@lenne.tech/nest-server 11.43.2 → 12.0.0

package/src/core/common/helpers/swagger.helper.ts

@@ -4,30 +4,30 @@ import { ModulesContainer } from '@nestjs/core';
 import { SchedulerRegistry } from '@nestjs/schedule';
 import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger';
 
-import { getMountedMcpOAuth } from '../../modules/ai/helpers/ai-mcp-oauth.registry';
-import { resolveApiTokenConfig } from '../../modules/api-token/core-api-token.helpers';
-import { API_TOKEN_SCOPES_KEY } from '../../modules/api-token/core-api-token.constants';
-import { CoreAuthController } from '../../modules/auth/core-auth.controller';
-import { isLegacyEndpointEnabled } from '../../modules/auth/helpers/legacy-endpoints.helper';
-import { resolveBetterAuthSessionCookieName } from '../../modules/better-auth/better-auth-cookie-prefix.helper';
+import { getMountedMcpOAuth } from '../../modules/ai/helpers/ai-mcp-oauth.registry.js';
+import { resolveApiTokenConfig } from '../../modules/api-token/core-api-token.helpers.js';
+import { API_TOKEN_SCOPES_KEY } from '../../modules/api-token/core-api-token.constants.js';
+import { CoreAuthController } from '../../modules/auth/core-auth.controller.js';
+import { isLegacyEndpointEnabled } from '../../modules/auth/helpers/legacy-endpoints.helper.js';
+import { resolveBetterAuthSessionCookieName } from '../../modules/better-auth/better-auth-cookie-prefix.helper.js';
 import {
   isBetterAuthOpenApiPath,
   isControllerHandledPath,
   isUnavailableOperation,
   switchedOffBetterAuthPaths,
-} from '../../modules/better-auth/core-better-auth-openapi.helper';
-import { CoreBetterAuthUserMapper } from '../../modules/better-auth/core-better-auth-user.mapper';
-import { CoreBetterAuthController } from '../../modules/better-auth/core-better-auth.controller';
-import { CoreBetterAuthService } from '../../modules/better-auth/core-better-auth.service';
-import { CoreHubActionsController } from '../../modules/hub/core-hub-actions.controller';
-import { CoreHubController } from '../../modules/hub/core-hub.controller';
-import { isHubEnabled, normalizeHubConfig } from '../../modules/hub/hub-config.helper';
-import { SKIP_TENANT_CHECK_KEY } from '../../modules/tenant/core-tenant.decorators';
-import { API_METHODS_KEY } from '../decorators/api-methods.decorator';
-import { mergeRolesMetadata } from '../../modules/tenant/core-tenant.helpers';
-import { RoleEnum } from '../enums/role.enum';
-import { ConfigService } from '../services/config.service';
-import { isCookiesEnabled } from './cookies.helper';
+} from '../../modules/better-auth/core-better-auth-openapi.helper.js';
+import { CoreBetterAuthUserMapper } from '../../modules/better-auth/core-better-auth-user.mapper.js';
+import { CoreBetterAuthController } from '../../modules/better-auth/core-better-auth.controller.js';
+import { CoreBetterAuthService } from '../../modules/better-auth/core-better-auth.service.js';
+import { CoreHubActionsController } from '../../modules/hub/core-hub-actions.controller.js';
+import { CoreHubController } from '../../modules/hub/core-hub.controller.js';
+import { isHubEnabled, normalizeHubConfig } from '../../modules/hub/hub-config.helper.js';
+import { SKIP_TENANT_CHECK_KEY } from '../../modules/tenant/core-tenant.decorators.js';
+import { API_METHODS_KEY } from '../decorators/api-methods.decorator.js';
+import { mergeRolesMetadata } from '../../modules/tenant/core-tenant.helpers.js';
+import { RoleEnum } from '../enums/role.enum.js';
+import { ConfigService } from '../services/config.service.js';
+import { isCookiesEnabled } from './cookies.helper.js';
 
 import type { INestApplication, Type } from '@nestjs/common';
 import type {
@@ -38,11 +38,14 @@ import type {
   ReferenceObject,
   TagObject,
 } from '@nestjs/swagger';
-import type { IMountedMcpOAuth } from '../../modules/ai/helpers/ai-mcp-oauth.registry';
-import type { IBetterAuthOpenApiDocument } from '../../modules/better-auth/core-better-auth-openapi.helper';
-import type { ResolvedHubConfig } from '../../modules/hub/interfaces/hub-config.interface';
-import type { IServerOptions } from '../interfaces/server-options.interface';
-import type { ISwaggerApiTokenViewOptions, ISwaggerSetupOptions } from '../interfaces/swagger-setup-options.interface';
+import type { IMountedMcpOAuth } from '../../modules/ai/helpers/ai-mcp-oauth.registry.js';
+import type { IBetterAuthOpenApiDocument } from '../../modules/better-auth/core-better-auth-openapi.helper.js';
+import type { ResolvedHubConfig } from '../../modules/hub/interfaces/hub-config.interface.js';
+import type { IServerOptions } from '../interfaces/server-options.interface.js';
+import type {
+  ISwaggerApiTokenViewOptions,
+  ISwaggerSetupOptions,
+} from '../interfaces/swagger-setup-options.interface.js';
 
