@flusys/nestjs-shared 8.1.5 → 9.0.0

package/fesm/interceptors/index.js

@@ -127,7 +127,10 @@ const DEFAULT_EVENT_SERVICE_NAME = 'flusys';
 __webpack_require__.d(__webpack_exports__, {
   BC: () => (/* reexport safe */ _permissions_js__rspack_import_0.BC),
   Bz: () => (/* reexport safe */ _permissions_js__rspack_import_0.Bz),
+  DP: () => (/* reexport safe */ _permissions_js__rspack_import_0.DP),
   Em: () => (/* reexport safe */ _permissions_js__rspack_import_0.Em),
+  G0: () => (/* reexport safe */ _permissions_js__rspack_import_0.G0),
+  GH: () => (/* reexport safe */ _permissions_js__rspack_import_0.GH),
   GT: () => (/* reexport safe */ _permissions_js__rspack_import_0.GT),
   Jj: () => (/* reexport safe */ _permissions_js__rspack_import_0.Jj),
   N3: () => (/* reexport safe */ _permissions_js__rspack_import_0.N3),
@@ -146,8 +149,11 @@ __webpack_require__.d(__webpack_exports__, {
   Y7: () => (/* reexport safe */ _permissions_js__rspack_import_0.Y7),
   _X: () => (/* reexport safe */ _permissions_js__rspack_import_0._X),
   aO: () => (/* reexport safe */ _permissions_js__rspack_import_0.aO),
+  aT: () => (/* reexport safe */ _permissions_js__rspack_import_0.aT),
   fS: () => (/* reexport safe */ _permissions_js__rspack_import_0.fS),
   hg: () => (/* reexport safe */ _message_keys_js__rspack_import_1.hg),
+  kA: () => (/* reexport safe */ _permissions_js__rspack_import_0.kA),
+  kd: () => (/* reexport safe */ _permissions_js__rspack_import_0.kd),
   l3: () => (/* reexport safe */ _permissions_js__rspack_import_0.l3),
   mK: () => (/* reexport safe */ _message_keys_js__rspack_import_1.mK),
   mV: () => (/* reexport safe */ _permissions_js__rspack_import_0.mV),
@@ -342,6 +348,35 @@ const FORM_RESULT_PERMISSIONS = {
     UPDATE: 'form-result.update',
     DELETE: 'form-result.delete'
 };
+// ==================== ENTITY BUILDER MODULE ====================
+// Static metadata permissions only. Per-dynamic-entity record permissions
+// (`entity_builder.entity.<entityCode>.<action>`) are checked by flows running as the caller;
+// ENTITY_BUILDER_ALL_DYNAMIC is the wildcard that grants all of them (and nothing else).
+const ENTITY_DEFINITION_PERMISSIONS = {
+    CREATE: 'entity_builder.entity_definition.create',
+    READ: 'entity_builder.entity_definition.read',
+    UPDATE: 'entity_builder.entity_definition.update',
+    DELETE: 'entity_builder.entity_definition.delete'
+};
+const FIELD_DEFINITION_PERMISSIONS = {
+    READ: 'entity_builder.field_definition.read',
+    UPDATE: 'entity_builder.field_definition.update'
+};
+const FLOW_DEFINITION_PERMISSIONS = {
+    CREATE: 'entity_builder.flow_definition.create',
+    READ: 'entity_builder.flow_definition.read',
+    UPDATE: 'entity_builder.flow_definition.update',
+    DELETE: 'entity_builder.flow_definition.delete',
+    TEST: 'entity_builder.flow_definition.test',
+    /** Needed to save a flow that runs as the system (bypassing per-entity permissions). */ SYSTEM: 'entity_builder.flow_definition.system',
+    /** Needed to save a flow containing a code node (sandboxed JavaScript). */ CODE: 'entity_builder.flow_definition.code'
+};
+const ENTITY_BUILDER_DYNAMIC_PREFIX = 'entity_builder.entity';
+const ENTITY_BUILDER_ALL_DYNAMIC = {
+    ALL: `${ENTITY_BUILDER_DYNAMIC_PREFIX}.*`
+};
+const dynamicEntityPermissionParent = (entityCode)=>`${ENTITY_BUILDER_DYNAMIC_PREFIX}.${entityCode}`;
+const dynamicEntityPermission = (entityCode, action)=>`${dynamicEntityPermissionParent(entityCode)}.${action}`;
 // ==================== EVENT MANAGER MODULE ====================
 const EVENT_PERMISSIONS = {
     CREATE: 'event.create',
@@ -436,6 +471,11 @@ const PERMISSIONS = {
     // Form Builder
     FORM: FORM_PERMISSIONS,
     FORM_RESULT: FORM_RESULT_PERMISSIONS,
+    // Entity Builder
+    ENTITY_DEFINITION: ENTITY_DEFINITION_PERMISSIONS,
+    FIELD_DEFINITION: FIELD_DEFINITION_PERMISSIONS,
+    FLOW_DEFINITION: FLOW_DEFINITION_PERMISSIONS,
+    ENTITY_BUILDER_ALL_DYNAMIC: ENTITY_BUILDER_ALL_DYNAMIC,
     // Event Manager
     EVENT: EVENT_PERMISSIONS,
     // Notification
@@ -458,7 +498,10 @@ __webpack_require__.d(__webpack_exports__, {
 }, {
   BC: USER_PERMISSIONS,
   Bz: AI_ASSISTANT_PERMISSIONS,
+  DP: ENTITY_DEFINITION_PERMISSIONS,
   Em: STORAGE_CONFIG_PERMISSIONS,
