dynamic route prefix
+ * by the route-registration helper (see services/route-registration.service.ts).
+ *
+ * All HTTP endpoints for any registered model flow through this controller
+ * via the `:modelSlug` parameter — matching Laravel's `GlobalController`.
+ */
+let GlobalController = class GlobalController {
+    config;
+    resources;
+    serializer;
+    validator;
+    audit;
+    constructor(config, resources, serializer, validator, audit) {
+        this.config = config;
+        this.resources = resources;
+        this.serializer = serializer;
+        this.validator = validator;
+        this.audit = audit;
+    }
+    assertActionAllowed(modelSlug, action) {
+        const reg = this.config.model(modelSlug);
+        if (!reg)
+            throw rhino_exception_1.RhinoException.unknownResource(modelSlug);
+        if (reg.exceptActions?.includes(action)) {
+            throw rhino_exception_1.RhinoException.actionDisabled(action);
+        }
+        return reg;
+    }
+    /**
+     * Enforce include-level authorization: every `?include=relation` must be
+     * a resource the user can `viewAny`. This mirrors Laravel's Gate::authorize
+     * check run inside GlobalController when resolving includes.
+     */
+    assertIncludesAuthorized(rawInclude, req) {
+        if (!rawInclude)
+            return;
+        const paths = String(rawInclude).split(',').map((s) => s.trim()).filter(Boolean);
+        const slugs = new Set();
+        for (const p of paths)
+            slugs.add(p.split('.')[0]);
+        for (const slug of slugs) {
+            const reg = this.config.model(slug);
+            if (!reg)
+                continue;
+            const PolicyClass = reg.policy ?? resource_policy_1.ResourcePolicy;
+            const policy = new PolicyClass();
+            policy.resourceSlug = slug;
+            if (!policy.viewAny(req.user, req.organization)) {
+                throw rhino_exception_1.RhinoException.includeNotAuthorized(slug);
+            }
+        }
+    }
+    async trashed(modelSlug, query, req) {
+        const reg = this.assertActionAllowed(modelSlug, 'trashed');
+        if (!reg.softDeletes)
+            throw rhino_exception_1.RhinoException.actionDisabled('trashed');
+        const result = await this.resources.findAll(modelSlug, query, {
+            user: req.user,
+            organization: req.organization,
+            onlyTrashed: true,
+        });
+        const items = this.serializer.serializeMany(result.items, reg, { user: req.user, organization: req.organization });
+        if (result.total != null) {
+            return (0, response_interceptor_1.paginated)(items, result.total, result.page, result.perPage);
+        }
+        return { data: items };
+    }
+    async index(modelSlug, query, req) {
+        const reg = this.assertActionAllowed(modelSlug, 'index');
+        this.assertIncludesAuthorized(query?.include, req);
+        const result = await this.resources.findAll(modelSlug, query, {
+            user: req.user,
+            organization: req.organization,
+        });
+        const items = this.serializer.serializeMany(result.items, reg, { user: req.user, organization: req.organization });
+        if (result.total != null) {
+            return (0, response_interceptor_1.paginated)(items, result.total, result.page, result.perPage);
+        }
+        return { data: items };
+    }
+    async show(modelSlug, id, query, req) {
+        const reg = this.assertActionAllowed(modelSlug, 'show');
+        this.assertIncludesAuthorized(query?.include, req);
+        const record = await this.resources.findOne(modelSlug, id, query, {
+            user: req.user,
+            organization: req.organization,
+        });
+        if (!record)
+            throw rhino_exception_1.RhinoException.notFound();
+        return this.serializer.serializeOne(record, reg, { user: req.user, organization: req.organization });
+    }
+    async store(modelSlug, body, req) {
+        const reg = this.assertActionAllowed(modelSlug, 'store');
+        const validation = this.validator.validateForAction(body, reg, {
