@flusys/nestjs-auth 7.1.0 → 8.0.0-beta.1

package/fesm/120.js

@@ -0,0 +1,2197 @@
+import * as __rspack_external__flusys_nestjs_shared_guards_3f79ddd1 from "@flusys/nestjs-shared/guards";
+import * as __rspack_external_rxjs from "rxjs";
+import * as __rspack_external__flusys_nestjs_shared_decorators_c129b601 from "@flusys/nestjs-shared/decorators";
+import * as __rspack_external__nestjs_throttler_68da00c9 from "@nestjs/throttler";
+import * as __rspack_external_buffer from "buffer";
+export const __rspack_esm_id = 120;
+export const __rspack_esm_ids = [120];
+export const __webpack_modules__ = {
+1003(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  $3: () => (/* reexport */ AuthenticationController),
+  zF: () => (/* reexport */ BranchController),
+  wD: () => (/* reexport */ CompanyController),
+  Qg: () => (/* reexport */ CompanySelectionController),
+  Q1: () => (/* reexport */ EmailVerificationController),
+  O3: () => (/* reexport */ SocialAuthConfigController),
+  eA: () => (/* reexport */ SocialAuthController),
+  SZ: () => (/* reexport */ UserController),
+  rl: () => (/* reexport */ UserPermissionController)
+});
+
+// EXTERNAL MODULE: external "@flusys/nestjs-shared"
+var nestjs_shared_ = __webpack_require__(3422);
+;// CONCATENATED MODULE: external "@flusys/nestjs-shared/decorators"
+
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/dtos"
+var dtos_ = __webpack_require__(6873);
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/guards"
+var guards_ = __webpack_require__(3513);
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(6157);
+// EXTERNAL MODULE: external "@nestjs/swagger"
+var swagger_ = __webpack_require__(6176);
+;// CONCATENATED MODULE: external "@nestjs/throttler"
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/message-keys.ts
+var message_keys = __webpack_require__(5363);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/auth.constants.ts
+var auth_constants = __webpack_require__(5588);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/dtos/authentication.dto.ts
+var authentication_dto = __webpack_require__(8978);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/clear-token.interceptor.ts
+var clear_token_interceptor = __webpack_require__(5207);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/interceptors/set-token.interceptor.ts + 1 modules
+var set_token_interceptor = __webpack_require__(8359);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
+var auth_config_service = __webpack_require__(6514);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/authentication.service.ts + 1 modules
+var authentication_service = __webpack_require__(4722);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/controllers/authentication.controller.ts
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+
+
+
+
+
+
+class AuthenticationController {
+    authService;
+    authConfig;
+    constructor(authService, authConfig){
+        this.authService = authService;
+        this.authConfig = authConfig;
+    }
+    async login(loginDto) {
+        const result = await this.authService.login(loginDto.email, loginDto.password);
+        if ('requiresEmailVerification' in result) {
+            return {
+                success: true,
+                message: 'Email verification required',
+                messageKey: message_keys/* .AUTH_MESSAGES.LOGIN_EMAIL_NOT_VERIFIED */.mK.LOGIN_EMAIL_NOT_VERIFIED,
+                data: result
+            };
+        }
+        if ('requiresSelection' in result) {
+            return {
+                success: true,
+                message: 'Company selection required',
+                messageKey: message_keys/* .AUTH_MESSAGES.LOGIN_REQUIRES_SELECTION */.mK.LOGIN_REQUIRES_SELECTION,
+                data: result
+            };
+        }
+        return {
+            success: true,
+            message: 'Login successful',
+            messageKey: message_keys/* .AUTH_MESSAGES.LOGIN_SUCCESS */.mK.LOGIN_SUCCESS,
+            data: result
+        };
+    }
+    /** Register new user. If company feature enabled, can join/create company. */ async register(req, registrationDto) {
+        const verifyUrlBase = (0,nestjs_shared_.buildFrontendUrl)(req, '/auth/verify-email');
+        const result = await this.authService.register(registrationDto, verifyUrlBase);
+        return {
+            success: true,
+            message: result.requiresEmailVerification ? 'Verification email sent' : 'Registration successful',
+            messageKey: result.requiresEmailVerification ? message_keys/* .EMAIL_VERIFICATION_MESSAGES.VERIFICATION_SENT */.sv.VERIFICATION_SENT : message_keys/* .AUTH_MESSAGES.REGISTER_SUCCESS */.mK.REGISTER_SUCCESS,
+            data: result
+        };
+    }
+    /**
+   * Refresh access token.
+   * - **Browser**: Prefers HTTP-only cookie, falls back to body if cookie missing.
+   * - **API/Mobile**: Must send `refreshToken` in request body. Set header `x-client-type: mobile` or `x-client-type: api`.
+   */ async refreshToken(req, refreshTokenDto) {
+        const cookieName = this.authConfig?.getRefreshTokenCookieName() ?? auth_constants/* .DEFAULT_COOKIE_NAME */.rv;
+        // Always check cookie first, then body - handles Browser, SSR, and Mobile/API
+        const refreshToken = req.cookies?.[cookieName] || refreshTokenDto.refreshToken;
+        if (!refreshToken) {
+            throw new common_.UnauthorizedException({
+                message: 'Refresh token is required',
+                messageKey: message_keys/* .AUTH_MESSAGES.TOKEN_REQUIRED */.mK.TOKEN_REQUIRED
+            });
+        }
+        const data = await this.authService.refreshToken(refreshToken);
+        return {
+            success: true,
+            message: 'Token refreshed successfully',
+            messageKey: message_keys/* .AUTH_MESSAGES.REFRESH_SUCCESS */.mK.REFRESH_SUCCESS,
+            data
+        };
+    }
+    /** Get current user info. Returns user, company, and branch data (no tokens). */ async getCurrentUser(user) {
+        const data = await this.authService.getUserInfo(user.id, user.companyId, user.branchId);
+        return {
+            success: true,
+            message: 'User info retrieved successfully',
+            messageKey: message_keys/* .AUTH_MESSAGES.ME_SUCCESS */.mK.ME_SUCCESS,
+            data
+        };
+    }
+    /** Logout - Clears refresh token cookie for browsers */ async logout(userId) {
+        await this.authService.logout(userId);
+        return {
+            success: true,
+            message: 'Logged out successfully',
+            messageKey: message_keys/* .AUTH_MESSAGES.LOGOUT_SUCCESS */.mK.LOGOUT_SUCCESS
+        };
+    }
+    async changePassword(userId, dto) {
+        await this.authService.changePassword(userId, dto.currentPassword, dto.newPassword);
+        return {
+            success: true,
+            message: 'Password changed successfully',
+            messageKey: message_keys/* .AUTH_MESSAGES.PASSWORD_CHANGE_SUCCESS */.mK.PASSWORD_CHANGE_SUCCESS
+        };
+    }
+}
+_ts_decorate([
+    (0,common_.Post)('login'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,__rspack_external__nestjs_throttler_68da00c9.Throttle)({
+        default: {
+            limit: 5,
+            ttl: 60000
+        }
+    }),
+    (0,common_.UseInterceptors)(set_token_interceptor/* .SetToken */.A),
+    (0,swagger_.ApiOperation)({
+        summary: 'User login'
+    }),
+    (0,swagger_.ApiBody)({
+        type: authentication_dto/* .LoginDto */.pb
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        description: 'Login successful, requires company selection, or requires email verification',
+        content: {
+            'application/json': {
+                examples: {
+                    loginSuccess: {
+                        summary: 'Login Success',
+                        value: {
+                            success: true,
+                            message: 'Login successful',
+                            messageKey: 'auth.login.success',
+                            data: {
+                                accessToken: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...',
+                                user: {
+                                    id: '550e8400-e29b-41d4-a716-446655440000',
+                                    email: 'john@example.com',
+                                    name: 'John Doe'
+                                }
+                            }
+                        }
+                    },
+                    loginSuccessWithCompany: {
+                        summary: 'Login Success (with company/branch)',
+                        value: {
+                            success: true,
+                            message: 'Login successful',
+                            messageKey: 'auth.login.success',
+                            data: {
+                                accessToken: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...',
+                                user: {
+                                    id: '550e8400-e29b-41d4-a716-446655440000',
+                                    email: 'john@example.com',
+                                    name: 'John Doe'
+                                },
+                                company: {
+                                    id: 'company-id',
+                                    name: 'Acme Corp'
+                                },
+                                branch: {
+                                    id: 'branch-id',
+                                    name: 'Main Branch'
+                                }
+                            }
+                        }
+                    },
+                    companySelection: {
+                        summary: 'Company Selection Required',
+                        value: {
+                            success: true,
+                            message: 'Company selection required',
+                            messageKey: 'auth.login.requires.selection',
+                            data: {
+                                requiresSelection: true,
+                                sessionId: 'sess_abc123def456',
+                                expiresAt: '2024-12-18T15:30:00.000Z',
+                                user: {
+                                    id: '550e8400-e29b-41d4-a716-446655440000',
+                                    email: 'john@example.com'
+                                },
+                                companies: [
+                                    {
+                                        id: 'company-id',
+                                        name: 'Acme Corp',
+                                        slug: 'acme-corp',
+                                        branches: [
+                                            {
+                                                id: 'branch-id',
+                                                name: 'Main Branch',
+                                                slug: 'main-branch'
+                                            }
+                                        ]
+                                    }
+                                ]
+                            }
+                        }
+                    },
+                    emailVerification: {
+                        summary: 'Email Verification Required',
+                        value: {
+                            success: true,
+                            message: 'Email verification required',
+                            messageKey: 'auth.login.email.not.verified',
+                            data: {
+                                requiresEmailVerification: true,
+                                email: 'john@example.com'
+                            }
+                        }
+                    }
+                }
+            }
+        }
+    }),
+    _ts_param(0, (0,common_.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof authentication_dto/* .LoginDto */.pb === "undefined" ? Object : authentication_dto/* .LoginDto */.pb
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], AuthenticationController.prototype, "login", null);
+_ts_decorate([
+    (0,common_.Post)('register'),
+    (0,common_.HttpCode)(common_.HttpStatus.CREATED),
+    (0,__rspack_external__nestjs_throttler_68da00c9.Throttle)({
+        default: {
+            limit: 3,
+            ttl: 60000
+        }
+    }),
+    (0,common_.UseInterceptors)(set_token_interceptor/* .SetToken */.A),
+    (0,swagger_.ApiOperation)({
+        summary: 'Register new user'
+    }),
+    (0,swagger_.ApiBody)({
+        type: authentication_dto/* .RegistrationDto */.xG
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 201,
+        description: 'Registration successful or email verification required'
+    }),
+    _ts_param(0, (0,common_.Req)()),
+    _ts_param(1, (0,common_.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof Request === "undefined" ? Object : Request,
+        typeof authentication_dto/* .RegistrationDto */.xG === "undefined" ? Object : authentication_dto/* .RegistrationDto */.xG
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], AuthenticationController.prototype, "register", null);
+_ts_decorate([
+    (0,common_.Post)('refresh'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,__rspack_external__nestjs_throttler_68da00c9.Throttle)({
+        default: {
+            limit: 30,
+            ttl: 60000
+        }
+    }),
+    (0,swagger_.ApiOperation)({
+        summary: 'Refresh access token',
+        description: `
+**Browser clients**: Refresh token is read from HTTP-only cookie (automatically set on login/register).
