@flusys/nestjs-shared 9.1.0 → 9.1.1

package/fesm/index.js

@@ -338,12 +338,14 @@ __webpack_require__.d(__webpack_exports__, {
   mKy: () => (/* reexport */ constants/* .AUTH_MESSAGES */.mK),
   x_h: () => (/* reexport */ src_decorators/* .ApiResponseDto */.x_),
   GfA: () => (/* reexport */ classes/* .ApiService */.Gf),
+  __v: () => (/* reexport */ interfaces/* .BRANCH_HIERARCHY_RESOLVER */.__),
   wA5: () => (/* reexport */ classes/* .BRANCH_PERMISSIONS */.wA),
   m8j: () => (/* reexport */ exceptions/* .BaseAppException */.m8),
   L3w: () => (/* reexport */ dtos/* .BulkMetaDto */.L3),
   jSz: () => (/* reexport */ dtos/* .BulkResponseDto */.jS),
   zlh: () => (/* reexport */ constants/* .CACHE_INSTANCE */.zl),
   xwl: () => (/* reexport */ constants/* .CLIENT_TYPE_HEADER */.xw),
+  i1s: () => (/* reexport */ interfaces/* .COMPANY_ACCESS_RESOLVER */.i1),
   aO_: () => (/* reexport */ classes/* .COMPANY_ACTION_PERMISSIONS */.aO),
   t$1: () => (/* reexport */ classes/* .COMPANY_PERMISSIONS */.t$),
   vdX: () => (/* reexport */ modules/* .CacheModule */.vd),
@@ -361,6 +363,7 @@ __webpack_require__.d(__webpack_exports__, {
   ndZ: () => (/* reexport */ interceptors/* .DeleteEmptyIdFromBodyInterceptor */.nd),
   XIn: () => (/* reexport */ classes/* .DisabledEventBus */.XI),
   zTW: () => (/* reexport */ pipes/* .DtoBodyValidationPipe */.zT),
+  Ti4: () => (/* reexport */ interfaces/* .EMAIL_ADAPTER */.Ti),
   V0D: () => (/* reexport */ classes/* .EMAIL_CONFIG_PERMISSIONS */.V0),
   z$E: () => (/* reexport */ classes/* .EMAIL_TEMPLATE_PERMISSIONS */.z$),
   G0M: () => (/* reexport */ classes/* .ENTITY_BUILDER_ALL_DYNAMIC */.G0),
@@ -400,6 +403,8 @@ __webpack_require__.d(__webpack_exports__, {
   TWO: () => (/* reexport */ dtos/* .ListResponseDto */.TW),
   JzB: () => (/* reexport */ src_decorators/* .LogAction */.Jz),
   pqH: () => (/* reexport */ middlewares/* .LoggerMiddleware */.pq),
+  DfB: () => (/* reexport */ utils/* .MAX_PERMISSION_LOGIC_CODES */.Df),
+  kWK: () => (/* reexport */ utils/* .MAX_PERMISSION_LOGIC_DEPTH */.kW),
   PSy: () => (/* reexport */ classes/* .MemoryTransport */.PS),
   qs7: () => (/* reexport */ dtos/* .MessageResponseDto */.qs),
   Ct1: () => (/* reexport */ modules/* .MultiTenantDataSourceService */.Ct),
@@ -459,6 +464,7 @@ __webpack_require__.d(__webpack_exports__, {
   uhy: () => (/* reexport */ modules/* .UtilsModule */.uh),
   TJO: () => (/* reexport */ modules/* .UtilsService */.TJ),
   drm: () => (/* reexport */ exceptions/* .ValidationException */.dr),
+  f7g: () => (/* reexport */ utils/* .applyBranchFilter */.f7),
   wfV: () => (/* reexport */ utils/* .applyCompanyFilter */.wf),
   kQr: () => (/* reexport */ utils/* .buildCompanyWhereCondition */.kQ),
   fJ7: () => (/* reexport */ utils/* .buildCookieOptions */.fJ),
@@ -467,6 +473,8 @@ __webpack_require__.d(__webpack_exports__, {
   ntB: () => (/* reexport */ utils/* .buildPermissionCacheKey */.nt),
   Zq5: () => (/* reexport */ classes/* .buildQuery */.Zq),
   qWZ: () => (/* reexport */ utils/* .cacheTenantId */.qW),
+  SfM: () => (/* reexport */ utils/* .collectBranchAncestorIds */.Sf),
+  qY6: () => (/* reexport */ utils/* .collectBranchDescendantIds */.qY),
   RDX: () => (/* reexport */ classes/* .createApiController */.RD),
   fv2: () => (/* reexport */ modules/* .createModuleEventsProvider */.fv),
   Xvj: () => (/* reexport */ classes/* .createModuleLogger */.Xv),
@@ -475,11 +483,13 @@ __webpack_require__.d(__webpack_exports__, {
   GHQ: () => (/* reexport */ classes/* .dynamicEntityPermissionParent */.GH),
   ZD5: () => (/* reexport */ utils/* .escapeHtml */.ZD),
   qob: () => (/* reexport */ utils/* .escapeHtmlVariables */.qo),
+  Ngr: () => (/* reexport */ utils/* .evaluatePermissionLogic */.Ng),
   hXo: () => (/* reexport */ utils/* .extractFrontendUrl */.hX),
   Sdq: () => (/* reexport */ utils/* .formatInTimezone */.Sd),
   sN5: () => (/* reexport */ utils/* .generateSecureToken */.sN),
   z9G: () => (/* reexport */ utils/* .generateSlug */.z9),
   ool: () => (/* reexport */ utils/* .generateUniqueSlug */.oo),
+  gNH: () => (/* reexport */ utils/* .getBranchPath */.gN),
   TjQ: () => (/* reexport */ classes/* .getCastIntType */.Tj),
   xRP: () => (/* reexport */ middlewares/* .getCompanyId */.xR),
   pfh: () => (/* reexport */ classes/* .getJsonColumnType */.pf),
@@ -490,16 +500,21 @@ __webpack_require__.d(__webpack_exports__, {
   faw: () => (/* reexport */ utils/* .hasCompanyId */.f),
   QKw: () => (/* reexport */ utils/* .hashToken */.QK),
   KJ$: () => (/* reexport */ classes/* .instance */.KJ),
+  QUx: () => (/* reexport */ utils/* .isBranchWithin */.QU),
   whA: () => (/* reexport */ utils/* .isBrowserRequest */.wh),
   _dF: () => (/* reexport */ utils/* .isExpired */._d),
   _cr: () => (/* reexport */ utils/* .isMultiWildcard */._c),
   lkO: () => (/* reexport */ utils/* .loadOptionalModule */.lk),
+  CQw: () => (/* reexport */ utils/* .loadPermissionCodes */.CQ),
   vfv: () => (/* reexport */ utils/* .localToUtc */.vf),
   qe: () => (/* reexport */ utils/* .matchEventPattern */.qe),
   xYV: () => (/* reexport */ utils/* .matchesPermission */.xY),
   RGt: () => (/* reexport */ utils/* .messageRef */.RG),
   RiU: () => (/* reexport */ modules/* .moduleEventsToken */.Ri),
+  kW7: () => (/* reexport */ utils/* .normalizeBranchIds */.Ty),
   Ju5: () => (/* reexport */ utils/* .parseDurationToMs */.Ju),
+  MOQ: () => (/* reexport */ utils/* .permissionLogicCodes */.MO),
+  HUk: () => (/* reexport */ utils/* .permissionLogicProblem */.HU),
   wTm: () => (/* reexport */ classes/* .publishDomainEvent */.wT),
   V8o: () => (/* reexport */ middlewares/* .requestContext */.V8),
   INw: () => (/* reexport */ utils/* .sanitizeEventPayload */.IN),
@@ -803,14 +818,14 @@ GlobalExceptionFilter = _ts_decorate([
 var guards = __webpack_require__(510);
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/interceptors/index.ts + 7 modules
 var interceptors = __webpack_require__(863);
-// EXTERNAL MODULE: ./projects/nestjs-shared/src/interfaces/index.ts + 6 modules
-var interfaces = __webpack_require__(74);
+// EXTERNAL MODULE: ./projects/nestjs-shared/src/interfaces/index.ts + 9 modules
+var interfaces = __webpack_require__(85);
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/middlewares/index.ts
 var middlewares = __webpack_require__(799);
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/modules/index.ts + 9 modules
 var modules = __webpack_require__(686);
-// EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/index.ts + 7 modules
-var utils = __webpack_require__(528);
+// EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/index.ts + 8 modules
+var utils = __webpack_require__(301);
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/pipes/index.ts + 1 modules
 var pipes = __webpack_require__(928);
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/index.ts
@@ -832,13 +847,16 @@ var pipes = __webpack_require__(928);
 
 
 },
-74(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+85(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
 // EXPORTS
 __webpack_require__.d(__webpack_exports__, {
   Fi: () => (/* reexport */ AI_ASSISTANT_AUTH_PROVIDER),
   Hb: () => (/* reexport */ AI_ASSISTANT_TOOL_PROVIDER),