+            action: 'store',
+            user: req.user,
+            organization: req.organization,
+        });
+        if (!validation.valid) {
+            if (validation.forbiddenFields) {
+                throw rhino_exception_1.RhinoException.forbiddenFields(validation.forbiddenFields);
+            }
+            throw rhino_exception_1.RhinoException.validationFailed(validation.errors ?? {});
+        }
+        const fkCheck = await this.validator.verifyTenantFks(validation.data, reg, req.organization);
+        if (!fkCheck.valid) {
+            throw rhino_exception_1.RhinoException.crossTenant(fkCheck.errors ?? {});
+        }
+        const record = await this.resources.create(modelSlug, validation.data, {
+            user: req.user,
+            organization: req.organization,
+        });
+        if (reg.hasAuditTrail) {
+            await this.audit.log({
+                auditableType: reg.model,
+                auditableId: record.id,
+                action: 'created',
+                newValues: record,
+                ctx: { user: req.user, organization: req.organization },
+                excludeFields: reg.auditExclude,
+            });
+        }
+        return this.serializer.serializeOne(record, reg, { user: req.user, organization: req.organization });
+    }
+    async update(modelSlug, id, body, req) {
+        const reg = this.assertActionAllowed(modelSlug, 'update');
+        const existing = await this.resources.findOne(modelSlug, id, {}, {
+            user: req.user,
+            organization: req.organization,
+        });
+        if (!existing)
+            throw rhino_exception_1.RhinoException.notFound();
+        const validation = this.validator.validateForAction(body, reg, {
+            action: 'update',
+            user: req.user,
+            organization: req.organization,
+        });
+        if (!validation.valid) {
+            if (validation.forbiddenFields) {
+                throw rhino_exception_1.RhinoException.forbiddenFields(validation.forbiddenFields);
+            }
+            throw rhino_exception_1.RhinoException.validationFailed(validation.errors ?? {});
+        }
+        const fkCheck = await this.validator.verifyTenantFks(validation.data, reg, req.organization);
+        if (!fkCheck.valid) {
+            throw rhino_exception_1.RhinoException.crossTenant(fkCheck.errors ?? {});
+        }
+        const record = await this.resources.update(modelSlug, id, validation.data, {
+            user: req.user,
+            organization: req.organization,
+        });
+        if (!record)
+            throw rhino_exception_1.RhinoException.notFound();
+        if (reg.hasAuditTrail) {
+            const diff = this.audit.diff(existing, record, reg);
+            if (diff) {
+                await this.audit.log({
+                    auditableType: reg.model,
+                    auditableId: record.id,
+                    action: 'updated',
+                    oldValues: diff.old,
+                    newValues: diff.new,
+                    ctx: { user: req.user, organization: req.organization },
+                    excludeFields: reg.auditExclude,
+                });
+            }
+        }
+        return this.serializer.serializeOne(record, reg, { user: req.user, organization: req.organization });
+    }
+    async destroy(modelSlug, id, req) {
+        const reg = this.assertActionAllowed(modelSlug, 'destroy');
+        const existing = await this.resources.findOne(modelSlug, id, {}, {
+            user: req.user,
+            organization: req.organization,
+        });
+        if (!existing)
+            throw rhino_exception_1.RhinoException.notFound();
+        const ok = await this.resources.delete(modelSlug, id, {
+            user: req.user,
+            organization: req.organization,
+        });
+        if (!ok)
+            throw rhino_exception_1.RhinoException.notFound();
+        if (reg.hasAuditTrail) {
+            await this.audit.log({
+                auditableType: reg.model,
+                auditableId: existing.id,
+                action: 'deleted',
