@flusys/nestjs-shared 9.1.1 → 9.2.0

package/fesm/{948.js → 997.js}

@@ -2,15 +2,15 @@ import * as __rspack_external_winston_daily_rotate_file_d74f2d27 from "winston-d
 import * as __rspack_external_winston_transport_f7e85261 from "winston-transport";
 import * as __rspack_external__flusys_nestjs_core_config_197fa0a9 from "@flusys/nestjs-core/config";
 import * as __rspack_external__nestjs_common_a04939da from "@nestjs/common";
+import * as __rspack_external_node_crypto_2e7c4b46 from "node:crypto";
 import * as __rspack_external_fs from "fs";
 import * as __rspack_external_path from "path";
 import * as __rspack_external_winston from "winston";
 import * as __rspack_external_async_hooks from "async_hooks";
-import * as __rspack_external_node_crypto_2e7c4b46 from "node:crypto";
-export const __rspack_esm_id = 948;
-export const __rspack_esm_ids = [948];
+export const __rspack_esm_id = 997;
+export const __rspack_esm_ids = [997];
 export const __webpack_modules__ = {
-245(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+6245(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
 // EXPORTS
 __webpack_require__.d(__webpack_exports__, {
@@ -19,13 +19,15 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 // EXTERNAL MODULE: external "@flusys/nestjs-core/config"
-var config_ = __webpack_require__(307);
+var config_ = __webpack_require__(8307);
 ;// CONCATENATED MODULE: external "fs"
 
 ;// CONCATENATED MODULE: external "path"
 
 ;// CONCATENATED MODULE: external "winston"
 
+// EXTERNAL MODULE: ./projects/nestjs-shared/src/constants/index.ts
+var constants = __webpack_require__(6043);
 ;// CONCATENATED MODULE: external "winston-daily-rotate-file"
 
 ;// CONCATENATED MODULE: external "winston-transport"
@@ -35,6 +37,7 @@ var config_ = __webpack_require__(307);
 
 
 
+
 // Handle both webpack (no default export) and esbuild (default export)
 
 
@@ -142,8 +145,11 @@ function getCachedTransport(cache, name) {
     cache.set(name, transport);
     return transport;
 }
+// The tenant id comes from a request header that is only format-checked here, so cap how many
+// per-tenant files a client can open by cycling made-up ids; the rest go to the combined log.
+const MAX_TENANT_TRANSPORTS = 100;
 const getModuleTransport = (name)=>getCachedTransport(moduleTransportCache, name);
-const getTenantTransport = (name)=>getCachedTransport(tenantTransportCache, name);
+const getTenantTransport = (name)=>tenantTransportCache.has(name) || tenantTransportCache.size < MAX_TENANT_TRANSPORTS ? getCachedTransport(tenantTransportCache, name) : undefined;
 let winston_logger_class_TenantAwareTransport = class TenantAwareTransport extends Transport {
     defaultTransport;
     constructor(defaultTransport){
@@ -152,7 +158,7 @@ let winston_logger_class_TenantAwareTransport = class TenantAwareTransport exten
     log(info, callback) {
         setImmediate(()=>this.emit('logged', info));
         const tenantId = info.tenantId || info.metadata?.tenantId;
-        const transport = USE_TENANT_MODE && tenantId ? getTenantTransport(tenantId) : this.defaultTransport;
+        const transport = (USE_TENANT_MODE && typeof tenantId === 'string' && constants/* .TENANT_ID_PATTERN.test */.uD.test(tenantId) ? getTenantTransport(tenantId) : undefined) ?? this.defaultTransport;
         transport.log(info, callback);
     }
 };
@@ -250,9 +256,9 @@ const consoleTransport = new __rspack_external_winston.transports.Console({
 
 
 },
-43(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _permissions_js__rspack_import_0 = __webpack_require__(975);
-/* import */ var _message_keys_js__rspack_import_1 = __webpack_require__(389);
+6043(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _permissions_js__rspack_import_0 = __webpack_require__(8975);
+/* import */ var _message_keys_js__rspack_import_1 = __webpack_require__(4389);
 // Metadata keys
 const IS_PUBLIC_KEY = 'isPublic';
 const PERMISSIONS_KEY = 'permissions';
@@ -266,6 +272,7 @@ const EVENT_BUS_MODULE_OPTIONS = 'EVENT_BUS_MODULE_OPTIONS';
 const IDEMPOTENCY_KEY_HEADER = 'x-idempotency-key';
 const REQUEST_ID_HEADER = 'x-request-id';
 const CLIENT_TYPE_HEADER = 'x-client-type';
+/** A tenant id names a database and a log folder, so it is limited to these characters. */ const TENANT_ID_PATTERN = /^[a-zA-Z0-9_-]{1,64}$/;
 // Cache key prefixes
 const PERMISSIONS_CACHE_PREFIX = 'my-permissions';
 const IDEMPOTENCY_CACHE_PREFIX = 'idempotency';
@@ -286,6 +293,7 @@ __webpack_require__.d(__webpack_exports__, {
   G0: () => (/* reexport safe */ _permissions_js__rspack_import_0.G0),
   GH: () => (/* reexport safe */ _permissions_js__rspack_import_0.GH),
   GT: () => (/* reexport safe */ _permissions_js__rspack_import_0.GT),
+  IX: () => (/* reexport safe */ _permissions_js__rspack_import_0.IX),
   Jj: () => (/* reexport safe */ _permissions_js__rspack_import_0.Jj),
   N3: () => (/* reexport safe */ _permissions_js__rspack_import_0.N3),
   ON: () => (/* reexport safe */ _permissions_js__rspack_import_0.ON),
@@ -331,13 +339,14 @@ __webpack_require__.d(__webpack_exports__, {
   kC: REQUEST_ID_HEADER,
   mg: IDEMPOTENCY_CACHE_PREFIX,
   nx: DEFAULT_EVENT_TOPIC,
+  uD: TENANT_ID_PATTERN,
   xw: CLIENT_TYPE_HEADER,
   zl: CACHE_INSTANCE
 });
 
