@flusys/nestjs-shared 8.1.5 → 9.0.0

package/fesm/667.js

@@ -64,8 +64,8 @@ CacheModule = _ts_decorate([
 
 // EXTERNAL MODULE: external "@flusys/nestjs-core"
 var nestjs_core_ = __webpack_require__(436);
-// EXTERNAL MODULE: ./projects/nestjs-shared/src/constants/message-keys.ts
-var message_keys = __webpack_require__(389);
+// EXTERNAL MODULE: ./projects/nestjs-shared/src/middlewares/logger.middleware.ts + 2 modules
+var logger_middleware = __webpack_require__(591);
 // EXTERNAL MODULE: external "@nestjs/core"
 var core_ = __webpack_require__(75);
 // EXTERNAL MODULE: external "typeorm"
@@ -102,6 +102,7 @@ function _ts_param(paramIndex, decorator) {
 
 
 
+
 class MultiTenantDataSourceService {
     options;
     request;
@@ -138,14 +139,17 @@ class MultiTenantDataSourceService {
     isMultiTenant() {
         return this.getDatabaseMode() === 'multi-tenant';
     }
-    getCurrentTenantId() {
-        if (!this.request) return null;
-        const tenantId = this.request.headers[this.tenantHeader];
+    /**
+   * The request's tenant header, else the tenant of the current request context - which is how
+   * work outside an HTTP request (event handlers, providers resolved through ModuleRef) finds
+   * its tenant: LoggerMiddleware and the event bus both run their work inside that context.
+   */ getCurrentTenantId() {
+        const tenantId = this.request?.headers[this.tenantHeader] ?? (0,logger_middleware/* .getTenantId */.EO)();
         if (!tenantId) return null;
         if (!/^[a-zA-Z0-9_-]+$/.test(tenantId)) {
             throw new common_.BadRequestException({
                 message: 'Invalid tenant ID format',
-                messageKey: message_keys/* .SYSTEM_MESSAGES.INVALID_TENANT_ID */.hg.INVALID_TENANT_ID
+                messageKey: constants/* .SYSTEM_MESSAGES.INVALID_TENANT_ID */.hg.INVALID_TENANT_ID
             });
         }
         return tenantId;
@@ -187,7 +191,7 @@ class MultiTenantDataSourceService {
         if (!config) {
             throw new common_.InternalServerErrorException({
                 message: 'No database config available. Provide defaultDatabaseConfig or tenantDefaultDatabaseConfig.',
-                messageKey: message_keys/* .SYSTEM_MESSAGES.DATABASE_CONFIG_NOT_AVAILABLE */.hg.DATABASE_CONFIG_NOT_AVAILABLE
+                messageKey: constants/* .SYSTEM_MESSAGES.DATABASE_CONFIG_NOT_AVAILABLE */.hg.DATABASE_CONFIG_NOT_AVAILABLE
             });
         }
         const connectionPromise = this.createDataSourceFromConfig(config);
@@ -205,7 +209,7 @@ class MultiTenantDataSourceService {
         if (!tenant) {
             throw new common_.BadRequestException({
                 message: `Tenant not found. Ensure '${this.tenantHeader}' header is set.`,
-                messageKey: message_keys/* .SYSTEM_MESSAGES.TENANT_HEADER_REQUIRED */.hg.TENANT_HEADER_REQUIRED,
+                messageKey: constants/* .SYSTEM_MESSAGES.TENANT_HEADER_REQUIRED */.hg.TENANT_HEADER_REQUIRED,
                 messageVariables: {
                     header: this.tenantHeader
                 }
@@ -237,7 +241,7 @@ class MultiTenantDataSourceService {
         if (!defaultConfig) {
             throw new common_.InternalServerErrorException({
                 message: 'No default database config for multi-tenant mode.',
-                messageKey: message_keys/* .SYSTEM_MESSAGES.DATABASE_CONFIG_NOT_AVAILABLE */.hg.DATABASE_CONFIG_NOT_AVAILABLE
+                messageKey: constants/* .SYSTEM_MESSAGES.DATABASE_CONFIG_NOT_AVAILABLE */.hg.DATABASE_CONFIG_NOT_AVAILABLE
             });
         }
         return {
@@ -283,6 +287,8 @@ MultiTenantDataSourceService = multi_tenant_datasource_service_ts_decorate([
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/modules/datasource/index.ts
 
 
+// EXTERNAL MODULE: external "crypto"
+var external_crypto_ = __webpack_require__(823);
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/modules/event-bus/event-bus.explorer.ts
 function event_bus_explorer_ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -310,6 +316,8 @@ function event_bus_explorer_ts_param(paramIndex, decorator) {
 
 
 
+
+
 class EventBusExplorer {
     eventBus;
     discovery;
@@ -358,7 +366,7 @@ class EventBusExplorer {
             if (!patterns.length) continue;
             const handler = method;
             for (const pattern of patterns){
-                await bus.subscribe(pattern, (event)=>handler.call(instance, event));
+                await bus.subscribe(pattern, (event)=>runInEventContext(event, ()=>handler.call(instance, event)));
                 bound++;
             }
         }
@@ -393,6 +401,16 @@ EventBusExplorer = event_bus_explorer_ts_decorate([
         typeof core_.MetadataScanner === "undefined" ? Object : core_.MetadataScanner
     ])
 ], EventBusExplorer);
+function runInEventContext(event, handle) {
+    const actor = event.actor ?? {};
+    return logger_middleware/* .requestContext.run */.V8.run({
+        requestId: actor.requestId ?? (0,external_crypto_.randomUUID)(),
+        tenantId: actor.tenantId ?? undefined,
+        userId: actor.userId ?? undefined,
+        companyId: actor.companyId ?? undefined,
+        startTime: Date.now()
+    }, handle);
+}
 