+                oldValues: existing,
+                ctx: { user: req.user, organization: req.organization },
+                excludeFields: reg.auditExclude,
+            });
+        }
+        return;
+    }
+    async restore(modelSlug, id, req) {
+        const reg = this.assertActionAllowed(modelSlug, 'restore');
+        if (!reg.softDeletes)
+            throw rhino_exception_1.RhinoException.actionDisabled('restore');
+        const ok = await this.resources.restore(modelSlug, id, {
+            user: req.user,
+            organization: req.organization,
+        });
+        if (!ok)
+            throw rhino_exception_1.RhinoException.notFound();
+        if (reg.hasAuditTrail) {
+            await this.audit.log({
+                auditableType: reg.model,
+                auditableId: id,
+                action: 'restored',
+                ctx: { user: req.user, organization: req.organization },
+            });
+        }
+        return { restored: true };
+    }
+    async forceDelete(modelSlug, id, req) {
+        const reg = this.assertActionAllowed(modelSlug, 'forceDelete');
+        if (!reg.softDeletes)
+            throw rhino_exception_1.RhinoException.actionDisabled('forceDelete');
+        const existing = await this.resources.findOne(modelSlug, id, {}, {
+            user: req.user,
+            organization: req.organization,
+            includeTrashed: true,
+        });
+        if (!existing)
+            throw rhino_exception_1.RhinoException.notFound();
+        const ok = await this.resources.forceDelete(modelSlug, id, {
+            user: req.user,
+            organization: req.organization,
+        });
+        if (!ok)
+            throw rhino_exception_1.RhinoException.notFound();
+        if (reg.hasAuditTrail) {
+            await this.audit.log({
+                auditableType: reg.model,
+                auditableId: existing.id,
+                action: 'forceDeleted',
+                oldValues: existing,
+                ctx: { user: req.user, organization: req.organization },
+                excludeFields: reg.auditExclude,
+            });
+        }
+        return;
+    }
+};
+exports.GlobalController = GlobalController;
+__decorate([
+    (0, common_1.Get)(':modelSlug/trashed'),
+    __param(0, (0, common_1.Param)('modelSlug')),
+    __param(1, (0, common_1.Query)()),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], GlobalController.prototype, "trashed", null);
+__decorate([
+    (0, common_1.Get)(':modelSlug'),
+    __param(0, (0, common_1.Param)('modelSlug')),
+    __param(1, (0, common_1.Query)()),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], GlobalController.prototype, "index", null);
+__decorate([
+    (0, common_1.Get)(':modelSlug/:id'),
+    __param(0, (0, common_1.Param)('modelSlug')),
+    __param(1, (0, common_1.Param)('id')),
+    __param(2, (0, common_1.Query)()),
+    __param(3, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], GlobalController.prototype, "show", null);
+__decorate([
+    (0, common_1.Post)(':modelSlug'),
+    __param(0, (0, common_1.Param)('modelSlug')),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], GlobalController.prototype, "store", null);
+__decorate([
+    (0, common_1.Put)(':modelSlug/:id'),
+    __param(0, (0, common_1.Param)('modelSlug')),
+    __param(1, (0, common_1.Param)('id')),
+    __param(2, (0, common_1.Body)()),
+    __param(3, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], GlobalController.prototype, "update", null);
+__decorate([
+    (0, common_1.Delete)(':modelSlug/:id'),
+    (0, common_1.HttpCode)(204),
+    __param(0, (0, common_1.Param)('modelSlug')),
+    __param(1, (0, common_1.Param)('id')),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], GlobalController.prototype, "destroy", null);
+__decorate([
+    (0, common_1.Post)(':modelSlug/:id/restore'),
+    __param(0, (0, common_1.Param)('modelSlug')),
+    __param(1, (0, common_1.Param)('id')),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], GlobalController.prototype, "restore", null);
+__decorate([
+    (0, common_1.Delete)(':modelSlug/:id/force-delete'),