 
 },
-389(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+4389(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 // ==================== AUTH (Shared across guards/interceptors) ====================
 // These are duplicated in nestjs-auth but needed here to avoid circular dependencies
 const AUTH_MESSAGES = {
@@ -397,7 +406,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-975(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+8975(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 // ==================== AUTH MODULE ====================
 const USER_PERMISSIONS = {
     CREATE: 'user.create',
@@ -453,6 +462,9 @@ const COMPANY_ACTION_PERMISSIONS = {
     READ: 'company-action.read',
     ASSIGN: 'company-action.assign'
 };
+/** Lets an actor assign user roles/actions in a company other than their session company (e.g. onboarding). Never satisfied by a wildcard. */ const CROSS_COMPANY_PERMISSIONS = {
+    ASSIGN: 'cross-company.assign'
+};
 // ==================== STORAGE MODULE ====================
 const FILE_PERMISSIONS = {
     CREATE: 'file.create',
@@ -614,10 +626,12 @@ const PERMISSIONS = {
     USER_ROLE: USER_ROLE_PERMISSIONS,
     USER_ACTION: USER_ACTION_PERMISSIONS,
     COMPANY_ACTION: COMPANY_ACTION_PERMISSIONS,
+    CROSS_COMPANY: CROSS_COMPANY_PERMISSIONS,
     // Storage
     FILE: FILE_PERMISSIONS,
     FOLDER: FOLDER_PERMISSIONS,
     STORAGE_CONFIG: STORAGE_CONFIG_PERMISSIONS,
+    UPLOAD_CONFIG: UPLOAD_CONFIG_PERMISSIONS,
     // Email
     EMAIL_CONFIG: EMAIL_CONFIG_PERMISSIONS,
     EMAIL_TEMPLATE: EMAIL_TEMPLATE_PERMISSIONS,
@@ -656,6 +670,7 @@ __webpack_require__.d(__webpack_exports__, {
   G0: ENTITY_BUILDER_ALL_DYNAMIC,
   GH: dynamicEntityPermissionParent,
   GT: FORM_RESULT_PERMISSIONS,
+  IX: CROSS_COMPANY_PERMISSIONS,
   Jj: PERMISSIONS,
   N3: TRANSLATION_KEY_PERMISSIONS,
   ON: TASK_LIST_PERMISSIONS,
@@ -689,7 +704,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-591(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+8244(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
 // EXPORTS
 __webpack_require__.d(__webpack_exports__, {
@@ -703,17 +718,17 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 // EXTERNAL MODULE: external "@flusys/nestjs-core/config"
-var config_ = __webpack_require__(307);
+var config_ = __webpack_require__(8307);
 // EXTERNAL MODULE: external "@nestjs/common"
-var common_ = __webpack_require__(157);
+var common_ = __webpack_require__(6157);
 ;// CONCATENATED MODULE: external "async_hooks"
 
-;// CONCATENATED MODULE: external "node:crypto"
-
+// EXTERNAL MODULE: external "node:crypto"
+var external_node_crypto_ = __webpack_require__(2561);
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/classes/winston.logger.class.ts + 5 modules
-var winston_logger_class = __webpack_require__(245);
+var winston_logger_class = __webpack_require__(6245);
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/constants/index.ts
-var constants = __webpack_require__(43);
+var constants = __webpack_require__(6043);
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/middlewares/logger.middleware.ts
 function _ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -830,8 +845,9 @@ function getClientIp(req) {
 class LoggerMiddleware {
     logger = winston_logger_class/* .instance */.K;
     use(req, res, next) {
-        const requestId = req.headers[constants/* .REQUEST_ID_HEADER */.kC] || (0,__rspack_external_node_crypto_2e7c4b46.randomUUID)();
-        const tenantId = req.headers[TENANT_ID_HEADER];
+        const requestId = req.headers[constants/* .REQUEST_ID_HEADER */.kC] || (0,external_node_crypto_.randomUUID)();
+        const tenantHeader = req.headers[TENANT_ID_HEADER];
+        const tenantId = typeof tenantHeader === 'string' && constants/* .TENANT_ID_PATTERN.test */.uD.test(tenantHeader) ? tenantHeader : undefined;
         const startTime = Date.now();
         res.setHeader(constants/* .REQUEST_ID_HEADER */.kC, requestId);
         const context = {
@@ -950,17 +966,23 @@ LoggerMiddleware = _ts_decorate([
 
 
 },
-307(module) {
+8307(module) {
 
 module.exports = __rspack_external__flusys_nestjs_core_config_197fa0a9;
 
 
 },
-157(module) {
+6157(module) {
 
 module.exports = __rspack_external__nestjs_common_a04939da;
 
 
+},
+2561(module) {
+
+module.exports = __rspack_external_node_crypto_2e7c4b46;
+
+
 },
 