 // EXTERNAL MODULE: external "@flusys/nestjs-core/config"
 var config_ = __webpack_require__(307);

package/fesm/{67.js → 681.js}

@@ -1,12 +1,13 @@
 import * as __rspack_external__flusys_nestjs_core_ff4ca4e2 from "@flusys/nestjs-core";
 import * as __rspack_external__nestjs_core_d7b00a1a from "@nestjs/core";
+import * as __rspack_external_crypto from "crypto";
 import * as __rspack_external_typeorm from "typeorm";
 import * as __rspack_external__keyv_redis_139d03ca from "@keyv/redis";
 import * as __rspack_external_cacheable from "cacheable";
 import * as __rspack_external_keyv from "keyv";
 import * as __rspack_external_events from "events";
-export const __rspack_esm_id = 67;
-export const __rspack_esm_ids = [67];
+export const __rspack_esm_id = 681;
+export const __rspack_esm_ids = [681];
 export const __webpack_modules__ = {
 864(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 /**
@@ -482,12 +483,61 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 
+},
+374(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(157);
+/* import */ var _constants_message_keys_js__rspack_import_1 = __webpack_require__(389);
+
+
+class PermissionSystemUnavailableException extends _nestjs_common__rspack_import_0.InternalServerErrorException {
+    constructor(){
+        super({
+            success: false,
+            message: 'Permission system temporarily unavailable',
+            messageKey: _constants_message_keys_js__rspack_import_1/* .ERROR_MESSAGES.PERMISSION_SYSTEM_UNAVAILABLE */.UU.PERMISSION_SYSTEM_UNAVAILABLE
+        });
+    }
+}
+class InsufficientPermissionsException extends _nestjs_common__rspack_import_0.ForbiddenException {
+    constructor(missingPermissions, operator = 'AND'){
+        const messageKey = operator === 'OR' ? _constants_message_keys_js__rspack_import_1/* .ERROR_MESSAGES.INSUFFICIENT_PERMISSIONS_OR */.UU.INSUFFICIENT_PERMISSIONS_OR : _constants_message_keys_js__rspack_import_1/* .ERROR_MESSAGES.INSUFFICIENT_PERMISSIONS */.UU.INSUFFICIENT_PERMISSIONS;
+        super({
+            success: false,
+            message: 'Insufficient permissions',
+            messageKey,
+            messageVariables: {
+                permissions: missingPermissions.join(', ')
+            },
+            missingPermissions,
+            operator
+        });
+    }
+}
+class NoPermissionsFoundException extends _nestjs_common__rspack_import_0.ForbiddenException {
+    constructor(){
+        super({
+            success: false,
+            message: 'No permissions found',
+            messageKey: _constants_message_keys_js__rspack_import_1/* .ERROR_MESSAGES.NO_PERMISSIONS_FOUND */.UU.NO_PERMISSIONS_FOUND
+        });
+    }
+}
+
+__webpack_require__.d(__webpack_exports__, {
+  GS: () => (PermissionSystemUnavailableException),
+  d$: () => (NoPermissionsFoundException),
+  z8: () => (InsufficientPermissionsException)
+});
+
+
 },
 657(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 /* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(157);
 /* import */ var _classes_hybrid_cache_class_js__rspack_import_1 = __webpack_require__(375);
-/* import */ var _constants_index_js__rspack_import_3 = __webpack_require__(43);
-/* import */ var _utils_permission_cache_key_util_js__rspack_import_2 = __webpack_require__(199);
+/* import */ var _constants_index_js__rspack_import_2 = __webpack_require__(43);
+/* import */ var _exceptions_permission_exception_js__rspack_import_3 = __webpack_require__(374);
+/* import */ var _utils_permission_cache_key_util_js__rspack_import_4 = __webpack_require__(199);
+/* import */ var _utils_permission_match_util_js__rspack_import_5 = __webpack_require__(788);
 function _ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -515,6 +565,8 @@ function _ts_param(paramIndex, decorator) {
 
 
 
