@flusys/nestjs-shared 4.1.1 → 5.0.0

package/cjs/classes/api-controller.class.js

@@ -15,6 +15,7 @@ const _decorators = require("../decorators");
 const _apiresponsedecorator = require("../decorators/api-response.decorator");
 const _dtos = require("../dtos");
 const _exceptions = require("../exceptions");
+const _messagekeys = require("../constants/message-keys");
 const _guards = require("../guards");
 const _interceptors = require("../interceptors");
 function _define_property(obj, key, value) {
@@ -152,7 +153,14 @@ function createApiController(createDtoClass, updateDtoClass, responseDtoClass, o
         }
         async insert(addDto, user) {
             if (!this.isEnabled('insert')) {
-                throw new _exceptions.ForbiddenException(`Endpoint 'insert' is disabled`);
+                throw new _exceptions.BaseAppException({
+                    message: `Endpoint 'insert' is disabled`,
+                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
+                    messageVariables: {
+                        endpoint: 'insert'
+                    },
+                    status: _common.HttpStatus.FORBIDDEN
+                });
             }
             const entity = await this.service.insert(addDto, user);
             const data = (0, _classtransformer.plainToInstance)(responseDtoClass, entity);
@@ -165,7 +173,14 @@ function createApiController(createDtoClass, updateDtoClass, responseDtoClass, o
         }
         async insertMany(addDto, user) {
             if (!this.isEnabled('insertMany')) {
-                throw new _exceptions.ForbiddenException(`Endpoint 'insertMany' is disabled`);
+                throw new _exceptions.BaseAppException({
+                    message: `Endpoint 'insertMany' is disabled`,
+                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
+                    messageVariables: {
+                        endpoint: 'insertMany'
+                    },
+                    status: _common.HttpStatus.FORBIDDEN
+                });
             }
             const entities = await this.service.insertMany(addDto, user);
             const data = entities.map((item)=>(0, _classtransformer.plainToInstance)(responseDtoClass, item));
@@ -186,7 +201,14 @@ function createApiController(createDtoClass, updateDtoClass, responseDtoClass, o
         }
         async getById(id, body, user) {
             if (!this.isEnabled('getById')) {
-                throw new _exceptions.ForbiddenException(`Endpoint 'getById' is disabled`);
+                throw new _exceptions.BaseAppException({
+                    message: `Endpoint 'getById' is disabled`,
+                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
+                    messageVariables: {
+                        endpoint: 'getById'
+                    },
+                    status: _common.HttpStatus.FORBIDDEN
+                });
             }
             const entity = await this.service.findById(id, user, body?.select);
             const data = (0, _classtransformer.plainToInstance)(responseDtoClass, entity);
@@ -199,7 +221,14 @@ function createApiController(createDtoClass, updateDtoClass, responseDtoClass, o
         }
         async getByIds(body, user) {
             if (!this.isEnabled('getByIds')) {
-                throw new _exceptions.ForbiddenException(`Endpoint 'getByIds' is disabled`);
+                throw new _exceptions.BaseAppException({
+                    message: `Endpoint 'getByIds' is disabled`,
+                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
+                    messageVariables: {
+                        endpoint: 'getByIds'
+                    },
+                    status: _common.HttpStatus.FORBIDDEN
+                });
             }
             const entities = await this.service.findByIds(body.ids, user, body?.select);
             const data = (0, _classtransformer.plainToInstance)(responseDtoClass, entities);
@@ -219,7 +248,14 @@ function createApiController(createDtoClass, updateDtoClass, responseDtoClass, o
         }
         async update(updateDto, user) {
             if (!this.isEnabled('update')) {
-                throw new _exceptions.ForbiddenException(`Endpoint 'update' is disabled`);
+                throw new _exceptions.BaseAppException({
+                    message: `Endpoint 'update' is disabled`,
+                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
+                    messageVariables: {