 };

package/fesm/chunks/123.js

@@ -1,12 +1,12 @@
 export const __rspack_esm_id = 123;
 export const __rspack_esm_ids = [123];
 export const __webpack_modules__ = {
-46(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(157);
-/* import */ var _constants_index_js__rspack_import_1 = __webpack_require__(43);
-/* import */ var _utils_event_pattern_util_js__rspack_import_4 = __webpack_require__(456);
-/* import */ var _utils_optional_module_util_js__rspack_import_3 = __webpack_require__(368);
-/* import */ var _event_transport_registry_js__rspack_import_2 = __webpack_require__(149);
+2046(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(6157);
+/* import */ var _constants_index_js__rspack_import_1 = __webpack_require__(6043);
+/* import */ var _utils_event_pattern_util_js__rspack_import_4 = __webpack_require__(8456);
+/* import */ var _utils_optional_module_util_js__rspack_import_3 = __webpack_require__(8368);
+/* import */ var _event_transport_registry_js__rspack_import_2 = __webpack_require__(7149);
 /**
  * Optional RabbitMQ event transport
  * Requires: npm install amqplib
@@ -118,13 +118,21 @@ class RabbitMqTransport {
         try {
             await channel.consume(this.queue, async (message)=>{
                 if (!message) return;
+                let handled = false;
                 try {
                     const event = JSON.parse(message.content.toString());
                     await Promise.all(this.handlers.map((handler)=>handler(event)));
-                    channel.ack(message);
+                    handled = true;
                 } catch (error) {
                     this.logger.error(error instanceof Error ? error.message : 'Failed to handle event');
-                    channel.nack(message, false, false);
+                }
+                // The channel may have closed while the handlers ran; settling on it then throws, and an
+                // error escaping this callback is an unhandled rejection that takes the process down.
+                try {
+                    if (handled) channel.ack(message);
+                    else channel.nack(message, false, false);
+                } catch (error) {
+                    this.logger.warn(`Could not settle delivery: ${error instanceof Error ? error.message : 'channel closed'}`);
                 }
             });
         } catch (error) {
@@ -169,7 +177,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-368(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+8368(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 /**
  * Loads an optional peer dependency at runtime.
  *

package/fesm/chunks/37.js

@@ -2,10 +2,10 @@ export const __rspack_esm_id = 37;
 export const __rspack_esm_ids = [37];
 export const __webpack_modules__ = {
 20(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(157);
-/* import */ var _constants_index_js__rspack_import_1 = __webpack_require__(43);
-/* import */ var _utils_optional_module_util_js__rspack_import_3 = __webpack_require__(368);
-/* import */ var _event_transport_registry_js__rspack_import_2 = __webpack_require__(149);
+/* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(6157);
+/* import */ var _constants_index_js__rspack_import_1 = __webpack_require__(6043);
+/* import */ var _utils_optional_module_util_js__rspack_import_3 = __webpack_require__(8368);
+/* import */ var _event_transport_registry_js__rspack_import_2 = __webpack_require__(7149);
 /**
  * Optional Kafka event transport
  * Requires: npm install kafkajs
@@ -139,7 +139,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-368(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+8368(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 /**
  * Loads an optional peer dependency at runtime.
  *

