@flusys/nestjs-shared 7.1.0 → 8.0.0-beta.1

package/cjs/classes/api-controller.class.js

@@ -1,728 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "createApiController", {
-    enumerable: true,
-    get: function() {
-        return createApiController;
-    }
-});
-const _common = require("@nestjs/common");
-const _swagger = require("@nestjs/swagger");
-const _classtransformer = require("class-transformer");
-const _messagekeys = require("../constants/message-keys");
-const _decorators = require("../decorators");
-const _apiresponsedecorator = require("../decorators/api-response.decorator");
-const _dtos = require("../dtos");
-const _exceptions = require("../exceptions");
-const _guards = require("../guards");
-const _interceptors = require("../interceptors");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-/**
- * Helper to normalize security config
- */ function normalizeSecurity(config) {
-    if (!config) return {
-        level: 'public'
-    };
-    if (typeof config === 'string') return {
-        level: config
-    };
-    return config;
-}
-/**
- * Helper to check if endpoint is enabled
- */ function isEndpointEnabled(endpoint, enabledEndpoints) {
-    if (!enabledEndpoints || enabledEndpoints === 'all') return true;
-    return enabledEndpoints.includes(endpoint);
-}
-/**
- * Helper to conditionally exclude endpoint from Swagger if disabled
- */ function createEndpointDecorators(security, endpoint, enabledEndpoints) {
-    const decorators = [];
-    // Add security decorators
-    decorators.push(createSecurityDecorators(security));
-    // Exclude from Swagger if endpoint is disabled
-    if (!isEndpointEnabled(endpoint, enabledEndpoints)) {
-        decorators.push((0, _swagger.ApiExcludeEndpoint)());
-    }
-    return (0, _common.applyDecorators)(...decorators);
-}
-/**
- * Creates security decorators based on configuration
- */ function createSecurityDecorators(security) {
-    const decorators = [];
-    switch(security.level){
-        case 'public':
-            decorators.push((0, _decorators.Public)());
-            break;
-        case 'jwt':
-            // Apply JWT authentication guard
-            decorators.push((0, _common.UseGuards)(_guards.JwtAuthGuard));
-            decorators.push((0, _swagger.ApiBearerAuth)());
-            break;
-        case 'permission':
-            // Apply JWT authentication guard (required for permission checks)
-            // Apply PermissionGuard to check permissions from cache
-            decorators.push((0, _common.UseGuards)(_guards.JwtAuthGuard, _guards.PermissionGuard));
-            decorators.push((0, _swagger.ApiBearerAuth)());
-            // Check for complex logic first
-            if (security.logic) {
-                decorators.push((0, _decorators.RequirePermissionLogic)(security.logic));
-            } else if (security.permissions && security.permissions.length > 0) {
-                if (security.operator === 'OR') {
-                    decorators.push((0, _decorators.RequireAnyPermission)(...security.permissions));
-                } else {
-                    // AND is default and most secure
-                    decorators.push((0, _decorators.RequirePermission)(...security.permissions));
-                }
-            }
-            break;
-    }
-    return (0, _common.applyDecorators)(...decorators);
-}
-function createApiController(createDtoClass, updateDtoClass, responseDtoClass, options = {}) {
-    const excludeExtraneousValues = options.excludeExtraneousValues ?? true;
-    function toDto(cls, input) {
-        return (0, _classtransformer.plainToInstance)(cls, input, {
-            excludeExtraneousValues
-        });
-    }
-    // Entity name for message keys (defaults to 'item')
-    const entityName = options.entityName ?? 'item';
-    // Determine if security is global (applies to all) or per-endpoint
-    const securityConfig = options.security;
-    const endpointKeys = [
-        'insert',
-        'insertMany',
-        'getById',
-        'getByIds',
-        'getAll',
-        'bulkUpsert',
-        'getByFilter',
-        'update',
-        'updateMany',
-        'delete'
-    ];
-    // Global security if:
-    // 1. It's a string (SecurityLevel)
-    // 2. It's an object with 'level' property but no endpoint keys
-    const isGlobalSecurity = typeof securityConfig === 'string' || securityConfig && typeof securityConfig === 'object' && 'level' in securityConfig && !endpointKeys.some((key)=>key in securityConfig);
-    // Normalize security config for each endpoint
-    // IMPORTANT: When per-endpoint security is specified, default to 'jwt' for unconfigured endpoints
-    // to prevent accidentally exposing endpoints without authentication
-    const defaultSecurity = isGlobalSecurity ? normalizeSecurity(securityConfig) : {
-        level: 'jwt'
-    };
-    const security = {