   T4: () => (/* reexport */ AI_ASSISTANT_USER_LOOKUP_PROVIDER),
+  __: () => (/* reexport */ BRANCH_HIERARCHY_RESOLVER),
+  i1: () => (/* reexport */ COMPANY_ACCESS_RESOLVER),
+  Ti: () => (/* reexport */ EMAIL_ADAPTER),
   LO: () => (/* reexport */ EVENT_MANAGER_ADAPTER),
   KR: () => (/* reexport */ NOTIFICATION_ADAPTER),
   VG: () => (/* reexport */ PERMISSION_ACTION_REGISTRY),
@@ -851,6 +869,15 @@ const AI_ASSISTANT_AUTH_PROVIDER = 'AI_ASSISTANT_AUTH_PROVIDER';
 const AI_ASSISTANT_TOOL_PROVIDER = 'AI_ASSISTANT_TOOL_PROVIDER';
 const AI_ASSISTANT_USER_LOOKUP_PROVIDER = 'AI_ASSISTANT_USER_LOOKUP_PROVIDER';
 
+;// CONCATENATED MODULE: ./projects/nestjs-shared/src/interfaces/branch-hierarchy-resolver.interface.ts
+const BRANCH_HIERARCHY_RESOLVER = 'BRANCH_HIERARCHY_RESOLVER';
+
+;// CONCATENATED MODULE: ./projects/nestjs-shared/src/interfaces/company-access-resolver.interface.ts
+const COMPANY_ACCESS_RESOLVER = 'COMPANY_ACCESS_RESOLVER';
+
+;// CONCATENATED MODULE: ./projects/nestjs-shared/src/interfaces/email-adapter.interface.ts
+const EMAIL_ADAPTER = 'EMAIL_ADAPTER';
+
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/interfaces/event-manager-adapter.interface.ts
 const EVENT_MANAGER_ADAPTER = 'EVENT_MANAGER_ADAPTER';
 
@@ -883,6 +910,9 @@ const PERMISSION_SYNC_ADAPTER = 'PERMISSION_SYNC_ADAPTER';
 
 
 
+
+
+
 },
 799(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 /* import */ var _logger_middleware_js__rspack_import_0 = __webpack_require__(591);
@@ -899,538 +929,6 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 
-},
-528(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-
-// EXPORTS
-__webpack_require__.d(__webpack_exports__, {
-  s8: () => (/* reexport */ permission_cache_key_util/* .DEFAULT_COMPANY_PERMISSION_KEY_FORMAT */.s8),
-  q6: () => (/* reexport */ permission_cache_key_util/* .DEFAULT_USER_PERMISSION_KEY_FORMAT */.q6),
-  wf: () => (/* reexport */ applyCompanyFilter),
-  kQ: () => (/* reexport */ buildCompanyWhereCondition),
-  fJ: () => (/* reexport */ buildCookieOptions),
-  oV: () => (/* reexport */ buildFrontendUrl),
-  nt: () => (/* reexport */ permission_cache_key_util/* .buildPermissionCacheKey */.nt),
-  qW: () => (/* reexport */ cache_tenant_util/* .cacheTenantId */.q),
-  ZD: () => (/* reexport */ escapeHtml),
-  qo: () => (/* reexport */ escapeHtmlVariables),
-  hX: () => (/* reexport */ extractFrontendUrl),
-  Sd: () => (/* reexport */ formatInTimezone),
-  sN: () => (/* reexport */ generateSecureToken),
-  z9: () => (/* reexport */ generateSlug),
-  oo: () => (/* reexport */ generateUniqueSlug),
-  oB: () => (/* reexport */ getTodayInTimezone),
-  f: () => (/* reexport */ hasCompanyId),
-  QK: () => (/* reexport */ hashToken),
-  wh: () => (/* reexport */ isBrowserRequest),
-  _d: () => (/* reexport */ isExpired),
-  _c: () => (/* reexport */ event_pattern_util/* .isMultiWildcard */._c),
-  lk: () => (/* reexport */ optional_module_util/* .loadOptionalModule */.l),
-  vf: () => (/* reexport */ localToUtc),
-  qe: () => (/* reexport */ event_pattern_util/* .matchEventPattern */.qe),
-  xY: () => (/* reexport */ permission_match_util/* .matchesPermission */.x),
-  RG: () => (/* reexport */ messageRef),
-  Ju: () => (/* reexport */ parseDurationToMs),
-  IN: () => (/* reexport */ event_pattern_util/* .sanitizeEventPayload */.IN),
-  v4: () => (/* reexport */ utcToLocal),
-  bE: () => (/* reexport */ validateCompanyOwnership),
-  o0: () => (/* reexport */ withSavepoint)
-});
-
-// EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/cache-tenant.util.ts
-var cache_tenant_util = __webpack_require__(154);
-;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/date-time.util.ts
-function getOffsetMinutes(utcDate, timezone) {
-    const extract = (tz)=>{
-        const parts = new Intl.DateTimeFormat('en-US', {
-            timeZone: tz,
-            year: 'numeric',
-            month: '2-digit',
-            day: '2-digit',
-            hour: '2-digit',
-            minute: '2-digit',
-            second: '2-digit',
-            hour12: false
-        }).formatToParts(utcDate);
-        const p = Object.fromEntries(parts.filter((x)=>x.type !== 'literal').map((x)=>[
-                x.type,
-                parseInt(x.value)
-            ]));
-        return Date.UTC(p['year'], p['month'] - 1, p['day'], p['hour'], p['minute'], p['second']);
-    };
-    return (extract(timezone) - extract('UTC')) / 60_000;
-}
-function localToUtc(dateStr, timeStr, timezone) {
-    const [year, month, day] = dateStr.split('-').map(Number);
-    const [hours, minutes] = timeStr.split(':').map(Number);
-    const approx = new Date(Date.UTC(year, month - 1, day, hours, minutes, 0));
-    const offset = getOffsetMinutes(approx, timezone);
-    const utcDate = new Date(approx.getTime() - offset * 60_000);
-    // DST boundary guard: re-check offset after adjustment
-    const finalOffset = getOffsetMinutes(utcDate, timezone);
-    return finalOffset !== offset ? new Date(approx.getTime() - finalOffset * 60_000) : utcDate;
-}
-function utcToLocal(utcDate, timezone) {
-    const d = typeof utcDate === 'string' ? new Date(utcDate) : utcDate;
-    const parts = new Intl.DateTimeFormat('en-CA', {
-        timeZone: timezone,
-        year: 'numeric',
-        month: '2-digit',
-        day: '2-digit',
-        hour: '2-digit',
-        minute: '2-digit',
-        hour12: false
-    }).formatToParts(d);
-    const p = Object.fromEntries(parts.filter((x)=>x.type !== 'literal').map((x)=>[
-            x.type,
-            x.value
-        ]));
-    // en-CA formats midnight hour as '24' — normalize to '00'
-    const hour = p['hour'] === '24' ? '00' : p['hour'];
-    return {
-        date: `${p['year']}-${p['month']}-${p['day']}`,
-        time: `${hour}:${p['minute']}`,
-        display: new Intl.DateTimeFormat('en-US', {
-            timeZone: timezone,
-            dateStyle: 'medium',
-            timeStyle: 'short'
-        }).format(d)
-    };
-}
-function formatInTimezone(utcDate, timezone, options = {
-    dateStyle: 'medium',
-    timeStyle: 'short'
-}) {
-    const d = typeof utcDate === 'string' ? new Date(utcDate) : utcDate;
-    return new Intl.DateTimeFormat('en-US', {
-        ...options,
-        timeZone: timezone
-    }).format(d);
-}
-function getTodayInTimezone(timezone) {
-    return utcToLocal(new Date(), timezone).date;
-}
-
-// EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/event-pattern.util.ts
-var event_pattern_util = __webpack_require__(456);
-;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/html-sanitizer.util.ts
-/**
- * HTML Sanitizer Utilities
- *
- * Provides functions for escaping HTML content to prevent XSS attacks.
- * Use these utilities when interpolating user-provided variables into HTML content.
- */ /**
- * HTML entity mapping for escaping special characters
- */ const HTML_ESCAPE_MAP = {
-    '&': '&',
-    '<': '&lt;',
-    '>': '&gt;',
-    '"': '&quot;',
-    "'": '&#x27;',
-    '/': '&#x2F;',
-    '`': '&#x60;',
-    '=': '&#x3D;'
-};
-/**
- * Regex pattern matching characters that need HTML escaping
- */ const HTML_ESCAPE_REGEX = /[&<>"'`=/]/g;
-/**
- * Escapes HTML special characters to prevent XSS attacks.
