@flusys/nestjs-shared 9.1.2 → 9.2.0

package/fesm/{282.js → 47.js}

@@ -1,8 +1,8 @@
 import { RE2JS } from "re2js";
-export const __rspack_esm_id = 282;
-export const __rspack_esm_ids = [282];
+export const __rspack_esm_id = 47;
+export const __rspack_esm_ids = [47];
 export const __webpack_modules__ = {
-79(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+6079(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 const EXPRESSION_ARITHMETIC_OPS = [
     'sum',
     'subtract',
@@ -69,7 +69,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-129(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+4578(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
 // EXPORTS
 __webpack_require__.d(__webpack_exports__, {
@@ -103,17 +103,18 @@ __webpack_require__.d(__webpack_exports__, {
   hX: () => (/* reexport */ extractFrontendUrl),
   Sd: () => (/* reexport */ formatInTimezone),
   sN: () => (/* reexport */ generateSecureToken),
-  z9: () => (/* reexport */ generateSlug),
-  oo: () => (/* reexport */ generateUniqueSlug),
+  z9: () => (/* reexport */ string_util/* .generateSlug */.z),
+  oo: () => (/* reexport */ string_util/* .generateUniqueSlug */.o),
   gN: () => (/* reexport */ getBranchPath),
-  oB: () => (/* reexport */ getTodayInTimezone),
   f: () => (/* reexport */ hasCompanyId),
   QK: () => (/* reexport */ hashToken),
+  xp: () => (/* reexport */ permission_cache_key_util/* .invalidatePermissionCache */.xp),
   QU: () => (/* reexport */ isBranchWithin),
   wh: () => (/* reexport */ isBrowserRequest),
   _d: () => (/* reexport */ isExpired),
   tX: () => (/* reexport */ isExpressionError),
   _c: () => (/* reexport */ event_pattern_util/* .isMultiWildcard */._c),
+  Gd: () => (/* reexport */ event_pattern_util/* .isSensitiveKey */.Gd),
   lk: () => (/* reexport */ optional_module_util/* .loadOptionalModule */.l),
   CQ: () => (/* reexport */ permission_match_util/* .loadPermissionCodes */.CQ),
   vf: () => (/* reexport */ localToUtc),
@@ -124,6 +125,7 @@ __webpack_require__.d(__webpack_exports__, {
   Ju: () => (/* reexport */ parseDurationToMs),
   MO: () => (/* reexport */ permission_match_util/* .permissionLogicCodes */.MO),
   HU: () => (/* reexport */ permission_match_util/* .permissionLogicProblem */.HU),
+  Rw: () => (/* reexport */ permission_cache_key_util/* .resolvePermissionCacheKey */.Rw),
   _X: () => (/* reexport */ safeRegexProblem),
   IN: () => (/* reexport */ event_pattern_util/* .sanitizeEventPayload */.IN),
   v4: () => (/* reexport */ utcToLocal),
@@ -227,7 +229,7 @@ function childrenIndex(nodes) {
 }
 
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/cache-tenant.util.ts
-var cache_tenant_util = __webpack_require__(154);
+var cache_tenant_util = __webpack_require__(8154);
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/date-time.util.ts
 function getOffsetMinutes(utcDate, timezone) {
     const extract = (tz)=>{
@@ -296,14 +298,11 @@ function formatInTimezone(utcDate, timezone, options = {
         timeZone: timezone
     }).format(d);
 }
-function getTodayInTimezone(timezone) {
-    return utcToLocal(new Date(), timezone).date;
-}
 
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/event-pattern.util.ts
-var event_pattern_util = __webpack_require__(456);
+var event_pattern_util = __webpack_require__(8456);
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/interfaces/expression.interface.ts
-var expression_interface = __webpack_require__(79);
+var expression_interface = __webpack_require__(6079);
 ;// CONCATENATED MODULE: external "re2js"
 