+
+
 class SharedPermissionCacheService {
     cache;
     config;
@@ -522,52 +574,56 @@ class SharedPermissionCacheService {
         this.cache = cache;
         this.config = {
             enableCompanyFeature: false,
-            userPermissionKeyFormat: _utils_permission_cache_key_util_js__rspack_import_2/* .DEFAULT_USER_PERMISSION_KEY_FORMAT */.q6,
-            companyPermissionKeyFormat: _utils_permission_cache_key_util_js__rspack_import_2/* .DEFAULT_COMPANY_PERMISSION_KEY_FORMAT */.s8,
+            userPermissionKeyFormat: _utils_permission_cache_key_util_js__rspack_import_4/* .DEFAULT_USER_PERMISSION_KEY_FORMAT */.q6,
+            companyPermissionKeyFormat: _utils_permission_cache_key_util_js__rspack_import_4/* .DEFAULT_COMPANY_PERMISSION_KEY_FORMAT */.s8,
             ...config
         };
     }
     /** Read the cached permission codes for a user; empty array when cache is unavailable or unset */ async getPermissions(options) {
         if (!this.cache) return [];
-        const cacheKey = (0,_utils_permission_cache_key_util_js__rspack_import_2/* .buildPermissionCacheKey */.nt)(options, this.config);
+        const cacheKey = (0,_utils_permission_cache_key_util_js__rspack_import_4/* .buildPermissionCacheKey */.nt)(options, this.config);
         const cached = await this.cache.get(cacheKey);
         if (!cached) return [];
         return Array.isArray(cached) ? cached : cached.backendCodes || [];
     }
     /** Overwrite the cached permission codes for a user with a fixed list */ async setPermissions(options, permissions, ttl) {
         if (!this.cache) return;
-        const cacheKey = (0,_utils_permission_cache_key_util_js__rspack_import_2/* .buildPermissionCacheKey */.nt)(options, this.config);
+        const cacheKey = (0,_utils_permission_cache_key_util_js__rspack_import_4/* .buildPermissionCacheKey */.nt)(options, this.config);
         await this.cache.set(cacheKey, permissions, ttl);
     }
     /** Clear the cached permission codes for a user */ async clearPermissions(options) {
         if (!this.cache) return;
-        const cacheKey = (0,_utils_permission_cache_key_util_js__rspack_import_2/* .buildPermissionCacheKey */.nt)(options, this.config);
+        const cacheKey = (0,_utils_permission_cache_key_util_js__rspack_import_4/* .buildPermissionCacheKey */.nt)(options, this.config);
         await this.cache.del(cacheKey);
     }
     /** Check a single permission against the cached list, honoring `*` and `prefix.*` wildcards */ async hasPermission(options, requiredPermission) {
         const permissions = await this.getPermissions(options);
         return this.matchPermission(permissions, requiredPermission);
     }
+    /** Throws 403 unless `user` holds `requiredPermission`; fails closed (500) when no cache is wired up. */ async assertPermission(user, requiredPermission) {
+        if (!this.isCacheConfigured()) throw new _exceptions_permission_exception_js__rspack_import_3/* .PermissionSystemUnavailableException */.GS();
+        const allowed = !!user?.id && await this.hasPermission({
+            userId: user.id,
+            companyId: user.companyId,
+            branchId: user.branchId
+        }, requiredPermission);
+        if (!allowed) throw new _exceptions_permission_exception_js__rspack_import_3/* .InsufficientPermissionsException */.z8([
+            requiredPermission
+        ], 'AND');
+    }
     /** Whether a cache instance is wired up; false means permission checks can't be served at all */ isCacheConfigured() {
         return !!this.cache;
     }
     /** Match an already-fetched permission list against a required permission, honoring `*` and `prefix.*` wildcards */ matchPermission(userPermissions, requiredPermission) {
-        if (userPermissions.includes(requiredPermission)) return true;
-        for (const permission of userPermissions){
-            if (permission === '*') return true;
-            if (permission.endsWith('.*') && requiredPermission.startsWith(permission.slice(0, -1))) {
-                return true;
-            }
-        }
-        return false;
+        return (0,_utils_permission_match_util_js__rspack_import_5/* .matchesPermission */.x)(userPermissions, requiredPermission);
     }
 }
 SharedPermissionCacheService = _ts_decorate([
     (0,_nestjs_common__rspack_import_0.Injectable)(),
     _ts_param(0, (0,_nestjs_common__rspack_import_0.Optional)()),
-    _ts_param(0, (0,_nestjs_common__rspack_import_0.Inject)(_constants_index_js__rspack_import_3/* .CACHE_INSTANCE */.zl)),
+    _ts_param(0, (0,_nestjs_common__rspack_import_0.Inject)(_constants_index_js__rspack_import_2/* .CACHE_INSTANCE */.zl)),
     _ts_param(1, (0,_nestjs_common__rspack_import_0.Optional)()),
-    _ts_param(1, (0,_nestjs_common__rspack_import_0.Inject)(_constants_index_js__rspack_import_3/* .PERMISSION_GUARD_CONFIG */.Lw)),
+    _ts_param(1, (0,_nestjs_common__rspack_import_0.Inject)(_constants_index_js__rspack_import_2/* .PERMISSION_GUARD_CONFIG */.Lw)),
     _ts_metadata("design:type", Function),
     _ts_metadata("design:paramtypes", [
         typeof _classes_hybrid_cache_class_js__rspack_import_1/* .HybridCache */.l === "undefined" ? Object : _classes_hybrid_cache_class_js__rspack_import_1/* .HybridCache */.l,
@@ -785,6 +841,22 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 
+},
+788(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/** Whether `granted` covers `required`, honoring `*` (everything) and `prefix.*` (everything under prefix) wildcards */ function matchesPermission(granted, required) {
+    if (granted.includes(required)) return true;
+    for (const permission of granted){
+        if (permission === '*') return true;
+        if (permission.endsWith('.*') && required.startsWith(permission.slice(0, -1))) return true;
+    }
+    return false;
+}
+
+__webpack_require__.d(__webpack_exports__, {
+  x: () => (matchesPermission)
+});
+
+
 },
 436(module) {
 
@@ -797,6 +869,12 @@ module.exports = __rspack_external__flusys_nestjs_core_ff4ca4e2;
 module.exports = __rspack_external__nestjs_core_d7b00a1a;
 
