@flusys/nestjs-shared 9.1.2 → 9.2.0

package/fesm/decorators/index.js

@@ -2,9 +2,9 @@ export const __rspack_esm_id = 405;
 export const __rspack_esm_ids = [405];
 export const __webpack_modules__ = {
 997(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _dtos_index_js__rspack_import_0 = __webpack_require__(746);
-/* import */ var _nestjs_common__rspack_import_1 = __webpack_require__(157);
-/* import */ var _nestjs_swagger__rspack_import_2 = __webpack_require__(176);
+/* import */ var _dtos_index_js__rspack_import_0 = __webpack_require__(3746);
+/* import */ var _nestjs_common__rspack_import_1 = __webpack_require__(6157);
+/* import */ var _nestjs_swagger__rspack_import_2 = __webpack_require__(6176);
 
 
 
@@ -55,7 +55,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-523(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+9523(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
 // EXPORTS
 __webpack_require__.d(__webpack_exports__, {
@@ -72,7 +72,7 @@ __webpack_require__.d(__webpack_exports__, {
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/decorators/api-response.decorator.ts
 var api_response_decorator = __webpack_require__(997);
 // EXTERNAL MODULE: external "@nestjs/common"
-var common_ = __webpack_require__(157);
+var common_ = __webpack_require__(6157);
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/decorators/current-user.decorator.ts
 
 /**
@@ -94,9 +94,9 @@ var common_ = __webpack_require__(157);
 });
 
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/decorators/log-action.decorator.ts
-var log_action_decorator = __webpack_require__(946);
+var log_action_decorator = __webpack_require__(1946);
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/constants/index.ts
-var constants = __webpack_require__(43);
+var constants = __webpack_require__(6043);
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/decorators/on-domain-event.decorator.ts
 
 
@@ -170,10 +170,12 @@ var constants = __webpack_require__(43);
 
 
 },
-946(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(157);
-/* import */ var _classes_winston_logger_class_js__rspack_import_1 = __webpack_require__(245);
-/* import */ var _middlewares_logger_middleware_js__rspack_import_2 = __webpack_require__(591);
+1946(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(6157);
+/* import */ var _classes_winston_logger_class_js__rspack_import_1 = __webpack_require__(6245);
+/* import */ var _middlewares_logger_middleware_js__rspack_import_2 = __webpack_require__(8244);
+/* import */ var _utils_event_pattern_util_js__rspack_import_3 = __webpack_require__(8456);
+
 
 
 