-        insert: isGlobalSecurity ? defaultSecurity : normalizeSecurity(securityConfig?.insert),
-        insertMany: isGlobalSecurity ? defaultSecurity : normalizeSecurity(securityConfig?.insertMany),
-        getById: isGlobalSecurity ? defaultSecurity : normalizeSecurity(securityConfig?.getById),
-        getByIds: isGlobalSecurity ? defaultSecurity : normalizeSecurity(securityConfig?.getByIds),
-        getAll: isGlobalSecurity ? defaultSecurity : normalizeSecurity(securityConfig?.getAll),
-        getByFilter: isGlobalSecurity ? defaultSecurity : normalizeSecurity(securityConfig?.getByFilter),
-        bulkUpsert: isGlobalSecurity ? defaultSecurity : normalizeSecurity(securityConfig?.bulkUpsert),
-        update: isGlobalSecurity ? defaultSecurity : normalizeSecurity(securityConfig?.update),
-        updateMany: isGlobalSecurity ? defaultSecurity : normalizeSecurity(securityConfig?.updateMany),
-        delete: isGlobalSecurity ? defaultSecurity : normalizeSecurity(securityConfig?.delete)
-    };
-    let ApiController = class ApiController {
-        isEnabled(endpoint) {
-            if (this.enabledEndpoints === 'all') return true;
-            return Array.isArray(this.enabledEndpoints) && this.enabledEndpoints.includes(endpoint);
-        }
-        async insert(addDto, user) {
-            if (!this.isEnabled('insert')) {
-                throw new _exceptions.BaseAppException({
-                    message: `Endpoint 'insert' is disabled`,
-                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
-                    messageVariables: {
-                        endpoint: 'insert'
-                    },
-                    status: _common.HttpStatus.FORBIDDEN
-                });
-            }
-            const entity = await this.service.insert(addDto, user);
-            const data = toDto(responseDtoClass, entity);
-            return {
-                success: true,
-                message: `${entityName.charAt(0).toUpperCase() + entityName.slice(1)} created successfully`,
-                messageKey: `${entityName}.create.success`,
-                data
-            };
-        }
-        async insertMany(addDto, user) {
-            if (!this.isEnabled('insertMany')) {
-                throw new _exceptions.BaseAppException({
-                    message: `Endpoint 'insertMany' is disabled`,
-                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
-                    messageVariables: {
-                        endpoint: 'insertMany'
-                    },
-                    status: _common.HttpStatus.FORBIDDEN
-                });
-            }
-            const entities = await this.service.insertMany(addDto, user);
-            const data = entities.map((item)=>toDto(responseDtoClass, item));
-            return {
-                success: true,
-                message: `${data.length} ${entityName}s created successfully`,
-                messageKey: `${entityName}.create.many.success`,
-                messageVariables: {
-                    count: data.length
-                },
-                data,
-                meta: {
-                    count: data.length,
-                    total: addDto.length,
-                    failed: addDto.length - data.length
-                }
-            };
-        }
-        async getById(id, body, user) {
-            if (!this.isEnabled('getById')) {
-                throw new _exceptions.BaseAppException({
-                    message: `Endpoint 'getById' is disabled`,
-                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
-                    messageVariables: {
-                        endpoint: 'getById'
-                    },
-                    status: _common.HttpStatus.FORBIDDEN
-                });
-            }
-            const entity = await this.service.findById(id, user, body?.select);
-            const data = toDto(responseDtoClass, entity);
-            return {
-                success: true,
-                message: `${entityName.charAt(0).toUpperCase() + entityName.slice(1)} retrieved successfully`,
-                messageKey: `${entityName}.get.success`,
-                data
-            };
-        }
-        async getByIds(body, user) {
-            if (!this.isEnabled('getByIds')) {
-                throw new _exceptions.BaseAppException({
-                    message: `Endpoint 'getByIds' is disabled`,
-                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
-                    messageVariables: {
-                        endpoint: 'getByIds'
-                    },
-                    status: _common.HttpStatus.FORBIDDEN
-                });
-            }
-            const entities = await this.service.findByIds(body.ids, user, body?.select);
-            const data = entities.map((item)=>toDto(responseDtoClass, item));
-            return {
-                success: true,