+                        endpoint: 'update'
+                    },
+                    status: _common.HttpStatus.FORBIDDEN
+                });
             }
             const entity = await this.service.update(updateDto, user);
             const data = (0, _classtransformer.plainToInstance)(responseDtoClass, entity);
@@ -232,7 +268,14 @@ function createApiController(createDtoClass, updateDtoClass, responseDtoClass, o
         }
         async updateMany(updateDtos, user) {
             if (!this.isEnabled('updateMany')) {
-                throw new _exceptions.ForbiddenException(`Endpoint 'updateMany' is disabled`);
+                throw new _exceptions.BaseAppException({
+                    message: `Endpoint 'updateMany' is disabled`,
+                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
+                    messageVariables: {
+                        endpoint: 'updateMany'
+                    },
+                    status: _common.HttpStatus.FORBIDDEN
+                });
             }
             const entities = await this.service.updateMany(updateDtos, user);
             const data = (0, _classtransformer.plainToInstance)(responseDtoClass, entities);
@@ -253,7 +296,14 @@ function createApiController(createDtoClass, updateDtoClass, responseDtoClass, o
         }
         async bulkUpsert(dtos, user) {
             if (!this.isEnabled('bulkUpsert')) {
-                throw new _exceptions.ForbiddenException(`Endpoint 'bulkUpsert' is disabled`);
+                throw new _exceptions.BaseAppException({
+                    message: `Endpoint 'bulkUpsert' is disabled`,
+                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
+                    messageVariables: {
+                        endpoint: 'bulkUpsert'
+                    },
+                    status: _common.HttpStatus.FORBIDDEN
+                });
             }
             const toInsert = [];
             const toUpdate = [];
@@ -283,7 +333,14 @@ function createApiController(createDtoClass, updateDtoClass, responseDtoClass, o
         }
         async getByFilter(filter, user) {
             if (!this.isEnabled('getByFilter')) {
-                throw new _exceptions.ForbiddenException(`Endpoint 'getByFilter' is disabled`);
+                throw new _exceptions.BaseAppException({
+                    message: `Endpoint 'getByFilter' is disabled`,
+                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
+                    messageVariables: {
+                        endpoint: 'getByFilter'
+                    },
+                    status: _common.HttpStatus.FORBIDDEN
+                });
             }
             const result = await this.service.getAll('', {
                 filter,
@@ -306,7 +363,14 @@ function createApiController(createDtoClass, updateDtoClass, responseDtoClass, o
         }
         async getAll(filterAndPaginationDto, user, search) {
             if (!this.isEnabled('getAll')) {
-                throw new _exceptions.ForbiddenException(`Endpoint 'getAll' is disabled`);
+                throw new _exceptions.BaseAppException({
+                    message: `Endpoint 'getAll' is disabled`,
+                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
+                    messageVariables: {
+                        endpoint: 'getAll'
+                    },
+                    status: _common.HttpStatus.FORBIDDEN
+                });
             }
             const result = await this.service.getAll(search ?? '', filterAndPaginationDto, user);
             const data = (0, _classtransformer.plainToInstance)(responseDtoClass, result.data);
@@ -330,7 +394,14 @@ function createApiController(createDtoClass, updateDtoClass, responseDtoClass, o
         }
         async delete(deleteDto, user) {
             if (!this.isEnabled('delete')) {
-                throw new _exceptions.ForbiddenException(`Endpoint 'delete' is disabled`);
+                throw new _exceptions.BaseAppException({
+                    message: `Endpoint 'delete' is disabled`,
+                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
+                    messageVariables: {
+                        endpoint: 'delete'
+                    },
+                    status: _common.HttpStatus.FORBIDDEN
+                });
             }
             await this.service.delete(deleteDto, user);
             const count = Array.isArray(deleteDto.id) ? deleteDto.id.length : 1;