@@ -213,7 +215,6 @@ function LogAction(options = {}) {
         const methodName = String(propertyKey);
         descriptor.value = async function(...args) {
             const startTime = Date.now();
-            // Resolve module: decorator option > instance property > undefined
             const moduleName = options.module || this.moduleName;
             const logger = createLoggerAdapter(className, moduleName);
             const action = options.action || `${this.entityName || className}.${methodName}`;
@@ -229,7 +230,7 @@ function LogAction(options = {}) {
             const startMessage = `Executing action method "${action}"`;
             const startContext = options.includeParams ? {
                 ...context,
-                params: sanitizeParams(args)
+                params: (0,_utils_event_pattern_util_js__rspack_import_3/* .sanitizeEventPayload */.IN)(args)
             } : context;
             logger.log(logLevel, startMessage, startContext);
             try {
@@ -263,30 +264,6 @@ function LogAction(options = {}) {
         return descriptor;
     };
 }
-function sanitizeParams(args) {
-    return args.map((arg)=>{
-        if (arg === null || arg === undefined) return arg;
-        if (typeof arg === 'object') {
-            const sanitized = {
-                ...arg
-            };
-            const sensitiveKeys = [
-                'password',
-                'secret',
-                'token',
-                'apiKey',
-                'authorization'
-            ];
-            for (const key of Object.keys(sanitized)){
-                if (sensitiveKeys.some((sk)=>key.toLowerCase().includes(sk))) {
-                    sanitized[key] = '[REDACTED]';
-                }
-            }
-            return sanitized;
-        }
-        return arg;
-    });
-}
 function getResultType(result) {
     if (result === null) return 'null';
     if (result === undefined) return 'undefined';
@@ -319,18 +296,122 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 
+},
+8456(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+const SENSITIVE_KEYS = [
+    'password',
+    'secret',
+    'token',
+    'apikey',
+    'authorization',
+    'salt',
+    'hash',
+    'credential',
+    'accesskey',
+    'accountkey',
+    'privatekey',
+    'connectionstring',
+    'passphrase'
+];
+/**
+ * Matched whole, not as a substring - `pass` must be redacted without also
+ * redacting `bypassCache`, and a storage row's `key` is a path, not a secret.
+ *
+ * `config` is the provider settings blob on the storage and email config rows:
+ * S3, Azure, SFTP and SMTP credentials live in it, so it never leaves the
+ * process, even though the row itself still publishes.
+ */ const SENSITIVE_EXACT_KEYS = [
+    'pass',
+    'pwd',
+    'config'
+];
+const REDACTED = '[REDACTED]';
+const CIRCULAR = '[CIRCULAR]';
+const TRUNCATED = '[TRUNCATED]';
+const BINARY = '[BINARY]';
+const MAX_DEPTH = 8;
+/**
+ * Matches a dot separated event name against a routing pattern.
+ * `*` matches exactly one segment, `#` and `**` match zero or more segments.
+ */ function matchEventPattern(pattern, eventName) {
+    if (pattern === eventName) return true;
+    return matchSegments(pattern.split('.'), eventName.split('.'));
+}
+function isMultiWildcard(segment) {
+    return segment === '#' || segment === '**';
+}
+/** Linear in pattern x name length: each (pattern, name) position is decided once, however many `#` there are. */ function matchSegments(pattern, name) {
+    let matches = new Array(name.length + 1).fill(false);
+    matches[name.length] = true;
+    for(let p = pattern.length - 1; p >= 0; p--){
+        const segment = pattern[p];
+        const next = new Array(name.length + 1).fill(false);
+        for(let n = name.length; n >= 0; n--){
+            if (isMultiWildcard(segment)) {
+                next[n] = matches[n] || n < name.length && next[n + 1];
+            } else {
+                next[n] = n < name.length && (segment === '*' || segment === name[n]) && matches[n + 1];
+            }
+        }
+        matches = next;
+    }
+    return matches[0];
+}
+/**
+ * Strips credential-like fields before a row leaves the process on an event.
+ *
+ * Saved TypeORM rows routinely carry bidirectional relations, so the walk
+ * tracks the current path and caps its depth - a cycle or a very deep graph
+ * must never turn an event into a stack overflow.
+ */ function sanitizeEventPayload(value) {
+    return sanitizeValue(value, new WeakSet(), 0);
+}
+function sanitizeValue(value, ancestors, depth) {
+    if (value === null || typeof value !== 'object') return value;
+    if (value instanceof Date) return value;
+    if (Buffer.isBuffer(value)) return BINARY;
+    if (ancestors.has(value)) return CIRCULAR;
+    if (depth >= MAX_DEPTH) return TRUNCATED;
+    ancestors.add(value);
+    try {
+        if (Array.isArray(value)) {
+            return value.map((item)=>sanitizeValue(item, ancestors, depth + 1));
+        }
+        const sanitized = {};
+        for (const [key, entry] of Object.entries(value)){
+            sanitized[key] = isSensitiveKey(key) ? REDACTED : sanitizeValue(entry, ancestors, depth + 1);
+        }
+        return sanitized;
+    } finally{
+        ancestors.delete(value);
+    }
+}
+/** Case and separator blind, so `apiKey`, `api_key`, `X-API-KEY` and `private-key` all match. */ function isSensitiveKey(key) {
+    const normalized = key.toLowerCase().replace(/[\s_.-]/g, '');
+    if (SENSITIVE_EXACT_KEYS.includes(normalized)) return true;
+    return SENSITIVE_KEYS.some((sensitive)=>normalized.includes(sensitive));
+}
+
+__webpack_require__.d(__webpack_exports__, {
+  Gd: () => (isSensitiveKey),
+  IN: () => (sanitizeEventPayload),
+  _c: () => (isMultiWildcard),
+  qe: () => (matchEventPattern)
+});
+
+
 },
 
