@lenne.tech/nest-server 11.43.2 → 12.0.0

package/src/core/modules/better-auth/core-better-auth.resolver.ts

@@ -2,10 +2,10 @@ import { BadRequestException, Logger, Optional, UnauthorizedException } from '@n
 import { Args, Context, Mutation, Query, Resolver } from '@nestjs/graphql';
 import { Request, Response } from 'express';
 
-import { Roles } from '../../common/decorators/roles.decorator';
-import { RoleEnum } from '../../common/enums/role.enum';
-import { maskEmail } from '../../common/helpers/logging.helper';
-import { ErrorCode } from '../error-code/error-codes';
+import { Roles } from '../../common/decorators/roles.decorator.js';
+import { RoleEnum } from '../../common/enums/role.enum.js';
+import { maskEmail } from '../../common/helpers/logging.helper.js';
+import { ErrorCode } from '../error-code/error-codes.js';
 import {
   BetterAuth2FAResponse,
   BetterAuthSignInResponse,
@@ -14,10 +14,10 @@ import {
   hasUser,
   requires2FA,
   sessionTokenFromResponse,
-} from './better-auth.types';
-import { CoreBetterAuthAuthModel } from './core-better-auth-auth.model';
-import { CoreBetterAuthEmailVerificationService } from './core-better-auth-email-verification.service';
-import { CoreBetterAuthMigrationStatusModel } from './core-better-auth-migration-status.model';
+} from './better-auth.types.js';
+import { CoreBetterAuthAuthModel } from './core-better-auth-auth.model.js';
+import { CoreBetterAuthEmailVerificationService } from './core-better-auth-email-verification.service.js';
+import { CoreBetterAuthMigrationStatusModel } from './core-better-auth-migration-status.model.js';
 import {
   CoreBetterAuth2FASetupModel,
   CoreBetterAuthFeaturesModel,
@@ -25,11 +25,12 @@ import {
   CoreBetterAuthPasskeyModel,
   CoreBetterAuthSessionModel,
   CoreBetterAuthUserModel,
-} from './core-better-auth-models';
-import { CoreBetterAuthSignUpValidatorService } from './core-better-auth-signup-validator.service';
-import { BetterAuthSessionUser, CoreBetterAuthUserMapper, MappedUser } from './core-better-auth-user.mapper';
-import { convertExpressHeaders } from './core-better-auth-web.helper';
-import { CoreBetterAuthService } from './core-better-auth.service';
+} from './core-better-auth-models.js';
+import { CoreBetterAuthSignUpValidatorService } from './core-better-auth-signup-validator.service.js';
+import { BetterAuthSessionUser, CoreBetterAuthUserMapper, MappedUser } from './core-better-auth-user.mapper.js';
+import { convertExpressHeaders } from './core-better-auth-web.helper.js';
+import { CoreBetterAuthService } from './core-better-auth.service.js';
+import { registerBetterAuthHandlerClass } from './core-better-auth.registry.js';
 
 /**
  * Abstract GraphQL Resolver for Better-Auth operations
@@ -957,3 +958,5 @@ export class CoreBetterAuthResolver {
     };
   }
 }
+
+registerBetterAuthHandlerClass(CoreBetterAuthResolver);