package/cjs/classes/api-service.class.js

@@ -125,7 +125,7 @@ let ApiService = class ApiService {
             const result = this.convertEntityListToResponseListDto(output, isRaw);
             if (!result || !result.length) throw new _common.NotFoundException({
                 message: 'No Data Found',
-                messageKey: _constants.SYSTEM_MESSAGES.NOT_FOUND
+                messageKey: _constants.ERROR_MESSAGES.NOT_FOUND
             });
             return result;
         } catch (error) {
@@ -159,7 +159,7 @@ let ApiService = class ApiService {
                     output = await finalQuery.getOne();
                     if (!output) throw new _common.NotFoundException({
                         message: 'No Data Found',
-                        messageKey: _constants.SYSTEM_MESSAGES.NOT_FOUND
+                        messageKey: _constants.ERROR_MESSAGES.NOT_FOUND
                     });
                     result = this.convertEntityToResponseDto(output, false);
                 }
@@ -249,18 +249,20 @@ let ApiService = class ApiService {
           `;
                 const parameters = rawSubQuery.getParameters();
                 const orderedValues = [];
+                const isPostgres = this.repository.manager.connection.options.type === 'postgres';
+                let paramIndex = 0;
                 const convertedQuery = countSql.replace(/:(\w+)/g, (_, key)=>{
                     if (!(key in parameters)) {
                         throw new _common.InternalServerErrorException({
                             message: `Missing parameter value for: ${key}`,
                             messageKey: _constants.SYSTEM_MESSAGES.MISSING_PARAMETER,
-                            messageParams: {
+                            messageVariables: {
                                 key
                             }
                         });
                     }
                     orderedValues.push(parameters[key]);
-                    return '?';
+                    return isPostgres ? `$${++paramIndex}` : '?';
                 });
                 const result = await this.repository.query(convertedQuery, orderedValues);
                 total = Number(result[0]?.count || 0);
@@ -337,7 +339,7 @@ let ApiService = class ApiService {
         }
         throw new _common.InternalServerErrorException({
             message: typeof error === 'string' ? error : 'Unknown error',
-            messageKey: _constants.SYSTEM_MESSAGES.INTERNAL_ERROR
+            messageKey: _constants.ERROR_MESSAGES.INTERNAL
         });
     }
     /** Ensures value is always an array */ ensureArray(value) {
@@ -437,7 +439,7 @@ let ApiService = class ApiService {
             });
             if (!existing) throw new _common.NotFoundException({
                 message: 'No such entity data found for update! Please, Try Again.',
-                messageKey: _constants.SYSTEM_MESSAGES.NOT_FOUND
+                messageKey: _constants.ERROR_MESSAGES.NOT_FOUND
             });
             return Object.assign(existing, d);
         }

package/cjs/classes/index.js

@@ -6,7 +6,6 @@ _export_star(require("./api-controller.class"), exports);
 _export_star(require("./api-service.class"), exports);
 _export_star(require("./request-scoped-api.service"), exports);
 _export_star(require("./hybrid-cache.class"), exports);
-_export_star(require("./winston-logger-adapter.class"), exports);
 _export_star(require("./winston.logger.class"), exports);
 _export_star(require("../constants/permissions"), exports);
 function _export_star(from, to) {

package/cjs/constants/index.js

@@ -25,9 +25,6 @@ _export(exports, {
     get IS_PUBLIC_KEY () {
         return IS_PUBLIC_KEY;
     },
-    get LOGGER_INSTANCE () {
-        return LOGGER_INSTANCE;
-    },
     get PERMISSIONS_CACHE_PREFIX () {
         return PERMISSIONS_CACHE_PREFIX;
     },
@@ -60,7 +57,6 @@ const IS_PUBLIC_KEY = 'isPublic';
 const PERMISSIONS_KEY = 'permissions';
 const CACHE_INSTANCE = 'CACHE_INSTANCE';
 const PERMISSION_GUARD_CONFIG = 'PERMISSION_GUARD_CONFIG';
-const LOGGER_INSTANCE = 'LOGGER_INSTANCE';
 const IDEMPOTENCY_KEY_HEADER = 'x-idempotency-key';
 const REQUEST_ID_HEADER = 'x-request-id';
 const CLIENT_TYPE_HEADER = 'x-client-type';