+  G0: ENTITY_BUILDER_ALL_DYNAMIC,
+  GH: dynamicEntityPermissionParent,
   GT: FORM_RESULT_PERMISSIONS,
   Jj: PERMISSIONS,
   N3: TRANSLATION_KEY_PERMISSIONS,
@@ -476,7 +519,10 @@ __webpack_require__.d(__webpack_exports__, {
   Y7: ACTION_PERMISSIONS,
   _X: USER_ACTION_PERMISSIONS,
   aO: COMPANY_ACTION_PERMISSIONS,
+  aT: dynamicEntityPermission,
   fS: TRANSLATION_PERMISSIONS,
+  kA: FIELD_DEFINITION_PERMISSIONS,
+  kd: FLOW_DEFINITION_PERMISSIONS,
   l3: SOCIAL_AUTH_CONFIG_PERMISSIONS,
   mV: ROLE_PERMISSIONS,
   rH: NOTIFICATION_PERMISSIONS,
@@ -553,8 +599,6 @@ DeleteEmptyIdFromBodyInterceptor = _ts_decorate([
 var hybrid_cache_class = __webpack_require__(375);
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/constants/index.ts
 var constants = __webpack_require__(43);
-// EXTERNAL MODULE: ./projects/nestjs-shared/src/constants/message-keys.ts
-var message_keys = __webpack_require__(389);
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/interceptors/idempotency.interceptor.ts
 function idempotency_interceptor_ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -611,7 +655,7 @@ class IdempotencyInterceptor {
                 throw new common_.ConflictException({
                     success: false,
                     message: 'Request is already being processed',
-                    messageKey: message_keys/* .SYSTEM_MESSAGES.DUPLICATE_REQUEST */.hg.DUPLICATE_REQUEST
+                    messageKey: constants/* .SYSTEM_MESSAGES.DUPLICATE_REQUEST */.hg.DUPLICATE_REQUEST
                 });
             }
             // Return cached response
@@ -700,26 +744,21 @@ function set_user_field_on_body_interceptor_ts_decorate(decorators, target, key,
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 
-/**
- * Factory function to create interceptors that set user ID fields on request body
- * @param fieldName - The field name to set (e.g., 'createdById', 'updatedById', 'deletedById')
- */ function createSetUserFieldInterceptor(fieldName) {
+/** Stamps `fieldName` on the body from the authenticated user; a client-sent value is always dropped. */ function createSetUserFieldInterceptor(fieldName) {
     let SetUserFieldOnBody = class SetUserFieldOnBody {
         intercept(context, next) {
             const request = context.switchToHttp().getRequest();
-            const user = request?.user;
-            if (user) {
-                if (Array.isArray(request.body)) {
-                    request.body = request.body.map((item)=>({
-                            ...item,
-                            [fieldName]: user.id
-                        }));
-                } else if (typeof request.body === 'object' && request.body !== null) {
-                    request.body = {
-                        ...request.body,
-                        [fieldName]: user.id
-                    };
-                }
+            const userId = request?.user?.id;
+            const stamp = (item)=>{
+                if (typeof item !== 'object' || item === null || Array.isArray(item)) return item;
+                const { [fieldName]: _clientValue, ...rest } = item;
+                return userId ? {
+                    ...rest,
+                    [fieldName]: userId
+                } : rest;
+            };
+            if (request) {
+                request.body = Array.isArray(request.body) ? request.body.map(stamp) : stamp(request.body);
             }
             return next.handle();
         }
@@ -729,9 +768,9 @@ function set_user_field_on_body_interceptor_ts_decorate(decorators, target, key,
     ], SetUserFieldOnBody);
     return SetUserFieldOnBody;
 }
-/** Sets createdById field on request body from authenticated user */ const SetCreatedByOnBody = createSetUserFieldInterceptor('createdById');
-/** Sets updatedById field on request body from authenticated user */ const SetUpdateByOnBody = createSetUserFieldInterceptor('updatedById');
-/** Sets deletedById field on request body from authenticated user */ const SetDeletedByOnBody = createSetUserFieldInterceptor('deletedById');
+const SetCreatedByOnBody = createSetUserFieldInterceptor('createdById');
+const SetUpdateByOnBody = createSetUserFieldInterceptor('updatedById');
+const SetDeletedByOnBody = createSetUserFieldInterceptor('deletedById');
 