 
+},
+823(module) {
+
+module.exports = __rspack_external_crypto;
+
+
 },
 158(module) {
 

package/fesm/{720.js → 948.js}

@@ -6,9 +6,9 @@ import * as __rspack_external_fs from "fs";
 import * as __rspack_external_path from "path";
 import * as __rspack_external_winston from "winston";
 import * as __rspack_external_async_hooks from "async_hooks";
-import * as __rspack_external_uuid from "uuid";
-export const __rspack_esm_id = 720;
-export const __rspack_esm_ids = [720];
+import * as __rspack_external_node_crypto_2e7c4b46 from "node:crypto";
+export const __rspack_esm_id = 948;
+export const __rspack_esm_ids = [948];
 export const __webpack_modules__ = {
 245(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
@@ -281,7 +281,10 @@ const DEFAULT_EVENT_SERVICE_NAME = 'flusys';
 __webpack_require__.d(__webpack_exports__, {
   BC: () => (/* reexport safe */ _permissions_js__rspack_import_0.BC),
   Bz: () => (/* reexport safe */ _permissions_js__rspack_import_0.Bz),
+  DP: () => (/* reexport safe */ _permissions_js__rspack_import_0.DP),
   Em: () => (/* reexport safe */ _permissions_js__rspack_import_0.Em),
+  G0: () => (/* reexport safe */ _permissions_js__rspack_import_0.G0),
+  GH: () => (/* reexport safe */ _permissions_js__rspack_import_0.GH),
   GT: () => (/* reexport safe */ _permissions_js__rspack_import_0.GT),
   Jj: () => (/* reexport safe */ _permissions_js__rspack_import_0.Jj),
   N3: () => (/* reexport safe */ _permissions_js__rspack_import_0.N3),
@@ -300,8 +303,11 @@ __webpack_require__.d(__webpack_exports__, {
   Y7: () => (/* reexport safe */ _permissions_js__rspack_import_0.Y7),
   _X: () => (/* reexport safe */ _permissions_js__rspack_import_0._X),
   aO: () => (/* reexport safe */ _permissions_js__rspack_import_0.aO),
+  aT: () => (/* reexport safe */ _permissions_js__rspack_import_0.aT),
   fS: () => (/* reexport safe */ _permissions_js__rspack_import_0.fS),
   hg: () => (/* reexport safe */ _message_keys_js__rspack_import_1.hg),
+  kA: () => (/* reexport safe */ _permissions_js__rspack_import_0.kA),
+  kd: () => (/* reexport safe */ _permissions_js__rspack_import_0.kd),
   l3: () => (/* reexport safe */ _permissions_js__rspack_import_0.l3),
   mK: () => (/* reexport safe */ _message_keys_js__rspack_import_1.mK),
   mV: () => (/* reexport safe */ _permissions_js__rspack_import_0.mV),
@@ -496,6 +502,35 @@ const FORM_RESULT_PERMISSIONS = {
     UPDATE: 'form-result.update',
     DELETE: 'form-result.delete'
 };
+// ==================== ENTITY BUILDER MODULE ====================
+// Static metadata permissions only. Per-dynamic-entity record permissions
+// (`entity_builder.entity.<entityCode>.<action>`) are checked by flows running as the caller;
+// ENTITY_BUILDER_ALL_DYNAMIC is the wildcard that grants all of them (and nothing else).
+const ENTITY_DEFINITION_PERMISSIONS = {
+    CREATE: 'entity_builder.entity_definition.create',
+    READ: 'entity_builder.entity_definition.read',
+    UPDATE: 'entity_builder.entity_definition.update',
+    DELETE: 'entity_builder.entity_definition.delete'
+};
+const FIELD_DEFINITION_PERMISSIONS = {
+    READ: 'entity_builder.field_definition.read',
+    UPDATE: 'entity_builder.field_definition.update'
+};
+const FLOW_DEFINITION_PERMISSIONS = {
+    CREATE: 'entity_builder.flow_definition.create',
+    READ: 'entity_builder.flow_definition.read',
+    UPDATE: 'entity_builder.flow_definition.update',
+    DELETE: 'entity_builder.flow_definition.delete',
+    TEST: 'entity_builder.flow_definition.test',
+    /** Needed to save a flow that runs as the system (bypassing per-entity permissions). */ SYSTEM: 'entity_builder.flow_definition.system',
+    /** Needed to save a flow containing a code node (sandboxed JavaScript). */ CODE: 'entity_builder.flow_definition.code'
+};
+const ENTITY_BUILDER_DYNAMIC_PREFIX = 'entity_builder.entity';
+const ENTITY_BUILDER_ALL_DYNAMIC = {
+    ALL: `${ENTITY_BUILDER_DYNAMIC_PREFIX}.*`
+};
+const dynamicEntityPermissionParent = (entityCode)=>`${ENTITY_BUILDER_DYNAMIC_PREFIX}.${entityCode}`;
+const dynamicEntityPermission = (entityCode, action)=>`${dynamicEntityPermissionParent(entityCode)}.${action}`;
 // ==================== EVENT MANAGER MODULE ====================
 const EVENT_PERMISSIONS = {
     CREATE: 'event.create',
@@ -590,6 +625,11 @@ const PERMISSIONS = {
     // Form Builder
     FORM: FORM_PERMISSIONS,
     FORM_RESULT: FORM_RESULT_PERMISSIONS,
+    // Entity Builder
+    ENTITY_DEFINITION: ENTITY_DEFINITION_PERMISSIONS,
+    FIELD_DEFINITION: FIELD_DEFINITION_PERMISSIONS,
+    FLOW_DEFINITION: FLOW_DEFINITION_PERMISSIONS,
+    ENTITY_BUILDER_ALL_DYNAMIC: ENTITY_BUILDER_ALL_DYNAMIC,
     // Event Manager
     EVENT: EVENT_PERMISSIONS,
     // Notification
@@ -612,7 +652,10 @@ __webpack_require__.d(__webpack_exports__, {
 }, {
   BC: USER_PERMISSIONS,
   Bz: AI_ASSISTANT_PERMISSIONS,
+  DP: ENTITY_DEFINITION_PERMISSIONS,
   Em: STORAGE_CONFIG_PERMISSIONS,
+  G0: ENTITY_BUILDER_ALL_DYNAMIC,
+  GH: dynamicEntityPermissionParent,
   GT: FORM_RESULT_PERMISSIONS,
   Jj: PERMISSIONS,
   N3: TRANSLATION_KEY_PERMISSIONS,
@@ -630,7 +673,10 @@ __webpack_require__.d(__webpack_exports__, {
   Y7: ACTION_PERMISSIONS,
   _X: USER_ACTION_PERMISSIONS,
   aO: COMPANY_ACTION_PERMISSIONS,
+  aT: dynamicEntityPermission,
   fS: TRANSLATION_PERMISSIONS,
+  kA: FIELD_DEFINITION_PERMISSIONS,
+  kd: FLOW_DEFINITION_PERMISSIONS,
   l3: SOCIAL_AUTH_CONFIG_PERMISSIONS,
   mV: ROLE_PERMISSIONS,
   rH: NOTIFICATION_PERMISSIONS,
@@ -644,7 +690,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-419(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+591(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
 // EXPORTS
 __webpack_require__.d(__webpack_exports__, {
@@ -653,7 +699,8 @@ __webpack_require__.d(__webpack_exports__, {
   RE: () => (/* binding */ getRequestId),
   EO: () => (/* binding */ getTenantId),
   F6: () => (/* binding */ getUserId),
-  V8: () => (/* binding */ requestContext)
+  V8: () => (/* binding */ requestContext),
+  ZV: () => (/* binding */ setRequestUser)
 });
 