- *
- * @param str - The string to escape
- * @returns The escaped string safe for HTML insertion
- *
- * @example
- * ```typescript
- * escapeHtml('<script>alert("xss")</script>')
- * // Returns: '&lt;script&gt;alert(&quot;xss&quot;)&lt;/script&gt;'
- * ```
- */ function escapeHtml(str) {
-    if (!str || typeof str !== 'string') {
-        return str ?? '';
-    }
-    return str.replace(HTML_ESCAPE_REGEX, (char)=>HTML_ESCAPE_MAP[char]);
-}
-/**
- * Escapes all string values in a variables object for safe HTML interpolation.
- * Non-string values are converted to strings and escaped.
- *
- * @param variables - Object containing template variables
- * @returns New object with all string values HTML-escaped
- *
- * @example
- * ```typescript
- * escapeHtmlVariables({ name: '<script>xss</script>', count: 5 })
- * // Returns: { name: '&lt;script&gt;xss&lt;/script&gt;', count: '5' }
- * ```
- */ function escapeHtmlVariables(variables) {
-    if (!variables || typeof variables !== 'object') {
-        return {};
-    }
-    const escaped = {};
-    for (const [key, value] of Object.entries(variables)){
-        if (value === null || value === undefined) {
-            escaped[key] = '';
-        } else if (typeof value === 'string') {
-            escaped[key] = escapeHtml(value);
-        } else if (typeof value === 'object') {
-            // For objects/arrays, stringify and escape
-            escaped[key] = escapeHtml(JSON.stringify(value));
-        } else {
-            // For numbers, booleans, etc., convert to string (no escaping needed)
-            escaped[key] = String(value);
-        }
-    }
-    return escaped;
-}
-
-;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/message-ref.util.ts
-function messageRef(messageKey, messageVariables) {
-    return messageVariables ? {
-        messageKey,
-        messageVariables
-    } : {
-        messageKey
-    };
-}
-
-// EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/optional-module.util.ts
-var optional_module_util = __webpack_require__(368);
-// EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/permission-cache-key.util.ts
-var permission_cache_key_util = __webpack_require__(199);
-// EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/permission-match.util.ts
-var permission_match_util = __webpack_require__(788);
-// EXTERNAL MODULE: external "@nestjs/common"
-var common_ = __webpack_require__(157);
-// EXTERNAL MODULE: ./projects/nestjs-shared/src/constants/index.ts
-var constants = __webpack_require__(43);
-;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/query-helpers.util.ts
-
-
-/**
- * Apply company filter to a query builder if company feature is enabled.
- * Centralizes the common pattern of filtering by user's company.
- *
- * @param query - TypeORM SelectQueryBuilder
- * @param config - Company filter configuration
- * @param user - Current logged user (may be null)
- * @returns The modified query builder
- *
- * @example
- * ```typescript
- * applyCompanyFilter(query, {
- *   isCompanyFeatureEnabled: this.config.isCompanyFeatureEnabled(),
- *   entityAlias: 'file_manager',
- * }, user);
- * ```
- */ function applyCompanyFilter(query, config, user) {
-    const columnName = config.columnName ?? 'companyId';
-    if (config.isCompanyFeatureEnabled && user?.companyId) {
-        query.andWhere(`${config.entityAlias}.${columnName} = :companyId`, {
-            companyId: user.companyId
-        });
-    }
-    return query;
-}
-/**
- * Build a where condition object with optional company filter.
- *
- * @param baseWhere - Base where condition object
- * @param isCompanyFeatureEnabled - Whether company feature is enabled
- * @param user - Current logged user
- * @returns Where condition with companyId added if applicable
- *
- * @example
- * ```typescript
- * const where = buildCompanyWhereCondition(
- *   { id: dto.id },
- *   this.config.isCompanyFeatureEnabled(),
- *   user
- * );
- * // Returns { id: dto.id, companyId: user.companyId } if company feature enabled
- * ```
- */ function buildCompanyWhereCondition(baseWhere, isCompanyFeatureEnabled, user) {
-    if (isCompanyFeatureEnabled && user?.companyId) {
-        return {
-            ...baseWhere,
-            companyId: user.companyId
-        };
-    }
-    return baseWhere;
-}
-/**
- * Type guard to check if entity has companyId property
- */ function hasCompanyId(entity) {
-    return entity !== null && typeof entity === 'object' && 'companyId' in entity;
-}
-/**
- * Validates that an entity with companyId belongs to the user's company.
- * Throws BadRequestException if the entity belongs to another company.
- *
- * @param entity - Entity to validate
- * @param user - Current logged user
- * @param isCompanyFeatureEnabled - Whether company feature is enabled
- * @param entityName - Name of entity for error message (e.g., 'Email configuration')
- * @throws BadRequestException if entity belongs to another company
- *
- * @example
- * ```typescript
- * validateCompanyOwnership(config, user, this.config.isCompanyFeatureEnabled(), 'Email configuration');
- * ```
- */ function validateCompanyOwnership(entity, user, isCompanyFeatureEnabled, entityName) {
-    if (isCompanyFeatureEnabled && user?.companyId && hasCompanyId(entity)) {
-        if (entity.companyId && entity.companyId !== user.companyId) {
-            throw new common_.BadRequestException({
-                message: `${entityName} belongs to another company`,
-                messageKey: constants/* .AUTH_MESSAGES.ENTITY_BELOG_ANOTHER_COMPANY */.mK.ENTITY_BELOG_ANOTHER_COMPANY,
-                messageVariables: {
-                    entity: entityName
-                }
-            });
-        }
-    }
-}
-/**
- * Runs `fn` inside a savepoint of an already-open transaction. A failure rolls back only what
- * `fn` did, so the caller can swallow the error and keep using the transaction - without it,
- * PostgreSQL aborts the whole transaction after any failed statement.
- */ async function withSavepoint(queryRunner, fn) {
-    await queryRunner.startTransaction();
-    try {
-        const result = await fn();
-        await queryRunner.commitTransaction();
-        return result;
-    } catch (error) {
-        await queryRunner.rollbackTransaction();
-        throw error;
-    }
-}
-
-// EXTERNAL MODULE: external "@flusys/nestjs-core/config"
-var config_ = __webpack_require__(307);
-;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/request.util.ts
-
-
-
-/** Time unit multipliers in milliseconds */ const TIME_UNIT_MS = {
-    s: 1000,
-    m: 60 * 1000,
-    h: 60 * 60 * 1000,
-    d: 24 * 60 * 60 * 1000,
-    w: 7 * 24 * 60 * 60 * 1000
-};
-/** Get normalized client type from request header */ function getClientType(req) {
-    const clientType = req.headers[constants/* .CLIENT_TYPE_HEADER */.xw];
-    return clientType ? clientType.toLowerCase() : null;
-}
-/**
- * Detect if request is from a browser client.
- * Uses x-client-type header first, then falls back to user-agent detection.
- */ function isBrowserRequest(req) {
-    const clientType = getClientType(req);
-    if (clientType) {
-        return clientType === 'browser' || clientType === 'web';
-    }
-    const accept = req.headers['accept'] || '';
-    if (accept.includes('text/html')) return true;
-    const userAgent = req.headers['user-agent'] || '';
-    const browserPatterns = /mozilla|chrome|safari|firefox|edge|opera|msie/i;
-    return browserPatterns.test(userAgent) && !userAgent.includes('Postman');
-}
-/**
- * Build secure cookie options based on request context.
- * Handles HTTPS detection for TLS-terminating proxies.
- */ function buildCookieOptions(req) {
-    const hostname = req.hostname || '';
-    const origin = req.headers.origin || '';
-    const isProduction = config_.envConfig.isProduction();
-    const forwardedProto = req.headers['x-forwarded-proto'];
-    const isHttps = isProduction || forwardedProto === 'https' || origin.startsWith('https://') || req.secure;
-    let domain;
-    const domainParts = hostname.split('.');
-    if (domainParts.length > 2 && !hostname.includes('localhost')) {
-        domain = '.' + domainParts.slice(-2).join('.');
-    }
-    return {
-        secure: isHttps,
-        sameSite: isHttps ? 'strict' : 'lax',
-        ...domain && {
-            domain
-        }
-    };
-}
-/**
- * Parse duration string to milliseconds.
- * @example '7d' → 604800000, '24h' → 86400000, '30m' → 1800000
- */ function parseDurationToMs(duration, defaultMs = TIME_UNIT_MS.w) {
-    const match = duration.match(/^(\d+)(s|m|h|d|w)$/);
-    if (!match) return defaultMs;
-    const value = parseInt(match[1], 10);
-    const unit = match[2];
-    return value * (TIME_UNIT_MS[unit] ?? TIME_UNIT_MS.d);
-}
-/**
- * Determine the frontend base URL for auth-related links.
- * Matches the request's Origin/Referer against configured allowed origins.
- * Never trusts the request's Host header - it is client-controlled and would
- * let an attacker redirect password-reset/verification links to their own domain.