package/src/core/modules/better-auth/core-better-auth.service.ts

@@ -16,27 +16,27 @@ import {
 } from 'better-auth/api';
 import { Request } from 'express';
 import { importJWK, jwtVerify } from 'jose';
-import { Connection } from 'mongoose';
-
-import { shouldConvertSessionTokenToJwt } from '../../common/helpers/cookies.helper';
-import { maskEmail, maskToken } from '../../common/helpers/logging.helper';
-import { IBetterAuth, ICookiesConfig } from '../../common/interfaces/server-options.interface';
-import { ConfigService } from '../../common/services/config.service';
-import { ErrorCode } from '../error-code/error-codes';
-import { resolveBetterAuthCookiePrefix } from './better-auth-cookie-prefix.helper';
-import { BetterAuthInstance } from './better-auth.config';
-import { legacyCredentialAccountIssuer, usesLegacyAccountIssuer } from './core-better-auth-account-issuer.helper';
+import type { Connection } from 'mongoose';
+
+import { shouldConvertSessionTokenToJwt } from '../../common/helpers/cookies.helper.js';
+import { maskEmail, maskToken } from '../../common/helpers/logging.helper.js';
+import { type IBetterAuth, ICookiesConfig } from '../../common/interfaces/server-options.interface.js';
+import { ConfigService } from '../../common/services/config.service.js';
+import { ErrorCode } from '../error-code/error-codes.js';
+import { resolveBetterAuthCookiePrefix } from './better-auth-cookie-prefix.helper.js';
+import type { BetterAuthInstance } from './better-auth.config.js';
+import { legacyCredentialAccountIssuer, usesLegacyAccountIssuer } from './core-better-auth-account-issuer.helper.js';
 import {
   BUILT_IN_BETTER_AUTH_PLUGIN_IDS,
   HANDLER_SESSION_PATHS,
   isUnavailableOperation,
   toOpenApiPath,
   unavailableBetterAuthOperations,
-} from './core-better-auth-openapi.helper';
-import type { IBetterAuthOpenApiDocument, IBetterAuthRuntime } from './core-better-auth-openapi.helper';
-import { isJwtShaped } from './core-better-auth-token.helper';
-import { BetterAuthSessionUser } from './core-better-auth-user.mapper';
-import { convertExpressHeaders, parseCookieHeader, signCookieValueIfNeeded } from './core-better-auth-web.helper';
+} from './core-better-auth-openapi.helper.js';
+import type { IBetterAuthOpenApiDocument, IBetterAuthRuntime } from './core-better-auth-openapi.helper.js';
+import { isJwtShaped } from './core-better-auth-token.helper.js';
+import { BetterAuthSessionUser } from './core-better-auth-user.mapper.js';
+import { convertExpressHeaders, parseCookieHeader, signCookieValueIfNeeded } from './core-better-auth-web.helper.js';
 import {
   ACCOUNT_ISSUER_BACKFILL_ID,
   BACKFILL_MARKER_COLLECTION,
@@ -46,7 +46,7 @@ import {
   DEFAULT_ACCOUNT_ACCOUNT_ID_FIELD,
   DEFAULT_ACCOUNT_ISSUER_FIELD,
   DEFAULT_ACCOUNT_MODEL_NAME,
-} from './core-better-auth.constants';
+} from './core-better-auth.constants.js';
 
 /**
  * Result of a session validation
@@ -77,7 +77,7 @@ export interface SessionResult {
  * ambiguity error. The mechanical guards are `pnpm run check:swc-tdz` and
  * `tests/unit/better-auth-di-tokens.spec.ts`.
  */
-export { BETTER_AUTH_CONFIG, BETTER_AUTH_COOKIE_DOMAIN } from './core-better-auth.constants';
+export { BETTER_AUTH_CONFIG, BETTER_AUTH_COOKIE_DOMAIN } from './core-better-auth.constants.js';
 
 /**
  * CoreBetterAuthService provides a NestJS-friendly wrapper around the better-auth instance.

package/src/core/modules/better-auth/index.ts

@@ -22,28 +22,28 @@
  * - DefaultBetterAuthResolver: Default resolver implementation (use as fallback)
  */
 