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/modules/utils/utils.service.ts
 var utils_service = __webpack_require__(169);

package/fesm/interfaces/index.js

@@ -1,15 +1,19 @@
 export const __rspack_esm_id = 471;
 export const __rspack_esm_ids = [471];
 export const __webpack_modules__ = {
-473(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+905(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
 // EXPORTS
 __webpack_require__.d(__webpack_exports__, {
   Fi: () => (/* reexport */ AI_ASSISTANT_AUTH_PROVIDER),
   Hb: () => (/* reexport */ AI_ASSISTANT_TOOL_PROVIDER),
   T4: () => (/* reexport */ AI_ASSISTANT_USER_LOOKUP_PROVIDER),
+  i1: () => (/* reexport */ COMPANY_ACCESS_RESOLVER),
+  Ti: () => (/* reexport */ EMAIL_ADAPTER),
   LO: () => (/* reexport */ EVENT_MANAGER_ADAPTER),
   KR: () => (/* reexport */ NOTIFICATION_ADAPTER),
+  VG: () => (/* reexport */ PERMISSION_ACTION_REGISTRY),
+  jd: () => (/* reexport */ PERMISSION_RESOLVER),
   kF: () => (/* reexport */ PERMISSION_SYNC_ADAPTER)
 });
 
@@ -18,12 +22,24 @@ const AI_ASSISTANT_AUTH_PROVIDER = 'AI_ASSISTANT_AUTH_PROVIDER';
 const AI_ASSISTANT_TOOL_PROVIDER = 'AI_ASSISTANT_TOOL_PROVIDER';
 const AI_ASSISTANT_USER_LOOKUP_PROVIDER = 'AI_ASSISTANT_USER_LOOKUP_PROVIDER';
 
+;// CONCATENATED MODULE: ./projects/nestjs-shared/src/interfaces/company-access-resolver.interface.ts
+const COMPANY_ACCESS_RESOLVER = 'COMPANY_ACCESS_RESOLVER';
+
+;// CONCATENATED MODULE: ./projects/nestjs-shared/src/interfaces/email-adapter.interface.ts
+const EMAIL_ADAPTER = 'EMAIL_ADAPTER';
+
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/interfaces/event-manager-adapter.interface.ts
 const EVENT_MANAGER_ADAPTER = 'EVENT_MANAGER_ADAPTER';
 
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/interfaces/notification-adapter.interface.ts
 const NOTIFICATION_ADAPTER = 'NOTIFICATION_ADAPTER';
 
+;// CONCATENATED MODULE: ./projects/nestjs-shared/src/interfaces/permission-action-registry.interface.ts
+const PERMISSION_ACTION_REGISTRY = 'PERMISSION_ACTION_REGISTRY';
+
+;// CONCATENATED MODULE: ./projects/nestjs-shared/src/interfaces/permission-resolver.interface.ts
+const PERMISSION_RESOLVER = 'PERMISSION_RESOLVER';
+
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/interfaces/permission-sync-adapter.interface.ts
 const PERMISSION_SYNC_ADAPTER = 'PERMISSION_SYNC_ADAPTER';
 
@@ -41,6 +57,11 @@ const PERMISSION_SYNC_ADAPTER = 'PERMISSION_SYNC_ADAPTER';
 
 
 