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/safe-regex.util.ts
@@ -590,13 +589,12 @@ function addMonths(time, months) {
     date.setUTCDate(Math.min(day, lastDay));
     return date.getTime();
 }
-/** Whole calendar months from `from` to `to` (negative when `to` is earlier). */ function monthsBetween(from, to) {
+/** Whole calendar months from `from` to `to`; negative when `to` is earlier, always `-monthsBetween(to, from)`. */ function monthsBetween(from, to) {
+    if (to < from) return -monthsBetween(to, from);
     const a = new Date(from);
     const b = new Date(to);
     let months = (b.getUTCFullYear() - a.getUTCFullYear()) * 12 + (b.getUTCMonth() - a.getUTCMonth());
-    const shifted = addMonths(from, months);
-    if (months > 0 && shifted > to) months--;
-    if (months < 0 && shifted < to) months++;
+    if (addMonths(from, months) > to) months--;
     return months;
 }
 function dateDiff(a, b, unit) {
@@ -604,9 +602,8 @@ function dateDiff(a, b, unit) {
     const from = toTime(b);
     const resolved = toUnit(unit);
     if (to === null || from === null) return null;
-    if (resolved === 'month') return monthsBetween(from, to);
-    if (resolved === 'year') return Math.trunc(monthsBetween(from, to) / 12);
-    return Math.trunc((to - from) / FIXED_UNIT_MS[resolved]);
+    const diff = resolved === 'month' ? monthsBetween(from, to) : resolved === 'year' ? Math.trunc(monthsBetween(from, to) / 12) : Math.trunc((to - from) / FIXED_UNIT_MS[resolved]);
+    return diff + 0;
 }
 function addDuration(value, amount, unit) {
     const time = toTime(value);
@@ -770,7 +767,7 @@ const EXPRESSION_FUNCTIONS = {
             const items = Array.isArray(value) ? value : isBlank(value) ? [] : [
                 value
             ];
-            const sep = isBlank(separator) ? ', ' : expressionToText(separator);
+            const sep = separator === null || separator === undefined || separator === '' ? ', ' : expressionToText(separator);
             return limitText(items.map((item)=>expressionToText(item) ?? '').filter(Boolean).join(sep));
         }
     },
@@ -928,7 +925,14 @@ function enter(depth, budget) {
         max: EXPRESSION_LIMITS.MAX_NODES
     });
 }
-function applyArithmetic(op, values) {
+/** Overflow (`10 ** 400`) and undefined results (`(-8) ** 0.5`) are errors, never Infinity / NaN. */ function applyArithmetic(op, values) {
+    const result = arithmeticResult(op, values);
+    if (result !== null && !Number.isFinite(result)) throw new ExpressionError('expected_number', {
+        value: String(result)
+    });
+    return result;
+}
+function arithmeticResult(op, values) {
     if (values.length === 0) return null;
     const [first, ...rest] = values;
     switch(op){
@@ -1222,27 +1226,26 @@ function messageRef(messageKey, messageVariables) {
 }
 
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/optional-module.util.ts
-var optional_module_util = __webpack_require__(368);
+var optional_module_util = __webpack_require__(8368);
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/permission-cache-key.util.ts
-var permission_cache_key_util = __webpack_require__(199);
+var permission_cache_key_util = __webpack_require__(3199);
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/permission-match.util.ts
 var permission_match_util = __webpack_require__(788);
 // EXTERNAL MODULE: external "@nestjs/common"
-var common_ = __webpack_require__(157);
+var common_ = __webpack_require__(6157);
+// EXTERNAL MODULE: external "typeorm"
+var external_typeorm_ = __webpack_require__(7158);
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/constants/index.ts
-var constants = __webpack_require__(43);
+var constants = __webpack_require__(6043);
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/query-helpers.util.ts
 
 
 