+Falls back to request body if cookie is not available.
+
+**API/Mobile clients**: Must send \`refreshToken\` in request body.
+Set header \`x-client-type: mobile\` or \`x-client-type: api\` to identify as non-browser client.
+
+**Client detection**: Uses \`x-client-type\` header first, then falls back to User-Agent detection.
+    `
+    }),
+    (0,swagger_.ApiHeader)({
+        name: 'x-client-type',
+        required: false,
+        description: 'Client type: "browser"/"web" for cookie-based auth, "mobile"/"api" for body-based auth',
+        example: 'mobile'
+    }),
+    (0,swagger_.ApiBody)({
+        type: authentication_dto/* .RefreshTokenDto */.k2,
+        description: 'Required for API/Mobile clients. Browser clients prefer HTTP-only cookie with body fallback.'
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        description: 'Token refreshed successfully',
+        schema: {
+            example: {
+                success: true,
+                message: 'Token refreshed successfully',
+                messageKey: 'auth.refresh.success',
+                data: {
+                    accessToken: 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...'
+                }
+            }
+        }
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 401,
+        description: 'Invalid or missing refresh token'
+    }),
+    _ts_param(0, (0,common_.Req)()),
+    _ts_param(1, (0,common_.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof Request === "undefined" ? Object : Request,
+        typeof authentication_dto/* .RefreshTokenDto */.k2 === "undefined" ? Object : authentication_dto/* .RefreshTokenDto */.k2
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], AuthenticationController.prototype, "refreshToken", null);
+_ts_decorate([
+    (0,common_.UseGuards)(guards_.JwtAuthGuard),
+    (0,common_.Post)('me'),
+    (0,__rspack_external__nestjs_throttler_68da00c9.SkipThrottle)(),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get current user info'
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        description: 'Current user info retrieved successfully'
+    }),
+    _ts_param(0, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], AuthenticationController.prototype, "getCurrentUser", null);
+_ts_decorate([
+    (0,common_.UseGuards)(guards_.JwtAuthGuard),
+    (0,common_.Post)('logout'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,__rspack_external__nestjs_throttler_68da00c9.SkipThrottle)(),
+    (0,common_.UseInterceptors)(clear_token_interceptor/* .ClearToken */.t),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,swagger_.ApiOperation)({
+        summary: 'Logout user'
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        type: dtos_.MessageResponseDto
+    }),
+    _ts_param(0, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)('id')),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        String
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], AuthenticationController.prototype, "logout", null);
+_ts_decorate([
+    (0,common_.UseGuards)(guards_.JwtAuthGuard),
+    (0,common_.Post)('change-password'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,__rspack_external__nestjs_throttler_68da00c9.Throttle)({
+        default: {
+            limit: 5,
+            ttl: 60000
+        }
+    }),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,swagger_.ApiOperation)({
+        summary: 'Change password'
+    }),
+    (0,swagger_.ApiBody)({
+        type: authentication_dto/* .ChangePasswordDto */.$h
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        type: dtos_.MessageResponseDto
+    }),
+    _ts_param(0, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)('id')),
+    _ts_param(1, (0,common_.Body)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        String,
+        typeof authentication_dto/* .ChangePasswordDto */.$h === "undefined" ? Object : authentication_dto/* .ChangePasswordDto */.$h
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], AuthenticationController.prototype, "changePassword", null);
+AuthenticationController = _ts_decorate([
+    (0,swagger_.ApiTags)('Authentication'),
+    (0,common_.Controller)('auth'),
+    _ts_param(0, (0,common_.Inject)(authentication_service/* .AuthenticationService */.k)),
+    _ts_param(1, (0,common_.Optional)()),
+    _ts_param(1, (0,common_.Inject)(auth_config_service/* .AuthConfigService */.W)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof authentication_service/* .AuthenticationService */.k === "undefined" ? Object : authentication_service/* .AuthenticationService */.k,
+        typeof auth_config_service/* .AuthConfigService */.W === "undefined" ? Object : auth_config_service/* .AuthConfigService */.W
+    ])
+], AuthenticationController);
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/controllers/company-selection.controller.ts
+function company_selection_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function company_selection_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function company_selection_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+
+class CompanySelectionController {
+    authService;
+    constructor(authService){
+        this.authService = authService;
+    }
+    async select(dto) {
+        const data = await this.authService.select(dto.sessionId, dto.companyId, dto.branchId);
+        return {
+            success: true,
+            message: 'Company selected successfully',
+            messageKey: message_keys/* .AUTH_MESSAGES.SELECT_SUCCESS */.mK.SELECT_SUCCESS,
+            data
+        };
+    }
+    async switchCompany(userId, dto) {
+        const data = await this.authService.switchCompany(userId, dto.companyId, dto.branchId);
+        return {
+            success: true,
+            message: 'Company switched successfully',
+            messageKey: message_keys/* .AUTH_MESSAGES.SWITCH_COMPANY_SUCCESS */.mK.SWITCH_COMPANY_SUCCESS,
+            data
+        };
+    }
+    async getUserCompanies(userId) {
+        const companies = await this.authService.getUserCompanies(userId);
+        return {
+            success: true,
+            message: 'User companies retrieved successfully',
+            messageKey: message_keys/* .AUTH_MESSAGES.COMPANY_LIST_SUCCESS */.mK.COMPANY_LIST_SUCCESS,
+            data: companies
+        };
+    }
+    async getUserBranches(userId, companyId) {
+        const branches = await this.authService.getUserBranches(userId, companyId);
+        return {
+            success: true,
+            message: 'Company branches retrieved successfully',
+            messageKey: message_keys/* .AUTH_MESSAGES.BRANCH_LIST_SUCCESS */.mK.BRANCH_LIST_SUCCESS,
+            data: branches
+        };
+    }
+}
+company_selection_controller_ts_decorate([
+    (0,common_.Post)('select'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,common_.UseInterceptors)(set_token_interceptor/* .SetToken */.A),
+    (0,swagger_.ApiOperation)({
+        summary: 'Select company and branch after login',
+        description: 'Complete login by selecting company and branch when multiple options are available'
+    }),
+    (0,swagger_.ApiBody)({
+        type: authentication_dto/* .SelectDto */.aZ
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        description: 'Company selected, tokens returned'
+    }),
+    company_selection_controller_ts_param(0, (0,common_.Body)()),
+    company_selection_controller_ts_metadata("design:type", Function),
+    company_selection_controller_ts_metadata("design:paramtypes", [
+        typeof authentication_dto/* .SelectDto */.aZ === "undefined" ? Object : authentication_dto/* .SelectDto */.aZ
+    ]),
+    company_selection_controller_ts_metadata("design:returntype", Promise)
+], CompanySelectionController.prototype, "select", null);
+company_selection_controller_ts_decorate([
+    (0,common_.UseGuards)(guards_.JwtAuthGuard),
+    (0,common_.Post)('switch-company'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,common_.UseInterceptors)(set_token_interceptor/* .SetToken */.A),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,swagger_.ApiOperation)({
+        summary: 'Switch to different company/branch',
+        description: 'Switch to a different company and branch while already authenticated'
+    }),
+    (0,swagger_.ApiBody)({
+        type: authentication_dto/* .SwitchCompanyDto */.RQ
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        description: 'Company switched, new tokens returned'
+    }),
+    company_selection_controller_ts_param(0, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)('id')),
+    company_selection_controller_ts_param(1, (0,common_.Body)()),
+    company_selection_controller_ts_metadata("design:type", Function),
+    company_selection_controller_ts_metadata("design:paramtypes", [
+        String,
+        typeof authentication_dto/* .SwitchCompanyDto */.RQ === "undefined" ? Object : authentication_dto/* .SwitchCompanyDto */.RQ
+    ]),
+    company_selection_controller_ts_metadata("design:returntype", Promise)
+], CompanySelectionController.prototype, "switchCompany", null);