+
+
+
+
+
 },
 
 };
@@ -48,10 +69,14 @@ import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
 import * as __rspack_chunk_1 from './index.js';
 __webpack_require__.C(__rspack_chunk_1);
-var __webpack_exports__ = __webpack_exec__(473);var __webpack_exports__AI_ASSISTANT_AUTH_PROVIDER = __webpack_exports__.Fi;
+var __webpack_exports__ = __webpack_exec__(905);var __webpack_exports__AI_ASSISTANT_AUTH_PROVIDER = __webpack_exports__.Fi;
 var __webpack_exports__AI_ASSISTANT_TOOL_PROVIDER = __webpack_exports__.Hb;
 var __webpack_exports__AI_ASSISTANT_USER_LOOKUP_PROVIDER = __webpack_exports__.T4;
+var __webpack_exports__COMPANY_ACCESS_RESOLVER = __webpack_exports__.i1;
+var __webpack_exports__EMAIL_ADAPTER = __webpack_exports__.Ti;
 var __webpack_exports__EVENT_MANAGER_ADAPTER = __webpack_exports__.LO;
 var __webpack_exports__NOTIFICATION_ADAPTER = __webpack_exports__.KR;
+var __webpack_exports__PERMISSION_ACTION_REGISTRY = __webpack_exports__.VG;
+var __webpack_exports__PERMISSION_RESOLVER = __webpack_exports__.jd;
 var __webpack_exports__PERMISSION_SYNC_ADAPTER = __webpack_exports__.kF;
-export { __webpack_exports__AI_ASSISTANT_AUTH_PROVIDER as AI_ASSISTANT_AUTH_PROVIDER, __webpack_exports__AI_ASSISTANT_TOOL_PROVIDER as AI_ASSISTANT_TOOL_PROVIDER, __webpack_exports__AI_ASSISTANT_USER_LOOKUP_PROVIDER as AI_ASSISTANT_USER_LOOKUP_PROVIDER, __webpack_exports__EVENT_MANAGER_ADAPTER as EVENT_MANAGER_ADAPTER, __webpack_exports__NOTIFICATION_ADAPTER as NOTIFICATION_ADAPTER, __webpack_exports__PERMISSION_SYNC_ADAPTER as PERMISSION_SYNC_ADAPTER };
+export { __webpack_exports__AI_ASSISTANT_AUTH_PROVIDER as AI_ASSISTANT_AUTH_PROVIDER, __webpack_exports__AI_ASSISTANT_TOOL_PROVIDER as AI_ASSISTANT_TOOL_PROVIDER, __webpack_exports__AI_ASSISTANT_USER_LOOKUP_PROVIDER as AI_ASSISTANT_USER_LOOKUP_PROVIDER, __webpack_exports__COMPANY_ACCESS_RESOLVER as COMPANY_ACCESS_RESOLVER, __webpack_exports__EMAIL_ADAPTER as EMAIL_ADAPTER, __webpack_exports__EVENT_MANAGER_ADAPTER as EVENT_MANAGER_ADAPTER, __webpack_exports__NOTIFICATION_ADAPTER as NOTIFICATION_ADAPTER, __webpack_exports__PERMISSION_ACTION_REGISTRY as PERMISSION_ACTION_REGISTRY, __webpack_exports__PERMISSION_RESOLVER as PERMISSION_RESOLVER, __webpack_exports__PERMISSION_SYNC_ADAPTER as PERMISSION_SYNC_ADAPTER };

package/fesm/middlewares/index.js

@@ -2,7 +2,7 @@ export const __rspack_esm_id = 548;
 export const __rspack_esm_ids = [548];
 export const __webpack_modules__ = {
 799(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _logger_middleware_js__rspack_import_0 = __webpack_require__(419);
+/* import */ var _logger_middleware_js__rspack_import_0 = __webpack_require__(591);
 
 
 __webpack_require__.d(__webpack_exports__, {
@@ -10,6 +10,7 @@ __webpack_require__.d(__webpack_exports__, {
   F6: () => (/* reexport safe */ _logger_middleware_js__rspack_import_0.F6),
   RE: () => (/* reexport safe */ _logger_middleware_js__rspack_import_0.RE),
   V8: () => (/* reexport safe */ _logger_middleware_js__rspack_import_0.V8),
+  ZV: () => (/* reexport safe */ _logger_middleware_js__rspack_import_0.ZV),
   pq: () => (/* reexport safe */ _logger_middleware_js__rspack_import_0.pq),
   xR: () => (/* reexport safe */ _logger_middleware_js__rspack_import_0.xR)
 });
@@ -20,7 +21,7 @@ __webpack_require__.d(__webpack_exports__, {
 };
 import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
-import * as __rspack_chunk_1 from '../720.js';
+import * as __rspack_chunk_1 from '../948.js';
 __webpack_require__.C(__rspack_chunk_1);
 import * as __rspack_chunk_2 from './index.js';
 __webpack_require__.C(__rspack_chunk_2);
@@ -30,4 +31,5 @@ var __webpack_exports__getRequestId = __webpack_exports__.RE;
 var __webpack_exports__getTenantId = __webpack_exports__.EO;
 var __webpack_exports__getUserId = __webpack_exports__.F6;
 var __webpack_exports__requestContext = __webpack_exports__.V8;
-export { __webpack_exports__LoggerMiddleware as LoggerMiddleware, __webpack_exports__getCompanyId as getCompanyId, __webpack_exports__getRequestId as getRequestId, __webpack_exports__getTenantId as getTenantId, __webpack_exports__getUserId as getUserId, __webpack_exports__requestContext as requestContext };
+var __webpack_exports__setRequestUser = __webpack_exports__.ZV;
+export { __webpack_exports__LoggerMiddleware as LoggerMiddleware, __webpack_exports__getCompanyId as getCompanyId, __webpack_exports__getRequestId as getRequestId, __webpack_exports__getTenantId as getTenantId, __webpack_exports__getUserId as getUserId, __webpack_exports__requestContext as requestContext, __webpack_exports__setRequestUser as setRequestUser };