package/cjs/constants/message-keys.js

@@ -1,13 +1,3 @@
-// ==================== SHARED/SYSTEM MESSAGE KEYS ====================
-// Package-specific messages are now in their respective packages:
-// - nestjs-auth/src/config/message-keys.ts
-// - nestjs-iam/src/config/message-keys.ts
-// - nestjs-storage/src/config/message-keys.ts
-// - nestjs-email/src/config/message-keys.ts
-// - nestjs-form-builder/src/config/message-keys.ts
-// - nestjs-event-manager/src/config/message-keys.ts
-// - nestjs-notification/src/config/message-keys.ts
-// - nestjs-localization/src/config/message-keys.ts
 // ==================== AUTH (Shared across guards/interceptors) ====================
 // These are duplicated in nestjs-auth but needed here to avoid circular dependencies
 "use strict";
@@ -27,9 +17,6 @@ _export(exports, {
     get ERROR_MESSAGES () {
         return ERROR_MESSAGES;
     },
-    get MESSAGE_KEYS () {
-        return MESSAGE_KEYS;
-    },
     get SYSTEM_MESSAGES () {
         return SYSTEM_MESSAGES;
     }
@@ -37,7 +24,7 @@ _export(exports, {
 const AUTH_MESSAGES = {
     TOKEN_REQUIRED: 'auth.token.required',
     TOKEN_INVALID: 'auth.token.invalid',
-    TOKEN_EXPIRED: 'auth.token.expired',
+    ENTITY_BELOG_ANOTHER_COMPANY: 'entity.belongs.another.company',
     COMPANY_NO_ACCESS: 'auth.company.no.access'
 };
 const ERROR_MESSAGES = {
@@ -54,7 +41,8 @@ const ERROR_MESSAGES = {
     PERMISSION_SYSTEM_UNAVAILABLE: 'error.permission.system.unavailable',
     INSUFFICIENT_PERMISSIONS: 'error.insufficient.permissions',
     INSUFFICIENT_PERMISSIONS_OR: 'error.insufficient.permissions.or',
-    NO_PERMISSIONS_FOUND: 'error.no.permissions.found'
+    NO_PERMISSIONS_FOUND: 'error.no.permissions.found',
+    ENDPOINT_DISABLED: 'error.endpoint.disabled'
 };
 const SYSTEM_MESSAGES = {
     REPOSITORY_NOT_AVAILABLE: 'system.repository.not.available',
@@ -63,7 +51,6 @@ const SYSTEM_MESSAGES = {
     SERVICE_NOT_AVAILABLE: 'system.service.not.available',
     CONFIG_REQUIRED: 'system.config.required',
     INTERNAL_ERROR: 'system.internal.error',
-    NOT_FOUND: 'system.not.found',
     DUPLICATE_REQUEST: 'system.duplicate.request',
     INVALID_TENANT_ID: 'system.invalid.tenant.id',
     TENANT_NOT_FOUND: 'system.tenant.not.found',
@@ -73,8 +60,3 @@ const SYSTEM_MESSAGES = {
     PATH_TRAVERSAL_DETECTED: 'system.path.traversal.detected',
     INVALID_FILE_KEY: 'system.invalid.file.key'
 };
-const MESSAGE_KEYS = {
-    AUTH: AUTH_MESSAGES,
-    ERROR: ERROR_MESSAGES,
-    SYSTEM: SYSTEM_MESSAGES
-};

package/cjs/constants/permissions.js

@@ -28,9 +28,6 @@ _export(exports, {
     get EMAIL_TEMPLATE_PERMISSIONS () {
         return EMAIL_TEMPLATE_PERMISSIONS;
     },
-    get EVENT_PARTICIPANT_PERMISSIONS () {
-        return EVENT_PARTICIPANT_PERMISSIONS;
-    },
     get EVENT_PERMISSIONS () {
         return EVENT_PERMISSIONS;
     },
@@ -174,12 +171,6 @@ const EVENT_PERMISSIONS = {
     UPDATE: 'event.update',
     DELETE: 'event.delete'
 };
-const EVENT_PARTICIPANT_PERMISSIONS = {
-    CREATE: 'event-participant.create',
-    READ: 'event-participant.read',
-    UPDATE: 'event-participant.update',
-    DELETE: 'event-participant.delete'
-};
 const NOTIFICATION_PERMISSIONS = {
     CREATE: 'notification.create',
     READ: 'notification.read',
@@ -228,7 +219,6 @@ const PERMISSIONS = {
     FORM_RESULT: FORM_RESULT_PERMISSIONS,
     // Event Manager
     EVENT: EVENT_PERMISSIONS,
-    EVENT_PARTICIPANT: EVENT_PARTICIPANT_PERMISSIONS,
     // Notification
     NOTIFICATION: NOTIFICATION_PERMISSIONS,
     // Localization