+    (0, common_1.HttpCode)(204),
+    __param(0, (0, common_1.Param)('modelSlug')),
+    __param(1, (0, common_1.Param)('id')),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], GlobalController.prototype, "forceDelete", null);
+exports.GlobalController = GlobalController = __decorate([
+    (0, common_1.Controller)(),
+    (0, common_1.UseInterceptors)(response_interceptor_1.ResponseInterceptor),
+    __metadata("design:paramtypes", [rhino_config_1.RhinoConfigService,
+        resource_service_1.ResourceService,
+        serializer_service_1.SerializerService,
+        validation_service_1.ValidationService,
+        audit_service_1.AuditService])
+], GlobalController);
+//# sourceMappingURL=global.controller.js.map

package/dist/controllers/global.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"global.controller.js","sourceRoot":"","sources":["../../src/controllers/global.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAYwB;AACxB,kDAAqD;AACrD,mEAA+D;AAC/D,uEAAmE;AACnE,uEAAmE;AACnE,6DAAyD;AACzD,+EAAsF;AACtF,iEAA6D;AAC7D,+DAA2D;AAK3D;;;;;;GAMG;AAGI,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAER;IACA;IACA;IACA;IACA;IALnB,YACmB,MAA0B,EAC1B,SAA0B,EAC1B,UAA6B,EAC7B,SAA4B,EAC5B,KAAmB;QAJnB,WAAM,GAAN,MAAM,CAAoB;QAC1B,cAAS,GAAT,SAAS,CAAiB;QAC1B,eAAU,GAAV,UAAU,CAAmB;QAC7B,cAAS,GAAT,SAAS,CAAmB;QAC5B,UAAK,GAAL,KAAK,CAAc;IACnC,CAAC;IAEI,mBAAmB,CAAC,SAAiB,EAAE,MAAc;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,gCAAc,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,MAAM,gCAAc,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;OAIG;IACK,wBAAwB,CAAC,UAAe,EAAE,GAAQ;QACxD,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,IAAI,gCAAc,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAChD,MAAM,gCAAc,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO,CACS,SAAiB,EAC5B,KAAU,EACZ,GAAe;QAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,MAAM,gCAAc,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE;YAC5D,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;QACnH,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,OAAO,IAAA,gCAAS,EAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,OAAQ,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IAGK,AAAN,KAAK,CAAC,KAAK,CACW,SAAiB,EAC5B,KAAU,EACZ,GAAe;QAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE;YAC5D,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;QACnH,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,OAAO,IAAA,gCAAS,EAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,OAAQ,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IAGK,AAAN,KAAK,CAAC,IAAI,CACY,SAAiB,EACxB,EAAU,EACd,KAAU,EACZ,GAAe;QAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE;YAChE,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,gCAAc,CAAC,QAAQ,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IACvG,CAAC;IAGK,AAAN,KAAK,CAAC,KAAK,CACW,SAAiB,EAC7B,IAAyB,EAC1B,GAAe;QAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE;YAC7D,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;gBAC/B,MAAM,gCAAc,CAAC,eAAe,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,gCAAc,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,CAAC,IAAK,EAAE,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9F,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,gCAAc,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAK,EAAE;YACtE,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;gBACnB,aAAa,EAAE,GAAG,CAAC,KAAK;gBACxB,WAAW,EAAG,MAAc,CAAC,EAAE;gBAC/B,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,MAAM;gBACjB,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;gBACvD,aAAa,EAAE,GAAG,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IACvG,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CACU,SAAiB,EACxB,EAAU,EACf,IAAyB,EAC1B,GAAe;QAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE;YAC/D,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,MAAM,gCAAc,CAAC,QAAQ,EAAE,CAAC;QAE/C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE;YAC7D,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;gBAC/B,MAAM,gCAAc,CAAC,eAAe,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,gCAAc,