+
 /**
- * Apply company filter to a query builder if company feature is enabled.
- * Centralizes the common pattern of filtering by user's company.
- *
- * @param query - TypeORM SelectQueryBuilder
- * @param config - Company filter configuration
- * @param user - Current logged user (may be null)
- * @returns The modified query builder
+ * Restricts a query to the user's company when the company feature is on. A logged-in user without a
+ * company matches nothing (never every company's rows); no user at all is a system call and is left
+ * unfiltered.
  *
  * @example
  * ```typescript
@@ -1252,13 +1255,11 @@ var constants = __webpack_require__(43);
  * }, user);
  * ```
  */ function applyCompanyFilter(query, config, user) {
-    const columnName = config.columnName ?? 'companyId';
-    if (config.isCompanyFeatureEnabled && user?.companyId) {
-        query.andWhere(`${config.entityAlias}.${columnName} = :companyId`, {
-            companyId: user.companyId
-        });
-    }
-    return query;
+    if (!config.isCompanyFeatureEnabled || !user) return query;
+    if (!user.companyId) return query.andWhere('1 = 0');
+    return query.andWhere(`${config.entityAlias}.${config.columnName ?? 'companyId'} = :companyId`, {
+        companyId: user.companyId
+    });
 }
 /**
  * Restrict a query to rows of the given branches - typically a branch plus the granted branches under
@@ -1274,30 +1275,19 @@ var constants = __webpack_require__(43);
     });
 }
 /**
- * Build a where condition object with optional company filter.
- *
- * @param baseWhere - Base where condition object
- * @param isCompanyFeatureEnabled - Whether company feature is enabled
- * @param user - Current logged user
- * @returns Where condition with companyId added if applicable
+ * Adds the user's company to a find `where` when the company feature is on - `In([])` (matches
+ * nothing) for a logged-in user without a company; no user at all is a system call and is unchanged.
  *
  * @example
  * ```typescript
- * const where = buildCompanyWhereCondition(
- *   { id: dto.id },
- *   this.config.isCompanyFeatureEnabled(),
- *   user
- * );
- * // Returns { id: dto.id, companyId: user.companyId } if company feature enabled
+ * const where = buildCompanyWhereCondition({ id: dto.id }, this.config.isCompanyFeatureEnabled(), user);
  * ```
  */ function buildCompanyWhereCondition(baseWhere, isCompanyFeatureEnabled, user) {
-    if (isCompanyFeatureEnabled && user?.companyId) {
-        return {
-            ...baseWhere,
-            companyId: user.companyId
-        };
-    }
-    return baseWhere;
+    if (!isCompanyFeatureEnabled || !user) return baseWhere;
+    return {
+        ...baseWhere,
+        companyId: user.companyId ? user.companyId : (0,external_typeorm_.In)([])
+    };
 }
 /**
  * Type guard to check if entity has companyId property
@@ -1305,30 +1295,23 @@ var constants = __webpack_require__(43);
     return entity !== null && typeof entity === 'object' && 'companyId' in entity;
 }
 /**
- * Validates that an entity with companyId belongs to the user's company.
- * Throws BadRequestException if the entity belongs to another company.
- *
- * @param entity - Entity to validate
- * @param user - Current logged user
- * @param isCompanyFeatureEnabled - Whether company feature is enabled
- * @param entityName - Name of entity for error message (e.g., 'Email configuration')
- * @throws BadRequestException if entity belongs to another company
+ * Throws when the company feature is on and `entity` belongs to a company other than the user's - a
+ * logged-in user without a company may only use company-less rows. No user at all is a system call.
  *
  * @example
  * ```typescript
  * validateCompanyOwnership(config, user, this.config.isCompanyFeatureEnabled(), 'Email configuration');
  * ```
  */ function validateCompanyOwnership(entity, user, isCompanyFeatureEnabled, entityName) {
-    if (isCompanyFeatureEnabled && user?.companyId && hasCompanyId(entity)) {
-        if (entity.companyId && entity.companyId !== user.companyId) {
-            throw new common_.BadRequestException({
-                message: `${entityName} belongs to another company`,
-                messageKey: constants/* .AUTH_MESSAGES.ENTITY_BELOG_ANOTHER_COMPANY */.mK.ENTITY_BELOG_ANOTHER_COMPANY,
-                messageVariables: {
-                    entity: entityName
-                }
-            });
-        }
+    if (!isCompanyFeatureEnabled || !user || !hasCompanyId(entity)) return;
+    if (entity.companyId && entity.companyId !== user.companyId) {
+        throw new common_.BadRequestException({
+            message: `${entityName} belongs to another company`,
+            messageKey: constants/* .AUTH_MESSAGES.ENTITY_BELOG_ANOTHER_COMPANY */.mK.ENTITY_BELOG_ANOTHER_COMPANY,
+            messageVariables: {
+                entity: entityName
+            }
+        });
     }
 }
 /**
@@ -1348,7 +1331,7 @@ var constants = __webpack_require__(43);
 }
 
 // EXTERNAL MODULE: external "@flusys/nestjs-core/config"
-var config_ = __webpack_require__(307);
+var config_ = __webpack_require__(8307);
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/request.util.ts
 
 
@@ -1360,6 +1343,38 @@ var config_ = __webpack_require__(307);
     d: 24 * 60 * 60 * 1000,
     w: 7 * 24 * 60 * 60 * 1000
 };
+const IPV4_HOST = /^\d{1,3}(\.\d{1,3}){3}$/;
+/** Second-level labels used under two-letter country codes (`co.uk`, `com.au`, `ac.jp`, ...). */ const COUNTRY_SECOND_LEVEL = new Set([
+    'co',
+    'com',
+    'net',
+    'org',
+    'gov',
+    'edu',
+    'ac',
+    'or',
+    'ne',
+    'go',
+    'ltd',
+    'plc',
+    'mil',
+    'nic',
+    'sch',
+    'gen'
+]);
+/**
+ * The registrable domain to share the auth cookies across subdomains (`app.example.com` -> `.example.com`,
+ * `app.example.co.uk` -> `.example.co.uk`), or undefined for a host-only cookie: IP addresses, localhost and
+ * hosts that already are the registrable domain - a cookie scoped to `.1.10` or `.co.uk` is rejected by browsers.
+ */ function sharedCookieDomain(hostname) {
+    const host = hostname.toLowerCase().replace(/\.$/, '');
+    if (!host || host.includes(':') || IPV4_HOST.test(host) || host.includes('localhost')) return undefined;
+    const labels = host.split('.');
+    const last = labels[labels.length - 1];
+    const secondLast = labels[labels.length - 2];
+    const keep = labels.length >= 3 && last.length === 2 && COUNTRY_SECOND_LEVEL.has(secondLast) ? 3 : 2;
+    return labels.length > keep ? '.' + labels.slice(-keep).join('.') : undefined;
+}
 /** Get normalized client type from request header */ function getClientType(req) {
     const clientType = req.headers[constants/* .CLIENT_TYPE_HEADER */.xw];
     return clientType ? clientType.toLowerCase() : null;
@@ -1387,11 +1402,7 @@ var config_ = __webpack_require__(307);
     const isProduction = config_.envConfig.isProduction();
     const forwardedProto = req.headers['x-forwarded-proto'];
     const isHttps = isProduction || forwardedProto === 'https' || origin.startsWith('https://') || req.secure;
-    let domain;
-    const domainParts = hostname.split('.');
-    if (domainParts.length > 2 && !hostname.includes('localhost')) {
-        domain = '.' + domainParts.slice(-2).join('.');
-    }
+    const domain = sharedCookieDomain(hostname);
     return {
         secure: isHttps,
         sameSite: isHttps ? 'strict' : 'lax',
@@ -1437,81 +1448,10 @@ function buildFrontendUrl(req, path) {
     return `${baseUrl}${path}`;
 }
 