package/fesm/classes/index.js

@@ -3,7 +3,7 @@ export const __rspack_esm_ids = [29];
 export const __webpack_modules__ = {};
 import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
-import * as __rspack_chunk_1 from '../948.js';
+import * as __rspack_chunk_1 from '../997.js';
 __webpack_require__.C(__rspack_chunk_1);
 import * as __rspack_chunk_2 from '../183.js';
 __webpack_require__.C(__rspack_chunk_2);
@@ -13,12 +13,13 @@ import * as __rspack_chunk_4 from '../470.js';
 __webpack_require__.C(__rspack_chunk_4);
 import * as __rspack_chunk_5 from './index.js';
 __webpack_require__.C(__rspack_chunk_5);
-var __webpack_exports__ = __webpack_exec__(405);var __webpack_exports__ACTION_PERMISSIONS = __webpack_exports__.Y7;
+var __webpack_exports__ = __webpack_exec__(9405);var __webpack_exports__ACTION_PERMISSIONS = __webpack_exports__.Y7;
 var __webpack_exports__AI_ASSISTANT_PERMISSIONS = __webpack_exports__.Bz;
 var __webpack_exports__ApiService = __webpack_exports__.Gf;
 var __webpack_exports__BRANCH_PERMISSIONS = __webpack_exports__.wA;
 var __webpack_exports__COMPANY_ACTION_PERMISSIONS = __webpack_exports__.aO;
 var __webpack_exports__COMPANY_PERMISSIONS = __webpack_exports__.t$;
+var __webpack_exports__CROSS_COMPANY_PERMISSIONS = __webpack_exports__.IX;
 var __webpack_exports__DOMAIN_EVENT_VERSION = __webpack_exports__.xC;
 var __webpack_exports__DisabledEventBus = __webpack_exports__.XI;
 var __webpack_exports__EMAIL_CONFIG_PERMISSIONS = __webpack_exports__.V0;
@@ -65,4 +66,4 @@ var __webpack_exports__getCastIntType = __webpack_exports__.Tj;
 var __webpack_exports__getJsonColumnType = __webpack_exports__.pf;
 var __webpack_exports__instance = __webpack_exports__.KJ;
 var __webpack_exports__publishDomainEvent = __webpack_exports__.wT;
-export { __webpack_exports__ACTION_PERMISSIONS as ACTION_PERMISSIONS, __webpack_exports__AI_ASSISTANT_PERMISSIONS as AI_ASSISTANT_PERMISSIONS, __webpack_exports__ApiService as ApiService, __webpack_exports__BRANCH_PERMISSIONS as BRANCH_PERMISSIONS, __webpack_exports__COMPANY_ACTION_PERMISSIONS as COMPANY_ACTION_PERMISSIONS, __webpack_exports__COMPANY_PERMISSIONS as COMPANY_PERMISSIONS, __webpack_exports__DOMAIN_EVENT_VERSION as DOMAIN_EVENT_VERSION, __webpack_exports__DisabledEventBus as DisabledEventBus, __webpack_exports__EMAIL_CONFIG_PERMISSIONS as EMAIL_CONFIG_PERMISSIONS, __webpack_exports__EMAIL_TEMPLATE_PERMISSIONS as EMAIL_TEMPLATE_PERMISSIONS, __webpack_exports__ENTITY_BUILDER_ALL_DYNAMIC as ENTITY_BUILDER_ALL_DYNAMIC, __webpack_exports__ENTITY_DEFINITION_PERMISSIONS as ENTITY_DEFINITION_PERMISSIONS, __webpack_exports__EVENT_PERMISSIONS as EVENT_PERMISSIONS, __webpack_exports__EventBusRegistry as EventBusRegistry, __webpack_exports__EventTransportRegistry as EventTransportRegistry, __webpack_exports__FIELD_DEFINITION_PERMISSIONS as FIELD_DEFINITION_PERMISSIONS, __webpack_exports__FILE_PERMISSIONS as FILE_PERMISSIONS, __webpack_exports__FLOW_DEFINITION_PERMISSIONS as FLOW_DEFINITION_PERMISSIONS, __webpack_exports__FOLDER_PERMISSIONS as FOLDER_PERMISSIONS, __webpack_exports__FORM_PERMISSIONS as FORM_PERMISSIONS, __webpack_exports__FORM_RESULT_PERMISSIONS as FORM_RESULT_PERMISSIONS, __webpack_exports__HybridCache as HybridCache, __webpack_exports__HybridEventBus as HybridEventBus, __webpack_exports__LANGUAGE_PERMISSIONS as LANGUAGE_PERMISSIONS, __webpack_exports__MemoryTransport as MemoryTransport, __webpack_exports__NOTIFICATION_PERMISSIONS as NOTIFICATION_PERMISSIONS, __webpack_exports__PERMISSIONS as PERMISSIONS, __webpack_exports__ROLE_ACTION_PERMISSIONS as ROLE_ACTION_PERMISSIONS, __webpack_exports__ROLE_PERMISSIONS as ROLE_PERMISSIONS, __webpack_exports__SOCIAL_AUTH_CONFIG_PERMISSIONS as SOCIAL_AUTH_CONFIG_PERMISSIONS, __webpack_exports__STORAGE_CONFIG_PERMISSIONS as STORAGE_CONFIG_PERMISSIONS, __webpack_exports__TASK_BOARD_PERMISSIONS as TASK_BOARD_PERMISSIONS, __webpack_exports__TASK_COMMENT_PERMISSIONS as TASK_COMMENT_PERMISSIONS, __webpack_exports__TASK_LABEL_PERMISSIONS as TASK_LABEL_PERMISSIONS, __webpack_exports__TASK_LIST_PERMISSIONS as TASK_LIST_PERMISSIONS, __webpack_exports__TASK_PERMISSIONS as TASK_PERMISSIONS, __webpack_exports__TRANSLATION_KEY_PERMISSIONS as TRANSLATION_KEY_PERMISSIONS, __webpack_exports__TRANSLATION_PERMISSIONS as TRANSLATION_PERMISSIONS, __webpack_exports__UPLOAD_CONFIG_PERMISSIONS