- */ function extractFrontendUrl(req) {
-    const allowedOrigins = config_.envConfig.getOrigins();
-    const origin = (req.get('origin') ?? req.get('referer') ?? '').trim();
-    if (origin && allowedOrigins.length) {
-        const matched = allowedOrigins.find((u)=>origin.startsWith(u));
-        if (matched) {
-            return matched;
-        }
-    }
-    if (allowedOrigins.length) {
-        return allowedOrigins[0];
-    }
-    throw new common_.BadRequestException({
-        message: 'Unable to determine frontend URL from request',
-        messageKey: constants/* .ERROR_MESSAGES.VALIDATION */.UU.VALIDATION
-    });
-}
-function buildFrontendUrl(req, path) {
-    const baseUrl = extractFrontendUrl(req);
-    return `${baseUrl}${path}`;
-}
-
-;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/string.util.ts
-/**
- * String utility functions
- */ /**
- * Generate URL-friendly slug from a string
- * @param text - The text to convert to slug
- * @param maxLength - Maximum length of the slug (default: 100)
- * @returns URL-friendly slug
- *
- * @example
- * generateSlug('My Company Name') // 'my-company-name'
- * generateSlug('Hello World!') // 'hello-world'
- */ function generateSlug(text, maxLength = 100) {
-    return text.toLowerCase().trim().replace(/[^a-z0-9\s-]/g, '') // Remove special characters
-    .replace(/\s+/g, '-') // Replace spaces with hyphens
-    .replace(/-+/g, '-') // Replace multiple hyphens with single
-    .replace(/^-+|-+$/g, '') // Remove leading/trailing hyphens
-    .substring(0, maxLength);
-}
-/**
- * Generate unique slug using single database query (optimized for large datasets)
- * Appends numeric suffix if collision exists (e.g., 'my-company-1', 'my-company-2')
- *
- * Performance: O(1) database query regardless of collision count
- * - Works efficiently with millions of records
- * - Requires index on slug column for best performance
- *
- * @param text - The text to convert to slug
- * @param findMatchingSlugs - Async function that returns all slugs matching base pattern
- *                            Should query: WHERE slug = baseSlug OR slug LIKE 'baseSlug-%'
- * @param maxLength - Maximum length of the base slug (default: 100)
- * @returns Unique URL-friendly slug
- *
- * @example
- * const slug = await generateUniqueSlug('My Company', async (baseSlug) => {
- *   return repo
- *     .createQueryBuilder('c')
- *     .select('c.slug')
- *     .where('c.slug = :base OR c.slug LIKE :pattern', {
- *       base: baseSlug,
- *       pattern: `${baseSlug}-%`,
- *     })
- *     .getMany()
- *     .then(rows => rows.map(r => r.slug));
- * });
- */ async function generateUniqueSlug(text, findMatchingSlugs, maxLength = 100) {
-    const baseSlug = generateSlug(text, maxLength);
-    // Single query to get all matching slugs
-    const existingSlugs = await findMatchingSlugs(baseSlug);
-    // No collisions - base slug is available
-    if (existingSlugs.length === 0) {
-        return baseSlug;
-    }
-    // Build set for O(1) lookup
-    const existingSet = new Set(existingSlugs);
-    // Base slug not taken (only suffixed versions exist)
-    if (!existingSet.has(baseSlug)) {
-        return baseSlug;
-    }
-    // Find next available suffix in memory (fast)
-    let counter = 1;
-    while(counter < 10000){
-        const slugWithSuffix = `${baseSlug}-${counter}`;
-        if (!existingSet.has(slugWithSuffix)) {
-            return slugWithSuffix;
-        }
-        counter++;
-    }
-    // Fallback: append random string (extremely rare edge case)
-    const randomSuffix = Math.random().toString(36).substring(2, 8);
-    return `${baseSlug}-${randomSuffix}`;
-}
-
-// EXTERNAL MODULE: external "crypto"
-var external_crypto_ = __webpack_require__(823);
-;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/token.util.ts
-
-/** 32 random bytes as hex, suitable for a password-reset/OTP/access-style token */ function generateSecureToken() {
-    return external_crypto_.randomBytes(32).toString('hex');
-}
-/** SHA-256 hash of a token, for storing/comparing tokens without keeping the raw value */ function hashToken(value) {
-    return external_crypto_.createHash('sha256').update(value).digest('hex');
-}
-function isExpired(expiresAt) {
-    return expiresAt < new Date();
-}
-
-;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/index.ts
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-},
-368(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/**
- * Loads an optional peer dependency at runtime.
- *
- * The specifier has to stay invisible to the bundler. A plain `import(name)`
- * looks dynamic in source but webpack rewrites it into a context module rooted
- * at this directory - one that can only ever resolve files sitting next to this
- * one - so `amqplib` and `kafkajs` fail to load in the bundled app no matter how
- * correctly they are installed. Both lookups below are assembled at runtime,
- * where no bundler can rewrite them.
- *
- * `require` is used first because it is what the CommonJS builds actually run
- * on; native ESM has no `require`, and there `import()` is the only way in.
- */ async function loadOptionalModule(name) {
-    const runtimeRequire = resolveRuntimeRequire();
-    if (runtimeRequire) return runtimeRequire(name);
-    const runtimeImport = new Function('specifier', 'return import(specifier);');
-    return runtimeImport(name);
-}
-/** Undefined under native ESM and inside a bundle that shadows nothing back */ function resolveRuntimeRequire() {
-    try {
-        return eval('typeof require === "function" ? require : undefined');
-    } catch  {
-        return undefined;
-    }
-}
-
-__webpack_require__.d(__webpack_exports__, {
-  l: () => (loadOptionalModule)
-});
-
-
 },
 
 };
@@ -1446,8 +944,10 @@ import * as __rspack_chunk_4 from './470.js';
 __webpack_require__.C(__rspack_chunk_4);
 import * as __rspack_chunk_5 from './667.js';
 __webpack_require__.C(__rspack_chunk_5);
-import * as __rspack_chunk_6 from './index.js';
+import * as __rspack_chunk_6 from './270.js';
 __webpack_require__.C(__rspack_chunk_6);
+import * as __rspack_chunk_7 from './index.js';
+__webpack_require__.C(__rspack_chunk_7);
 var __webpack_exports__ = __webpack_exec__(560);var __webpack_exports__ACTION_PERMISSIONS = __webpack_exports__.Y75;
 var __webpack_exports__AI_ASSISTANT_AUTH_PROVIDER = __webpack_exports__.FiT;
 var __webpack_exports__AI_ASSISTANT_PERMISSIONS = __webpack_exports__.Bzm;
@@ -1457,12 +957,14 @@ var __webpack_exports__AUDIT_BODY_KEYS = __webpack_exports__.gG9;
 var __webpack_exports__AUTH_MESSAGES = __webpack_exports__.mKy;
 var __webpack_exports__ApiResponseDto = __webpack_exports__.x_h;
 var __webpack_exports__ApiService = __webpack_exports__.GfA;
+var __webpack_exports__BRANCH_HIERARCHY_RESOLVER = __webpack_exports__.__v;
 var __webpack_exports__BRANCH_PERMISSIONS = __webpack_exports__.wA5;
 var __webpack_exports__BaseAppException = __webpack_exports__.m8j;
 var __webpack_exports__BulkMetaDto = __webpack_exports__.L3w;
 var __webpack_exports__BulkResponseDto = __webpack_exports__.jSz;
 var __webpack_exports__CACHE_INSTANCE = __webpack_exports__.zlh;