-;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/string.util.ts
-/**
- * String utility functions
- */ /**
- * Generate URL-friendly slug from a string
- * @param text - The text to convert to slug
- * @param maxLength - Maximum length of the slug (default: 100)
- * @returns URL-friendly slug
- *
- * @example
- * generateSlug('My Company Name') // 'my-company-name'
- * generateSlug('Hello World!') // 'hello-world'
- */ function generateSlug(text, maxLength = 100) {
-    return text.toLowerCase().trim().replace(/[^a-z0-9\s-]/g, '') // Remove special characters
-    .replace(/\s+/g, '-') // Replace spaces with hyphens
-    .replace(/-+/g, '-') // Replace multiple hyphens with single
-    .replace(/^-+|-+$/g, '') // Remove leading/trailing hyphens
-    .substring(0, maxLength);
-}
-/**
- * Generate unique slug using single database query (optimized for large datasets)
- * Appends numeric suffix if collision exists (e.g., 'my-company-1', 'my-company-2')
- *
- * Performance: O(1) database query regardless of collision count
- * - Works efficiently with millions of records
- * - Requires index on slug column for best performance
- *
- * @param text - The text to convert to slug
- * @param findMatchingSlugs - Async function that returns all slugs matching base pattern
- *                            Should query: WHERE slug = baseSlug OR slug LIKE 'baseSlug-%'
- * @param maxLength - Maximum length of the base slug (default: 100)
- * @returns Unique URL-friendly slug
- *
- * @example
- * const slug = await generateUniqueSlug('My Company', async (baseSlug) => {
- *   return repo
- *     .createQueryBuilder('c')
- *     .select('c.slug')
- *     .where('c.slug = :base OR c.slug LIKE :pattern', {
- *       base: baseSlug,
- *       pattern: `${baseSlug}-%`,
- *     })
- *     .getMany()
- *     .then(rows => rows.map(r => r.slug));
- * });
- */ async function generateUniqueSlug(text, findMatchingSlugs, maxLength = 100) {
-    const baseSlug = generateSlug(text, maxLength);
-    // Single query to get all matching slugs
-    const existingSlugs = await findMatchingSlugs(baseSlug);
-    // No collisions - base slug is available
-    if (existingSlugs.length === 0) {
-        return baseSlug;
-    }
-    // Build set for O(1) lookup
-    const existingSet = new Set(existingSlugs);
-    // Base slug not taken (only suffixed versions exist)
-    if (!existingSet.has(baseSlug)) {
-        return baseSlug;
-    }
-    // Find next available suffix in memory (fast)
-    let counter = 1;
-    while(counter < 10000){
-        const slugWithSuffix = `${baseSlug}-${counter}`;
-        if (!existingSet.has(slugWithSuffix)) {
-            return slugWithSuffix;
-        }
-        counter++;
-    }
-    // Fallback: append random string (extremely rare edge case)
-    const randomSuffix = Math.random().toString(36).substring(2, 8);
-    return `${baseSlug}-${randomSuffix}`;
-}
-
+// EXTERNAL MODULE: ./projects/nestjs-shared/src/utils/string.util.ts
+var string_util = __webpack_require__(3366);
 // EXTERNAL MODULE: external "crypto"
-var external_crypto_ = __webpack_require__(823);
+var external_crypto_ = __webpack_require__(7823);
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/utils/token.util.ts
 
 /** 32 random bytes as hex, suitable for a password-reset/OTP/access-style token */ function generateSecureToken() {
@@ -1543,7 +1483,7 @@ function isExpired(expiresAt) {
 
 
 },
-368(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+8368(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 /**
  * Loads an optional peer dependency at runtime.
  *