-                message: `${data.length} ${entityName}${data.length !== 1 ? 's' : ''} retrieved successfully`,
-                messageKey: `${entityName}.get.by.ids.success`,
-                data,
-                meta: {
-                    total: data.length,
-                    page: 0,
-                    pageSize: data.length,
-                    count: data.length,
-                    totalPages: 1
-                }
-            };
-        }
-        async update(updateDto, user) {
-            if (!this.isEnabled('update')) {
-                throw new _exceptions.BaseAppException({
-                    message: `Endpoint 'update' is disabled`,
-                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
-                    messageVariables: {
-                        endpoint: 'update'
-                    },
-                    status: _common.HttpStatus.FORBIDDEN
-                });
-            }
-            const entity = await this.service.update(updateDto, user);
-            const data = toDto(responseDtoClass, entity);
-            return {
-                success: true,
-                message: `${entityName.charAt(0).toUpperCase() + entityName.slice(1)} updated successfully`,
-                messageKey: `${entityName}.update.success`,
-                data
-            };
-        }
-        async updateMany(updateDtos, user) {
-            if (!this.isEnabled('updateMany')) {
-                throw new _exceptions.BaseAppException({
-                    message: `Endpoint 'updateMany' is disabled`,
-                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
-                    messageVariables: {
-                        endpoint: 'updateMany'
-                    },
-                    status: _common.HttpStatus.FORBIDDEN
-                });
-            }
-            const entities = await this.service.updateMany(updateDtos, user);
-            const data = entities.map((item)=>toDto(responseDtoClass, item));
-            return {
-                success: true,
-                message: `${data.length} ${entityName}s updated successfully`,
-                messageKey: `${entityName}.update.many.success`,
-                messageVariables: {
-                    count: data.length
-                },
-                data,
-                meta: {
-                    count: data.length,
-                    total: updateDtos.length,
-                    failed: updateDtos.length - data.length
-                }
-            };
-        }
-        async bulkUpsert(dtos, user) {
-            if (!this.isEnabled('bulkUpsert')) {
-                throw new _exceptions.BaseAppException({
-                    message: `Endpoint 'bulkUpsert' is disabled`,
-                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
-                    messageVariables: {
-                        endpoint: 'bulkUpsert'
-                    },
-                    status: _common.HttpStatus.FORBIDDEN
-                });
-            }
-            const toInsert = [];
-            const toUpdate = [];
-            for (const dto of dtos){
-                if ('id' in dto && dto.id) {
-                    toUpdate.push(dto);
-                } else {
-                    toInsert.push(dto);
-                }
-            }
-            const allEntities = await this.service.bulkUpsert(toInsert, toUpdate, user);
-            const data = allEntities.map((item)=>toDto(responseDtoClass, item));
-            return {
-                success: true,
-                message: `${data.length} ${entityName}s upserted successfully`,
-                messageKey: `${entityName}.upsert.many.success`,
-                messageVariables: {
-                    count: data.length
-                },
-                data,
-                meta: {
-                    count: data.length,
-                    total: dtos.length,
-                    failed: dtos.length - data.length
-                }
-            };
-        }
-        async getByFilter(filter, user) {
-            if (!this.isEnabled('getByFilter')) {
-                throw new _exceptions.BaseAppException({
-                    message: `Endpoint 'getByFilter' is disabled`,
-                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
-                    messageVariables: {
-                        endpoint: 'getByFilter'
-                    },
-                    status: _common.HttpStatus.FORBIDDEN
-                });
-            }
-            const result = await this.service.getAll('', {
-                filter,
-                pagination: {
-                    currentPage: 0,
-                    pageSize: 1
-                }
-            }, user);
-            if (!result.data || result.data.length === 0) {
-                throw new _exceptions.NotFoundException(entityName);
-            }
-            const entity = result.data[0];