 // EXTERNAL MODULE: external "@flusys/nestjs-core/config"
@@ -662,7 +709,7 @@ var config_ = __webpack_require__(307);
 var common_ = __webpack_require__(157);
 ;// CONCATENATED MODULE: external "async_hooks"
 
-;// CONCATENATED MODULE: external "uuid"
+;// CONCATENATED MODULE: external "node:crypto"
 
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/classes/winston.logger.class.ts + 5 modules
 var winston_logger_class = __webpack_require__(245);
@@ -705,6 +752,12 @@ const getRequestId = ()=>requestContext.getStore()?.requestId;
 const getTenantId = ()=>requestContext.getStore()?.tenantId;
 const getUserId = ()=>requestContext.getStore()?.userId;
 const getCompanyId = ()=>requestContext.getStore()?.companyId;
+function setRequestUser(user) {
+    const store = requestContext.getStore();
+    if (!store || !user) return;
+    store.userId = user.id;
+    store.companyId = user.companyId;
+}
 // Helper Functions
 function summarizeRequestBody(body) {
     if (!body) return undefined;
@@ -778,7 +831,7 @@ function getClientIp(req) {
 class LoggerMiddleware {
     logger = winston_logger_class/* .instance */.K;
     use(req, res, next) {
-        const requestId = req.headers[constants/* .REQUEST_ID_HEADER */.kC] || (0,__rspack_external_uuid.v4)();
+        const requestId = req.headers[constants/* .REQUEST_ID_HEADER */.kC] || (0,__rspack_external_node_crypto_2e7c4b46.randomUUID)();
         const tenantId = req.headers[TENANT_ID_HEADER];
         const startTime = Date.now();
         res.setHeader(constants/* .REQUEST_ID_HEADER */.kC, requestId);

package/fesm/chunks/123.js

@@ -3,11 +3,10 @@ export const __rspack_esm_ids = [123];
 export const __webpack_modules__ = {
 46(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 /* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(157);
-/* import */ var _constants_index_js__rspack_import_3 = __webpack_require__(389);
-/* import */ var _constants_index_js__rspack_import_4 = __webpack_require__(43);
-/* import */ var _utils_event_pattern_util_js__rspack_import_5 = __webpack_require__(456);
-/* import */ var _utils_optional_module_util_js__rspack_import_2 = __webpack_require__(368);
-/* import */ var _event_transport_registry_js__rspack_import_1 = __webpack_require__(149);
+/* import */ var _constants_index_js__rspack_import_1 = __webpack_require__(43);
+/* import */ var _utils_event_pattern_util_js__rspack_import_4 = __webpack_require__(456);
+/* import */ var _utils_optional_module_util_js__rspack_import_3 = __webpack_require__(368);
+/* import */ var _event_transport_registry_js__rspack_import_2 = __webpack_require__(149);
 /**
  * Optional RabbitMQ event transport
  * Requires: npm install amqplib
@@ -35,11 +34,11 @@ class RabbitMqTransport {
     async connect() {
         let amqp;
         try {
-            amqp = await (0,_utils_optional_module_util_js__rspack_import_2/* .loadOptionalModule */.l)('amqplib');
+            amqp = await (0,_utils_optional_module_util_js__rspack_import_3/* .loadOptionalModule */.l)('amqplib');
         } catch  {
             throw new _nestjs_common__rspack_import_0.InternalServerErrorException({
                 message: 'amqplib not found',
-                messageKey: _constants_index_js__rspack_import_3/* .SYSTEM_MESSAGES.SDK_NOT_INSTALLED */.hg.SDK_NOT_INSTALLED,
+                messageKey: _constants_index_js__rspack_import_1/* .SYSTEM_MESSAGES.SDK_NOT_INSTALLED */.hg.SDK_NOT_INSTALLED,
                 messageVariables: {
                     sdk: 'amqplib'
                 }
@@ -98,7 +97,7 @@ class RabbitMqTransport {
         return Boolean(this.channel);
     }
     get exchange() {
-        return this.config.exchange ?? _constants_index_js__rspack_import_4/* .DEFAULT_EVENT_EXCHANGE */.Hq;
+        return this.config.exchange ?? _constants_index_js__rspack_import_1/* .DEFAULT_EVENT_EXCHANGE */.Hq;
     }
     get queue() {
         return this.config.queue ?? `${(/* inlined export .DEFAULT_EVENT_SERVICE_NAME */"flusys")}.events`;
@@ -107,7 +106,7 @@ class RabbitMqTransport {
         return this.config.durable ?? true;
     }
     /** `**` is the FLUSYS alias for the AMQP multi word wildcard */ toRoutingKey(pattern) {
-        return pattern.split('.').map((segment)=>(0,_utils_event_pattern_util_js__rspack_import_5/* .isMultiWildcard */._c)(segment) ? '#' : segment).join('.');
+        return pattern.split('.').map((segment)=>(0,_utils_event_pattern_util_js__rspack_import_4/* .isMultiWildcard */._c)(segment) ? '#' : segment).join('.');
     }
     async startConsuming() {
         // Captured, because a reconnect swaps `this.channel` while deliveries are in
@@ -162,7 +161,7 @@ class RabbitMqTransport {
         await connection?.close().catch(()=>{});
     }
 }
-_event_transport_registry_js__rspack_import_1/* .EventTransportRegistry.register */.P.register('rabbitmq', (config)=>new RabbitMqTransport(config));
+_event_transport_registry_js__rspack_import_2/* .EventTransportRegistry.register */.P.register('rabbitmq', (config)=>new RabbitMqTransport(config));
 