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,CAAC,IAAK,EAAE,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9F,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,gCAAc,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,UAAU,CAAC,IAAK,EAAE;YAC1E,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,gCAAc,CAAC,QAAQ,EAAE,CAAC;QAE7C,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACpD,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;oBACnB,aAAa,EAAE,GAAG,CAAC,KAAK;oBACxB,WAAW,EAAG,MAAc,CAAC,EAAE;oBAC/B,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,IAAI,CAAC,GAAG;oBACnB,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;oBACvD,aAAa,EAAE,GAAG,CAAC,YAAY;iBAChC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IACvG,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CACS,SAAiB,EACxB,EAAU,EAChB,GAAe;QAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE;YAC/D,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,MAAM,gCAAc,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE;YACpD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,EAAE;YAAE,MAAM,gCAAc,CAAC,QAAQ,EAAE,CAAC;QACzC,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;gBACnB,aAAa,EAAE,GAAG,CAAC,KAAK;gBACxB,WAAW,EAAG,QAAgB,CAAC,EAAE;gBACjC,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,QAAQ;gBACnB,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;gBACvD,aAAa,EAAE,GAAG,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO,CACS,SAAiB,EACxB,EAAU,EAChB,GAAe;QAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,MAAM,gCAAc,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE;YACrD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,EAAE;YAAE,MAAM,gCAAc,CAAC,QAAQ,EAAE,CAAC;QACzC,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;gBACnB,aAAa,EAAE,GAAG,CAAC,KAAK;gBACxB,WAAW,EAAE,EAAE;gBACf,MAAM,EAAE,UAAU;gBAClB,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;aACxD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAIK,AAAN,KAAK,CAAC,WAAW,CACK,SAAiB,EACxB,EAAU,EAChB,GAAe;QAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,MAAM,gCAAc,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE;YAC/D,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,MAAM,gCAAc,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,EAAE;YACzD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,EAAE;YAAE,MAAM,gCAAc,CAAC,QAAQ,EAAE,CAAC;QACzC,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;gBACnB,aAAa,EAAE,GAAG,CAAC,KAAK;gBACxB,WAAW,EAAG,QAAgB,CAAC,EAAE;gBACjC,MAAM,EAAE,cAAc;gBACtB,SAAS,EAAE,QAAQ;gBACnB,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;gBACvD,aAAa,EAAE,GAAG,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;CACF,CAAA;AAlRY,4CAAgB;AAyCrB;IADL,IAAA,YAAG,EAAC,oBAAoB,CAAC;IAEvB,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,cAAK,GAAE,CAAA;IACP,WAAA,IAAA,YAAG,GAAE,CAAA;;;;+CAcP;AAGK;IADL,IAAA,YAAG,EAAC,YAAY,CAAC;IAEf,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,cAAK,GAAE,CAAA;IACP,WAAA,IAAA,YAAG,GAAE,CAAA;;;;6CAaP;AAGK;IADL,IAAA,YAAG,EAAC,gBAAgB,CAAC;IAEnB,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IACX,WAAA,IAAA,cAAK,GAAE,CAAA;IACP,WAAA,IAAA,YAAG,GAAE,CAAA;;;;4CAUP;AAGK;IADL,IAAA,aAAI,EAAC,YAAY,CAAC;IAEhB,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;6CAiCP;AAGK;IADL,IAAA,YAAG,EAAC,gBAAgB,CAAC;IAEnB,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IACX,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;8CA6CP;AAIK;IAFL,IAAA,eAAM,EAAC,gBAAgB,CAAC;IACxB,IAAA,iBAAQ,EAAC,GAAG,CAAC;IAEX,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IACX,WAAA,IAAA,YAAG,GAAE,CAAA;;;;+CAwBP;AAGK;IADL,IAAA,aAAI,EAAC,wBAAwB,CAAC;IAE5B,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IACX,WAAA,IAAA,YAAG,GAAE,CAAA;;;;+CAkBP;AAIK;IAFL,IAAA,eAAM,EAAC,6BAA6B,CAAC;IACrC,IAAA,iBAAQ,EAAC,GAAG,CAAC;IAEX,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IACX,WAAA,IAAA,YAAG,GAAE,CAAA;;;;mDA0BP;2BAjRU,gBAAgB;IAF5B,IAAA,mBAAU,GAAE;IACZ,IAAA,wBAAe,EAAC,0CAAmB,CAAC;qCAGR,iCAAkB;QACf,kCAAe;QACd,sCAAiB;QAClB,sCAAiB;QACrB,4BAAY;GAN3B,gBAAgB,CAkR5B"}

package/dist/controllers/invitation.controller.d.ts

@@ -0,0 +1,30 @@