+company_selection_controller_ts_decorate([
+    (0,common_.UseGuards)(guards_.JwtAuthGuard),
+    (0,common_.Post)('get-companies'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,swagger_.ApiOperation)({
+        summary: "Get user's available companies",
+        description: 'Get list of companies the current user has access to'
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        description: 'User companies retrieved successfully'
+    }),
+    company_selection_controller_ts_param(0, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)('id')),
+    company_selection_controller_ts_metadata("design:type", Function),
+    company_selection_controller_ts_metadata("design:paramtypes", [
+        String
+    ]),
+    company_selection_controller_ts_metadata("design:returntype", Promise)
+], CompanySelectionController.prototype, "getUserCompanies", null);
+company_selection_controller_ts_decorate([
+    (0,common_.UseGuards)(guards_.JwtAuthGuard),
+    (0,common_.Post)('get-company-branches'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get branches for a company',
+        description: 'Get list of branches for a specific company that the user has access to'
+    }),
+    (0,swagger_.ApiBody)({
+        schema: {
+            properties: {
+                companyId: {
+                    type: 'string'
+                }
+            },
+            required: [
+                'companyId'
+            ]
+        }
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        description: 'Company branches retrieved successfully'
+    }),
+    company_selection_controller_ts_param(0, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)('id')),
+    company_selection_controller_ts_param(1, (0,common_.Body)('companyId')),
+    company_selection_controller_ts_metadata("design:type", Function),
+    company_selection_controller_ts_metadata("design:paramtypes", [
+        String,
+        String
+    ]),
+    company_selection_controller_ts_metadata("design:returntype", Promise)
+], CompanySelectionController.prototype, "getUserBranches", null);
+CompanySelectionController = company_selection_controller_ts_decorate([
+    (0,swagger_.ApiTags)('Company Selection'),
+    (0,common_.Controller)('auth'),
+    company_selection_controller_ts_param(0, (0,common_.Inject)(authentication_service/* .AuthenticationService */.k)),
+    company_selection_controller_ts_metadata("design:type", Function),
+    company_selection_controller_ts_metadata("design:paramtypes", [
+        typeof authentication_service/* .AuthenticationService */.k === "undefined" ? Object : authentication_service/* .AuthenticationService */.k
+    ])
+], CompanySelectionController);
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-datasource.provider.ts
+var auth_datasource_provider = __webpack_require__(2732);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-email.service.ts
+var auth_email_service = __webpack_require__(3221);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/controllers/email-verification.controller.ts
+function email_verification_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function email_verification_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function email_verification_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+
+
+
+
+
+class EmailVerificationController {
+    authService;
+    authEmailService;
+    authConfig;
+    dataSourceProvider;
+    constructor(authService, authEmailService, authConfig, dataSourceProvider){
+        this.authService = authService;
+        this.authEmailService = authEmailService;
+        this.authConfig = authConfig;
+        this.dataSourceProvider = dataSourceProvider;
+    }
+    ensureEmailVerificationEnabled() {
+        if (!this.dataSourceProvider.isEmailVerificationEnabled()) {
+            throw new common_.BadRequestException({
+                message: 'Email verification is not enabled for this tenant',
+                messageKey: message_keys/* .EMAIL_VERIFICATION_MESSAGES.VERIFICATION_NOT_ENABLED */.sv.VERIFICATION_NOT_ENABLED
+            });
+        }
+    }
+    async forgotPassword(req, dto) {
+        this.ensureEmailVerificationEnabled();
+        return this.authEmailService.forgotPassword(dto.email, (0,nestjs_shared_.buildFrontendUrl)(req, '/auth/reset-password'));
+    }
+    async resetPassword(dto) {
+        this.ensureEmailVerificationEnabled();
+        return this.authEmailService.resetPassword(dto.token, dto.newPassword);
+    }
+    async resendVerification(req, dto) {
+        this.ensureEmailVerificationEnabled();
+        return this.authEmailService.resendVerificationEmail(dto.email, (0,nestjs_shared_.buildFrontendUrl)(req, '/auth/verify-email'));
+    }
+    async verifyEmail(dto) {
+        this.ensureEmailVerificationEnabled();
+        const result = await this.authEmailService.verifyEmail(dto.token);
+        if (result.type === 'pending') {
+            const data = await this.authService.createUserFromPendingRegistration(result.pending);
+            return {
+                success: true,
+                message: 'Registration completed successfully',
+                messageKey: message_keys/* .AUTH_MESSAGES.REGISTER_SUCCESS */.mK.REGISTER_SUCCESS,
+                data
+            };
+        }
+        return {
+            success: true,
+            message: result.message,
+            messageKey: result.messageKey
+        };
+    }
+}
+email_verification_controller_ts_decorate([
+    (0,common_.Post)('forgot-password'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,__rspack_external__nestjs_throttler_68da00c9.Throttle)({
+        default: {
+            limit: 3,
+            ttl: 300000
+        }
+    }),
+    (0,swagger_.ApiOperation)({
+        summary: 'Request password reset email'
+    }),
+    (0,swagger_.ApiBody)({
+        type: authentication_dto/* .ForgotPasswordDto */.mG
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        type: dtos_.MessageResponseDto
+    }),
+    email_verification_controller_ts_param(0, (0,common_.Req)()),
+    email_verification_controller_ts_param(1, (0,common_.Body)()),
+    email_verification_controller_ts_metadata("design:type", Function),
+    email_verification_controller_ts_metadata("design:paramtypes", [
+        typeof Request === "undefined" ? Object : Request,
+        typeof authentication_dto/* .ForgotPasswordDto */.mG === "undefined" ? Object : authentication_dto/* .ForgotPasswordDto */.mG
+    ]),
+    email_verification_controller_ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "forgotPassword", null);
+email_verification_controller_ts_decorate([
+    (0,common_.Post)('reset-password'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,__rspack_external__nestjs_throttler_68da00c9.Throttle)({
+        default: {
+            limit: 5,
+            ttl: 900000
+        }
+    }),
+    (0,swagger_.ApiOperation)({
+        summary: 'Reset password using token'
+    }),
+    (0,swagger_.ApiBody)({
+        type: authentication_dto/* .ResetPasswordDto */.US
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        type: dtos_.MessageResponseDto
+    }),
+    email_verification_controller_ts_param(0, (0,common_.Body)()),
+    email_verification_controller_ts_metadata("design:type", Function),
+    email_verification_controller_ts_metadata("design:paramtypes", [
+        typeof authentication_dto/* .ResetPasswordDto */.US === "undefined" ? Object : authentication_dto/* .ResetPasswordDto */.US
+    ]),
+    email_verification_controller_ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "resetPassword", null);
+email_verification_controller_ts_decorate([
+    (0,common_.Post)('resend-verification'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,__rspack_external__nestjs_throttler_68da00c9.Throttle)({
+        default: {
+            limit: 3,
+            ttl: 300000
+        }
+    }),
+    (0,swagger_.ApiOperation)({
+        summary: 'Resend email verification link'
+    }),
+    (0,swagger_.ApiBody)({
+        type: authentication_dto/* .ResendVerificationDto */.Oz
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        type: dtos_.MessageResponseDto
+    }),
+    email_verification_controller_ts_param(0, (0,common_.Req)()),
+    email_verification_controller_ts_param(1, (0,common_.Body)()),
+    email_verification_controller_ts_metadata("design:type", Function),
+    email_verification_controller_ts_metadata("design:paramtypes", [
+        typeof Request === "undefined" ? Object : Request,
+        typeof authentication_dto/* .ResendVerificationDto */.Oz === "undefined" ? Object : authentication_dto/* .ResendVerificationDto */.Oz
+    ]),
+    email_verification_controller_ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "resendVerification", null);
+email_verification_controller_ts_decorate([
+    (0,common_.Post)('verify-email'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,__rspack_external__nestjs_throttler_68da00c9.Throttle)({
+        default: {
+            limit: 10,
+            ttl: 60000
+        }
+    }),
+    (0,common_.UseInterceptors)(set_token_interceptor/* .SetToken */.A),