 __webpack_require__.d(__webpack_exports__, {
   RabbitMqTransport: () => (RabbitMqTransport)

package/fesm/chunks/37.js

@@ -3,10 +3,9 @@ export const __rspack_esm_ids = [37];
 export const __webpack_modules__ = {
 20(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 /* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(157);
-/* import */ var _constants_index_js__rspack_import_3 = __webpack_require__(389);
-/* import */ var _constants_index_js__rspack_import_4 = __webpack_require__(43);
-/* import */ var _utils_optional_module_util_js__rspack_import_2 = __webpack_require__(368);
-/* import */ var _event_transport_registry_js__rspack_import_1 = __webpack_require__(149);
+/* import */ var _constants_index_js__rspack_import_1 = __webpack_require__(43);
+/* import */ var _utils_optional_module_util_js__rspack_import_3 = __webpack_require__(368);
+/* import */ var _event_transport_registry_js__rspack_import_2 = __webpack_require__(149);
 /**
  * Optional Kafka event transport
  * Requires: npm install kafkajs
@@ -36,11 +35,11 @@ const DEFAULT_BROKERS = [
     async connect() {
         let kafkajs;
         try {
-            kafkajs = await (0,_utils_optional_module_util_js__rspack_import_2/* .loadOptionalModule */.l)('kafkajs');
+            kafkajs = await (0,_utils_optional_module_util_js__rspack_import_3/* .loadOptionalModule */.l)('kafkajs');
         } catch  {
             throw new _nestjs_common__rspack_import_0.InternalServerErrorException({
                 message: 'kafkajs not found',
-                messageKey: _constants_index_js__rspack_import_3/* .SYSTEM_MESSAGES.SDK_NOT_INSTALLED */.hg.SDK_NOT_INSTALLED,
+                messageKey: _constants_index_js__rspack_import_1/* .SYSTEM_MESSAGES.SDK_NOT_INSTALLED */.hg.SDK_NOT_INSTALLED,
                 messageVariables: {
                     sdk: 'kafkajs'
                 }
@@ -98,7 +97,7 @@ const DEFAULT_BROKERS = [
         return Boolean(this.producer);
     }
     get topic() {
-        return this.config.topic ?? _constants_index_js__rspack_import_4/* .DEFAULT_EVENT_TOPIC */.nx;
+        return this.config.topic ?? _constants_index_js__rspack_import_1/* .DEFAULT_EVENT_TOPIC */.nx;
     }
     async startConsuming() {
         if (this.running || !this.client) return;
@@ -132,7 +131,7 @@ const DEFAULT_BROKERS = [
         }
     }
 }
-_event_transport_registry_js__rspack_import_1/* .EventTransportRegistry.register */.P.register('kafka', (config)=>new KafkaTransport(config));
+_event_transport_registry_js__rspack_import_2/* .EventTransportRegistry.register */.P.register('kafka', (config)=>new KafkaTransport(config));
 