package/cjs/decorators/api-response.decorator.js

@@ -12,10 +12,9 @@ const _dtos = require("../dtos");
 const _common = require("@nestjs/common");
 const _swagger = require("@nestjs/swagger");
 const ApiResponseDto = (dto, isArray = false, arrayType = 'list')=>{
-    // Select appropriate wrapper based on response type
     let wrapperDto;
     let metaDto = null;
-    if (!isArray) {
+    if (!isArray || arrayType === 'single') {
         wrapperDto = _dtos.SingleResponseDto;
     } else if (arrayType === 'bulk') {
         wrapperDto = _dtos.BulkResponseDto;

package/cjs/decorators/index.js

@@ -7,7 +7,6 @@ _export_star(require("./current-user.decorator"), exports);
 _export_star(require("./log-action.decorator"), exports);
 _export_star(require("./public.decorator"), exports);
 _export_star(require("./require-permission.decorator"), exports);
-_export_star(require("./sanitize-html.decorator"), exports);
 function _export_star(from, to) {
     Object.keys(from).forEach(function(k) {
         if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {

package/cjs/decorators/require-permission.decorator.js

@@ -15,9 +15,6 @@ _export(exports, {
     get RequirePermission () {
         return RequirePermission;
     },
-    get RequirePermissionCondition () {
-        return RequirePermissionCondition;
-    },
     get RequirePermissionLogic () {
         return RequirePermissionLogic;
     }
@@ -33,4 +30,3 @@ const RequireAnyPermission = (...permissions)=>(0, _common.SetMetadata)(_constan
         operator: 'OR'
     });
 const RequirePermissionLogic = (logic)=>(0, _common.SetMetadata)(_constants.PERMISSIONS_KEY, logic);
-const RequirePermissionCondition = RequirePermissionLogic;

package/cjs/exceptions/base-app.exception.js

@@ -56,11 +56,11 @@ let BaseAppException = class BaseAppException extends _common.HttpException {
             success: false,
             message: options.message,
             messageKey: options.messageKey || _messagekeys.ERROR_MESSAGES.GENERIC,
-            messageParams: options.messageParams,
+            messageVariables: options.messageVariables,
             errors: options.errors
-        }, status), _define_property(this, "messageKey", void 0), _define_property(this, "messageParams", void 0), _define_property(this, "errors", void 0), _define_property(this, "metadata", void 0);
+        }, status), _define_property(this, "messageKey", void 0), _define_property(this, "messageVariables", void 0), _define_property(this, "errors", void 0), _define_property(this, "metadata", void 0);
         this.messageKey = options.messageKey || _messagekeys.ERROR_MESSAGES.GENERIC;
-        this.messageParams = options.messageParams;
+        this.messageVariables = options.messageVariables;
         this.errors = options.errors;
         this.metadata = options.metadata;
     }
@@ -133,7 +133,7 @@ let ServiceUnavailableException = class ServiceUnavailableException extends Base
         super({
             message: `${service} is temporarily unavailable`,
             messageKey: _messagekeys.ERROR_MESSAGES.SERVICE_UNAVAILABLE,
-            messageParams: {
+            messageVariables: {
                 service
             },
             status: _common.HttpStatus.SERVICE_UNAVAILABLE,

package/cjs/exceptions/permission.exception.js

@@ -37,7 +37,7 @@ let InsufficientPermissionsException = class InsufficientPermissionsException ex
             success: false,
             message: 'Insufficient permissions',
             messageKey,
-            messageParams: {
+            messageVariables: {
                 permissions: missingPermissions.join(', ')
             },
             missingPermissions,

package/cjs/filters/global-exception.filter.js

@@ -71,7 +71,7 @@ let GlobalExceptionFilter = class GlobalExceptionFilter {
                 success: false,
                 message: exception.message,
                 messageKey: exception.messageKey,
-                messageParams: exception.messageParams,
+                messageVariables: exception.messageVariables,
                 errors: exception.errors,
                 _meta: {
                     requestId,
@@ -82,12 +82,12 @@ let GlobalExceptionFilter = class GlobalExceptionFilter {
         }
         if (exception instanceof _common.HttpException) {
             const response = exception.getResponse();
-            const { message, messageKey, messageParams, errors } = this.extractHttpExceptionDetails(response);
+            const { message, messageKey, messageVariables, errors } = this.extractHttpExceptionDetails(response);
             return {
                 success: false,
                 message,
                 messageKey,
-                messageParams,
+                messageVariables,
                 errors,
                 _meta: {
                     requestId,
@@ -134,7 +134,7 @@ let GlobalExceptionFilter = class GlobalExceptionFilter {
             return {
                 message: String(obj.message || 'Unknown error'),
                 messageKey: String(obj.messageKey || _messagekeys.ERROR_MESSAGES.HTTP),
-                messageParams: obj.messageParams,
+                messageVariables: obj.messageVariables,
                 errors: obj.errors
             };
         }