 var __webpack_exports__CLIENT_TYPE_HEADER = __webpack_exports__.xwl;
+var __webpack_exports__COMPANY_ACCESS_RESOLVER = __webpack_exports__.i1s;
 var __webpack_exports__COMPANY_ACTION_PERMISSIONS = __webpack_exports__.aO_;
 var __webpack_exports__COMPANY_PERMISSIONS = __webpack_exports__.t$1;
 var __webpack_exports__CacheModule = __webpack_exports__.vdX;
@@ -1480,6 +982,7 @@ var __webpack_exports__DeleteDto = __webpack_exports__.TG$;
 var __webpack_exports__DeleteEmptyIdFromBodyInterceptor = __webpack_exports__.ndZ;
 var __webpack_exports__DisabledEventBus = __webpack_exports__.XIn;
 var __webpack_exports__DtoBodyValidationPipe = __webpack_exports__.zTW;
+var __webpack_exports__EMAIL_ADAPTER = __webpack_exports__.Ti4;
 var __webpack_exports__EMAIL_CONFIG_PERMISSIONS = __webpack_exports__.V0D;
 var __webpack_exports__EMAIL_TEMPLATE_PERMISSIONS = __webpack_exports__.z$E;
 var __webpack_exports__ENTITY_BUILDER_ALL_DYNAMIC = __webpack_exports__.G0M;
@@ -1519,6 +1022,8 @@ var __webpack_exports__LANGUAGE_PERMISSIONS = __webpack_exports__.Q5G;
 var __webpack_exports__ListResponseDto = __webpack_exports__.TWO;
 var __webpack_exports__LogAction = __webpack_exports__.JzB;
 var __webpack_exports__LoggerMiddleware = __webpack_exports__.pqH;
+var __webpack_exports__MAX_PERMISSION_LOGIC_CODES = __webpack_exports__.DfB;
+var __webpack_exports__MAX_PERMISSION_LOGIC_DEPTH = __webpack_exports__.kWK;
 var __webpack_exports__MemoryTransport = __webpack_exports__.PSy;
 var __webpack_exports__MessageResponseDto = __webpack_exports__.qs7;
 var __webpack_exports__MultiTenantDataSourceService = __webpack_exports__.Ct1;
@@ -1578,6 +1083,7 @@ var __webpack_exports__UserRoot = __webpack_exports__.q7i;
 var __webpack_exports__UtilsModule = __webpack_exports__.uhy;
 var __webpack_exports__UtilsService = __webpack_exports__.TJO;
 var __webpack_exports__ValidationException = __webpack_exports__.drm;
+var __webpack_exports__applyBranchFilter = __webpack_exports__.f7g;
 var __webpack_exports__applyCompanyFilter = __webpack_exports__.wfV;
 var __webpack_exports__buildCompanyWhereCondition = __webpack_exports__.kQr;
 var __webpack_exports__buildCookieOptions = __webpack_exports__.fJ7;
@@ -1586,6 +1092,8 @@ var __webpack_exports__buildFrontendUrl = __webpack_exports__.oVw;
 var __webpack_exports__buildPermissionCacheKey = __webpack_exports__.ntB;
 var __webpack_exports__buildQuery = __webpack_exports__.Zq5;
 var __webpack_exports__cacheTenantId = __webpack_exports__.qWZ;
+var __webpack_exports__collectBranchAncestorIds = __webpack_exports__.SfM;
+var __webpack_exports__collectBranchDescendantIds = __webpack_exports__.qY6;
 var __webpack_exports__createApiController = __webpack_exports__.RDX;
 var __webpack_exports__createModuleEventsProvider = __webpack_exports__.fv2;
 var __webpack_exports__createModuleLogger = __webpack_exports__.Xvj;
@@ -1594,11 +1102,13 @@ var __webpack_exports__dynamicEntityPermission = __webpack_exports__.aT4;
 var __webpack_exports__dynamicEntityPermissionParent = __webpack_exports__.GHQ;
 var __webpack_exports__escapeHtml = __webpack_exports__.ZD5;
 var __webpack_exports__escapeHtmlVariables = __webpack_exports__.qob;
+var __webpack_exports__evaluatePermissionLogic = __webpack_exports__.Ngr;
 var __webpack_exports__extractFrontendUrl = __webpack_exports__.hXo;
 var __webpack_exports__formatInTimezone = __webpack_exports__.Sdq;
 var __webpack_exports__generateSecureToken = __webpack_exports__.sN5;
 var __webpack_exports__generateSlug = __webpack_exports__.z9G;
 var __webpack_exports__generateUniqueSlug = __webpack_exports__.ool;
+var __webpack_exports__getBranchPath = __webpack_exports__.gNH;
 var __webpack_exports__getCastIntType = __webpack_exports__.TjQ;
 var __webpack_exports__getCompanyId = __webpack_exports__.xRP;
 var __webpack_exports__getJsonColumnType = __webpack_exports__.pfh;
@@ -1609,16 +1119,21 @@ var __webpack_exports__getUserId = __webpack_exports__.F64;
 var __webpack_exports__hasCompanyId = __webpack_exports__.faw;
 var __webpack_exports__hashToken = __webpack_exports__.QKw;
 var __webpack_exports__instance = __webpack_exports__.KJ$;
+var __webpack_exports__isBranchWithin = __webpack_exports__.QUx;
 var __webpack_exports__isBrowserRequest = __webpack_exports__.whA;
 var __webpack_exports__isExpired = __webpack_exports__._dF;
 var __webpack_exports__isMultiWildcard = __webpack_exports__._cr;
 var __webpack_exports__loadOptionalModule = __webpack_exports__.lkO;
+var __webpack_exports__loadPermissionCodes = __webpack_exports__.CQw;
 var __webpack_exports__localToUtc = __webpack_exports__.vfv;
 var __webpack_exports__matchEventPattern = __webpack_exports__.qe;
 var __webpack_exports__matchesPermission = __webpack_exports__.xYV;
 var __webpack_exports__messageRef = __webpack_exports__.RGt;
 var __webpack_exports__moduleEventsToken = __webpack_exports__.RiU;
+var __webpack_exports__normalizeBranchIds = __webpack_exports__.kW7;
 var __webpack_exports__parseDurationToMs = __webpack_exports__.Ju5;
+var __webpack_exports__permissionLogicCodes = __webpack_exports__.MOQ;
+var __webpack_exports__permissionLogicProblem = __webpack_exports__.HUk;
 var __webpack_exports__publishDomainEvent = __webpack_exports__.wTm;
 var __webpack_exports__requestContext = __webpack_exports__.V8o;
 var __webpack_exports__sanitizeEventPayload = __webpack_exports__.INw;
@@ -1626,4 +1141,4 @@ var __webpack_exports__setRequestUser = __webpack_exports__.ZVR;
 var __webpack_exports__utcToLocal = __webpack_exports__.v41;
 var __webpack_exports__validateCompanyOwnership = __webpack_exports__.bEU;
 var __webpack_exports__withSavepoint = __webpack_exports__.o0T;
-export { __webpack_exports__ACTION_PERMISSIONS as ACTION_PERMISSIONS, __webpack_exports__AI_ASSISTANT_AUTH_PROVIDER as AI_ASSISTANT_AUTH_PROVIDER, __webpack_exports__AI_ASSISTANT_PERMISSIONS as AI_ASSISTANT_PERMISSIONS, __webpack_exports__AI_ASSISTANT_TOOL_PROVIDER as AI_ASSISTANT_TOOL_PROVIDER, __webpack_exports__AI_ASSISTANT_USER_LOOKUP_PROVIDER as AI_ASSISTANT_USER_LOOKUP_PROVIDER, __webpack_exports__AUDIT_BODY_KEYS as AUDIT_BODY_KEYS, __webpack_exports__AUTH_MESSAGES as AUTH_MESSAGES, __webpack_exports__ApiResponseDto as ApiResponseDto, __webpack_exports__ApiService as ApiService, __webpack_exports__BRANCH_PERMISSIONS as BRANCH_PERMISSIONS, __webpack_exports__BaseAppException as BaseAppException, __webpack_exports__BulkMetaDto as BulkMetaDto, __webpack_exports__BulkResponseDto as BulkResponseDto, __webpack_exports__CACHE_INSTANCE as CACHE_INSTANCE, __webpack_exports__CLIENT_TYPE_HEADER as CLIENT_TYPE_HEADER, __webpack_exports__COMPANY_ACTION_PERMISSIONS as COMPANY_ACTION_PERMISSIONS, __webpack_exports__COMPANY_PERMISSIONS as COMPANY_PERMISSIONS, __webpack_exports__CacheModule as CacheModule, __webpack_exports__ConflictException as ConflictException, __webpack_exports__CurrentUser as CurrentUser, __webpack_exports__DEFAULT_COMPANY_PERMISSION_KEY_FORMAT as DEFAULT_COMPANY_PERMISSION_KEY_FORMAT, __webpack_exports__DEFAULT_EVENT_EXCHANGE as DEFAULT_EVENT_EXCHANGE, __webpack_exports__DEFAULT_EVENT_SERVICE_NAME as DEFAULT_EVENT_SERVICE_NAME, __webpack_exports__DEFAULT_EVENT_TOPIC as DEFAULT_EVENT_TOPIC, __webpack_exports__DEFAULT_USER_PERMISSION_KEY_FORMAT