as UPLOAD_CONFIG_PERMISSIONS, __webpack_exports__USER_ACTION_PERMISSIONS as USER_ACTION_PERMISSIONS, __webpack_exports__USER_PERMISSIONS as USER_PERMISSIONS, __webpack_exports__USER_ROLE_PERMISSIONS as USER_ROLE_PERMISSIONS, __webpack_exports__buildDomainEvent as buildDomainEvent, __webpack_exports__buildQuery as buildQuery, __webpack_exports__createApiController as createApiController, __webpack_exports__createModuleLogger as createModuleLogger, __webpack_exports__dynamicEntityPermission as dynamicEntityPermission, __webpack_exports__dynamicEntityPermissionParent as dynamicEntityPermissionParent, __webpack_exports__getCastIntType as getCastIntType, __webpack_exports__getJsonColumnType as getJsonColumnType, __webpack_exports__instance as instance, __webpack_exports__publishDomainEvent as publishDomainEvent };
+export { __webpack_exports__ACTION_PERMISSIONS as ACTION_PERMISSIONS, __webpack_exports__AI_ASSISTANT_PERMISSIONS as AI_ASSISTANT_PERMISSIONS, __webpack_exports__ApiService as ApiService, __webpack_exports__BRANCH_PERMISSIONS as BRANCH_PERMISSIONS, __webpack_exports__COMPANY_ACTION_PERMISSIONS as COMPANY_ACTION_PERMISSIONS, __webpack_exports__COMPANY_PERMISSIONS as COMPANY_PERMISSIONS, __webpack_exports__CROSS_COMPANY_PERMISSIONS as CROSS_COMPANY_PERMISSIONS, __webpack_exports__DOMAIN_EVENT_VERSION as DOMAIN_EVENT_VERSION, __webpack_exports__DisabledEventBus as DisabledEventBus, __webpack_exports__EMAIL_CONFIG_PERMISSIONS as EMAIL_CONFIG_PERMISSIONS, __webpack_exports__EMAIL_TEMPLATE_PERMISSIONS as EMAIL_TEMPLATE_PERMISSIONS, __webpack_exports__ENTITY_BUILDER_ALL_DYNAMIC as ENTITY_BUILDER_ALL_DYNAMIC, __webpack_exports__ENTITY_DEFINITION_PERMISSIONS as ENTITY_DEFINITION_PERMISSIONS, __webpack_exports__EVENT_PERMISSIONS as EVENT_PERMISSIONS, __webpack_exports__EventBusRegistry as EventBusRegistry, __webpack_exports__EventTransportRegistry as EventTransportRegistry, __webpack_exports__FIELD_DEFINITION_PERMISSIONS as FIELD_DEFINITION_PERMISSIONS, __webpack_exports__FILE_PERMISSIONS as FILE_PERMISSIONS, __webpack_exports__FLOW_DEFINITION_PERMISSIONS as FLOW_DEFINITION_PERMISSIONS, __webpack_exports__FOLDER_PERMISSIONS as FOLDER_PERMISSIONS, __webpack_exports__FORM_PERMISSIONS as FORM_PERMISSIONS, __webpack_exports__FORM_RESULT_PERMISSIONS as FORM_RESULT_PERMISSIONS, __webpack_exports__HybridCache as HybridCache, __webpack_exports__HybridEventBus as HybridEventBus, __webpack_exports__LANGUAGE_PERMISSIONS as LANGUAGE_PERMISSIONS, __webpack_exports__MemoryTransport as MemoryTransport, __webpack_exports__NOTIFICATION_PERMISSIONS as NOTIFICATION_PERMISSIONS, __webpack_exports__PERMISSIONS as PERMISSIONS, __webpack_exports__ROLE_ACTION_PERMISSIONS as ROLE_ACTION_PERMISSIONS, __webpack_exports__ROLE_PERMISSIONS as ROLE_PERMISSIONS, __webpack_exports__SOCIAL_AUTH_CONFIG_PERMISSIONS as SOCIAL_AUTH_CONFIG_PERMISSIONS, __webpack_exports__STORAGE_CONFIG_PERMISSIONS as STORAGE_CONFIG_PERMISSIONS, __webpack_exports__TASK_BOARD_PERMISSIONS as TASK_BOARD_PERMISSIONS, __webpack_exports__TASK_COMMENT_PERMISSIONS as TASK_COMMENT_PERMISSIONS, __webpack_exports__TASK_LABEL_PERMISSIONS as TASK_LABEL_PERMISSIONS, __webpack_exports__TASK_LIST_PERMISSIONS as TASK_LIST_PERMISSIONS, __webpack_exports__TASK_PERMISSIONS as TASK_PERMISSIONS, __webpack_exports__TRANSLATION_KEY_PERMISSIONS as TRANSLATION_KEY_PERMISSIONS, __webpack_exports__TRANSLATION_PERMISSIONS as TRANSLATION_PERMISSIONS, __webpack_exports__UPLOAD_CONFIG_PERMISSIONS as UPLOAD_CONFIG_PERMISSIONS, __webpack_exports__USER_ACTION_PERMISSIONS as USER_ACTION_PERMISSIONS, __webpack_exports__USER_PERMISSIONS as USER_PERMISSIONS, __webpack_exports__USER_ROLE_PERMISSIONS as USER_ROLE_PERMISSIONS, __webpack_exports__buildDomainEvent as buildDomainEvent, __webpack_exports__buildQuery as buildQuery, __webpack_exports__createApiController as createApiController, __webpack_exports__createModuleLogger as createModuleLogger, __webpack_exports__dynamicEntityPermission as dynamicEntityPermission, __webpack_exports__dynamicEntityPermissionParent as dynamicEntityPermissionParent, __webpack_exports__getCastIntType as getCastIntType, __webpack_exports__getJsonColumnType as getJsonColumnType, __webpack_exports__instance as instance, __webpack_exports__publishDomainEvent as publishDomainEvent };