 /**
  * Swagger setup that describes how a route is actually reached (since 11.42.7).
@@ -87,11 +90,21 @@ export const SWAGGER_API_TOKEN_SCOPES_EXTENSION = 'x-api-token-scopes';
 
 /**
  * Fields of an OpenAPI path item that are not operations. Every other key is an operation: they are read
- * from the path item rather than from a list of HTTP methods, because `@All()` makes @nestjs/swagger emit
- * a `search` operation too, which no OpenAPI version lists — a fixed list left it unenriched.
+ * from the path item rather than from a list of HTTP methods, so a method outside the usual set is
+ * enriched like any other.
  */
 const PATH_ITEM_FIELDS = new Set(['$ref', 'description', 'parameters', 'servers', 'summary']);
 
+/**
+ * OpenAPI 3.2's container for operations whose method is outside the fixed set, keyed by the method in
+ * upper case (`SEARCH`, `QUERY`). @nestjs/swagger 12 emits `@All()` as these methods too: into this
+ * container when the document is 3.2 (`configureBuilder` → `setOpenAPIVersion('3.2.0')`), and not at all
+ * in the default 3.0 document. Until 11.x it wrote a bare `search` key, which no OpenAPI version allows.
+ * The container is neither an operation nor a path-level field: its entries are operations in their own
+ * right, and every reader and writer here goes through {@link operationsOf} / {@link removeOperation}.
+ */
+const ADDITIONAL_OPERATIONS = 'additionalOperations';
+
 /** An operation with the vendor extension this helper writes */
 type EnrichedOperation = OperationObject & { [SWAGGER_API_TOKEN_SCOPES_EXTENSION]?: string[] };
 
@@ -290,7 +303,7 @@ export function buildSwaggerDocument(
 
   for (const [path, method] of switchedOff) {
     const item = document.paths[path] as Record<string, unknown>;
-    delete item[method];
+    removeOperation(item, method);
     if (!operationsOf(document.paths[path]).length) {
       delete document.paths[path];
     }
@@ -699,8 +712,8 @@ export function buildApiTokenSwaggerDocument(
 
   const paths: OpenAPIObject['paths'] = {};
   for (const [path, item] of Object.entries(view.paths)) {
-    const kept: Record<string, EnrichedOperation> = {};
-    for (const [method, operation] of operationsOf(item)) {
+    const kept: Record<string, unknown> = {};
+    for (const [method, operation, additional] of operationsOf(item)) {
       if (!operation[SWAGGER_API_TOKEN_SCOPES_EXTENSION]?.length) {
         continue;
       }
@@ -711,7 +724,7 @@ export function buildApiTokenSwaggerDocument(
             !isRef(parameter) || parameter.$ref !== `#/components/parameters/${SWAGGER_TENANT_HEADER_PARAMETER}`,
         );
       }
-      kept[method] = operation;
+      putOperation(kept, method, operation, additional);
     }
     if (Object.keys(kept).length) {
       paths[path] = { ...pathLevelFields(item), ...kept };
@@ -909,11 +922,57 @@ function isPathItemField(key: string): boolean {
   return PATH_ITEM_FIELDS.has(key) || key.startsWith('x-');
 }
 