-export * from './better-auth-roles.guard';
-export * from './better-auth-token.service';
-export * from './better-auth.config';
-export * from './better-auth.resolver';
-export * from './better-auth.types';
-export * from './core-better-auth-api.middleware';
-export * from './core-better-auth-auth.model';
-export * from './core-better-auth-cookie.helper';
-export * from './core-better-auth-email-verification.service';
-export * from './core-better-auth-error-codes.helper';
-export * from './core-better-auth-migration-status.model';
-export * from './core-better-auth-models';
-export * from './core-better-auth-rate-limit.middleware';
-export * from './core-better-auth-rate-limiter.service';
-export * from './core-better-auth-signup-validator.service';
-export * from './core-better-auth-token.helper';
-export * from './core-better-auth-user.mapper';
-export * from './core-better-auth-web.helper';
-export * from './core-better-auth.constants';
-export * from './core-better-auth.controller';
-export * from './core-better-auth.middleware';
-export * from './core-better-auth.module';
+export * from './better-auth-roles.guard.js';
+export * from './better-auth-token.service.js';
+export * from './better-auth.config.js';
+export * from './better-auth.resolver.js';
+export * from './better-auth.types.js';
+export * from './core-better-auth-api.middleware.js';
+export * from './core-better-auth-auth.model.js';
+export * from './core-better-auth-cookie.helper.js';
+export * from './core-better-auth-email-verification.service.js';
+export * from './core-better-auth-error-codes.helper.js';
+export * from './core-better-auth-migration-status.model.js';
+export * from './core-better-auth-models.js';
+export * from './core-better-auth-rate-limit.middleware.js';
+export * from './core-better-auth-rate-limiter.service.js';
+export * from './core-better-auth-signup-validator.service.js';
+export * from './core-better-auth-token.helper.js';
+export * from './core-better-auth-user.mapper.js';
+export * from './core-better-auth-web.helper.js';
+export * from './core-better-auth.constants.js';
+export * from './core-better-auth.controller.js';
+export * from './core-better-auth.middleware.js';
+export * from './core-better-auth.module.js';
 // NOT exported: './core-better-auth.registry'.
 //
 // It is module-internal plumbing that only exists so BetterAuthRolesGuard can reach
@@ -52,5 +52,5 @@ export * from './core-better-auth.module';
 // consumer swap or null the very token service the guard makes its authorization decisions with.
 // Consumers that need the instance already have the public, read-only
 // `CoreBetterAuthModule.getTokenServiceInstance()`.
-export * from './core-better-auth.resolver';
-export * from './core-better-auth.service';
+export * from './core-better-auth.resolver.js';
+export * from './core-better-auth.service.js';

package/src/core/modules/error-code/core-error-code.controller.ts

@@ -1,9 +1,9 @@
 import { Controller, Get, NotFoundException, Param } from '@nestjs/common';
 
-import { Roles } from '../../common/decorators/roles.decorator';
-import { RoleEnum } from '../../common/enums/role.enum';
-import { CoreErrorCodeService } from './core-error-code.service';
-import { IErrorTranslationResponse, SupportedLocale } from './interfaces/error-code.interfaces';
+import { Roles } from '../../common/decorators/roles.decorator.js';
+import { RoleEnum } from '../../common/enums/role.enum.js';
+import { CoreErrorCodeService } from './core-error-code.service.js';
+import { type IErrorTranslationResponse, SupportedLocale } from './interfaces/error-code.interfaces.js';
 
 /**
  * Core Error Code Controller

package/src/core/modules/error-code/core-error-code.service.ts

@@ -1,7 +1,7 @@
 import { Injectable } from '@nestjs/common';
 
-import { getAllErrorDefinitions, IErrorRegistry } from './error-codes';
-import { SupportedLocale } from './interfaces/error-code.interfaces';
+import { getAllErrorDefinitions, IErrorRegistry } from './error-codes.js';
+import { SupportedLocale } from './interfaces/error-code.interfaces.js';
 
 /**
  * Core Error Code Service

package/src/core/modules/error-code/error-code.module.ts

@@ -1,8 +1,8 @@
 import { DynamicModule, Global, Module, Type } from '@nestjs/common';
 
-import { CoreErrorCodeController } from './core-error-code.controller';
-import { CoreErrorCodeService } from './core-error-code.service';
-import { IErrorCodeModuleConfig } from './interfaces/error-code.interfaces';
+import { CoreErrorCodeController } from './core-error-code.controller.js';
+import { CoreErrorCodeService } from './core-error-code.service.js';
+import { IErrorCodeModuleConfig } from './interfaces/error-code.interfaces.js';
 