 };
 import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
-import * as __rspack_chunk_1 from '../948.js';
+import * as __rspack_chunk_1 from '../997.js';
 __webpack_require__.C(__rspack_chunk_1);
 import * as __rspack_chunk_2 from '../183.js';
 __webpack_require__.C(__rspack_chunk_2);
 import * as __rspack_chunk_3 from './index.js';
 __webpack_require__.C(__rspack_chunk_3);
-var __webpack_exports__ = __webpack_exec__(523);var __webpack_exports__ApiResponseDto = __webpack_exports__.x_;
+var __webpack_exports__ = __webpack_exec__(9523);var __webpack_exports__ApiResponseDto = __webpack_exports__.x_;
 var __webpack_exports__CurrentUser = __webpack_exports__.NO;
 var __webpack_exports__LogAction = __webpack_exports__.Jz;
 var __webpack_exports__OnDomainEvent = __webpack_exports__.kd;

package/fesm/dtos/index.js

@@ -7,7 +7,7 @@ import * as __rspack_chunk_1 from '../183.js';
 __webpack_require__.C(__rspack_chunk_1);
 import * as __rspack_chunk_2 from './index.js';
 __webpack_require__.C(__rspack_chunk_2);
-var __webpack_exports__ = __webpack_exec__(746);var __webpack_exports__BulkMetaDto = __webpack_exports__.L3;
+var __webpack_exports__ = __webpack_exec__(3746);var __webpack_exports__BulkMetaDto = __webpack_exports__.L3;
 var __webpack_exports__BulkResponseDto = __webpack_exports__.jS;
 var __webpack_exports__DeleteDto = __webpack_exports__.TG;
 var __webpack_exports__FilterAndPaginationDto = __webpack_exports__.x;

package/fesm/entities/index.js

@@ -3,8 +3,8 @@ import * as __rspack_external_typeorm from "typeorm";
 export const __rspack_esm_id = 604;
 export const __rspack_esm_ids = [604];
 export const __webpack_modules__ = {
-504(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _flusys_nestjs_core__rspack_import_0 = __webpack_require__(436);
+8504(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _flusys_nestjs_core__rspack_import_0 = __webpack_require__(8436);
 
 function getJsonColumnType() {
     const driver = _flusys_nestjs_core__rspack_import_0.envConfig.getTypeOrmConfig().type;
@@ -33,7 +33,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-768(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+1768(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
 // EXPORTS
 __webpack_require__.d(__webpack_exports__, {
@@ -42,7 +42,7 @@ __webpack_require__.d(__webpack_exports__, {
 });
 
 // EXTERNAL MODULE: external "typeorm"
-var external_typeorm_ = __webpack_require__(158);
+var external_typeorm_ = __webpack_require__(7158);
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/entities/identity.ts
 function _ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -130,7 +130,7 @@ _ts_decorate([
 ], Identity.prototype, "deletedById", void 0);
 
 // EXTERNAL MODULE: ./projects/nestjs-shared/src/classes/handle-custome-db.ts
-var handle_custome_db = __webpack_require__(504);
+var handle_custome_db = __webpack_require__(8504);
 ;// CONCATENATED MODULE: ./projects/nestjs-shared/src/entities/user-root.ts
 function user_root_ts_decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -313,13 +313,13 @@ user_root_ts_decorate([
 
 
 },
-436(module) {
+8436(module) {
 
 module.exports = __rspack_external__flusys_nestjs_core_ff4ca4e2;
 
 
 },
-158(module) {
+7158(module) {
 
 module.exports = __rspack_external_typeorm;
 