+    (0,swagger_.ApiOperation)({
+        summary: 'Verify email using token'
+    }),
+    (0,swagger_.ApiBody)({
+        type: authentication_dto/* .VerifyEmailDto */.rl
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        description: 'Email verified or registration completed'
+    }),
+    email_verification_controller_ts_param(0, (0,common_.Body)()),
+    email_verification_controller_ts_metadata("design:type", Function),
+    email_verification_controller_ts_metadata("design:paramtypes", [
+        typeof authentication_dto/* .VerifyEmailDto */.rl === "undefined" ? Object : authentication_dto/* .VerifyEmailDto */.rl
+    ]),
+    email_verification_controller_ts_metadata("design:returntype", Promise)
+], EmailVerificationController.prototype, "verifyEmail", null);
+EmailVerificationController = email_verification_controller_ts_decorate([
+    (0,swagger_.ApiTags)('Authentication'),
+    (0,common_.Controller)('auth'),
+    email_verification_controller_ts_param(0, (0,common_.Inject)(authentication_service/* .AuthenticationService */.k)),
+    email_verification_controller_ts_param(1, (0,common_.Inject)(auth_email_service/* .AuthEmailService */.G)),
+    email_verification_controller_ts_param(2, (0,common_.Inject)(auth_config_service/* .AuthConfigService */.W)),
+    email_verification_controller_ts_param(3, (0,common_.Inject)(auth_datasource_provider/* .AuthDataSourceProvider */.v)),
+    email_verification_controller_ts_metadata("design:type", Function),
+    email_verification_controller_ts_metadata("design:paramtypes", [
+        typeof authentication_service/* .AuthenticationService */.k === "undefined" ? Object : authentication_service/* .AuthenticationService */.k,
+        typeof auth_email_service/* .AuthEmailService */.G === "undefined" ? Object : auth_email_service/* .AuthEmailService */.G,
+        typeof auth_config_service/* .AuthConfigService */.W === "undefined" ? Object : auth_config_service/* .AuthConfigService */.W,
+        typeof auth_datasource_provider/* .AuthDataSourceProvider */.v === "undefined" ? Object : auth_datasource_provider/* .AuthDataSourceProvider */.v
+    ])
+], EmailVerificationController);
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/dtos/social-auth.dto.ts
+var social_auth_dto = __webpack_require__(430);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/social-auth.service.ts
+var social_auth_service = __webpack_require__(2786);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/controllers/social-auth.controller.ts
+function social_auth_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function social_auth_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function social_auth_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+class SocialAuthController {
+    socialAuthService;
+    constructor(socialAuthService){
+        this.socialAuthService = socialAuthService;
+    }
+    async getProviders(dto) {
+        const data = await this.socialAuthService.listEnabledProviders(dto.redirectUri);
+        return {
+            success: true,
+            message: 'Social providers retrieved successfully',
+            messageKey: message_keys/* .SOCIAL_AUTH_MESSAGES.PROVIDERS_SUCCESS */.OF.PROVIDERS_SUCCESS,
+            data
+        };
+    }
+    async authorize(dto) {
+        const data = await this.socialAuthService.createAuthorization(dto.provider, dto.redirectUri);
+        return {
+            success: true,
+            message: 'Authorization URL generated successfully',
+            messageKey: message_keys/* .SOCIAL_AUTH_MESSAGES.AUTHORIZE_SUCCESS */.OF.AUTHORIZE_SUCCESS,
+            data
+        };
+    }
+    async callback(dto) {
+        const result = await this.socialAuthService.completeLogin(dto.code, dto.state, dto.redirectUri);
+        if ('requiresSelection' in result) {
+            return {
+                success: true,
+                message: 'Company selection required',
+                messageKey: message_keys/* .AUTH_MESSAGES.LOGIN_REQUIRES_SELECTION */.mK.LOGIN_REQUIRES_SELECTION,
+                data: result
+            };
+        }
+        return {
+            success: true,
+            message: 'Login successful',
+            messageKey: message_keys/* .SOCIAL_AUTH_MESSAGES.LOGIN_SUCCESS */.OF.LOGIN_SUCCESS,
+            data: result
+        };
+    }
+}
+social_auth_controller_ts_decorate([
+    (0,common_.Post)('providers'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,__rspack_external__nestjs_throttler_68da00c9.Throttle)({
+        default: {
+            limit: 30,
+            ttl: 60000
+        }
+    }),
+    (0,swagger_.ApiOperation)({
+        summary: 'List enabled social sign-in providers'
+    }),
+    (0,swagger_.ApiBody)({
+        type: social_auth_dto/* .SocialProvidersDto */.fP
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        type: [
+            social_auth_dto/* .SocialProviderInfoDto */.a2
+        ]
+    }),
+    social_auth_controller_ts_param(0, (0,common_.Body)()),
+    social_auth_controller_ts_metadata("design:type", Function),
+    social_auth_controller_ts_metadata("design:paramtypes", [
+        typeof social_auth_dto/* .SocialProvidersDto */.fP === "undefined" ? Object : social_auth_dto/* .SocialProvidersDto */.fP
+    ]),
+    social_auth_controller_ts_metadata("design:returntype", Promise)
+], SocialAuthController.prototype, "getProviders", null);
+social_auth_controller_ts_decorate([
+    (0,common_.Post)('authorize'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,__rspack_external__nestjs_throttler_68da00c9.Throttle)({
+        default: {
+            limit: 10,
+            ttl: 60000
+        }
+    }),
+    (0,swagger_.ApiOperation)({
+        summary: "Start a sign-in and get the provider's consent URL"
+    }),
+    (0,swagger_.ApiBody)({
+        type: social_auth_dto/* .SocialAuthorizeDto */.s4
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        type: social_auth_dto/* .SocialAuthorizeResponseDto */.pd
+    }),
+    social_auth_controller_ts_param(0, (0,common_.Body)()),
+    social_auth_controller_ts_metadata("design:type", Function),
+    social_auth_controller_ts_metadata("design:paramtypes", [
+        typeof social_auth_dto/* .SocialAuthorizeDto */.s4 === "undefined" ? Object : social_auth_dto/* .SocialAuthorizeDto */.s4
+    ]),
+    social_auth_controller_ts_metadata("design:returntype", Promise)
+], SocialAuthController.prototype, "authorize", null);
+social_auth_controller_ts_decorate([
+    (0,common_.Post)('callback'),
+    (0,common_.HttpCode)(common_.HttpStatus.OK),
+    (0,__rspack_external__nestjs_throttler_68da00c9.Throttle)({
+        default: {
+            limit: 10,
+            ttl: 60000
+        }
+    }),
+    (0,common_.UseInterceptors)(set_token_interceptor/* .SetToken */.A),
+    (0,swagger_.ApiOperation)({
+        summary: 'Complete a social sign-in'
+    }),
+    (0,swagger_.ApiBody)({
+        type: social_auth_dto/* .SocialCallbackDto */.QW
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        description: 'Sign-in successful, or company selection is still required'
+    }),
+    social_auth_controller_ts_param(0, (0,common_.Body)()),
+    social_auth_controller_ts_metadata("design:type", Function),
+    social_auth_controller_ts_metadata("design:paramtypes", [
+        typeof social_auth_dto/* .SocialCallbackDto */.QW === "undefined" ? Object : social_auth_dto/* .SocialCallbackDto */.QW
+    ]),
+    social_auth_controller_ts_metadata("design:returntype", Promise)
+], SocialAuthController.prototype, "callback", null);
+SocialAuthController = social_auth_controller_ts_decorate([
+    (0,swagger_.ApiTags)('Social Authentication'),
+    (0,common_.Controller)('auth/social'),
+    social_auth_controller_ts_param(0, (0,common_.Inject)(social_auth_service/* .SocialAuthService */.J)),
+    social_auth_controller_ts_metadata("design:type", Function),
+    social_auth_controller_ts_metadata("design:paramtypes", [
+        typeof social_auth_service/* .SocialAuthService */.J === "undefined" ? Object : social_auth_service/* .SocialAuthService */.J
+    ])
+], SocialAuthController);
+
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/classes"
+var classes_ = __webpack_require__(6937);
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/constants"
+var constants_ = __webpack_require__(9140);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/social-auth-config.service.ts
+var social_auth_config_service = __webpack_require__(8275);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/controllers/social-auth-config.controller.ts
+function social_auth_config_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function social_auth_config_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function social_auth_config_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+class SocialAuthConfigController extends (0,classes_.createApiController)(social_auth_dto/* .CreateSocialAuthConfigDto */.X8, social_auth_dto/* .UpdateSocialAuthConfigDto */.kd, social_auth_dto/* .SocialAuthConfigResponseDto */.SN, {
+    entityName: 'social.config',
+    security: {
+        insert: {