 /**
  * Error Code Module

package/src/core/modules/error-code/index.ts

@@ -1,14 +1,14 @@
 // Controller
-export * from './core-error-code.controller';
+export * from './core-error-code.controller.js';
 
 // Service
-export * from './core-error-code.service';
+export * from './core-error-code.service.js';
 
 // Module
-export * from './error-code.module';
+export * from './error-code.module.js';
 
 // Error Codes
-export * from './error-codes';
+export * from './error-codes.js';
 
 // Interfaces
-export * from './interfaces/error-code.interfaces';
+export * from './interfaces/error-code.interfaces.js';

package/src/core/modules/error-code/interfaces/error-code.interfaces.ts

@@ -1,7 +1,7 @@
 import { Type } from '@nestjs/common';
 
-import { CoreErrorCodeService } from '../core-error-code.service';
-import { IErrorRegistry } from '../error-codes';
+import { CoreErrorCodeService } from '../core-error-code.service.js';
+import { IErrorRegistry } from '../error-codes.js';
 
 /**
  * Configuration for the error code module

package/src/core/modules/file/core-file-access-audit.initializer.ts

@@ -1,16 +1,16 @@
 import { Injectable, Logger, OnApplicationBootstrap, Optional } from '@nestjs/common';
 import { DiscoveryService } from '@nestjs/core';
 
-import { ConfigService } from '../../common/services/config.service';
-import { CoreFileController } from './core-file.controller';
-import { CoreFileResolver } from './core-file.resolver';
-import { CoreFileService } from './core-file.service';
+import { ConfigService } from '../../common/services/config.service.js';
+import { CoreFileController } from './core-file.controller.js';
+import { CoreFileResolver } from './core-file.resolver.js';
+import { CoreFileService } from './core-file.service.js';
 import {
   FILE_ROLE_MEMBERS,
   FileEndpointClassName,
   ObservedFileHandler,
   warnOnUndecidedEffectiveFileAccess,
-} from './file-roles.config';
+} from './file-roles.config.js';
 
 /**
  * Audits the file endpoints a project ACTUALLY registered, and warns when one of them is open beyond

package/src/core/modules/file/core-file-info.model.ts

@@ -1,10 +1,10 @@
 import { ObjectType } from '@nestjs/graphql';
 import { Types } from 'mongoose';
 
-import { Restricted } from '../../common/decorators/restricted.decorator';
-import { UnifiedField } from '../../common/decorators/unified-field.decorator';
-import { RoleEnum } from '../../common/enums/role.enum';
-import { CoreModel } from '../../common/models/core-model.model';
+import { Restricted } from '../../common/decorators/restricted.decorator.js';
+import { UnifiedField } from '../../common/decorators/unified-field.decorator.js';
+import { RoleEnum } from '../../common/enums/role.enum.js';
+import { CoreModel } from '../../common/models/core-model.model.js';
 
 /**
  * File info

package/src/core/modules/file/core-file.controller.ts

@@ -2,14 +2,14 @@ import { BadRequestException, Controller, Get, Logger, NotFoundException, Param,
 import type { Response } from 'express';
 import type { Readable } from 'stream';
 
-import { CurrentUser } from '../../common/decorators/current-user.decorator';
-import { Roles } from '../../common/decorators/roles.decorator';
-import { RoleEnum } from '../../common/enums/role.enum';
-import { buildContentDisposition } from '../../common/helpers/content-disposition.helper';
-import { ErrorCode } from '../error-code/error-codes';
-import { SkipTenantCheck } from '../tenant/core-tenant.decorators';
-import { CoreFileService } from './core-file.service';
-import type { FileServiceOptions } from './interfaces/file-service-options.interface';
+import { CurrentUser } from '../../common/decorators/current-user.decorator.js';
+import { Roles } from '../../common/decorators/roles.decorator.js';
+import { RoleEnum } from '../../common/enums/role.enum.js';
+import { buildContentDisposition } from '../../common/helpers/content-disposition.helper.js';
+import { ErrorCode } from '../error-code/error-codes.js';
+import { SkipTenantCheck } from '../tenant/core-tenant.decorators.js';
+import { CoreFileService } from './core-file.service.js';
+import type { FileServiceOptions } from './interfaces/file-service-options.interface.js';
 