 __webpack_require__.d(__webpack_exports__, {
   KafkaTransport: () => (KafkaTransport)

package/fesm/classes/index.js

@@ -3,11 +3,11 @@ export const __rspack_esm_ids = [29];
 export const __webpack_modules__ = {};
 import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
-import * as __rspack_chunk_1 from '../720.js';
+import * as __rspack_chunk_1 from '../948.js';
 __webpack_require__.C(__rspack_chunk_1);
-import * as __rspack_chunk_2 from '../509.js';
+import * as __rspack_chunk_2 from '../183.js';
 __webpack_require__.C(__rspack_chunk_2);
-import * as __rspack_chunk_3 from '../67.js';
+import * as __rspack_chunk_3 from '../681.js';
 __webpack_require__.C(__rspack_chunk_3);
 import * as __rspack_chunk_4 from '../470.js';
 __webpack_require__.C(__rspack_chunk_4);
@@ -23,10 +23,14 @@ var __webpack_exports__DOMAIN_EVENT_VERSION = __webpack_exports__.xC;
 var __webpack_exports__DisabledEventBus = __webpack_exports__.XI;
 var __webpack_exports__EMAIL_CONFIG_PERMISSIONS = __webpack_exports__.V0;
 var __webpack_exports__EMAIL_TEMPLATE_PERMISSIONS = __webpack_exports__.z$;
+var __webpack_exports__ENTITY_BUILDER_ALL_DYNAMIC = __webpack_exports__.G0;
+var __webpack_exports__ENTITY_DEFINITION_PERMISSIONS = __webpack_exports__.DP;
 var __webpack_exports__EVENT_PERMISSIONS = __webpack_exports__.Ub;
 var __webpack_exports__EventBusRegistry = __webpack_exports__.qS;
 var __webpack_exports__EventTransportRegistry = __webpack_exports__.Pm;
+var __webpack_exports__FIELD_DEFINITION_PERMISSIONS = __webpack_exports__.kA;
 var __webpack_exports__FILE_PERMISSIONS = __webpack_exports__.S6;
+var __webpack_exports__FLOW_DEFINITION_PERMISSIONS = __webpack_exports__.kd;
 var __webpack_exports__FOLDER_PERMISSIONS = __webpack_exports__.wM;
 var __webpack_exports__FORM_PERMISSIONS = __webpack_exports__.Wc;
 var __webpack_exports__FORM_RESULT_PERMISSIONS = __webpack_exports__.GT;
@@ -55,8 +59,10 @@ var __webpack_exports__buildDomainEvent = __webpack_exports__.rv;
 var __webpack_exports__buildQuery = __webpack_exports__.Zq;
 var __webpack_exports__createApiController = __webpack_exports__.RD;
 var __webpack_exports__createModuleLogger = __webpack_exports__.Xv;
+var __webpack_exports__dynamicEntityPermission = __webpack_exports__.aT;
+var __webpack_exports__dynamicEntityPermissionParent = __webpack_exports__.GH;
 var __webpack_exports__getCastIntType = __webpack_exports__.Tj;
 var __webpack_exports__getJsonColumnType = __webpack_exports__.pf;
 var __webpack_exports__instance = __webpack_exports__.KJ;
 var __webpack_exports__publishDomainEvent = __webpack_exports__.wT;
-export { __webpack_exports__ACTION_PERMISSIONS as ACTION_PERMISSIONS, __webpack_exports__AI_ASSISTANT_PERMISSIONS as AI_ASSISTANT_PERMISSIONS, __webpack_exports__ApiService as ApiService, __webpack_exports__BRANCH_PERMISSIONS as BRANCH_PERMISSIONS, __webpack_exports__COMPANY_ACTION_PERMISSIONS as COMPANY_ACTION_PERMISSIONS, __webpack_exports__COMPANY_PERMISSIONS as COMPANY_PERMISSIONS, __webpack_exports__DOMAIN_EVENT_VERSION as DOMAIN_EVENT_VERSION, __webpack_exports__DisabledEventBus as DisabledEventBus, __webpack_exports__EMAIL_CONFIG_PERMISSIONS as EMAIL_CONFIG_PERMISSIONS, __webpack_exports__EMAIL_TEMPLATE_PERMISSIONS as EMAIL_TEMPLATE_PERMISSIONS, __webpack_exports__EVENT_PERMISSIONS as EVENT_PERMISSIONS, __webpack_exports__EventBusRegistry as EventBusRegistry, __webpack_exports__EventTransportRegistry as EventTransportRegistry, __webpack_exports__FILE_PERMISSIONS as FILE_PERMISSIONS, __webpack_exports__FOLDER_PERMISSIONS as FOLDER_PERMISSIONS, __webpack_exports__FORM_PERMISSIONS as FORM_PERMISSIONS, __webpack_exports__FORM_RESULT_PERMISSIONS as FORM_RESULT_PERMISSIONS, __webpack_exports__HybridCache as HybridCache, __webpack_exports__HybridEventBus as HybridEventBus, __webpack_exports__LANGUAGE_PERMISSIONS as LANGUAGE_PERMISSIONS, __webpack_exports__MemoryTransport as MemoryTransport, __webpack_exports__NOTIFICATION_PERMISSIONS as NOTIFICATION_PERMISSIONS, __webpack_exports__PERMISSIONS as PERMISSIONS, __webpack_exports__ROLE_ACTION_PERMISSIONS as ROLE_ACTION_PERMISSIONS, __webpack_exports__ROLE_PERMISSIONS as ROLE_PERMISSIONS, __webpack_exports__SOCIAL_AUTH_CONFIG_PERMISSIONS as SOCIAL_AUTH_CONFIG_PERMISSIONS, __webpack_exports__STORAGE_CONFIG_PERMISSIONS as STORAGE_CONFIG_PERMISSIONS, __webpack_exports__TASK_BOARD_PERMISSIONS as TASK_BOARD_PERMISSIONS, __webpack_exports__TASK_COMMENT_PERMISSIONS as