package/fesm/constants/index.js

@@ -1,9 +1,9 @@
 export const __rspack_esm_id = 268;
 export const __rspack_esm_ids = [268];
 export const __webpack_modules__ = {
-43(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _permissions_js__rspack_import_0 = __webpack_require__(975);
-/* import */ var _message_keys_js__rspack_import_1 = __webpack_require__(389);
+6043(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _permissions_js__rspack_import_0 = __webpack_require__(8975);
+/* import */ var _message_keys_js__rspack_import_1 = __webpack_require__(4389);
 // Metadata keys
 const IS_PUBLIC_KEY = 'isPublic';
 const PERMISSIONS_KEY = 'permissions';
@@ -17,6 +17,7 @@ const EVENT_BUS_MODULE_OPTIONS = 'EVENT_BUS_MODULE_OPTIONS';
 const IDEMPOTENCY_KEY_HEADER = 'x-idempotency-key';
 const REQUEST_ID_HEADER = 'x-request-id';
 const CLIENT_TYPE_HEADER = 'x-client-type';
+/** A tenant id names a database and a log folder, so it is limited to these characters. */ const TENANT_ID_PATTERN = /^[a-zA-Z0-9_-]{1,64}$/;
 // Cache key prefixes
 const PERMISSIONS_CACHE_PREFIX = 'my-permissions';
 const IDEMPOTENCY_CACHE_PREFIX = 'idempotency';
@@ -37,6 +38,7 @@ __webpack_require__.d(__webpack_exports__, {
   G0: () => (/* reexport safe */ _permissions_js__rspack_import_0.G0),
   GH: () => (/* reexport safe */ _permissions_js__rspack_import_0.GH),
   GT: () => (/* reexport safe */ _permissions_js__rspack_import_0.GT),
+  IX: () => (/* reexport safe */ _permissions_js__rspack_import_0.IX),
   Jj: () => (/* reexport safe */ _permissions_js__rspack_import_0.Jj),
   N3: () => (/* reexport safe */ _permissions_js__rspack_import_0.N3),
   ON: () => (/* reexport safe */ _permissions_js__rspack_import_0.ON),
@@ -82,13 +84,14 @@ __webpack_require__.d(__webpack_exports__, {
   kC: REQUEST_ID_HEADER,
   mg: IDEMPOTENCY_CACHE_PREFIX,
   nx: DEFAULT_EVENT_TOPIC,
+  uD: TENANT_ID_PATTERN,
   xw: CLIENT_TYPE_HEADER,
   zl: CACHE_INSTANCE
 });
 