 const fileStreamLogger = new Logger('CoreFileController');
 

package/src/core/modules/file/core-file.resolver.ts

@@ -1,13 +1,12 @@
 import { Args, Mutation, Query, Resolver } from '@nestjs/graphql';
-import * as GraphQLUpload from 'graphql-upload/GraphQLUpload.js';
-
-import { CurrentUser } from '../../common/decorators/current-user.decorator';
-import { Roles } from '../../common/decorators/roles.decorator';
-import { RoleEnum } from '../../common/enums/role.enum';
-import { SkipTenantCheck } from '../tenant/core-tenant.decorators';
-import { CoreFileInfo } from './core-file-info.model';
-import { CoreFileService } from './core-file.service';
-import { FileUpload } from './interfaces/file-upload.interface';
+import { CurrentUser } from '../../common/decorators/current-user.decorator.js';
+import { Roles } from '../../common/decorators/roles.decorator.js';
+import { RoleEnum } from '../../common/enums/role.enum.js';
+import { GraphQLUpload } from '../../common/scalars/upload.scalar.js';
+import { SkipTenantCheck } from '../tenant/core-tenant.decorators.js';
+import { CoreFileInfo } from './core-file-info.model.js';
+import { CoreFileService } from './core-file.service.js';
+import type { FileUpload } from './interfaces/file-upload.interface.js';
 
 /**
  * File resolver

package/src/core/modules/file/core-file.service.ts

@@ -1,37 +1,37 @@
 import { Logger, NotFoundException } from '@nestjs/common';
-import { Connection, mongo, Types } from 'mongoose';
+import { type Connection, mongo, Types } from 'mongoose';
 import { Readable } from 'stream';
 
-import { FilterArgs } from '../../common/args/filter.args';
-import { accessDeniedException } from '../../common/exceptions/access-denied.exception';
-import { getObjectIds, getStringIds } from '../../common/helpers/db.helper';
-import { convertFilterArgsToQuery } from '../../common/helpers/filter.helper';
-import { GridFSHelper } from '../../common/helpers/gridfs.helper';
-import { check } from '../../common/helpers/input.helper';
-import { prepareOutput } from '../../common/helpers/service.helper';
-import { ConfigService } from '../../common/services/config.service';
-import { RequestContext } from '../../common/services/request-context.service';
-import { CoreS3Service } from '../../common/services/core-s3.service';
-import { MaybePromise } from '../../common/types/maybe-promise.type';
-import { CoreFileInfo } from './core-file-info.model';
-import { decideFileAccess, fileAccessNeedsRawDocument, resolveFileAccessPreset } from './file-access.helper';
-import { warnOnUndecidedFileAccess } from './file-roles.config';
-import { FileServiceOptions } from './interfaces/file-service-options.interface';
-import { FileUploadSource } from './interfaces/file-upload.interface';
+import { FilterArgs } from '../../common/args/filter.args.js';
+import { accessDeniedException } from '../../common/exceptions/access-denied.exception.js';
+import { getObjectIds, getStringIds } from '../../common/helpers/db.helper.js';
+import { convertFilterArgsToQuery } from '../../common/helpers/filter.helper.js';
+import { GridFSHelper } from '../../common/helpers/gridfs.helper.js';
+import { check } from '../../common/helpers/input.helper.js';
+import { prepareOutput } from '../../common/helpers/service.helper.js';
+import { ConfigService } from '../../common/services/config.service.js';
+import { RequestContext } from '../../common/services/request-context.service.js';
+import { CoreS3Service } from '../../common/services/core-s3.service.js';
+import { MaybePromise } from '../../common/types/maybe-promise.type.js';
+import { CoreFileInfo } from './core-file-info.model.js';
+import { decideFileAccess, fileAccessNeedsRawDocument, resolveFileAccessPreset } from './file-access.helper.js';
+import { warnOnUndecidedFileAccess } from './file-roles.config.js';
+import { FileServiceOptions } from './interfaces/file-service-options.interface.js';
+import { FileUploadSource } from './interfaces/file-upload.interface.js';
 import {
   assertFileStorageAvailable,
   FileStorageDriver,
   FileStorageResolution,
   logFileStorage,
   resolveFileStorage,
-} from './file-storage.helper';
+} from './file-storage.helper.js';
 import {
   DEFAULT_FILESYSTEM_DIR,
   FILESYSTEM_FILES_COLLECTION,
   FilesystemFileHelper,
   FilesystemFileInfo,
-} from './filesystem-file.helper';
-import { S3_FILES_COLLECTION, S3FileHelper, S3FileInfo } from './s3-file.helper';
+} from './filesystem-file.helper.js';
+import { S3_FILES_COLLECTION, S3FileHelper, S3FileInfo } from './s3-file.helper.js';
 