+            level: 'permission',
+            permissions: [
+                constants_.SOCIAL_AUTH_CONFIG_PERMISSIONS.CREATE
+            ]
+        },
+        bulkUpsert: {
+            level: 'permission',
+            permissions: [
+                constants_.SOCIAL_AUTH_CONFIG_PERMISSIONS.CREATE,
+                constants_.SOCIAL_AUTH_CONFIG_PERMISSIONS.UPDATE
+            ],
+            operator: 'AND'
+        },
+        getById: {
+            level: 'permission',
+            permissions: [
+                constants_.SOCIAL_AUTH_CONFIG_PERMISSIONS.READ
+            ]
+        },
+        getAll: {
+            level: 'permission',
+            permissions: [
+                constants_.SOCIAL_AUTH_CONFIG_PERMISSIONS.READ
+            ]
+        },
+        update: {
+            level: 'permission',
+            permissions: [
+                constants_.SOCIAL_AUTH_CONFIG_PERMISSIONS.UPDATE
+            ]
+        },
+        delete: {
+            level: 'permission',
+            permissions: [
+                constants_.SOCIAL_AUTH_CONFIG_PERMISSIONS.DELETE
+            ]
+        }
+    },
+    enabledEndpoints: [
+        'insert',
+        'bulkUpsert',
+        'getById',
+        'getAll',
+        'update',
+        'delete'
+    ]
+}) {
+    socialAuthConfigService;
+    constructor(socialAuthConfigService){
+        super(socialAuthConfigService), this.socialAuthConfigService = socialAuthConfigService;
+    }
+}
+SocialAuthConfigController = social_auth_config_controller_ts_decorate([
+    (0,swagger_.ApiTags)('Social Auth Config'),
+    (0,common_.Controller)('auth/social-config'),
+    social_auth_config_controller_ts_param(0, (0,common_.Inject)(social_auth_config_service/* .SocialAuthConfigService */.t)),
+    social_auth_config_controller_ts_metadata("design:type", Function),
+    social_auth_config_controller_ts_metadata("design:paramtypes", [
+        typeof social_auth_config_service/* .SocialAuthConfigService */.t === "undefined" ? Object : social_auth_config_service/* .SocialAuthConfigService */.t
+    ])
+], SocialAuthConfigController);
+
+// EXTERNAL MODULE: external "class-transformer"
+var external_class_transformer_ = __webpack_require__(5812);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/dtos/user.dto.ts
+var user_dto = __webpack_require__(7265);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/user.service.ts
+var user_service = __webpack_require__(7229);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/controllers/user.controller.ts
+function user_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function user_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function user_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+
+
+
+class UserController extends (0,classes_.createApiController)(user_dto/* .CreateUserDto */.TG, user_dto/* .UpdateUserDto */.Qf, user_dto/* .UserResponseDto */.kq, {
+    entityName: 'user',
+    security: {
+        insert: {
+            level: 'permission',
+            permissions: [
+                classes_.USER_PERMISSIONS.CREATE
+            ]
+        },
+        insertMany: {
+            level: 'permission',
+            permissions: [
+                classes_.USER_PERMISSIONS.CREATE
+            ]
+        },
+        getById: {
+            level: 'permission',
+            permissions: [
+                classes_.USER_PERMISSIONS.READ
+            ]
+        },
+        getAll: {
+            level: 'permission',
+            permissions: [
+                classes_.USER_PERMISSIONS.READ
+            ]
+        },
+        update: {
+            level: 'permission',
+            permissions: [
+                classes_.USER_PERMISSIONS.UPDATE
+            ]
+        },
+        updateMany: {
+            level: 'permission',
+            permissions: [
+                classes_.USER_PERMISSIONS.UPDATE
+            ]
+        },
+        delete: {
+            level: 'permission',
+            permissions: [
+                classes_.USER_PERMISSIONS.DELETE
+            ]
+        }
+    }
+}) {
+    service;
+    constructor(service){
+        super(service), this.service = service;
+    }
+    async lookup(filterAndPaginationDto, user, search) {
+        const result = await this.service.getAll(search ?? '', filterAndPaginationDto, user);
+        const data = result.data.map((item)=>(0,external_class_transformer_.plainToInstance)(user_dto/* .UserLookupResponseDto */.sx, item, {
+                excludeExtraneousValues: true
+            }));
+        const page = filterAndPaginationDto.pagination?.currentPage ?? 0;
+        const pageSize = filterAndPaginationDto.pagination?.pageSize ?? data.length;
+        const totalPages = pageSize > 0 ? Math.ceil(result.total / pageSize) : 1;
+        return {
+            success: true,
+            message: 'Users retrieved successfully',
+            messageKey: message_keys/* .USER_MESSAGES.LOOKUP_SUCCESS */.ny.LOOKUP_SUCCESS,
+            data,
+            meta: {
+                total: result.total,
+                page,
+                pageSize,
+                count: data.length,
+                hasMore: page < totalPages - 1,
+                totalPages
+            }
+        };
+    }
+    async getProfileWithExtras(id, user) {
+        const data = await this.service.getProfileWithExtras(id, user);
+        return {
+            success: true,
+            message: 'Profile extras retrieved successfully',
+            messageKey: message_keys/* .USER_MESSAGES.PROFILE_EXTRAS_SUCCESS */.ny.PROFILE_EXTRAS_SUCCESS,
+            data
+        };
+    }
+    async verifyEmail(id) {
+        await this.service.verifyEmail(id);
+        return {
+            success: true,
+            message: 'Email verified successfully',
+            messageKey: message_keys/* .USER_MESSAGES.EMAIL_VERIFY_SUCCESS */.ny.EMAIL_VERIFY_SUCCESS
+        };
+    }
+    async verifyPhone(id) {
+        await this.service.verifyPhone(id);
+        return {
+            success: true,
+            message: 'Phone verified successfully',
+            messageKey: message_keys/* .USER_MESSAGES.PHONE_VERIFY_SUCCESS */.ny.PHONE_VERIFY_SUCCESS
+        };
+    }
+    async updateStatus(id, isActive, user) {
+        await this.service.updateStatus(id, isActive, user);
+        return {
+            success: true,
+            message: 'Status updated successfully',
+            messageKey: message_keys/* .USER_MESSAGES.STATUS_UPDATE_SUCCESS */.ny.STATUS_UPDATE_SUCCESS
+        };
+    }
+    async profile(dto, user) {
+        const data = await this.service.profile(dto, user);
+        return {
+            success: true,
+            message: 'Profile updated successfully',
+            messageKey: message_keys/* .USER_MESSAGES.PROFILE_UPDATE_SUCCESS */.ny.PROFILE_UPDATE_SUCCESS,
+            data
+        };
+    }
+    async getProfileSections() {
+        const sections = await this.service.getProfileSections();
+        return {
+            success: true,
+            message: 'Profile sections retrieved successfully',
+            messageKey: message_keys/* .USER_MESSAGES.PROFILE_SECTIONS_SUCCESS */.ny.PROFILE_SECTIONS_SUCCESS,
+            data: sections
+        };
+    }
+    async getProfileSectionData(id, sectionId, user) {
+        const data = await this.service.getProfileSectionData(id, sectionId, user);
+        return {
+            success: true,
+            message: 'Profile section data retrieved successfully',
+            messageKey: message_keys/* .USER_MESSAGES.PROFILE_SECTION_DATA_SUCCESS */.ny.PROFILE_SECTION_DATA_SUCCESS,
+            data
+        };
+    }
+    async updateProfileSection(id, sectionId, data, user) {
+        await this.service.updateProfileSection(id, sectionId, data, user);
+        return {
+            success: true,
+            message: 'Section updated successfully',
+            messageKey: message_keys/* .USER_MESSAGES.PROFILE_SECTION_UPDATE_SUCCESS */.ny.PROFILE_SECTION_UPDATE_SUCCESS
+        };
+    }
+    async getProfileCompletion(id, user) {
+        const percentage = await this.service.getProfileCompletion(id, user);
+        return {
+            success: true,
+            message: 'Profile completion retrieved successfully',
+            messageKey: message_keys/* .USER_MESSAGES.PROFILE_COMPLETION_SUCCESS */.ny.PROFILE_COMPLETION_SUCCESS,
+            data: {
+                completionPercentage: percentage
+            }
+        };
+    }
+}
+user_controller_ts_decorate([
+    (0,common_.Post)('lookup'),
+    (0,common_.UseGuards)(guards_.JwtAuthGuard, guards_.PermissionGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.RequireAnyPermission)(classes_.USER_PERMISSIONS.READ, classes_.USER_PERMISSIONS.LOOKUP),
+    (0,swagger_.ApiOperation)({
+        summary: 'Lookup users for pickers/directory',
+        description: 'Lightweight user directory search for selection widgets (event participants, assignees, etc.). ' + 'Returns only id/name/email. Accessible with USER_PERMISSIONS.READ or the narrower USER_PERMISSIONS.LOOKUP, ' + 'so panels that only need to pick a user do not require full user-management access.'