TASK_COMMENT_PERMISSIONS, __webpack_exports__TASK_LABEL_PERMISSIONS as TASK_LABEL_PERMISSIONS, __webpack_exports__TASK_LIST_PERMISSIONS as TASK_LIST_PERMISSIONS, __webpack_exports__TASK_PERMISSIONS as TASK_PERMISSIONS, __webpack_exports__TRANSLATION_KEY_PERMISSIONS as TRANSLATION_KEY_PERMISSIONS, __webpack_exports__TRANSLATION_PERMISSIONS as TRANSLATION_PERMISSIONS, __webpack_exports__UPLOAD_CONFIG_PERMISSIONS as UPLOAD_CONFIG_PERMISSIONS, __webpack_exports__USER_ACTION_PERMISSIONS as USER_ACTION_PERMISSIONS, __webpack_exports__USER_PERMISSIONS as USER_PERMISSIONS, __webpack_exports__USER_ROLE_PERMISSIONS as USER_ROLE_PERMISSIONS, __webpack_exports__buildDomainEvent as buildDomainEvent, __webpack_exports__buildQuery as buildQuery, __webpack_exports__createApiController as createApiController, __webpack_exports__createModuleLogger as createModuleLogger, __webpack_exports__getCastIntType as getCastIntType, __webpack_exports__getJsonColumnType as getJsonColumnType, __webpack_exports__instance as instance, __webpack_exports__publishDomainEvent as publishDomainEvent };
+export { __webpack_exports__ACTION_PERMISSIONS as ACTION_PERMISSIONS, __webpack_exports__AI_ASSISTANT_PERMISSIONS as AI_ASSISTANT_PERMISSIONS, __webpack_exports__ApiService as ApiService, __webpack_exports__BRANCH_PERMISSIONS as BRANCH_PERMISSIONS, __webpack_exports__COMPANY_ACTION_PERMISSIONS as COMPANY_ACTION_PERMISSIONS, __webpack_exports__COMPANY_PERMISSIONS as COMPANY_PERMISSIONS, __webpack_exports__DOMAIN_EVENT_VERSION as DOMAIN_EVENT_VERSION, __webpack_exports__DisabledEventBus as DisabledEventBus, __webpack_exports__EMAIL_CONFIG_PERMISSIONS as EMAIL_CONFIG_PERMISSIONS, __webpack_exports__EMAIL_TEMPLATE_PERMISSIONS as EMAIL_TEMPLATE_PERMISSIONS, __webpack_exports__ENTITY_BUILDER_ALL_DYNAMIC as ENTITY_BUILDER_ALL_DYNAMIC, __webpack_exports__ENTITY_DEFINITION_PERMISSIONS as ENTITY_DEFINITION_PERMISSIONS, __webpack_exports__EVENT_PERMISSIONS as EVENT_PERMISSIONS, __webpack_exports__EventBusRegistry as EventBusRegistry, __webpack_exports__EventTransportRegistry as EventTransportRegistry, __webpack_exports__FIELD_DEFINITION_PERMISSIONS as FIELD_DEFINITION_PERMISSIONS, __webpack_exports__FILE_PERMISSIONS as FILE_PERMISSIONS, __webpack_exports__FLOW_DEFINITION_PERMISSIONS as FLOW_DEFINITION_PERMISSIONS, __webpack_exports__FOLDER_PERMISSIONS as FOLDER_PERMISSIONS, __webpack_exports__FORM_PERMISSIONS as FORM_PERMISSIONS, __webpack_exports__FORM_RESULT_PERMISSIONS as FORM_RESULT_PERMISSIONS, __webpack_exports__HybridCache as HybridCache, __webpack_exports__HybridEventBus as HybridEventBus, __webpack_exports__LANGUAGE_PERMISSIONS as LANGUAGE_PERMISSIONS, __webpack_exports__MemoryTransport as MemoryTransport, __webpack_exports__NOTIFICATION_PERMISSIONS as NOTIFICATION_PERMISSIONS, __webpack_exports__PERMISSIONS as PERMISSIONS, __webpack_exports__ROLE_ACTION_PERMISSIONS as ROLE_ACTION_PERMISSIONS, __webpack_exports__ROLE_PERMISSIONS as ROLE_PERMISSIONS, __webpack_exports__SOCIAL_AUTH_CONFIG_PERMISSIONS as SOCIAL_AUTH_CONFIG_PERMISSIONS, __webpack_exports__STORAGE_CONFIG_PERMISSIONS as STORAGE_CONFIG_PERMISSIONS, __webpack_exports__TASK_BOARD_PERMISSIONS as TASK_BOARD_PERMISSIONS, __webpack_exports__TASK_COMMENT_PERMISSIONS as TASK_COMMENT_PERMISSIONS, __webpack_exports__TASK_LABEL_PERMISSIONS as TASK_LABEL_PERMISSIONS, __webpack_exports__TASK_LIST_PERMISSIONS as TASK_LIST_PERMISSIONS, __webpack_exports__TASK_PERMISSIONS as TASK_PERMISSIONS, __webpack_exports__TRANSLATION_KEY_PERMISSIONS as TRANSLATION_KEY_PERMISSIONS, __webpack_exports__TRANSLATION_PERMISSIONS as TRANSLATION_PERMISSIONS, __webpack_exports__UPLOAD_CONFIG_PERMISSIONS as UPLOAD_CONFIG_PERMISSIONS, __webpack_exports__USER_ACTION_PERMISSIONS as USER_ACTION_PERMISSIONS, __webpack_exports__USER_PERMISSIONS as USER_PERMISSIONS, __webpack_exports__USER_ROLE_PERMISSIONS as USER_ROLE_PERMISSIONS, __webpack_exports__buildDomainEvent as buildDomainEvent, __webpack_exports__buildQuery as buildQuery, __webpack_exports__createApiController as createApiController, __webpack_exports__createModuleLogger as createModuleLogger, __webpack_exports__dynamicEntityPermission as dynamicEntityPermission, __webpack_exports__dynamicEntityPermissionParent as dynamicEntityPermissionParent, __webpack_exports__getCastIntType as getCastIntType, __webpack_exports__getJsonColumnType as getJsonColumnType, __webpack_exports__instance as instance, __webpack_exports__publishDomainEvent as publishDomainEvent };