+import { InvitationService } from '../services/invitation.service';
+export declare class InvitationController {
+    private readonly invitations;
+    constructor(invitations: InvitationService);
+    private assertInvitationPermission;
+    index(req: any, status?: string): Promise<{
+        data: any;
+    }>;
+    store(req: any, body: {
+        email: string;
+        roleId: number;
+    }): Promise<any>;
+    resend(req: any, id: string): Promise<any>;
+    cancel(req: any, id: string): Promise<any>;
+    accept(body: {
+        token: string;
+    }, req: any): Promise<{
+        requiresRegistration: boolean;
+        organization: any;
+        role: any;
+        email: any;
+        accepted?: undefined;
+    } | {
+        accepted: boolean;
+        organization: any;
+        requiresRegistration?: undefined;
+        role?: undefined;
+        email?: undefined;
+    }>;
+}

package/dist/controllers/invitation.controller.js

@@ -0,0 +1,111 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvitationController = void 0;
+const common_1 = require("@nestjs/common");
+const invitation_service_1 = require("../services/invitation.service");
+const permission_matcher_1 = require("../utils/permission-matcher");
+let InvitationController = class InvitationController {
+    invitations;
+    constructor(invitations) {
+        this.invitations = invitations;
+    }
+    assertInvitationPermission(req, action) {
+        if (!(0, permission_matcher_1.userHasPermission)(req.user, `invitations.${action}`, req.organization)) {
+            const err = new Error('Forbidden');
+            err.status = 403;
+            throw err;
+        }
+    }
+    async index(req, status) {
+        this.assertInvitationPermission(req, 'index');
+        if (!req.organization)
+            throw new common_1.BadRequestException('Organization context required');
+        const items = await this.invitations.list(req.organization.id, status);
+        return { data: items };
+    }
+    async store(req, body) {
+        this.assertInvitationPermission(req, 'store');
+        if (!req.organization)
+            throw new common_1.BadRequestException('Organization context required');
+        if (!body?.email || !body?.roleId) {
+            throw new common_1.BadRequestException('email and roleId required');
+        }
+        return this.invitations.create({
+            email: body.email,
+            roleId: body.roleId,
+            organization: req.organization,
+            invitedBy: req.user,
+        });
+    }
+    async resend(req, id) {
+        this.assertInvitationPermission(req, 'resend');
+        return this.invitations.resend(parseInt(id, 10));
+    }
+    async cancel(req, id) {
+        this.assertInvitationPermission(req, 'cancel');
+        return this.invitations.cancel(parseInt(id, 10));
+    }
+    async accept(body, req) {
+        if (!body?.token)
+            throw new common_1.BadRequestException('token required');
+        return this.invitations.accept(body.token, req.user?.id);
+    }
+};
+exports.InvitationController = InvitationController;
+__decorate([
+    (0, common_1.Get)(),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Query)('status')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String]),
+    __metadata("design:returntype", Promise)
+], InvitationController.prototype, "index", null);
+__decorate([
+    (0, common_1.Post)(),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], InvitationController.prototype, "store", null);
+__decorate([
+    (0, common_1.Post)(':id/resend'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String]),
+    __metadata("design:returntype", Promise)
+], InvitationController.prototype, "resend", null);
+__decorate([
+    (0, common_1.Delete)(':id'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String]),
+    __metadata("design:returntype", Promise)
+], InvitationController.prototype, "cancel", null);
+__decorate([
+    (0, common_1.Post)('accept'),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], InvitationController.prototype, "accept", null);
+exports.InvitationController = InvitationController = __decorate([