@@ -331,6 +331,6 @@ import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
 import * as __rspack_chunk_1 from './index.js';
 __webpack_require__.C(__rspack_chunk_1);
-var __webpack_exports__ = __webpack_exec__(768);var __webpack_exports__Identity = __webpack_exports__.l;
+var __webpack_exports__ = __webpack_exec__(1768);var __webpack_exports__Identity = __webpack_exports__.l;
 var __webpack_exports__UserRoot = __webpack_exports__.q;
 export { __webpack_exports__Identity as Identity, __webpack_exports__UserRoot as UserRoot };

package/fesm/enums/index.js

@@ -1,7 +1,7 @@
 export const __rspack_esm_id = 743;
 export const __rspack_esm_ids = [743];
 export const __webpack_modules__ = {
-664(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+7664(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 
 // EXPORTS
 __webpack_require__.d(__webpack_exports__, {
@@ -51,7 +51,7 @@ import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
 import * as __rspack_chunk_1 from './index.js';
 __webpack_require__.C(__rspack_chunk_1);
-var __webpack_exports__ = __webpack_exec__(664);var __webpack_exports__NotificationType = __webpack_exports__._n;
+var __webpack_exports__ = __webpack_exec__(7664);var __webpack_exports__NotificationType = __webpack_exports__._n;
 var __webpack_exports__ParticipantStatus = __webpack_exports__.cD;
 var __webpack_exports__RecurrenceType = __webpack_exports__.V5;
 export { __webpack_exports__NotificationType as NotificationType, __webpack_exports__ParticipantStatus as ParticipantStatus, __webpack_exports__RecurrenceType as RecurrenceType };

package/fesm/exceptions/index.js

@@ -2,7 +2,7 @@ import * as __rspack_external__nestjs_common_a04939da from "@nestjs/common";
 export const __rspack_esm_id = 413;
 export const __rspack_esm_ids = [413];
 export const __webpack_modules__ = {
-389(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+4389(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
 // ==================== AUTH (Shared across guards/interceptors) ====================
 // These are duplicated in nestjs-auth but needed here to avoid circular dependencies
 const AUTH_MESSAGES = {
@@ -62,9 +62,9 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-514(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(157);
-/* import */ var _constants_message_keys_js__rspack_import_1 = __webpack_require__(389);
+5514(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(6157);
+/* import */ var _constants_message_keys_js__rspack_import_1 = __webpack_require__(4389);
 
 
 class BaseAppException extends _nestjs_common__rspack_import_0.HttpException {
@@ -185,9 +185,9 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-448(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _base_app_exception_js__rspack_import_0 = __webpack_require__(514);
-/* import */ var _permission_exception_js__rspack_import_1 = __webpack_require__(374);
+9448(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _base_app_exception_js__rspack_import_0 = __webpack_require__(5514);
+/* import */ var _permission_exception_js__rspack_import_1 = __webpack_require__(8374);
 
 
 
@@ -207,9 +207,9 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-374(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
-/* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(157);
-/* import */ var _constants_message_keys_js__rspack_import_1 = __webpack_require__(389);
+8374(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _nestjs_common__rspack_import_0 = __webpack_require__(6157);
+/* import */ var _constants_message_keys_js__rspack_import_1 = __webpack_require__(4389);
 
 
 class PermissionSystemUnavailableException extends _nestjs_common__rspack_import_0.InternalServerErrorException {
@@ -254,7 +254,7 @@ __webpack_require__.d(__webpack_exports__, {
 
 
 },
-157(module) {
+6157(module) {
 
 module.exports = __rspack_external__nestjs_common_a04939da;
 
@@ -266,7 +266,7 @@ import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
 import * as __rspack_chunk_1 from './index.js';
 __webpack_require__.C(__rspack_chunk_1);
-var __webpack_exports__ = __webpack_exec__(448);var __webpack_exports__BaseAppException = __webpack_exports__.m8;
+var __webpack_exports__ = __webpack_exec__(9448);var __webpack_exports__BaseAppException = __webpack_exports__.m8;
 var __webpack_exports__ConflictException = __webpack_exports__.cb;
 var __webpack_exports__ForbiddenException = __webpack_exports__.ZT;
 var __webpack_exports__InsufficientPermissionsException = __webpack_exports__.z8;