-            const data = toDto(responseDtoClass, entity);
-            return {
-                success: true,
-                message: `${entityName.charAt(0).toUpperCase() + entityName.slice(1)} retrieved successfully`,
-                messageKey: `${entityName}.get.by.filter.success`,
-                data
-            };
-        }
-        async getAll(filterAndPaginationDto, user, search) {
-            if (!this.isEnabled('getAll')) {
-                throw new _exceptions.BaseAppException({
-                    message: `Endpoint 'getAll' is disabled`,
-                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
-                    messageVariables: {
-                        endpoint: 'getAll'
-                    },
-                    status: _common.HttpStatus.FORBIDDEN
-                });
-            }
-            const result = await this.service.getAll(search ?? '', filterAndPaginationDto, user);
-            const data = result.data.map((item)=>toDto(responseDtoClass, item));
-            const page = filterAndPaginationDto.pagination?.currentPage ?? 0;
-            const pageSize = filterAndPaginationDto.pagination?.pageSize ?? data.length;
-            const totalPages = pageSize > 0 ? Math.ceil(result.total / pageSize) : 1;
-            return {
-                success: true,
-                message: `${entityName.charAt(0).toUpperCase() + entityName.slice(1)}s retrieved successfully`,
-                messageKey: `${entityName}.get.all.success`,
-                data,
-                meta: {
-                    total: result.total,
-                    page,
-                    pageSize,
-                    count: data.length,
-                    hasMore: page < totalPages - 1,
-                    totalPages
-                }
-            };
-        }
-        async delete(deleteDto, user) {
-            if (!this.isEnabled('delete')) {
-                throw new _exceptions.BaseAppException({
-                    message: `Endpoint 'delete' is disabled`,
-                    messageKey: _messagekeys.ERROR_MESSAGES.ENDPOINT_DISABLED,
-                    messageVariables: {
-                        endpoint: 'delete'
-                    },
-                    status: _common.HttpStatus.FORBIDDEN
-                });
-            }
-            await this.service.delete(deleteDto, user);
-            const count = Array.isArray(deleteDto.id) ? deleteDto.id.length : 1;
-            const action = deleteDto.type === 'restore' ? 'restore' : 'delete';
-            return {
-                success: true,
-                message: `${count} ${entityName}${count > 1 ? 's' : ''} ${action}d successfully`,
-                messageKey: `${entityName}.${action}.success`,
-                messageVariables: {
-                    count
-                }
-            };
-        }
-        constructor(service){
-            _define_property(this, "service", void 0);
-            _define_property(this, "enabledEndpoints", void 0);
-            this.service = service;
-            this.enabledEndpoints = options.enabledEndpoints ?? 'all';
-        }
-    };
-    _ts_decorate([
-        createEndpointDecorators(security.insert, 'insert', options.enabledEndpoints),
-        (0, _common.Version)(_common.VERSION_NEUTRAL),
-        (0, _common.Post)('insert'),
-        (0, _common.HttpCode)(_common.HttpStatus.CREATED),
-        (0, _swagger.ApiOperation)({
-            summary: 'Insert one item',
-            description: 'Creates a new item. Supports idempotency via X-Idempotency-Key header.'
-        }),
-        (0, _swagger.ApiHeader)({
-            name: 'X-Idempotency-Key',
-            required: false,
-            description: 'Unique key to prevent duplicate submissions (recommended for production)'
-        }),
-        (0, _apiresponsedecorator.ApiResponseDto)(responseDtoClass),
-        (0, _swagger.ApiBody)({
-            type: createDtoClass
-        }),
-        (0, _common.UseInterceptors)(_interceptors.IdempotencyInterceptor, _interceptors.SetCreatedByOnBody, _interceptors.Slug),
-        _ts_param(0, (0, _common.Body)()),
-        _ts_param(1, (0, _decorators.CurrentUser)()),
-        _ts_metadata("design:type", Function),
-        _ts_metadata("design:paramtypes", [
-            typeof CreateDtoT === "undefined" ? Object : CreateDtoT,
-            Object
-        ]),
-        _ts_metadata("design:returntype", Promise)
-    ], ApiController.prototype, "insert", null);
-    _ts_decorate([
-        createEndpointDecorators(security.insertMany, 'insertMany', options.enabledEndpoints),
-        (0, _common.Version)(_common.VERSION_NEUTRAL),
-        (0, _common.Post)('insert-many'),
-        (0, _common.HttpCode)(_common.HttpStatus.CREATED),
-        (0, _swagger.ApiOperation)({
-            summary: 'Insert multiple items',
-            description: 'Creates multiple items in a single request. Supports idempotency.'