+    }),
+    (0,swagger_.ApiQuery)({
+        name: 'q',
+        required: false,
+        description: 'Global text search across searchable fields'
+    }),
+    (0,swagger_.ApiBody)({
+        type: dtos_.FilterAndPaginationDto
+    }),
+    user_controller_ts_param(0, (0,common_.Body)()),
+    user_controller_ts_param(1, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)()),
+    user_controller_ts_param(2, (0,common_.Query)('q')),
+    user_controller_ts_metadata("design:type", Function),
+    user_controller_ts_metadata("design:paramtypes", [
+        typeof dtos_.FilterAndPaginationDto === "undefined" ? Object : dtos_.FilterAndPaginationDto,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo,
+        String
+    ]),
+    user_controller_ts_metadata("design:returntype", Promise)
+], UserController.prototype, "lookup", null);
+user_controller_ts_decorate([
+    (0,common_.Post)(':id/profile-extras'),
+    (0,common_.UseGuards)(guards_.JwtAuthGuard, guards_.PermissionGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.RequirePermission)(classes_.USER_PERMISSIONS.READ),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get user profile with extras',
+        description: 'Returns user profile along with extra data (roles, permissions, etc.) if UserEnricher is provided.'
+    }),
+    (0,swagger_.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    user_controller_ts_param(0, (0,common_.Param)('id')),
+    user_controller_ts_param(1, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)()),
+    user_controller_ts_metadata("design:type", Function),
+    user_controller_ts_metadata("design:paramtypes", [
+        String,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    user_controller_ts_metadata("design:returntype", Promise)
+], UserController.prototype, "getProfileWithExtras", null);
+user_controller_ts_decorate([
+    (0,common_.Post)(':id/verify-email'),
+    (0,common_.UseGuards)(guards_.JwtAuthGuard, guards_.PermissionGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.RequirePermission)(classes_.USER_PERMISSIONS.UPDATE),
+    (0,swagger_.ApiOperation)({
+        summary: 'Verify user email'
+    }),
+    (0,swagger_.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    user_controller_ts_param(0, (0,common_.Param)('id')),
+    user_controller_ts_metadata("design:type", Function),
+    user_controller_ts_metadata("design:paramtypes", [
+        String
+    ]),
+    user_controller_ts_metadata("design:returntype", Promise)
+], UserController.prototype, "verifyEmail", null);
+user_controller_ts_decorate([
+    (0,common_.Post)(':id/verify-phone'),
+    (0,common_.UseGuards)(guards_.JwtAuthGuard, guards_.PermissionGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.RequirePermission)(classes_.USER_PERMISSIONS.UPDATE),
+    (0,swagger_.ApiOperation)({
+        summary: 'Verify user phone'
+    }),
+    (0,swagger_.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    user_controller_ts_param(0, (0,common_.Param)('id')),
+    user_controller_ts_metadata("design:type", Function),
+    user_controller_ts_metadata("design:paramtypes", [
+        String
+    ]),
+    user_controller_ts_metadata("design:returntype", Promise)
+], UserController.prototype, "verifyPhone", null);
+user_controller_ts_decorate([
+    (0,common_.Post)(':id/status'),
+    (0,common_.UseGuards)(guards_.JwtAuthGuard, guards_.PermissionGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.RequirePermission)(classes_.USER_PERMISSIONS.UPDATE),
+    (0,swagger_.ApiOperation)({
+        summary: 'Update user active status',
+        description: 'Updates user active status. When company feature is enabled, updates the status for the current company context.'
+    }),
+    (0,swagger_.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    (0,swagger_.ApiBody)({
+        schema: {
+            example: {
+                isActive: true
+            }
+        }
+    }),
+    user_controller_ts_param(0, (0,common_.Param)('id')),
+    user_controller_ts_param(1, (0,common_.Body)('isActive')),
+    user_controller_ts_param(2, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)()),
+    user_controller_ts_metadata("design:type", Function),
+    user_controller_ts_metadata("design:paramtypes", [
+        String,
+        Boolean,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    user_controller_ts_metadata("design:returntype", Promise)
+], UserController.prototype, "updateStatus", null);
+user_controller_ts_decorate([
+    (0,common_.Post)('profile'),
+    (0,common_.UseGuards)(guards_.JwtAuthGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,swagger_.ApiOperation)({
+        summary: 'Update user profile'
+    }),
+    (0,swagger_.ApiBody)({
+        type: user_dto/* .UpdateUserDto */.Qf
+    }),
+    user_controller_ts_param(0, (0,common_.Body)()),
+    user_controller_ts_param(1, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)()),
+    user_controller_ts_metadata("design:type", Function),
+    user_controller_ts_metadata("design:paramtypes", [
+        typeof user_dto/* .UpdateUserDto */.Qf === "undefined" ? Object : user_dto/* .UpdateUserDto */.Qf,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    user_controller_ts_metadata("design:returntype", Promise)
+], UserController.prototype, "profile", null);
+user_controller_ts_decorate([
+    (0,common_.Post)('profile-sections'),
+    (0,common_.UseGuards)(guards_.JwtAuthGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.RequirePermission)(classes_.USER_PERMISSIONS.READ),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get profile section definitions',
+        description: 'Returns available profile sections for multi-step profile (if enricher configured).'
+    }),
+    user_controller_ts_metadata("design:type", Function),
+    user_controller_ts_metadata("design:paramtypes", []),
+    user_controller_ts_metadata("design:returntype", Promise)
+], UserController.prototype, "getProfileSections", null);
+user_controller_ts_decorate([
+    (0,common_.Post)(':id/profile-section/:sectionId'),
+    (0,common_.UseGuards)(guards_.JwtAuthGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get profile section data',
+        description: 'Returns data for a specific profile section.'
+    }),
+    (0,swagger_.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    (0,swagger_.ApiParam)({
+        name: 'sectionId',
+        description: 'Section identifier'
+    }),
+    user_controller_ts_param(0, (0,common_.Param)('id')),
+    user_controller_ts_param(1, (0,common_.Param)('sectionId')),
+    user_controller_ts_param(2, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)()),
+    user_controller_ts_metadata("design:type", Function),
+    user_controller_ts_metadata("design:paramtypes", [
+        String,
+        String,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    user_controller_ts_metadata("design:returntype", Promise)
+], UserController.prototype, "getProfileSectionData", null);
+user_controller_ts_decorate([
+    (0,common_.Post)(':id/profile-section/:sectionId/update'),
+    (0,common_.UseGuards)(guards_.JwtAuthGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,swagger_.ApiOperation)({
+        summary: 'Update profile section',
+        description: 'Updates a specific profile section data.'
+    }),
+    (0,swagger_.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    (0,swagger_.ApiParam)({
+        name: 'sectionId',
+        description: 'Section identifier'
+    }),
+    user_controller_ts_param(0, (0,common_.Param)('id')),
+    user_controller_ts_param(1, (0,common_.Param)('sectionId')),
+    user_controller_ts_param(2, (0,common_.Body)()),
+    user_controller_ts_param(3, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)()),
+    user_controller_ts_metadata("design:type", Function),
+    user_controller_ts_metadata("design:paramtypes", [
+        String,
+        String,
+        typeof Record === "undefined" ? Object : Record,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    user_controller_ts_metadata("design:returntype", Promise)
+], UserController.prototype, "updateProfileSection", null);
+user_controller_ts_decorate([
+    (0,common_.Post)(':id/profile-completion'),
+    (0,common_.UseGuards)(guards_.JwtAuthGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get profile completion percentage',
+        description: 'Returns overall profile completion percentage.'