 /**
  * Type for checking input

package/src/core/modules/file/file-access.helper.ts

@@ -37,7 +37,7 @@
  * be split for the same reason (it imports the endpoint classes, which inject `CoreFileService`), and
  * this file is read FROM the service. See `.claude/rules/architecture.md` → "DI Token Placement".
  */
-import { RoleEnum } from '../../common/enums/role.enum';
+import { RoleEnum } from '../../common/enums/role.enum.js';
 
 /** Which of the four project classes this deployment is. */
 export type FileAccessPreset = 'authenticated' | 'custom' | 'owner' | 'public' | 'tenant';

package/src/core/modules/file/file-roles.config.ts

@@ -17,8 +17,8 @@
  */
 import { Logger } from '@nestjs/common';
 
-import { RoleEnum } from '../../common/enums/role.enum';
-import { IFileConfig, IS3Config } from '../../common/interfaces/server-options.interface';
+import { RoleEnum } from '../../common/enums/role.enum.js';
+import { IFileConfig, IS3Config } from '../../common/interfaces/server-options.interface.js';
 
 const logger = new Logger('CoreFileRoles');
 

package/src/core/modules/file/file-roles.helper.ts

@@ -1,9 +1,9 @@
 import { Logger } from '@nestjs/common';
 
-import { IFileConfig } from '../../common/interfaces/server-options.interface';
-import { CoreFileController } from './core-file.controller';
-import { CoreFileResolver } from './core-file.resolver';
-import { FILE_ROLE_MEMBERS, FileEndpointClassName, FileRoleKey, resolveRoles } from './file-roles.config';
+import { IFileConfig } from '../../common/interfaces/server-options.interface.js';
+import { CoreFileController } from './core-file.controller.js';
+import { CoreFileResolver } from './core-file.resolver.js';
+import { FILE_ROLE_MEMBERS, FileEndpointClassName, FileRoleKey, resolveRoles } from './file-roles.config.js';
 
 const logger = new Logger('CoreFileRoles');
 
@@ -17,8 +17,8 @@ export {
   warnOnPresignedDownloadsWithRestrictedRoles,
   warnOnUndecidedEffectiveFileAccess,
   warnOnUndecidedFileAccess,
-} from './file-roles.config';
-export type { FileEndpointClassName, FileRoleKey, ObservedFileHandler } from './file-roles.config';
+} from './file-roles.config.js';
+export type { FileEndpointClassName, FileRoleKey, ObservedFileHandler } from './file-roles.config.js';
 
 /**
  * The prototypes the member names in {@link FILE_ROLE_MEMBERS} resolve against.

package/src/core/modules/file/file-storage.helper.ts

@@ -1,6 +1,6 @@
 import { Logger } from '@nestjs/common';
 