-        }),
-        (0, _swagger.ApiHeader)({
-            name: 'X-Idempotency-Key',
-            required: false,
-            description: 'Unique key to prevent duplicate submissions'
-        }),
-        (0, _apiresponsedecorator.ApiResponseDto)(responseDtoClass, true, 'bulk'),
-        (0, _swagger.ApiBody)({
-            type: createDtoClass,
-            isArray: true
-        }),
-        (0, _common.UseInterceptors)(_interceptors.IdempotencyInterceptor, _interceptors.SetCreatedByOnBody, _interceptors.Slug),
-        _ts_param(0, (0, _common.Body)()),
-        _ts_param(1, (0, _decorators.CurrentUser)()),
-        _ts_metadata("design:type", Function),
-        _ts_metadata("design:paramtypes", [
-            Array,
-            Object
-        ]),
-        _ts_metadata("design:returntype", Promise)
-    ], ApiController.prototype, "insertMany", null);
-    _ts_decorate([
-        createEndpointDecorators(security.getById, 'getById', options.enabledEndpoints),
-        (0, _common.Version)(_common.VERSION_NEUTRAL),
-        (0, _common.Post)('get/:id'),
-        (0, _common.HttpCode)(_common.HttpStatus.OK),
-        (0, _swagger.ApiOperation)({
-            summary: 'Get item by ID',
-            description: 'Retrieves a single item by ID. Optionally specify fields to select and relations to include.'
-        }),
-        (0, _swagger.ApiParam)({
-            name: 'id',
-            type: String,
-            description: 'UUID of the item'
-        }),
-        (0, _swagger.ApiBody)({
-            type: _dtos.GetByIdBodyDto,
-            required: false
-        }),
-        (0, _apiresponsedecorator.ApiResponseDto)(responseDtoClass),
-        _ts_param(0, (0, _common.Param)('id')),
-        _ts_param(1, (0, _common.Body)()),
-        _ts_param(2, (0, _decorators.CurrentUser)()),
-        _ts_metadata("design:type", Function),
-        _ts_metadata("design:paramtypes", [
-            String,
-            typeof _dtos.GetByIdBodyDto === "undefined" ? Object : _dtos.GetByIdBodyDto,
-            Object
-        ]),
-        _ts_metadata("design:returntype", Promise)
-    ], ApiController.prototype, "getById", null);
-    _ts_decorate([
-        createEndpointDecorators(security.getByIds, 'getByIds', options.enabledEndpoints),
-        (0, _common.Version)(_common.VERSION_NEUTRAL),
-        (0, _common.Post)('get-by-ids'),
-        (0, _common.HttpCode)(_common.HttpStatus.OK),
-        (0, _swagger.ApiOperation)({
-            summary: 'Get items by IDs',
-            description: 'Retrieves multiple items by their IDs. Optionally specify fields to select.'
-        }),
-        (0, _swagger.ApiBody)({
-            type: _dtos.GetByIdsDto
-        }),
-        (0, _apiresponsedecorator.ApiResponseDto)(responseDtoClass, true, 'list'),
-        _ts_param(0, (0, _common.Body)()),
-        _ts_param(1, (0, _decorators.CurrentUser)()),
-        _ts_metadata("design:type", Function),
-        _ts_metadata("design:paramtypes", [
-            typeof _dtos.GetByIdsDto === "undefined" ? Object : _dtos.GetByIdsDto,
-            Object
-        ]),
-        _ts_metadata("design:returntype", Promise)
-    ], ApiController.prototype, "getByIds", null);
-    _ts_decorate([
-        createEndpointDecorators(security.update, 'update', options.enabledEndpoints),
-        (0, _common.Version)(_common.VERSION_NEUTRAL),
-        (0, _common.Post)('update'),
-        (0, _common.HttpCode)(_common.HttpStatus.OK),
-        (0, _swagger.ApiOperation)({
-            summary: 'Update one item',
-            description: 'Updates an existing item. ID must be included in the body.'