+    (0, common_1.Controller)('invitations'),
+    __metadata("design:paramtypes", [invitation_service_1.InvitationService])
+], InvitationController);
+//# sourceMappingURL=invitation.controller.js.map

package/dist/controllers/invitation.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.controller.js","sourceRoot":"","sources":["../../src/controllers/invitation.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAUwB;AACxB,uEAAmE;AACnE,oEAAgE;AAGzD,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IACF;IAA7B,YAA6B,WAA8B;QAA9B,gBAAW,GAAX,WAAW,CAAmB;IAAG,CAAC;IAEvD,0BAA0B,CAAC,GAAQ,EAAE,MAAc;QACzD,IAAI,CAAC,IAAA,sCAAiB,EAAC,GAAG,CAAC,IAAI,EAAE,eAAe,MAAM,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5E,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,WAAW,CAAQ,CAAC;YAC1C,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;YACjB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,KAAK,CAAQ,GAAQ,EAAmB,MAAe;QAC3D,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC,YAAY;YAAE,MAAM,IAAI,4BAAmB,CAAC,+BAA+B,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IAGK,AAAN,KAAK,CAAC,KAAK,CAAQ,GAAQ,EAAU,IAAuC;QAC1E,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC,YAAY;YAAE,MAAM,IAAI,4BAAmB,CAAC,+BAA+B,CAAC,CAAC;QACtF,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,4BAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,SAAS,EAAE,GAAG,CAAC,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAQ,EAAe,EAAU;QACnD,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAQ,EAAe,EAAU;QACnD,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAS,IAAuB,EAAS,GAAQ;QAC3D,IAAI,CAAC,IAAI,EAAE,KAAK;YAAE,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;CACF,CAAA;AAnDY,oDAAoB;AAYzB;IADL,IAAA,YAAG,GAAE;IACO,WAAA,IAAA,YAAG,GAAE,CAAA;IAAY,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;iDAK5C;AAGK;IADL,IAAA,aAAI,GAAE;IACM,WAAA,IAAA,YAAG,GAAE,CAAA;IAAY,WAAA,IAAA,aAAI,GAAE,CAAA;;;;iDAYnC;AAGK;IADL,IAAA,aAAI,EAAC,YAAY,CAAC;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IAAY,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;;;;kDAGzC;AAGK;IADL,IAAA,eAAM,EAAC,KAAK,CAAC;IACA,WAAA,IAAA,YAAG,GAAE,CAAA;IAAY,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;;;;kDAGzC;AAGK;IADL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACD,WAAA,IAAA,aAAI,GAAE,CAAA;IAA2B,WAAA,IAAA,YAAG,GAAE,CAAA;;;;kDAGnD;+BAlDU,oBAAoB;IADhC,IAAA,mBAAU,EAAC,aAAa,CAAC;qCAEkB,sCAAiB;GADhD,oBAAoB,CAmDhC"}

package/dist/controllers/nested.controller.d.ts

@@ -0,0 +1,12 @@
+import { NestedService, NestedOperation } from '../services/nested.service';
+import { RhinoConfigService } from '../rhino.config';
+export declare class NestedController {
+    private readonly nested;
+    private readonly config;
+    constructor(nested: NestedService, config: RhinoConfigService);
+    run(body: {
+        operations: NestedOperation[];
+    }, req: any): Promise<{
+        data: import("../services/nested.service").NestedResult[];
+    }>;
+}

package/dist/controllers/nested.controller.js

@@ -0,0 +1,69 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NestedController = void 0;
+const common_1 = require("@nestjs/common");
+const nested_service_1 = require("../services/nested.service");
+const rhino_config_1 = require("../rhino.config");
+const resource_policy_1 = require("../policies/resource-policy");
+let NestedController = class NestedController {
+    nested;
+    config;
+    constructor(nested, config) {
+        this.nested = nested;
+        this.config = config;
+    }
+    async run(body, req) {
+        const ops = body?.operations ?? [];
+        if (!Array.isArray(ops))
+            throw new common_1.BadRequestException('operations must be an array');
+        // Authorize each operation via its model policy before execution
+        for (const [i, op] of ops.entries()) {
+            const reg = this.config.model(op.model);
+            if (!reg)
+                throw new common_1.BadRequestException(`Unknown model at ${i}: ${op.model}`);
+            const PolicyClass = reg.policy ?? resource_policy_1.ResourcePolicy;
+            const policy = new PolicyClass();