-import { IServerOptions } from '../../common/interfaces/server-options.interface';
+import { IServerOptions } from '../../common/interfaces/server-options.interface.js';
 
 const logger = new Logger('CoreFileStorage');
 

package/src/core/modules/file/filesystem-file.helper.ts

@@ -12,8 +12,8 @@ import {
   findMetadata,
   findMetadataById,
   findMetadataByName,
-} from './file-metadata.helper';
-import { streamToBuffer } from './s3-file.helper';
+} from './file-metadata.helper.js';
+import { streamToBuffer } from './s3-file.helper.js';
 
 /** Metadata collection for files stored on the local filesystem */
 export const FILESYSTEM_FILES_COLLECTION = 'filesystem-files';

package/src/core/modules/file/interfaces/file-upload.interface.ts

@@ -49,7 +49,7 @@ export interface FileUpload extends FileUploadSource {
    */
   createReadStream: (options?: {
     /** Specify an encoding for the chunks, default: utf8 */
-    encoding?: 'ascii' | 'base64' | 'base64url' | 'hex' | 'latin1' | 'ucs2' | 'utf8' | 'utf8' | 'utf16le';
+    encoding?: 'ascii' | 'base64' | 'base64url' | 'hex' | 'latin1' | 'ucs2' | 'utf8' | 'utf16le';
 
     /**  Maximum number of bytes to store in the internal buffer before ceasing to read from the underlying resource, default: 16384 */
     highWaterMark?: number;

package/src/core/modules/file/s3-file.helper.ts

@@ -1,7 +1,7 @@
 import { Types } from 'mongoose';
 import { Readable } from 'stream';
 
-import { CoreS3Service } from '../../common/services/core-s3.service';
+import { CoreS3Service } from '../../common/services/core-s3.service.js';
 import {
   ensureFilenameIndex,
   FileCollection,
@@ -9,7 +9,7 @@ import {
   findMetadata,
   findMetadataById,
   findMetadataByName,
-} from './file-metadata.helper';
+} from './file-metadata.helper.js';
 
 /**
  * Name of the MongoDB collection holding the metadata of S3-stored files.

package/src/core/modules/health-check/core-health-check-result.model.ts

@@ -1,10 +1,10 @@
 import { ObjectType } from '@nestjs/graphql';
 
-import { Restricted } from '../../common/decorators/restricted.decorator';
-import { UnifiedField } from '../../common/decorators/unified-field.decorator';
-import { RoleEnum } from '../../common/enums/role.enum';
-import { CoreModel } from '../../common/models/core-model.model';
-import { JSON } from '../../common/scalars/json.scalar';
+import { Restricted } from '../../common/decorators/restricted.decorator.js';
+import { UnifiedField } from '../../common/decorators/unified-field.decorator.js';
+import { RoleEnum } from '../../common/enums/role.enum.js';
+import { CoreModel } from '../../common/models/core-model.model.js';
+import { JSON } from '../../common/scalars/json.scalar.js';
 
 /**
  * User model

package/src/core/modules/health-check/core-health-check.controller.ts

@@ -1,8 +1,8 @@
 import { Controller, Get } from '@nestjs/common';
 
-import { Roles } from '../../common/decorators/roles.decorator';
-import { RoleEnum } from '../../common/enums/role.enum';
-import { CoreHealthCheckService } from './core-health-check.service';
+import { Roles } from '../../common/decorators/roles.decorator.js';
+import { RoleEnum } from '../../common/enums/role.enum.js';
+import { CoreHealthCheckService } from './core-health-check.service.js';
 
 /**
  * The HealthController class checks the health of various components including the database, memory, and disk.

package/src/core/modules/health-check/core-health-check.module.ts

@@ -1,9 +1,9 @@
 import { Module } from '@nestjs/common';
 import { TerminusModule } from '@nestjs/terminus';
 
-import { CoreHealthCheckController } from './core-health-check.controller';
-import { CoreHealthCheckResolver } from './core-health-check.resolver';
-import { CoreHealthCheckService } from './core-health-check.service';
+import { CoreHealthCheckController } from './core-health-check.controller.js';
+import { CoreHealthCheckResolver } from './core-health-check.resolver.js';
+import { CoreHealthCheckService } from './core-health-check.service.js';
 