-        }),
-        (0, _apiresponsedecorator.ApiResponseDto)(responseDtoClass),
-        (0, _swagger.ApiBody)({
-            type: updateDtoClass
-        }),
-        (0, _common.UseInterceptors)(_interceptors.SetUpdateByOnBody, _interceptors.Slug),
-        _ts_param(0, (0, _common.Body)()),
-        _ts_param(1, (0, _decorators.CurrentUser)()),
-        _ts_metadata("design:type", Function),
-        _ts_metadata("design:paramtypes", [
-            typeof UpdateDtoT === "undefined" ? Object : UpdateDtoT,
-            Object
-        ]),
-        _ts_metadata("design:returntype", Promise)
-    ], ApiController.prototype, "update", null);
-    _ts_decorate([
-        createEndpointDecorators(security.updateMany, 'updateMany', options.enabledEndpoints),
-        (0, _common.Version)(_common.VERSION_NEUTRAL),
-        (0, _common.Post)('update-many'),
-        (0, _common.HttpCode)(_common.HttpStatus.OK),
-        (0, _swagger.ApiOperation)({
-            summary: 'Update multiple items',
-            description: 'Updates multiple items in a single request. Each item must include an ID.'
-        }),
-        (0, _apiresponsedecorator.ApiResponseDto)(responseDtoClass, true, 'bulk'),
-        (0, _swagger.ApiBody)({
-            type: updateDtoClass,
-            isArray: true
-        }),
-        (0, _common.UseInterceptors)(_interceptors.SetUpdateByOnBody, _interceptors.Slug),
-        _ts_param(0, (0, _common.Body)()),
-        _ts_param(1, (0, _decorators.CurrentUser)()),
-        _ts_metadata("design:type", Function),
-        _ts_metadata("design:paramtypes", [
-            Array,
-            Object
-        ]),
-        _ts_metadata("design:returntype", Promise)
-    ], ApiController.prototype, "updateMany", null);
-    _ts_decorate([
-        createEndpointDecorators(security.bulkUpsert, 'bulkUpsert', options.enabledEndpoints),
-        (0, _common.Version)(_common.VERSION_NEUTRAL),
-        (0, _common.Post)('bulk-upsert'),
-        (0, _common.HttpCode)(_common.HttpStatus.OK),
-        (0, _swagger.ApiOperation)({
-            summary: 'Create or update multiple items',
-            description: 'Bulk upsert: items without ID are created, items with ID are updated.'
-        }),
-        (0, _apiresponsedecorator.ApiResponseDto)(responseDtoClass, true, 'bulk'),
-        (0, _swagger.ApiBody)({
-            type: createDtoClass,
-            isArray: true
-        }),
-        (0, _common.UseInterceptors)(_interceptors.SetCreatedByOnBody, _interceptors.SetUpdateByOnBody, _interceptors.Slug),
-        _ts_param(0, (0, _common.Body)()),
-        _ts_param(1, (0, _decorators.CurrentUser)()),
-        _ts_metadata("design:type", Function),
-        _ts_metadata("design:paramtypes", [
-            Array,
-            Object
-        ]),
-        _ts_metadata("design:returntype", Promise)
-    ], ApiController.prototype, "bulkUpsert", null);
-    _ts_decorate([
-        createEndpointDecorators(security.getByFilter, 'getByFilter', options.enabledEndpoints),
-        (0, _common.Version)(_common.VERSION_NEUTRAL),
-        (0, _common.Post)('get-by-filter'),
-        (0, _common.HttpCode)(_common.HttpStatus.OK),
-        (0, _swagger.ApiOperation)({
-            summary: 'Get single item by filter',
-            description: 'Retrieves a single item matching the provided filter criteria. Returns first match if multiple exist.'