 
 },
-389(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+4389(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 // ==================== AUTH (Shared across guards/interceptors) ====================
 // These are duplicated in nestjs-auth but needed here to avoid circular dependencies
 const AUTH_MESSAGES = {
@@ -148,7 +151,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-975(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+8975(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 // ==================== AUTH MODULE ====================
 const USER_PERMISSIONS = {
     CREATE: 'user.create',
@@ -204,6 +207,9 @@ const COMPANY_ACTION_PERMISSIONS = {
     READ: 'company-action.read',
     ASSIGN: 'company-action.assign'
 };
+/** Lets an actor assign user roles/actions in a company other than their session company (e.g. onboarding). Never satisfied by a wildcard. */ const CROSS_COMPANY_PERMISSIONS = {
+    ASSIGN: 'cross-company.assign'
+};
 // ==================== STORAGE MODULE ====================
 const FILE_PERMISSIONS = {
     CREATE: 'file.create',
@@ -365,10 +371,12 @@ const PERMISSIONS = {
     USER_ROLE: USER_ROLE_PERMISSIONS,
     USER_ACTION: USER_ACTION_PERMISSIONS,
     COMPANY_ACTION: COMPANY_ACTION_PERMISSIONS,
+    CROSS_COMPANY: CROSS_COMPANY_PERMISSIONS,
     // Storage
     FILE: FILE_PERMISSIONS,
     FOLDER: FOLDER_PERMISSIONS,
     STORAGE_CONFIG: STORAGE_CONFIG_PERMISSIONS,
+    UPLOAD_CONFIG: UPLOAD_CONFIG_PERMISSIONS,
     // Email
     EMAIL_CONFIG: EMAIL_CONFIG_PERMISSIONS,
     EMAIL_TEMPLATE: EMAIL_TEMPLATE_PERMISSIONS,
@@ -407,6 +415,7 @@ __webpack_require__.d(__webpack_exports__, {
   G0: ENTITY_BUILDER_ALL_DYNAMIC,
   GH: dynamicEntityPermissionParent,
   GT: FORM_RESULT_PERMISSIONS,
+  IX: CROSS_COMPANY_PERMISSIONS,
   Jj: PERMISSIONS,
   N3: TRANSLATION_KEY_PERMISSIONS,
   ON: TASK_LIST_PERMISSIONS,
@@ -446,7 +455,7 @@ import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
 import * as __rspack_chunk_1 from './index.js';
 __webpack_require__.C(__rspack_chunk_1);
-var __webpack_exports__ = __webpack_exec__(43);var __webpack_exports__ACTION_PERMISSIONS = __webpack_exports__.Y7;
+var __webpack_exports__ = __webpack_exec__(6043);var __webpack_exports__ACTION_PERMISSIONS = __webpack_exports__.Y7;
 var __webpack_exports__AI_ASSISTANT_PERMISSIONS = __webpack_exports__.Bz;
 var __webpack_exports__AUTH_MESSAGES = __webpack_exports__.mK;
 var __webpack_exports__BRANCH_PERMISSIONS = __webpack_exports__.wA;
@@ -454,6 +463,7 @@ var __webpack_exports__CACHE_INSTANCE = __webpack_exports__.zl;
 var __webpack_exports__CLIENT_TYPE_HEADER = __webpack_exports__.xw;
 var __webpack_exports__COMPANY_ACTION_PERMISSIONS = __webpack_exports__.aO;
 var __webpack_exports__COMPANY_PERMISSIONS = __webpack_exports__.t$;
+var __webpack_exports__CROSS_COMPANY_PERMISSIONS = __webpack_exports__.IX;
 var __webpack_exports__DEFAULT_EVENT_EXCHANGE = __webpack_exports__.Hq;
 var __webpack_exports__DEFAULT_EVENT_SERVICE_NAME = ("flusys");
 var __webpack_exports__DEFAULT_EVENT_TOPIC = __webpack_exports__.nx;
@@ -492,6 +502,7 @@ var __webpack_exports__TASK_COMMENT_PERMISSIONS = __webpack_exports__.zd;
 var __webpack_exports__TASK_LABEL_PERMISSIONS = __webpack_exports__.UG;
 var __webpack_exports__TASK_LIST_PERMISSIONS = __webpack_exports__.ON;
 var __webpack_exports__TASK_PERMISSIONS = __webpack_exports__.T;
+var __webpack_exports__TENANT_ID_PATTERN = __webpack_exports__.uD;
 var __webpack_exports__TRANSLATION_KEY_PERMISSIONS = __webpack_exports__.N3;
 var __webpack_exports__TRANSLATION_PERMISSIONS = __webpack_exports__.fS;
 var __webpack_exports__UPLOAD_CONFIG_PERMISSIONS = __webpack_exports__.UB;
@@ -500,4 +511,4 @@ var __webpack_exports__USER_PERMISSIONS = __webpack_exports__.BC;
 var __webpack_exports__USER_ROLE_PERMISSIONS = __webpack_exports__.w7;
 var __webpack_exports__dynamicEntityPermission = __webpack_exports__.aT;
 var __webpack_exports__dynamicEntityPermissionParent = __webpack_exports__.GH;
-export { __webpack_exports__ACTION_PERMISSIONS as ACTION_PERMISSIONS, __webpack_exports__AI_ASSISTANT_PERMISSIONS as AI_ASSISTANT_PERMISSIONS, __webpack_exports__AUTH_MESSAGES as AUTH_MESSAGES, __webpack_exports__BRANCH_PERMISSIONS as BRANCH_PERMISSIONS, __webpack_exports__CACHE_INSTANCE as CACHE_INSTANCE, __webpack_exports__CLIENT_TYPE_HEADER as CLIENT_TYPE_HEADER, __webpack_exports__COMPANY_ACTION_PERMISSIONS as COMPANY_ACTION_PERMISSIONS, __webpack_exports__COMPANY_PERMISSIONS as COMPANY_PERMISSIONS, __webpack_exports__DEFAULT_EVENT_EXCHANGE as DEFAULT_EVENT_EXCHANGE, __webpack_exports__DEFAULT_EVENT_SERVICE_NAME as DEFAULT_EVENT_SERVICE_NAME, __webpack_exports__DEFAULT_EVENT_TOPIC as DEFAULT_EVENT_TOPIC, __webpack_exports__DOMAIN_EVENT_HANDLER_KEY as DOMAIN_EVENT_HANDLER_KEY, __webpack_exports__EMAIL_CONFIG_PERMISSIONS as EMAIL_CONFIG_PERMISSIONS, __webpack_exports__EMAIL_TEMPLATE_PERMISSIONS as EMAIL_TEMPLATE_PERMISSIONS, __webpack_exports__ENTITY_BUILDER_ALL_DYNAMIC as ENTITY_BUILDER_ALL_DYNAMIC, __webpack_exports__ENTITY_DEFINITION_PERMISSIONS as ENTITY_DEFINITION_PERMISSIONS, __webpack_exports__ERROR_MESSAGES as ERROR_MESSAGES, __webpack_exports__EVENT_BUS_INSTANCE as EVENT_BUS_INSTANCE, __webpack_exports__EVENT_BUS_MODULE_OPTIONS as EVENT_BUS_MODULE_OPTIONS, __webpack_exports__EVENT_PERMISSIONS as EVENT_PERMISSIONS, __webpack_exports__FIELD_DEFINITION_PERMISSIONS as FIELD_DEFINITION_PERMISSIONS, __webpack_exports__FILE_PERMISSIONS as FILE_PERMISSIONS, __webpack_exports__FLOW_DEFINITION_PERMISSIONS as FLOW_DEFINITION_PERMISSIONS, __webpack_exports__FOLDER_PERMISSIONS as FOLDER_PERMISSIONS, __webpack_exports__FORM_PERMISSIONS as FORM_PERMISSIONS, __webpack_exports__FORM_RESULT_PERMISSIONS