as DEFAULT_USER_PERMISSION_KEY_FORMAT, __webpack_exports__DEFAULT_VALIDATION_OPTIONS as DEFAULT_VALIDATION_OPTIONS, __webpack_exports__DOMAIN_EVENT_HANDLER_KEY as DOMAIN_EVENT_HANDLER_KEY, __webpack_exports__DOMAIN_EVENT_VERSION as DOMAIN_EVENT_VERSION, __webpack_exports__DeleteDto as DeleteDto, __webpack_exports__DeleteEmptyIdFromBodyInterceptor as DeleteEmptyIdFromBodyInterceptor, __webpack_exports__DisabledEventBus as DisabledEventBus, __webpack_exports__DtoBodyValidationPipe as DtoBodyValidationPipe, __webpack_exports__EMAIL_CONFIG_PERMISSIONS as EMAIL_CONFIG_PERMISSIONS, __webpack_exports__EMAIL_TEMPLATE_PERMISSIONS as EMAIL_TEMPLATE_PERMISSIONS, __webpack_exports__ENTITY_BUILDER_ALL_DYNAMIC as ENTITY_BUILDER_ALL_DYNAMIC, __webpack_exports__ENTITY_DEFINITION_PERMISSIONS as ENTITY_DEFINITION_PERMISSIONS, __webpack_exports__ERROR_MESSAGES as ERROR_MESSAGES, __webpack_exports__EVENT_BUS_INSTANCE as EVENT_BUS_INSTANCE, __webpack_exports__EVENT_BUS_MODULE_OPTIONS as EVENT_BUS_MODULE_OPTIONS, __webpack_exports__EVENT_MANAGER_ADAPTER as EVENT_MANAGER_ADAPTER, __webpack_exports__EVENT_PERMISSIONS as EVENT_PERMISSIONS, __webpack_exports__EventBusExplorer as EventBusExplorer, __webpack_exports__EventBusModule as EventBusModule, __webpack_exports__EventBusRegistry as EventBusRegistry, __webpack_exports__EventTransportRegistry as EventTransportRegistry, __webpack_exports__FIELD_DEFINITION_PERMISSIONS as FIELD_DEFINITION_PERMISSIONS, __webpack_exports__FILE_PERMISSIONS as FILE_PERMISSIONS, __webpack_exports__FLOW_DEFINITION_PERMISSIONS as FLOW_DEFINITION_PERMISSIONS, __webpack_exports__FOLDER_PERMISSIONS as FOLDER_PERMISSIONS, __webpack_exports__FORM_PERMISSIONS as FORM_PERMISSIONS, __webpack_exports__FORM_RESULT_PERMISSIONS as FORM_RESULT_PERMISSIONS, __webpack_exports__FilterAndPaginationDto as FilterAndPaginationDto, __webpack_exports__ForbiddenException as ForbiddenException, __webpack_exports__GetByIdBodyDto as GetByIdBodyDto, __webpack_exports__GetByIdsDto as GetByIdsDto, __webpack_exports__GlobalExceptionFilter as GlobalExceptionFilter, __webpack_exports__HybridCache as HybridCache, __webpack_exports__HybridEventBus as HybridEventBus, __webpack_exports__IDEMPOTENCY_CACHE_PREFIX as IDEMPOTENCY_CACHE_PREFIX, __webpack_exports__IDEMPOTENCY_KEY_HEADER as IDEMPOTENCY_KEY_HEADER, __webpack_exports__IS_PUBLIC_KEY as IS_PUBLIC_KEY, __webpack_exports__IdempotencyInterceptor as IdempotencyInterceptor, __webpack_exports__Identity as Identity, __webpack_exports__IdentityResponseDto as IdentityResponseDto, __webpack_exports__InsufficientPermissionsException as InsufficientPermissionsException, __webpack_exports__InternalServerException as InternalServerException, __webpack_exports__JwtAuthGuard as JwtAuthGuard, __webpack_exports__LANGUAGE_PERMISSIONS as LANGUAGE_PERMISSIONS, __webpack_exports__ListResponseDto as ListResponseDto, __webpack_exports__LogAction as LogAction, __webpack_exports__LoggerMiddleware as LoggerMiddleware, __webpack_exports__MemoryTransport as MemoryTransport, __webpack_exports__MessageResponseDto as MessageResponseDto, __webpack_exports__MultiTenantDataSourceService as MultiTenantDataSourceService, __webpack_exports__NOTIFICATION_ADAPTER as NOTIFICATION_ADAPTER, __webpack_exports__NOTIFICATION_PERMISSIONS as NOTIFICATION_PERMISSIONS, __webpack_exports__NoPermissionsFoundException as NoPermissionsFoundException, __webpack_exports__NotFoundException as NotFoundException, __webpack_exports__NotificationType as NotificationType, __webpack_exports__OnDomainEvent as OnDomainEvent, __webpack_exports__OptionalJwtGuard as OptionalJwtGuard, __webpack_exports__PERMISSIONS as PERMISSIONS, __webpack_exports__PERMISSIONS_CACHE_PREFIX as PERMISSIONS_CACHE_PREFIX, __webpack_exports__PERMISSIONS_KEY as PERMISSIONS_KEY, __webpack_exports__PERMISSION_ACTION_REGISTRY as PERMISSION_ACTION_REGISTRY, __webpack_exports__PERMISSION_GUARD_CONFIG as PERMISSION_GUARD_CONFIG, __webpack_exports__PERMISSION_RESOLVER as PERMISSION_RESOLVER, __webpack_exports__PERMISSION_SYNC_ADAPTER as PERMISSION_SYNC_ADAPTER, __webpack_exports__PaginationDto as PaginationDto, __webpack_exports__PaginationMetaDto as PaginationMetaDto, __webpack_exports__ParticipantStatus as ParticipantStatus, __webpack_exports__PermissionGuard as PermissionGuard, __webpack_exports__PermissionSystemUnavailableException as PermissionSystemUnavailableException, __webpack_exports__Public as Public, __webpack_exports__REQUEST_ID_HEADER as REQUEST_ID_HEADER, __webpack_exports__ROLE_ACTION_PERMISSIONS as ROLE_ACTION_PERMISSIONS, __webpack_exports__ROLE_PERMISSIONS as ROLE_PERMISSIONS, __webpack_exports__RecurrenceType as RecurrenceType, __webpack_exports__RequestMetaDto as RequestMetaDto, __webpack_exports__RequireAnyPermission as RequireAnyPermission, __webpack_exports__RequirePermission as RequirePermission, __webpack_exports__RequirePermissionLogic as RequirePermissionLogic, __webpack_exports__ResponseMetaInterceptor as ResponseMetaInterceptor, __webpack_exports__SOCIAL_AUTH_CONFIG_PERMISSIONS as SOCIAL_AUTH_CONFIG_PERMISSIONS, __webpack_exports__STORAGE_CONFIG_PERMISSIONS as STORAGE_CONFIG_PERMISSIONS, __webpack_exports__SYSTEM_MESSAGES as SYSTEM_MESSAGES, __webpack_exports__ServiceUnavailableException as ServiceUnavailableException, __webpack_exports__SetCreatedByOnBody as SetCreatedByOnBody, __webpack_exports__SetDeletedByOnBody as SetDeletedByOnBody, __webpack_exports__SetUpdateByOnBody as SetUpdateByOnBody, __webpack_exports__SharedPermissionCacheModule as SharedPermissionCacheModule, __webpack_exports__SharedPermissionCacheService as SharedPermissionCacheService, __webpack_exports__SingleResponseDto as SingleResponseDto, __webpack_exports__Slug as Slug, __webpack_exports__TASK_BOARD_PERMISSIONS as TASK_BOARD_PERMISSIONS, __webpack_exports__TASK_COMMENT_PERMISSIONS as TASK_COMMENT_PERMISSIONS, __webpack_exports__TASK_LABEL_PERMISSIONS as TASK_LABEL_PERMISSIONS, __webpack_exports__TASK_LIST_PERMISSIONS as TASK_LIST_PERMISSIONS, __webpack_exports__TASK_PERMISSIONS as TASK_PERMISSIONS, __webpack_exports__TRANSLATION_KEY_PERMISSIONS as TRANSLATION_KEY_PERMISSIONS, __webpack_exports__TRANSLATION_PERMISSIONS as TRANSLATION_PERMISSIONS, __webpack_exports__UPLOAD_CONFIG_PERMISSIONS as UPLOAD_CONFIG_PERMISSIONS, __webpack_exports__USER_ACTION_PERMISSIONS as USER_ACTION_PERMISSIONS, __webpack_exports__USER_PERMISSIONS as USER_PERMISSIONS, __webpack_exports__USER_ROLE_PERMISSIONS as USER_ROLE_PERMISSIONS, __webpack_exports__UnauthorizedException as UnauthorizedException, __webpack_exports__UserRoot as UserRoot, __webpack_exports__UtilsModule as UtilsModule, __webpack_exports__UtilsService as UtilsService, __webpack_exports__ValidationException as ValidationException, __webpack_exports__applyCompanyFilter as applyCompanyFilter, __webpack_exports__buildCompanyWhereCondition as buildCompanyWhereCondition, __webpack_exports__buildCookieOptions as buildCookieOptions, __webpack_exports__buildDomainEvent as buildDomainEvent, __webpack_exports__buildFrontendUrl as buildFrontendUrl, __webpack_exports__buildPermissionCacheKey as buildPermissionCacheKey, __webpack_exports__buildQuery as buildQuery, __webpack_exports__cacheTenantId