-        }),
-        (0, _swagger.ApiBody)({
-            schema: {
-                type: 'object',
-                description: 'Filter criteria'
-            }
-        }),
-        (0, _apiresponsedecorator.ApiResponseDto)(responseDtoClass),
-        _ts_param(0, (0, _common.Body)()),
-        _ts_param(1, (0, _decorators.CurrentUser)()),
-        _ts_metadata("design:type", Function),
-        _ts_metadata("design:paramtypes", [
-            typeof Record === "undefined" ? Object : Record,
-            Object
-        ]),
-        _ts_metadata("design:returntype", Promise)
-    ], ApiController.prototype, "getByFilter", null);
-    _ts_decorate([
-        createEndpointDecorators(security.getAll, 'getAll', options.enabledEndpoints),
-        (0, _common.Version)(_common.VERSION_NEUTRAL),
-        (0, _common.Post)('get-all'),
-        (0, _common.HttpCode)(_common.HttpStatus.OK),
-        (0, _swagger.ApiOperation)({
-            summary: 'Get all items with filters and pagination',
-            description: 'Supports filter, pagination, sort, select, withDeleted, and q (search) params'
-        }),
-        (0, _swagger.ApiQuery)({
-            name: 'q',
-            required: false,
-            description: 'Global text search across searchable fields'
-        }),
-        (0, _swagger.ApiBody)({
-            type: _dtos.FilterAndPaginationDto
-        }),
-        (0, _apiresponsedecorator.ApiResponseDto)(responseDtoClass, true, 'list'),
-        _ts_param(0, (0, _common.Body)()),
-        _ts_param(1, (0, _decorators.CurrentUser)()),
-        _ts_param(2, (0, _common.Query)('q')),
-        _ts_metadata("design:type", Function),
-        _ts_metadata("design:paramtypes", [
-            typeof _dtos.FilterAndPaginationDto === "undefined" ? Object : _dtos.FilterAndPaginationDto,
-            Object,
-            String
-        ]),
-        _ts_metadata("design:returntype", Promise)
-    ], ApiController.prototype, "getAll", null);
-    _ts_decorate([
-        createEndpointDecorators(security.delete, 'delete', options.enabledEndpoints),
-        (0, _common.Version)(_common.VERSION_NEUTRAL),
-        (0, _common.Post)('delete'),
-        (0, _common.HttpCode)(_common.HttpStatus.OK),
-        (0, _swagger.ApiOperation)({
-            summary: 'Delete, restore, or permanently remove items',
-            description: 'Types: delete (soft), restore, permanent. Supports batch IDs.'
-        }),
-        (0, _swagger.ApiResponse)({
-            status: 200,
-            description: 'Operation completed successfully',
-            schema: {
-                example: {
-                    success: true,
-                    message: '3 items deleted successfully'
-                }
-            }
-        }),
-        (0, _swagger.ApiBody)({
-            type: _dtos.DeleteDto,
-            examples: {
-                softDelete: {
-                    summary: 'Soft delete',
-                    value: {
-                        id: [
-                            'uuid-1',
-                            'uuid-2'
-                        ],
-                        type: 'delete'
-                    }
-                },
-                restore: {
-                    summary: 'Restore deleted',
-                    value: {
-                        id: [
-                            'uuid-1'
-                        ],
-                        type: 'restore'
-                    }
-                },
-                permanent: {
-                    summary: 'Permanent delete',
-                    value: {
-                        id: [
-                            'uuid-1'
-                        ],
-                        type: 'permanent'
-                    }
-                }
-            }
-        }),
-        (0, _common.UseInterceptors)(_interceptors.SetDeletedByOnBody),
-        _ts_param(0, (0, _common.Body)()),
-        _ts_param(1, (0, _decorators.CurrentUser)()),
-        _ts_metadata("design:type", Function),
-        _ts_metadata("design:paramtypes", [
-            typeof _dtos.DeleteDto === "undefined" ? Object : _dtos.DeleteDto,
-            Object
-        ]),
-        _ts_metadata("design:returntype", Promise)
-    ], ApiController.prototype, "delete", null);
-    return ApiController;
-}