+    }),
+    (0,swagger_.ApiParam)({
+        name: 'id',
+        description: 'User ID'
+    }),
+    user_controller_ts_param(0, (0,common_.Param)('id')),
+    user_controller_ts_param(1, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)()),
+    user_controller_ts_metadata("design:type", Function),
+    user_controller_ts_metadata("design:paramtypes", [
+        String,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    user_controller_ts_metadata("design:returntype", Promise)
+], UserController.prototype, "getProfileCompletion", null);
+UserController = user_controller_ts_decorate([
+    (0,swagger_.ApiTags)('Users'),
+    (0,common_.Controller)('administration/users'),
+    user_controller_ts_param(0, (0,common_.Inject)(user_service/* .UserService */.D)),
+    user_controller_ts_metadata("design:type", Function),
+    user_controller_ts_metadata("design:paramtypes", [
+        typeof user_service/* .UserService */.D === "undefined" ? Object : user_service/* .UserService */.D
+    ])
+], UserController);
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/dtos/company.dto.ts
+var company_dto = __webpack_require__(1845);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/company.service.ts
+var company_service = __webpack_require__(9201);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/controllers/company.controller.ts
+function company_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function company_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function company_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+class CompanyController extends (0,classes_.createApiController)(company_dto/* .CreateCompanyDto */.l4, company_dto/* .UpdateCompanyDto */.Ky, company_dto/* .CompanyResponseDto */.cd, {
+    entityName: 'company',
+    security: {
+        insert: {
+            level: 'permission',
+            permissions: [
+                classes_.COMPANY_PERMISSIONS.CREATE
+            ]
+        },
+        insertMany: {
+            level: 'permission',
+            permissions: [
+                classes_.COMPANY_PERMISSIONS.CREATE
+            ]
+        },
+        getById: {
+            level: 'permission',
+            permissions: [
+                classes_.COMPANY_PERMISSIONS.READ
+            ]
+        },
+        getAll: {
+            level: 'permission',
+            permissions: [
+                classes_.COMPANY_PERMISSIONS.READ
+            ]
+        },
+        update: {
+            level: 'permission',
+            permissions: [
+                classes_.COMPANY_PERMISSIONS.UPDATE
+            ]
+        },
+        updateMany: {
+            level: 'permission',
+            permissions: [
+                classes_.COMPANY_PERMISSIONS.UPDATE
+            ]
+        },
+        delete: {
+            level: 'permission',
+            permissions: [
+                classes_.COMPANY_PERMISSIONS.DELETE
+            ]
+        }
+    }
+}) {
+    companyService;
+    constructor(companyService){
+        super(companyService), this.companyService = companyService;
+    }
+}
+CompanyController = company_controller_ts_decorate([
+    (0,swagger_.ApiTags)('Companies'),
+    (0,common_.Controller)('administration/company'),
+    company_controller_ts_param(0, (0,common_.Inject)(company_service/* .CompanyService */.B)),
+    company_controller_ts_metadata("design:type", Function),
+    company_controller_ts_metadata("design:paramtypes", [
+        typeof company_service/* .CompanyService */.B === "undefined" ? Object : company_service/* .CompanyService */.B
+    ])
+], CompanyController);
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/dtos/company-branch.dto.ts
+var company_branch_dto = __webpack_require__(9556);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/branch.service.ts
+var branch_service = __webpack_require__(5402);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/controllers/branch.controller.ts
+function branch_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function branch_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function branch_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+class BranchController extends (0,classes_.createApiController)(company_branch_dto/* .CreateCompanyBranchDto */.Vw, company_branch_dto/* .UpdateCompanyBranchDto */.Oo, company_branch_dto/* .CompanyBranchResponseDto */.ET, {
+    entityName: 'branch',
+    security: {
+        insert: {
+            level: 'permission',
+            permissions: [
+                classes_.BRANCH_PERMISSIONS.CREATE
+            ]
+        },
+        insertMany: {
+            level: 'permission',
+            permissions: [
+                classes_.BRANCH_PERMISSIONS.CREATE
+            ]
+        },
+        getById: {
+            level: 'permission',
+            permissions: [
+                classes_.BRANCH_PERMISSIONS.READ
+            ]
+        },
+        getAll: {
+            level: 'permission',
+            permissions: [
+                classes_.BRANCH_PERMISSIONS.READ
+            ]
+        },
+        update: {
+            level: 'permission',
+            permissions: [
+                classes_.BRANCH_PERMISSIONS.UPDATE
+            ]
+        },
+        updateMany: {
+            level: 'permission',
+            permissions: [
+                classes_.BRANCH_PERMISSIONS.UPDATE
+            ]
+        },
+        delete: {
+            level: 'permission',
+            permissions: [
+                classes_.BRANCH_PERMISSIONS.DELETE
+            ]
+        }
+    }
+}) {
+    branchService;
+    constructor(branchService){
+        super(branchService), this.branchService = branchService;
+    }
+}
+BranchController = branch_controller_ts_decorate([
+    (0,swagger_.ApiTags)('Branches'),
+    (0,common_.Controller)('administration/branch'),
+    branch_controller_ts_param(0, (0,common_.Inject)(branch_service/* .BranchService */.O)),
+    branch_controller_ts_metadata("design:type", Function),
+    branch_controller_ts_metadata("design:paramtypes", [
+        typeof branch_service/* .BranchService */.O === "undefined" ? Object : branch_service/* .BranchService */.O
+    ])
+], BranchController);
+
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/dtos/user-permission.dto.ts
+var user_permission_dto = __webpack_require__(3939);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/entities/user-company-permission.entity.ts
+var user_company_permission_entity = __webpack_require__(2377);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/user-permission.service.ts
+var user_permission_service = __webpack_require__(5291);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/controllers/user-permission.controller.ts
+function user_permission_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function user_permission_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function user_permission_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+
+class UserPermissionController {
+    permissionService;
+    constructor(permissionService){
+        this.permissionService = permissionService;
+    }
+    async assignUserCompany(dto, user) {
+        return this.processBatchPermissions(dto.userId, dto.items, user_company_permission_entity/* .PermissionType.COMPANY */.e.COMPANY, user);
+    }
+    async getUserCompanies(userId) {
+        const permissions = await this.permissionService.findUserCompanies(userId);
+        return {
+            success: true,
+            message: 'User companies retrieved successfully',
+            messageKey: message_keys/* .USER_PERMISSION_MESSAGES.COMPANY_LIST_SUCCESS */.jz.COMPANY_LIST_SUCCESS,
+            data: permissions.map((p)=>({
+                    id: p.id,
+                    userId: p.userId,
+                    companyId: p.company?.id || p.targetId,
+                    companyName: p.company?.name || '',
+                    companySlug: p.company?.slug || ''
+                }))
+        };
+    }
+    async assignUserBranch(dto, user) {
+        return this.processBatchPermissions(dto.userId, dto.items, user_company_permission_entity/* .PermissionType.BRANCH */.e.BRANCH, user);
+    }
+    async getUserBranches(userId, companyId) {
+        const permissions = await this.permissionService.findUserBranches(userId, companyId);
+        return {
+            success: true,
+            message: 'User branches retrieved successfully',
+            messageKey: message_keys/* .USER_PERMISSION_MESSAGES.BRANCH_LIST_SUCCESS */.jz.BRANCH_LIST_SUCCESS,
+            data: permissions.map((p)=>({
+                    id: p.id,
+                    userId: p.userId,
+                    branchId: p.branch?.id || p.targetId,
+                    branchName: p.branch?.name || '',
+                    branchSlug: p.branch?.slug || '',
+                    companyId: p.branch?.companyId || ''
+                }))
+        };
+    }
+    /** Process batch permission assignments/revocations */ async processBatchPermissions(userId, items, type, user) {
+        let added = 0, removed = 0;
+        for (const item of items){
+            await this.permissionService.validateTenantScope(type, item.targetId, user);
+            if (item.isAdd) {
+                await this.permissionService.assignPermission(userId, item.targetId, type);
+                added++;
+            } else {
+                await this.permissionService.revokePermission(userId, item.targetId, type);
+                removed++;
+            }
+        }
+        return {
+            success: true,
+            message: `Processed ${added} additions and ${removed} removals`,
+            messageKey: message_keys/* .USER_PERMISSION_MESSAGES.BATCH_SUCCESS */.jz.BATCH_SUCCESS,
+            messageVariables: {
+                added,
+                removed
+            }
+        };
+    }
+}
+user_permission_controller_ts_decorate([
+    (0,common_.Post)('user-company/assign'),
+    (0,nestjs_shared_.RequirePermission)(nestjs_shared_.USER_PERMISSIONS.UPDATE),
+    (0,swagger_.ApiOperation)({
+        summary: 'Batch assign/revoke user-company permissions'
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        description: 'Company permissions updated successfully'
+    }),
+    (0,swagger_.ApiBody)({
+        type: user_permission_dto/* .AssignUserCompanyDto */.DU
+    }),
+    user_permission_controller_ts_param(0, (0,common_.Body)()),
+    user_permission_controller_ts_param(1, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)()),