as cacheTenantId, __webpack_exports__createApiController as createApiController, __webpack_exports__createModuleEventsProvider as createModuleEventsProvider, __webpack_exports__createModuleLogger as createModuleLogger, __webpack_exports__createSetUserFieldInterceptor as createSetUserFieldInterceptor, __webpack_exports__dynamicEntityPermission as dynamicEntityPermission, __webpack_exports__dynamicEntityPermissionParent as dynamicEntityPermissionParent, __webpack_exports__escapeHtml as escapeHtml, __webpack_exports__escapeHtmlVariables as escapeHtmlVariables, __webpack_exports__extractFrontendUrl as extractFrontendUrl, __webpack_exports__formatInTimezone as formatInTimezone, __webpack_exports__generateSecureToken as generateSecureToken, __webpack_exports__generateSlug as generateSlug, __webpack_exports__generateUniqueSlug as generateUniqueSlug, __webpack_exports__getCastIntType as getCastIntType, __webpack_exports__getCompanyId as getCompanyId, __webpack_exports__getJsonColumnType as getJsonColumnType, __webpack_exports__getRequestId as getRequestId, __webpack_exports__getTenantId as getTenantId, __webpack_exports__getTodayInTimezone as getTodayInTimezone, __webpack_exports__getUserId as getUserId, __webpack_exports__hasCompanyId as hasCompanyId, __webpack_exports__hashToken as hashToken, __webpack_exports__instance as instance, __webpack_exports__isBrowserRequest as isBrowserRequest, __webpack_exports__isExpired as isExpired, __webpack_exports__isMultiWildcard as isMultiWildcard, __webpack_exports__loadOptionalModule as loadOptionalModule, __webpack_exports__localToUtc as localToUtc, __webpack_exports__matchEventPattern as matchEventPattern, __webpack_exports__matchesPermission as matchesPermission, __webpack_exports__messageRef as messageRef, __webpack_exports__moduleEventsToken as moduleEventsToken, __webpack_exports__parseDurationToMs as parseDurationToMs, __webpack_exports__publishDomainEvent as publishDomainEvent, __webpack_exports__requestContext as requestContext, __webpack_exports__sanitizeEventPayload as sanitizeEventPayload, __webpack_exports__setRequestUser as setRequestUser, __webpack_exports__utcToLocal as utcToLocal, __webpack_exports__validateCompanyOwnership as validateCompanyOwnership, __webpack_exports__withSavepoint as withSavepoint };
+export { __webpack_exports__ACTION_PERMISSIONS as ACTION_PERMISSIONS, __webpack_exports__AI_ASSISTANT_AUTH_PROVIDER as AI_ASSISTANT_AUTH_PROVIDER, __webpack_exports__AI_ASSISTANT_PERMISSIONS as AI_ASSISTANT_PERMISSIONS, __webpack_exports__AI_ASSISTANT_TOOL_PROVIDER as AI_ASSISTANT_TOOL_PROVIDER, __webpack_exports__AI_ASSISTANT_USER_LOOKUP_PROVIDER as AI_ASSISTANT_USER_LOOKUP_PROVIDER, __webpack_exports__AUDIT_BODY_KEYS as AUDIT_BODY_KEYS, __webpack_exports__AUTH_MESSAGES as AUTH_MESSAGES, __webpack_exports__ApiResponseDto as ApiResponseDto, __webpack_exports__ApiService as ApiService, __webpack_exports__BRANCH_HIERARCHY_RESOLVER as BRANCH_HIERARCHY_RESOLVER, __webpack_exports__BRANCH_PERMISSIONS as BRANCH_PERMISSIONS, __webpack_exports__BaseAppException as BaseAppException, __webpack_exports__BulkMetaDto as BulkMetaDto, __webpack_exports__BulkResponseDto as BulkResponseDto, __webpack_exports__CACHE_INSTANCE as CACHE_INSTANCE, __webpack_exports__CLIENT_TYPE_HEADER as CLIENT_TYPE_HEADER, __webpack_exports__COMPANY_ACCESS_RESOLVER as COMPANY_ACCESS_RESOLVER, __webpack_exports__COMPANY_ACTION_PERMISSIONS as COMPANY_ACTION_PERMISSIONS, __webpack_exports__COMPANY_PERMISSIONS as COMPANY_PERMISSIONS, __webpack_exports__CacheModule as CacheModule, __webpack_exports__ConflictException as ConflictException, __webpack_exports__CurrentUser as CurrentUser, __webpack_exports__DEFAULT_COMPANY_PERMISSION_KEY_FORMAT as DEFAULT_COMPANY_PERMISSION_KEY_FORMAT, __webpack_exports__DEFAULT_EVENT_EXCHANGE as DEFAULT_EVENT_EXCHANGE, __webpack_exports__DEFAULT_EVENT_SERVICE_NAME as DEFAULT_EVENT_SERVICE_NAME, __webpack_exports__DEFAULT_EVENT_TOPIC as DEFAULT_EVENT_TOPIC, __webpack_exports__DEFAULT_USER_PERMISSION_KEY_FORMAT as DEFAULT_USER_PERMISSION_KEY_FORMAT, __webpack_exports__DEFAULT_VALIDATION_OPTIONS as DEFAULT_VALIDATION_OPTIONS, __webpack_exports__DOMAIN_EVENT_HANDLER_KEY as DOMAIN_EVENT_HANDLER_KEY, __webpack_exports__DOMAIN_EVENT_VERSION as DOMAIN_EVENT_VERSION, __webpack_exports__DeleteDto as DeleteDto, __webpack_exports__DeleteEmptyIdFromBodyInterceptor as DeleteEmptyIdFromBodyInterceptor, __webpack_exports__DisabledEventBus as DisabledEventBus, __webpack_exports__DtoBodyValidationPipe as DtoBodyValidationPipe, __webpack_exports__EMAIL_ADAPTER as EMAIL_ADAPTER, __webpack_exports__EMAIL_CONFIG_PERMISSIONS as EMAIL_CONFIG_PERMISSIONS, __webpack_exports__EMAIL_TEMPLATE_PERMISSIONS as EMAIL_TEMPLATE_PERMISSIONS, __webpack_exports__ENTITY_BUILDER_ALL_DYNAMIC as ENTITY_BUILDER_ALL_DYNAMIC, __webpack_exports__ENTITY_DEFINITION_PERMISSIONS as ENTITY_DEFINITION_PERMISSIONS, __webpack_exports__ERROR_MESSAGES as ERROR_MESSAGES, __webpack_exports__EVENT_BUS_INSTANCE as EVENT_BUS_INSTANCE, __webpack_exports__EVENT_BUS_MODULE_OPTIONS as EVENT_BUS_MODULE_OPTIONS, __webpack_exports__EVENT_MANAGER_ADAPTER as EVENT_MANAGER_ADAPTER, __webpack_exports__EVENT_PERMISSIONS as EVENT_PERMISSIONS, __webpack_exports__EventBusExplorer as EventBusExplorer, __webpack_exports__EventBusModule as EventBusModule, __webpack_exports__EventBusRegistry as EventBusRegistry, __webpack_exports__EventTransportRegistry as EventTransportRegistry, __webpack_exports__FIELD_DEFINITION_PERMISSIONS as FIELD_DEFINITION_PERMISSIONS, __webpack_exports__FILE_PERMISSIONS as FILE_PERMISSIONS, __webpack_exports__FLOW_DEFINITION_PERMISSIONS as FLOW_DEFINITION_PERMISSIONS, __webpack_exports__FOLDER_PERMISSIONS as FOLDER_PERMISSIONS, __webpack_exports__FORM_PERMISSIONS as FORM_PERMISSIONS, __webpack_exports__FORM_RESULT_PERMISSIONS as FORM_RESULT_PERMISSIONS, __webpack_exports__FilterAndPaginationDto as FilterAndPaginationDto, __webpack_exports__ForbiddenException as ForbiddenException, __webpack_exports__GetByIdBodyDto as GetByIdBodyDto, __webpack_exports__GetByIdsDto as GetByIdsDto, __webpack_exports__GlobalExceptionFilter as GlobalExceptionFilter, __webpack_exports__HybridCache as HybridCache, __webpack_exports__HybridEventBus as HybridEventBus, __webpack_exports__IDEMPOTENCY_CACHE_PREFIX as IDEMPOTENCY_CACHE_PREFIX, __webpack_exports__IDEMPOTENCY_KEY_HEADER as IDEMPOTENCY_KEY_HEADER, __webpack_exports__IS_PUBLIC_KEY as IS_PUBLIC_KEY, __webpack_exports__IdempotencyInterceptor as IdempotencyInterceptor, __webpack_exports__Identity as Identity, __webpack_exports__IdentityResponseDto as IdentityResponseDto, __webpack_exports__InsufficientPermissionsException as InsufficientPermissionsException, __webpack_exports__InternalServerException as InternalServerException, __webpack_exports__JwtAuthGuard as JwtAuthGuard, __webpack_exports__LANGUAGE_PERMISSIONS as LANGUAGE_PERMISSIONS, __webpack_exports__ListResponseDto as ListResponseDto, __webpack_exports__LogAction as LogAction, __webpack_exports__LoggerMiddleware as LoggerMiddleware, __webpack_exports__MAX_PERMISSION_LOGIC_CODES as MAX_PERMISSION_LOGIC_CODES, __webpack_exports__MAX_PERMISSION_LOGIC_DEPTH as