+            policy.resourceSlug = op.model;
+            const allowed = op.action === 'create'
+                ? policy.create(req.user, req.organization)
+                : op.action === 'update'
+                    ? policy.update(req.user, null, req.organization)
+                    : policy.delete(req.user, null, req.organization);
+            if (!allowed) {
+                throw new common_1.ForbiddenException(`Unauthorized operation at index ${i}`);
+            }
+        }
+        const results = await this.nested.execute(ops, {
+            user: req.user,
+            organization: req.organization,
+        });
+        return { data: results };
+    }
+};
+exports.NestedController = NestedController;
+__decorate([
+    (0, common_1.Post)(),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], NestedController.prototype, "run", null);
+exports.NestedController = NestedController = __decorate([
+    (0, common_1.Controller)('nested'),
+    __metadata("design:paramtypes", [nested_service_1.NestedService,
+        rhino_config_1.RhinoConfigService])
+], NestedController);
+//# sourceMappingURL=nested.controller.js.map

package/dist/controllers/nested.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nested.controller.js","sourceRoot":"","sources":["../../src/controllers/nested.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAOwB;AACxB,+DAA4E;AAC5E,kDAAqD;AACrD,iEAA6D;AAGtD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAER;IACA;IAFnB,YACmB,MAAqB,EACrB,MAA0B;QAD1B,WAAM,GAAN,MAAM,CAAe;QACrB,WAAM,GAAN,MAAM,CAAoB;IAC1C,CAAC;IAGE,AAAN,KAAK,CAAC,GAAG,CACC,IAAuC,EACxC,GAAQ;QAEf,MAAM,GAAG,GAAG,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,4BAAmB,CAAC,6BAA6B,CAAC,CAAC;QACtF,iEAAiE;QACjE,KAAK,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,4BAAmB,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9E,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,IAAI,gCAAc,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,CAAC,YAAY,GAAG,EAAE,CAAC,KAAK,CAAC;YAC/B,MAAM,OAAO,GACX,EAAE,CAAC,MAAM,KAAK,QAAQ;gBACpB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC;gBAC3C,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,QAAQ;oBACtB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC;oBACjD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YACxD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,2BAAkB,CAAC,mCAAmC,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YAC7C,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AApCY,4CAAgB;AAOrB;IADL,IAAA,aAAI,GAAE;IAEJ,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;2CA0BP;2BAnCU,gBAAgB;IAD5B,IAAA,mBAAU,EAAC,QAAQ,CAAC;qCAGQ,8BAAa;QACb,iCAAkB;GAHlC,gBAAgB,CAoC5B"}

package/dist/decorators/index.d.ts

@@ -0,0 +1,33 @@
+import 'reflect-metadata';
+import type { ModelRegistration } from '../interfaces/rhino-config.interface';
+export declare const RHINO_MODEL_METADATA: unique symbol;
+/**
+ * Class decorator that tags a resource definition class with its Rhino
+ * model configuration. The metadata is read by the CLI / install helpers and
+ * can be merged into `RhinoModule.forRoot({models})`.
+ *
+ * Usage:
+ *
+ *   @RhinoModel({ slug: 'posts', model: 'post', belongsToOrganization: true })
+ *   export class PostResource {}
+ */
+export declare function RhinoModel(config: ModelRegistration & {
+    slug: string;
+}): ClassDecorator;
+export declare function getRhinoModelMetadata(target: any): (ModelRegistration & {
+    slug: string;
+}) | undefined;
+/**
+ * Marker decorator. Does nothing at runtime — documents intent for generators.
+ */
+export declare function BelongsToOrganization(): ClassDecorator;
+export declare function HasAuditTrail(excludeFields?: string[]): ClassDecorator;
+export declare function HasUuid(): ClassDecorator;
+export declare function HasSoftDeletes(): ClassDecorator;
+export declare function ExceptActions(actions: string[]): ClassDecorator;
+export declare function HidableColumns(columns: string[]): ClassDecorator;
+export declare function PermittedAttrs(config: {
+    create?: string[];
+    update?: string[];
+    show?: string[];
+}): ClassDecorator;