 /**
  * This is a module that imports the TerminusModule and includes a HealthController.

package/src/core/modules/health-check/core-health-check.resolver.ts

@@ -1,9 +1,9 @@
 import { Query, Resolver } from '@nestjs/graphql';
 
-import { Roles } from '../../common/decorators/roles.decorator';
-import { RoleEnum } from '../../common/enums/role.enum';
-import { CoreHealthCheckResult } from './core-health-check-result.model';
-import { CoreHealthCheckService } from './core-health-check.service';
+import { Roles } from '../../common/decorators/roles.decorator.js';
+import { RoleEnum } from '../../common/enums/role.enum.js';
+import { CoreHealthCheckResult } from './core-health-check-result.model.js';
+import { CoreHealthCheckService } from './core-health-check.service.js';
 
 /**
  * Resolver to process with user data

package/src/core/modules/health-check/core-health-check.service.ts

@@ -1,16 +1,16 @@
 import { Injectable } from '@nestjs/common';
 import {
   DiskHealthIndicator,
+  type DiskHealthIndicatorOptions,
   HealthCheckResult,
   HealthCheckService,
   MemoryHealthIndicator,
   MongooseHealthIndicator,
+  type MongoosePingCheckSettings,
 } from '@nestjs/terminus';
-import type { MongoosePingCheckSettings } from '@nestjs/terminus/dist/health-indicator/database/mongoose.health.js';
-import type { DiskHealthIndicatorOptions } from '@nestjs/terminus/dist/health-indicator/disk/disk-health-options.type.js';
 
-import { getBuildInfo } from '../../common/helpers/meta.helper';
-import { ConfigService } from '../../common/services/config.service';
+import { getBuildInfo } from '../../common/helpers/meta.helper.js';
+import { ConfigService } from '../../common/services/config.service.js';
 
 /**
  * Core health check service
@@ -29,12 +29,21 @@ export class CoreHealthCheckService {
   healthCheck(): Promise<HealthCheckResult> {
     const healthIndicatorFunctions = [];
     if (this.config.get<boolean>('healthCheck.configs.database.enabled')) {
-      healthIndicatorFunctions.push(() =>
-        this.db.pingCheck(
+      healthIndicatorFunctions.push(() => {
+        // `timeout` stays part of the config contract, but @nestjs/terminus 12 deprecated it on the
+        // indicator in favour of `.withTimeout()` on the returned attempt — translate it here, so the
+        // configuration keeps working once the option is gone from the indicator.
+        // Same effective timeouts as before: 300 ms without configured options, otherwise the
+        // configured `timeout`, otherwise Terminus' own default (1000 ms).
+        const { timeout, ...options } = this.config.get<MongoosePingCheckSettings>(
+          'healthCheck.configs.database.options',
+        ) ?? { timeout: 300 };
+        const attempt = this.db.pingCheck(
           this.config.get<string>('healthCheck.configs.database.key') ?? 'database',
-          this.config.get<MongoosePingCheckSettings>('healthCheck.configs.database.options') ?? { timeout: 300 },
-        ),
-      );
+          options,
+        );
+        return timeout === undefined ? attempt : attempt.withTimeout(timeout);
+      });
     }
     if (this.config.get<boolean>('healthCheck.configs.memoryHeap.enabled')) {
       healthIndicatorFunctions.push(() =>

package/src/core/modules/hub/core-hub-actions.controller.ts

@@ -9,8 +9,8 @@ import {
   Post,
 } from '@nestjs/common';
 
-import { HubActionMessage } from './hub-action-messages';
-import { CoreHubActionsService } from './services/core-hub-actions.service';
+import { HubActionMessage } from './hub-action-messages.js';
+import { CoreHubActionsService } from './services/core-hub-actions.service.js';
 
 /** Body shape shared by the confirm-guarded actions. */
 interface ConfirmBody {