package/cjs/interfaces/index.js

@@ -7,7 +7,6 @@ _export_star(require("./datasource.interface"), exports);
 _export_star(require("./event-manager-adapter.interface"), exports);
 _export_star(require("./identity.interface"), exports);
 _export_star(require("./logged-user-info.interface"), exports);
-_export_star(require("./logger.interface"), exports);
 _export_star(require("./module-config.interface"), exports);
 _export_star(require("./notification-adapter.interface"), exports);
 _export_star(require("./permission.interface"), exports);

package/cjs/modules/datasource/multi-tenant-datasource.service.js

@@ -98,7 +98,7 @@ let MultiTenantDataSourceService = class MultiTenantDataSourceService {
             throw new _common.BadRequestException({
                 message: `Tenant '${tenantId}' not found`,
                 messageKey: _constants.SYSTEM_MESSAGES.TENANT_NOT_FOUND,
-                messageParams: {
+                messageVariables: {
                     tenantId
                 }
             });
@@ -193,7 +193,7 @@ let MultiTenantDataSourceService = class MultiTenantDataSourceService {
             throw new _common.BadRequestException({
                 message: `Tenant not found. Ensure '${this.tenantHeader}' header is set.`,
                 messageKey: _constants.SYSTEM_MESSAGES.TENANT_HEADER_REQUIRED,
-                messageParams: {
+                messageVariables: {
                     header: this.tenantHeader
                 }
             });

package/cjs/utils/date-time.util.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: Object.getOwnPropertyDescriptor(all, name).get
+    });
+}
+_export(exports, {
+    get formatInTimezone () {
+        return formatInTimezone;
+    },
+    get getTodayInTimezone () {
+        return getTodayInTimezone;
+    },
+    get localToUtc () {
+        return localToUtc;
+    },
+    get utcToLocal () {
+        return utcToLocal;
+    }
+});
+function getOffsetMinutes(utcDate, timezone) {
+    const extract = (tz)=>{
+        const parts = new Intl.DateTimeFormat('en-US', {
+            timeZone: tz,
+            year: 'numeric',
+            month: '2-digit',
+            day: '2-digit',
+            hour: '2-digit',
+            minute: '2-digit',
+            second: '2-digit',
+            hour12: false
+        }).formatToParts(utcDate);
+        const p = Object.fromEntries(parts.filter((x)=>x.type !== 'literal').map((x)=>[
+                x.type,
+                parseInt(x.value)
+            ]));
+        return Date.UTC(p['year'], p['month'] - 1, p['day'], p['hour'], p['minute'], p['second']);
+    };
+    return (extract(timezone) - extract('UTC')) / 60_000;
+}
+function localToUtc(dateStr, timeStr, timezone) {
+    const [year, month, day] = dateStr.split('-').map(Number);
+    const [hours, minutes] = timeStr.split(':').map(Number);
+    const approx = new Date(Date.UTC(year, month - 1, day, hours, minutes, 0));
+    const offset = getOffsetMinutes(approx, timezone);
+    const utcDate = new Date(approx.getTime() - offset * 60_000);
+    // DST boundary guard: re-check offset after adjustment
+    const finalOffset = getOffsetMinutes(utcDate, timezone);
+    return finalOffset !== offset ? new Date(approx.getTime() - finalOffset * 60_000) : utcDate;
+}
+function utcToLocal(utcDate, timezone) {
+    const d = typeof utcDate === 'string' ? new Date(utcDate) : utcDate;
+    const parts = new Intl.DateTimeFormat('en-CA', {
+        timeZone: timezone,
+        year: 'numeric',
+        month: '2-digit',
+        day: '2-digit',
+        hour: '2-digit',
+        minute: '2-digit',
+        hour12: false
+    }).formatToParts(d);
+    const p = Object.fromEntries(parts.filter((x)=>x.type !== 'literal').map((x)=>[
+            x.type,
+            x.value
+        ]));
+    // en-CA formats midnight hour as '24' — normalize to '00'
+    const hour = p['hour'] === '24' ? '00' : p['hour'];
+    return {
+        date: `${p['year']}-${p['month']}-${p['day']}`,
+        time: `${hour}:${p['minute']}`,
+        display: new Intl.DateTimeFormat('en-US', {
+            timeZone: timezone,
+            dateStyle: 'medium',
+            timeStyle: 'short'
+        }).format(d)
+    };
+}
+function formatInTimezone(utcDate, timezone, options = {
+    dateStyle: 'medium',
+    timeStyle: 'short'
+}) {
+    const d = typeof utcDate === 'string' ? new Date(utcDate) : utcDate;
+    return new Intl.DateTimeFormat('en-US', {
+        ...options,
+        timeZone: timezone
+    }).format(d);
+}
+function getTodayInTimezone(timezone) {
+    return utcToLocal(new Date(), timezone).date;
+}