as FORM_RESULT_PERMISSIONS, __webpack_exports__IDEMPOTENCY_CACHE_PREFIX as IDEMPOTENCY_CACHE_PREFIX, __webpack_exports__IDEMPOTENCY_KEY_HEADER as IDEMPOTENCY_KEY_HEADER, __webpack_exports__IS_PUBLIC_KEY as IS_PUBLIC_KEY, __webpack_exports__LANGUAGE_PERMISSIONS as LANGUAGE_PERMISSIONS, __webpack_exports__NOTIFICATION_PERMISSIONS as NOTIFICATION_PERMISSIONS, __webpack_exports__PERMISSIONS as PERMISSIONS, __webpack_exports__PERMISSIONS_CACHE_PREFIX as PERMISSIONS_CACHE_PREFIX, __webpack_exports__PERMISSIONS_KEY as PERMISSIONS_KEY, __webpack_exports__PERMISSION_GUARD_CONFIG as PERMISSION_GUARD_CONFIG, __webpack_exports__REQUEST_ID_HEADER as REQUEST_ID_HEADER, __webpack_exports__ROLE_ACTION_PERMISSIONS as ROLE_ACTION_PERMISSIONS, __webpack_exports__ROLE_PERMISSIONS as ROLE_PERMISSIONS, __webpack_exports__SOCIAL_AUTH_CONFIG_PERMISSIONS as SOCIAL_AUTH_CONFIG_PERMISSIONS, __webpack_exports__STORAGE_CONFIG_PERMISSIONS as STORAGE_CONFIG_PERMISSIONS, __webpack_exports__SYSTEM_MESSAGES as SYSTEM_MESSAGES, __webpack_exports__TASK_BOARD_PERMISSIONS as TASK_BOARD_PERMISSIONS, __webpack_exports__TASK_COMMENT_PERMISSIONS as TASK_COMMENT_PERMISSIONS, __webpack_exports__TASK_LABEL_PERMISSIONS as TASK_LABEL_PERMISSIONS, __webpack_exports__TASK_LIST_PERMISSIONS as TASK_LIST_PERMISSIONS, __webpack_exports__TASK_PERMISSIONS as TASK_PERMISSIONS, __webpack_exports__TRANSLATION_KEY_PERMISSIONS as TRANSLATION_KEY_PERMISSIONS, __webpack_exports__TRANSLATION_PERMISSIONS as TRANSLATION_PERMISSIONS, __webpack_exports__UPLOAD_CONFIG_PERMISSIONS as UPLOAD_CONFIG_PERMISSIONS, __webpack_exports__USER_ACTION_PERMISSIONS as USER_ACTION_PERMISSIONS, __webpack_exports__USER_PERMISSIONS as USER_PERMISSIONS, __webpack_exports__USER_ROLE_PERMISSIONS as USER_ROLE_PERMISSIONS, __webpack_exports__dynamicEntityPermission as dynamicEntityPermission, __webpack_exports__dynamicEntityPermissionParent as dynamicEntityPermissionParent };
+export { __webpack_exports__ACTION_PERMISSIONS as ACTION_PERMISSIONS, __webpack_exports__AI_ASSISTANT_PERMISSIONS as AI_ASSISTANT_PERMISSIONS, __webpack_exports__AUTH_MESSAGES as AUTH_MESSAGES, __webpack_exports__BRANCH_PERMISSIONS as BRANCH_PERMISSIONS, __webpack_exports__CACHE_INSTANCE as CACHE_INSTANCE, __webpack_exports__CLIENT_TYPE_HEADER as CLIENT_TYPE_HEADER, __webpack_exports__COMPANY_ACTION_PERMISSIONS as COMPANY_ACTION_PERMISSIONS, __webpack_exports__COMPANY_PERMISSIONS as COMPANY_PERMISSIONS, __webpack_exports__CROSS_COMPANY_PERMISSIONS as CROSS_COMPANY_PERMISSIONS, __webpack_exports__DEFAULT_EVENT_EXCHANGE as DEFAULT_EVENT_EXCHANGE, __webpack_exports__DEFAULT_EVENT_SERVICE_NAME as DEFAULT_EVENT_SERVICE_NAME, __webpack_exports__DEFAULT_EVENT_TOPIC as DEFAULT_EVENT_TOPIC, __webpack_exports__DOMAIN_EVENT_HANDLER_KEY as DOMAIN_EVENT_HANDLER_KEY, __webpack_exports__EMAIL_CONFIG_PERMISSIONS as EMAIL_CONFIG_PERMISSIONS, __webpack_exports__EMAIL_TEMPLATE_PERMISSIONS as EMAIL_TEMPLATE_PERMISSIONS, __webpack_exports__ENTITY_BUILDER_ALL_DYNAMIC as ENTITY_BUILDER_ALL_DYNAMIC, __webpack_exports__ENTITY_DEFINITION_PERMISSIONS as ENTITY_DEFINITION_PERMISSIONS, __webpack_exports__ERROR_MESSAGES as ERROR_MESSAGES, __webpack_exports__EVENT_BUS_INSTANCE as EVENT_BUS_INSTANCE, __webpack_exports__EVENT_BUS_MODULE_OPTIONS as EVENT_BUS_MODULE_OPTIONS, __webpack_exports__EVENT_PERMISSIONS as EVENT_PERMISSIONS, __webpack_exports__FIELD_DEFINITION_PERMISSIONS as FIELD_DEFINITION_PERMISSIONS, __webpack_exports__FILE_PERMISSIONS as FILE_PERMISSIONS, __webpack_exports__FLOW_DEFINITION_PERMISSIONS as FLOW_DEFINITION_PERMISSIONS, __webpack_exports__FOLDER_PERMISSIONS as FOLDER_PERMISSIONS, __webpack_exports__FORM_PERMISSIONS as FORM_PERMISSIONS, __webpack_exports__FORM_RESULT_PERMISSIONS as FORM_RESULT_PERMISSIONS, __webpack_exports__IDEMPOTENCY_CACHE_PREFIX as IDEMPOTENCY_CACHE_PREFIX, __webpack_exports__IDEMPOTENCY_KEY_HEADER as IDEMPOTENCY_KEY_HEADER, __webpack_exports__IS_PUBLIC_KEY as IS_PUBLIC_KEY, __webpack_exports__LANGUAGE_PERMISSIONS as LANGUAGE_PERMISSIONS, __webpack_exports__NOTIFICATION_PERMISSIONS as NOTIFICATION_PERMISSIONS, __webpack_exports__PERMISSIONS as PERMISSIONS, __webpack_exports__PERMISSIONS_CACHE_PREFIX as PERMISSIONS_CACHE_PREFIX, __webpack_exports__PERMISSIONS_KEY as PERMISSIONS_KEY, __webpack_exports__PERMISSION_GUARD_CONFIG as PERMISSION_GUARD_CONFIG, __webpack_exports__REQUEST_ID_HEADER as REQUEST_ID_HEADER, __webpack_exports__ROLE_ACTION_PERMISSIONS as ROLE_ACTION_PERMISSIONS, __webpack_exports__ROLE_PERMISSIONS as ROLE_PERMISSIONS, __webpack_exports__SOCIAL_AUTH_CONFIG_PERMISSIONS as SOCIAL_AUTH_CONFIG_PERMISSIONS, __webpack_exports__STORAGE_CONFIG_PERMISSIONS as STORAGE_CONFIG_PERMISSIONS, __webpack_exports__SYSTEM_MESSAGES as SYSTEM_MESSAGES, __webpack_exports__TASK_BOARD_PERMISSIONS as TASK_BOARD_PERMISSIONS, __webpack_exports__TASK_COMMENT_PERMISSIONS as TASK_COMMENT_PERMISSIONS, __webpack_exports__TASK_LABEL_PERMISSIONS as TASK_LABEL_PERMISSIONS, __webpack_exports__TASK_LIST_PERMISSIONS as TASK_LIST_PERMISSIONS, __webpack_exports__TASK_PERMISSIONS as TASK_PERMISSIONS, __webpack_exports__TENANT_ID_PATTERN as TENANT_ID_PATTERN, __webpack_exports__TRANSLATION_KEY_PERMISSIONS as TRANSLATION_KEY_PERMISSIONS, __webpack_exports__TRANSLATION_PERMISSIONS as TRANSLATION_PERMISSIONS, __webpack_exports__UPLOAD_CONFIG_PERMISSIONS as UPLOAD_CONFIG_PERMISSIONS, __webpack_exports__USER_ACTION_PERMISSIONS as USER_ACTION_PERMISSIONS, __webpack_exports__USER_PERMISSIONS as USER_PERMISSIONS, __webpack_exports__USER_ROLE_PERMISSIONS as USER_ROLE_PERMISSIONS, __webpack_exports__dynamicEntityPermission as dynamicEntityPermission, __webpack_exports__dynamicEntityPermissionParent as dynamicEntityPermissionParent };