MAX_PERMISSION_LOGIC_DEPTH, __webpack_exports__MemoryTransport as MemoryTransport, __webpack_exports__MessageResponseDto as MessageResponseDto, __webpack_exports__MultiTenantDataSourceService as MultiTenantDataSourceService, __webpack_exports__NOTIFICATION_ADAPTER as NOTIFICATION_ADAPTER, __webpack_exports__NOTIFICATION_PERMISSIONS as NOTIFICATION_PERMISSIONS, __webpack_exports__NoPermissionsFoundException as NoPermissionsFoundException, __webpack_exports__NotFoundException as NotFoundException, __webpack_exports__NotificationType as NotificationType, __webpack_exports__OnDomainEvent as OnDomainEvent, __webpack_exports__OptionalJwtGuard as OptionalJwtGuard, __webpack_exports__PERMISSIONS as PERMISSIONS, __webpack_exports__PERMISSIONS_CACHE_PREFIX as PERMISSIONS_CACHE_PREFIX, __webpack_exports__PERMISSIONS_KEY as PERMISSIONS_KEY, __webpack_exports__PERMISSION_ACTION_REGISTRY as PERMISSION_ACTION_REGISTRY, __webpack_exports__PERMISSION_GUARD_CONFIG as PERMISSION_GUARD_CONFIG, __webpack_exports__PERMISSION_RESOLVER as PERMISSION_RESOLVER, __webpack_exports__PERMISSION_SYNC_ADAPTER as PERMISSION_SYNC_ADAPTER, __webpack_exports__PaginationDto as PaginationDto, __webpack_exports__PaginationMetaDto as PaginationMetaDto, __webpack_exports__ParticipantStatus as ParticipantStatus, __webpack_exports__PermissionGuard as PermissionGuard, __webpack_exports__PermissionSystemUnavailableException as PermissionSystemUnavailableException, __webpack_exports__Public as Public, __webpack_exports__REQUEST_ID_HEADER as REQUEST_ID_HEADER, __webpack_exports__ROLE_ACTION_PERMISSIONS as ROLE_ACTION_PERMISSIONS, __webpack_exports__ROLE_PERMISSIONS as ROLE_PERMISSIONS, __webpack_exports__RecurrenceType as RecurrenceType, __webpack_exports__RequestMetaDto as RequestMetaDto, __webpack_exports__RequireAnyPermission as RequireAnyPermission, __webpack_exports__RequirePermission as RequirePermission, __webpack_exports__RequirePermissionLogic as RequirePermissionLogic, __webpack_exports__ResponseMetaInterceptor as ResponseMetaInterceptor, __webpack_exports__SOCIAL_AUTH_CONFIG_PERMISSIONS as SOCIAL_AUTH_CONFIG_PERMISSIONS, __webpack_exports__STORAGE_CONFIG_PERMISSIONS as STORAGE_CONFIG_PERMISSIONS, __webpack_exports__SYSTEM_MESSAGES as SYSTEM_MESSAGES, __webpack_exports__ServiceUnavailableException as ServiceUnavailableException, __webpack_exports__SetCreatedByOnBody as SetCreatedByOnBody, __webpack_exports__SetDeletedByOnBody as SetDeletedByOnBody, __webpack_exports__SetUpdateByOnBody as SetUpdateByOnBody, __webpack_exports__SharedPermissionCacheModule as SharedPermissionCacheModule, __webpack_exports__SharedPermissionCacheService as SharedPermissionCacheService, __webpack_exports__SingleResponseDto as SingleResponseDto, __webpack_exports__Slug as Slug, __webpack_exports__TASK_BOARD_PERMISSIONS as TASK_BOARD_PERMISSIONS, __webpack_exports__TASK_COMMENT_PERMISSIONS as TASK_COMMENT_PERMISSIONS, __webpack_exports__TASK_LABEL_PERMISSIONS as TASK_LABEL_PERMISSIONS, __webpack_exports__TASK_LIST_PERMISSIONS as TASK_LIST_PERMISSIONS, __webpack_exports__TASK_PERMISSIONS as TASK_PERMISSIONS, __webpack_exports__TRANSLATION_KEY_PERMISSIONS as TRANSLATION_KEY_PERMISSIONS, __webpack_exports__TRANSLATION_PERMISSIONS as TRANSLATION_PERMISSIONS, __webpack_exports__UPLOAD_CONFIG_PERMISSIONS as UPLOAD_CONFIG_PERMISSIONS, __webpack_exports__USER_ACTION_PERMISSIONS as USER_ACTION_PERMISSIONS, __webpack_exports__USER_PERMISSIONS as USER_PERMISSIONS, __webpack_exports__USER_ROLE_PERMISSIONS as USER_ROLE_PERMISSIONS, __webpack_exports__UnauthorizedException as UnauthorizedException, __webpack_exports__UserRoot as UserRoot, __webpack_exports__UtilsModule as UtilsModule, __webpack_exports__UtilsService as UtilsService, __webpack_exports__ValidationException as ValidationException, __webpack_exports__applyBranchFilter as applyBranchFilter, __webpack_exports__applyCompanyFilter as applyCompanyFilter, __webpack_exports__buildCompanyWhereCondition as buildCompanyWhereCondition, __webpack_exports__buildCookieOptions as buildCookieOptions, __webpack_exports__buildDomainEvent as buildDomainEvent, __webpack_exports__buildFrontendUrl as buildFrontendUrl, __webpack_exports__buildPermissionCacheKey as buildPermissionCacheKey, __webpack_exports__buildQuery as buildQuery, __webpack_exports__cacheTenantId as cacheTenantId, __webpack_exports__collectBranchAncestorIds as collectBranchAncestorIds, __webpack_exports__collectBranchDescendantIds as collectBranchDescendantIds, __webpack_exports__createApiController as createApiController, __webpack_exports__createModuleEventsProvider as createModuleEventsProvider, __webpack_exports__createModuleLogger as createModuleLogger, __webpack_exports__createSetUserFieldInterceptor as createSetUserFieldInterceptor, __webpack_exports__dynamicEntityPermission as dynamicEntityPermission, __webpack_exports__dynamicEntityPermissionParent as dynamicEntityPermissionParent, __webpack_exports__escapeHtml as escapeHtml, __webpack_exports__escapeHtmlVariables as escapeHtmlVariables, __webpack_exports__evaluatePermissionLogic as evaluatePermissionLogic, __webpack_exports__extractFrontendUrl as extractFrontendUrl, __webpack_exports__formatInTimezone as formatInTimezone, __webpack_exports__generateSecureToken as generateSecureToken, __webpack_exports__generateSlug as generateSlug, __webpack_exports__generateUniqueSlug as generateUniqueSlug, __webpack_exports__getBranchPath as getBranchPath, __webpack_exports__getCastIntType as getCastIntType, __webpack_exports__getCompanyId as getCompanyId, __webpack_exports__getJsonColumnType as getJsonColumnType, __webpack_exports__getRequestId as getRequestId, __webpack_exports__getTenantId as getTenantId, __webpack_exports__getTodayInTimezone as getTodayInTimezone, __webpack_exports__getUserId as getUserId, __webpack_exports__hasCompanyId as hasCompanyId, __webpack_exports__hashToken as hashToken, __webpack_exports__instance as instance, __webpack_exports__isBranchWithin as isBranchWithin, __webpack_exports__isBrowserRequest as isBrowserRequest, __webpack_exports__isExpired as isExpired, __webpack_exports__isMultiWildcard as isMultiWildcard, __webpack_exports__loadOptionalModule as loadOptionalModule, __webpack_exports__loadPermissionCodes as loadPermissionCodes, __webpack_exports__localToUtc as localToUtc, __webpack_exports__matchEventPattern as matchEventPattern, __webpack_exports__matchesPermission as matchesPermission, __webpack_exports__messageRef as messageRef, __webpack_exports__moduleEventsToken as moduleEventsToken, __webpack_exports__normalizeBranchIds as normalizeBranchIds, __webpack_exports__parseDurationToMs as parseDurationToMs, __webpack_exports__permissionLogicCodes as permissionLogicCodes, __webpack_exports__permissionLogicProblem as permissionLogicProblem, __webpack_exports__publishDomainEvent as publishDomainEvent, __webpack_exports__requestContext as requestContext, __webpack_exports__sanitizeEventPayload as sanitizeEventPayload, __webpack_exports__setRequestUser as setRequestUser, __webpack_exports__utcToLocal as utcToLocal, __webpack_exports__validateCompanyOwnership as validateCompanyOwnership, __webpack_exports__withSavepoint as withSavepoint };