package/cjs/utils/index.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
+_export_star(require("./date-time.util"), exports);
 _export_star(require("./html-sanitizer.util"), exports);
 _export_star(require("./query-helpers.util"), exports);
 _export_star(require("./request.util"), exports);

package/cjs/utils/query-helpers.util.js

@@ -50,8 +50,8 @@ function validateCompanyOwnership(entity, user, isCompanyFeatureEnabled, entityN
         if (entity.companyId && entity.companyId !== user.companyId) {
             throw new _common.BadRequestException({
                 message: `${entityName} belongs to another company`,
-                messageKey: _constants.AUTH_MESSAGES.COMPANY_NO_ACCESS,
-                messageParams: {
+                messageKey: _constants.AUTH_MESSAGES.ENTITY_BELOG_ANOTHER_COMPANY,
+                messageVariables: {
                     entity: entityName
                 }
             });

package/cjs/utils/request.util.js

@@ -12,6 +12,12 @@ _export(exports, {
     get buildCookieOptions () {
         return buildCookieOptions;
     },
+    get buildFrontendUrl () {
+        return buildFrontendUrl;
+    },
+    get extractFrontendUrl () {
+        return extractFrontendUrl;
+    },
     get isBrowserRequest () {
         return isBrowserRequest;
     },
@@ -69,3 +75,22 @@ function parseDurationToMs(duration, defaultMs = TIME_UNIT_MS.w) {
     const unit = match[2];
     return value * (TIME_UNIT_MS[unit] ?? TIME_UNIT_MS.d);
 }
+function extractFrontendUrl(req) {
+    const allowedOrigins = _config.envConfig.getOrigins();
+    const origin = (req.get('origin') ?? req.get('referer') ?? '').trim();
+    if (origin && allowedOrigins.length) {
+        const matched = allowedOrigins.find((u)=>origin.startsWith(u));
+        if (matched) {
+            return matched;
+        }
+    }
+    const host = req.get('host');
+    if (!host) {
+        throw new Error('Unable to determine frontend URL from request');
+    }
+    return `${req.protocol}://${host}`;
+}
+function buildFrontendUrl(req, path) {
+    const baseUrl = extractFrontendUrl(req);
+    return `${baseUrl}${path}`;
+}

package/classes/index.d.ts

@@ -2,6 +2,5 @@ export * from './api-controller.class';
 export * from './api-service.class';
 export * from './request-scoped-api.service';
 export * from './hybrid-cache.class';
-export * from './winston-logger-adapter.class';
 export * from './winston.logger.class';
 export * from '../constants/permissions';

package/constants/index.d.ts

@@ -2,7 +2,6 @@ export declare const IS_PUBLIC_KEY = "isPublic";
 export declare const PERMISSIONS_KEY = "permissions";
 export declare const CACHE_INSTANCE = "CACHE_INSTANCE";
 export declare const PERMISSION_GUARD_CONFIG = "PERMISSION_GUARD_CONFIG";
-export declare const LOGGER_INSTANCE = "LOGGER_INSTANCE";
 export declare const IDEMPOTENCY_KEY_HEADER = "x-idempotency-key";
 export declare const REQUEST_ID_HEADER = "x-request-id";
 export declare const CLIENT_TYPE_HEADER = "x-client-type";