+    user_permission_controller_ts_metadata("design:type", Function),
+    user_permission_controller_ts_metadata("design:paramtypes", [
+        typeof user_permission_dto/* .AssignUserCompanyDto */.DU === "undefined" ? Object : user_permission_dto/* .AssignUserCompanyDto */.DU,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    user_permission_controller_ts_metadata("design:returntype", Promise)
+], UserPermissionController.prototype, "assignUserCompany", null);
+user_permission_controller_ts_decorate([
+    (0,common_.Post)('get-user-company'),
+    (0,nestjs_shared_.RequirePermission)(nestjs_shared_.USER_PERMISSIONS.READ),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get user companies'
+    }),
+    (0,swagger_.ApiBody)({
+        schema: {
+            properties: {
+                userId: {
+                    type: 'string'
+                }
+            },
+            required: [
+                'userId'
+            ]
+        }
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        type: user_permission_dto/* .UserCompaniesResponseDto */.LU
+    }),
+    user_permission_controller_ts_param(0, (0,common_.Body)('userId')),
+    user_permission_controller_ts_metadata("design:type", Function),
+    user_permission_controller_ts_metadata("design:paramtypes", [
+        String
+    ]),
+    user_permission_controller_ts_metadata("design:returntype", Promise)
+], UserPermissionController.prototype, "getUserCompanies", null);
+user_permission_controller_ts_decorate([
+    (0,common_.Post)('user-branch/assign'),
+    (0,nestjs_shared_.RequirePermission)(nestjs_shared_.USER_PERMISSIONS.UPDATE),
+    (0,swagger_.ApiOperation)({
+        summary: 'Batch assign/revoke user-branch permissions'
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        description: 'Branch permissions updated successfully'
+    }),
+    (0,swagger_.ApiBody)({
+        type: user_permission_dto/* .AssignUserBranchDto */.qW
+    }),
+    user_permission_controller_ts_param(0, (0,common_.Body)()),
+    user_permission_controller_ts_param(1, (0,__rspack_external__flusys_nestjs_shared_decorators_c129b601.CurrentUser)()),
+    user_permission_controller_ts_metadata("design:type", Function),
+    user_permission_controller_ts_metadata("design:paramtypes", [
+        typeof user_permission_dto/* .AssignUserBranchDto */.qW === "undefined" ? Object : user_permission_dto/* .AssignUserBranchDto */.qW,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    user_permission_controller_ts_metadata("design:returntype", Promise)
+], UserPermissionController.prototype, "assignUserBranch", null);
+user_permission_controller_ts_decorate([
+    (0,common_.Post)('get-user-branch'),
+    (0,nestjs_shared_.RequirePermission)(nestjs_shared_.USER_PERMISSIONS.READ),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get user branches'
+    }),
+    (0,swagger_.ApiBody)({
+        schema: {
+            properties: {
+                userId: {
+                    type: 'string'
+                },
+                companyId: {
+                    type: 'string',
+                    description: 'Optional company ID to filter branches'
+                }
+            },
+            required: [
+                'userId'
+            ]
+        }
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        type: user_permission_dto/* .UserBranchesResponseDto */.wc
+    }),
+    user_permission_controller_ts_param(0, (0,common_.Body)('userId')),
+    user_permission_controller_ts_param(1, (0,common_.Body)('companyId')),
+    user_permission_controller_ts_metadata("design:type", Function),
+    user_permission_controller_ts_metadata("design:paramtypes", [
+        String,
+        String
+    ]),
+    user_permission_controller_ts_metadata("design:returntype", Promise)
+], UserPermissionController.prototype, "getUserBranches", null);
+UserPermissionController = user_permission_controller_ts_decorate([
+    (0,swagger_.ApiTags)('User Permissions'),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,common_.Controller)('administration/permissions'),
+    (0,common_.UseGuards)(nestjs_shared_.JwtAuthGuard, nestjs_shared_.PermissionGuard),
+    user_permission_controller_ts_param(0, (0,common_.Inject)(user_permission_service/* .UserPermissionService */.O)),
+    user_permission_controller_ts_metadata("design:type", Function),
+    user_permission_controller_ts_metadata("design:paramtypes", [
+        typeof user_permission_service/* .UserPermissionService */.O === "undefined" ? Object : user_permission_service/* .UserPermissionService */.O
+    ])
+], UserPermissionController);
+
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/controllers/index.ts
+
+
+
+
+
+
+
+
+
+
+
+},
+5207(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _flusys_nestjs_shared_utils__rspack_import_0 = __webpack_require__(9216);
+/* import */ var _nestjs_common__rspack_import_1 = __webpack_require__(6157);
+/* import */ var rxjs__rspack_import_2 = __webpack_require__(7271);
+/* import */ var _config_index_js__rspack_import_4 = __webpack_require__(5588);
+/* import */ var _services_auth_config_service_js__rspack_import_3 = __webpack_require__(6514);
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+class ClearToken {
+    authConfig;
+    constructor(authConfig){
+        this.authConfig = authConfig;
+    }
+    get cookieName() {
+        return this.authConfig?.getRefreshTokenCookieName() ?? _config_index_js__rspack_import_4/* .DEFAULT_COOKIE_NAME */.rv;
+    }
+    intercept(context, next) {
+        const req = context.switchToHttp().getRequest();
+        const res = context.switchToHttp().getResponse();
+        return next.handle().pipe((0,rxjs__rspack_import_2.map)((value)=>{
+            if ((0,_flusys_nestjs_shared_utils__rspack_import_0.isBrowserRequest)(req)) {
+                res.clearCookie(this.cookieName, {
+                    httpOnly: true,
+                    path: '/',
+                    ...(0,_flusys_nestjs_shared_utils__rspack_import_0.buildCookieOptions)(req)
+                });
+            }
+            return value;
+        }));
+    }
+}
+ClearToken = _ts_decorate([
+    (0,_nestjs_common__rspack_import_1.Injectable)(),
+    _ts_param(0, (0,_nestjs_common__rspack_import_1.Optional)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof _services_auth_config_service_js__rspack_import_3/* .AuthConfigService */.W === "undefined" ? Object : _services_auth_config_service_js__rspack_import_3/* .AuthConfigService */.W
+    ])
+], ClearToken);
+
+__webpack_require__.d(__webpack_exports__, {
+  t: () => (ClearToken)
+});
+
+
+},
+8359(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  A: () => (/* binding */ SetToken)
+});
+
+// EXTERNAL MODULE: external "@flusys/nestjs-shared/utils"
+var utils_ = __webpack_require__(9216);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/message-keys.ts
+var message_keys = __webpack_require__(5363);
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(6157);
+;// CONCATENATED MODULE: external "buffer"
+
+// EXTERNAL MODULE: external "rxjs"
+var external_rxjs_ = __webpack_require__(7271);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/config/auth.constants.ts
+var auth_constants = __webpack_require__(5588);
+// EXTERNAL MODULE: ./projects/nestjs-auth/src/services/auth-config.service.ts + 1 modules
+var auth_config_service = __webpack_require__(6514);
+;// CONCATENATED MODULE: ./projects/nestjs-auth/src/interceptors/set-token.interceptor.ts
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+class SetToken {
+    authConfig;
+    constructor(authConfig){
+        this.authConfig = authConfig;
+    }
+    get cookieName() {
+        return this.authConfig?.getRefreshTokenCookieName() ?? auth_constants/* .DEFAULT_COOKIE_NAME */.rv;
+    }
+    get maxAgeMs() {
+        return (0,utils_.parseDurationToMs)(this.authConfig?.getRefreshTokenExpiration() ?? '7d');
+    }
+    intercept(context, next) {
+        const req = context.switchToHttp().getRequest();
+        const res = context.switchToHttp().getResponse();
+        return next.handle().pipe((0,external_rxjs_.map)((value)=>{
+            if (typeof value !== 'object' || value === null) {
+                return value;
+            }
+            const response = value;
+            const data = typeof response['data'] === 'object' && response['data'] !== null ? response['data'] : null;
+            const tokenInData = data && typeof data['refreshToken'] === 'string';
+            if (!tokenInData) {
+                return value;
+            }
+            if (!(0,utils_.isBrowserRequest)(req)) {
+                return value;
+            }
+            this.setRefreshTokenCookie(req, res, data['refreshToken']);
+            const { refreshToken: _, ...dataWithoutToken } = data;
+            return {
+                ...response,
+                data: dataWithoutToken
+            };
+        }), (0,external_rxjs_.catchError)((err)=>(0,external_rxjs_.throwError)(()=>err)));
+    }
+    setRefreshTokenCookie(req, res, tokenValue) {
+        const rawCookieString = `${this.cookieName}=${tokenValue}; HttpOnly`;
+        const estimatedBytes = __rspack_external_buffer.Buffer.byteLength(rawCookieString, 'utf8');
+        if (estimatedBytes > (/* inlined export .MAX_COOKIE_BYTES */3500)) {
+            throw new common_.PayloadTooLargeException({
+                message: `Refresh token too large (≈${estimatedBytes} bytes)`,
+                messageKey: message_keys/* .AUTH_MESSAGES.TOKEN_TOO_LARGE */.mK.TOKEN_TOO_LARGE,
+                messageVariables: {
+                    size: estimatedBytes
+                }
+            });
+        }
+        res.cookie(this.cookieName, tokenValue, {
+            httpOnly: true,
+            path: '/',
+            maxAge: this.maxAgeMs,
+            ...(0,utils_.buildCookieOptions)(req)
+        });
+    }
+}
+SetToken = _ts_decorate([
+    (0,common_.Injectable)(),
+    _ts_param(0, (0,common_.Optional)()),
+    _ts_param(0, (0,common_.Inject)(auth_config_service/* .AuthConfigService */.W)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof auth_config_service/* .AuthConfigService */.W === "undefined" ? Object : auth_config_service/* .AuthConfigService */.W
+    ])
+], SetToken);
+
+
+},
+3513(module) {
+
+module.exports = __rspack_external__flusys_nestjs_shared_guards_3f79ddd1;
+
+
+},
+7271(module) {
+
+module.exports = __rspack_external_rxjs;
+
+
+},
+
+};