-/** The operations of a path item, keyed by their lower-case HTTP method (`get`, ..., `search`). */
-function operationsOf(item: PathItemObject): [string, EnrichedOperation][] {
-  return Object.entries(item).filter(
-    ([key, value]) => !isPathItemField(key) && typeof value === 'object' && value !== null && !Array.isArray(value),
-  ) as [string, EnrichedOperation][];
+function isOperationValue(value: unknown): value is EnrichedOperation {
+  return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
+/**
+ * The operations of a path item, keyed by their lower-case HTTP method (`get`, ..., `search`) — those
+ * in OpenAPI 3.2's `additionalOperations` included, marked by the third element.
+ */
+function operationsOf(item: PathItemObject): [string, EnrichedOperation, boolean][] {
+  const standard = Object.entries(item)
+    .filter(([key, value]) => !isPathItemField(key) && key !== ADDITIONAL_OPERATIONS && isOperationValue(value))
+    .map(([key, value]) => [key, value, false] as [string, EnrichedOperation, boolean]);
+  const additional = Object.entries((item as Record<string, unknown>)[ADDITIONAL_OPERATIONS] ?? {})
+    .filter(([, value]) => isOperationValue(value))
+    .map(([key, value]) => [key.toLowerCase(), value, true] as [string, EnrichedOperation, boolean]);
+  return [...standard, ...additional];
+}
+
+/** Store an operation where {@link operationsOf} found it: a method key, or `additionalOperations`. */
+function putOperation(
+  item: Record<string, unknown>,
+  method: string,
+  operation: EnrichedOperation,
+  additional: boolean,
+): void {
+  if (!additional) {
+    item[method] = operation;
+    return;
+  }
+  const container = (item[ADDITIONAL_OPERATIONS] ??= {}) as Record<string, unknown>;
+  container[method.toUpperCase()] = operation;
+}
+
+/** Remove an operation wherever it is stored, and an `additionalOperations` it leaves empty. */
+function removeOperation(item: Record<string, unknown>, method: string): void {
+  if (method !== ADDITIONAL_OPERATIONS && method in item) {
+    delete item[method];
+    return;
+  }
+  const container = item[ADDITIONAL_OPERATIONS] as Record<string, unknown> | undefined;
+  if (!container) {
+    return;
+  }
+  for (const key of Object.keys(container)) {
+    if (key.toLowerCase() === method) {
+      delete container[key];
+    }
+  }
+  if (!Object.keys(container).length) {
+    delete item[ADDITIONAL_OPERATIONS];
+  }
 }
 
 /** Fields of a path item that are not operations (summary, description, servers, shared parameters). */

package/src/core/common/inputs/combined-filter.input.ts

@@ -7,4 +7,4 @@
  * This file remains only so existing deep imports of `.../inputs/combined-filter.input` keep
  * resolving. Do NOT move the class back here.
  */
-export { CombinedFilterInput } from './filter.input';
+export { CombinedFilterInput } from './filter.input.js';

package/src/core/common/inputs/core-input.input.ts

@@ -1,5 +1,5 @@
-import { map } from '../helpers/model.helper';
-import { CoreModel } from '../models/core-model.model';
+import { map } from '../helpers/model.helper.js';
+import { CoreModel } from '../models/core-model.model.js';
 
 /**
  * Core Input

package/src/core/common/inputs/filter.input.ts

@@ -33,13 +33,13 @@
  */
 import { InputType } from '@nestjs/graphql';
 
-import { Restricted } from '../decorators/restricted.decorator';
-import { UnifiedField } from '../decorators/unified-field.decorator';
-import { LogicalOperatorEnum } from '../enums/logical-operator.enum';
-import { RoleEnum } from '../enums/role.enum';
-import { maps } from '../helpers/model.helper';
-import { CoreInput } from './core-input.input';
-import { SingleFilterInput } from './single-filter.input';
+import { Restricted } from '../decorators/restricted.decorator.js';
+import { UnifiedField } from '../decorators/unified-field.decorator.js';
+import { LogicalOperatorEnum } from '../enums/logical-operator.enum.js';
+import { RoleEnum } from '../enums/role.enum.js';
+import { maps } from '../helpers/model.helper.js';
+import { CoreInput } from './core-input.input.js';
+import { SingleFilterInput } from './single-filter.input.js';
 
 /**
  * Combination of multiple filters via logical operator.

package/src/core/common/inputs/single-filter.input.ts

@@ -1,11 +1,11 @@
 import { InputType } from '@nestjs/graphql';
 
-import { Restricted } from '../decorators/restricted.decorator';
-import { UnifiedField } from '../decorators/unified-field.decorator';
-import { ComparisonOperatorEnum } from '../enums/comparison-operator.enum';
-import { RoleEnum } from '../enums/role.enum';
-import { JSON } from '../scalars/json.scalar';
-import { CoreInput } from './core-input.input';
+import { Restricted } from '../decorators/restricted.decorator.js';
+import { UnifiedField } from '../decorators/unified-field.decorator.js';
+import { ComparisonOperatorEnum } from '../enums/comparison-operator.enum.js';
+import { RoleEnum } from '../enums/role.enum.js';
+import { JSON } from '../scalars/json.scalar.js';
+import { CoreInput } from './core-input.input.js';
 
 /**
  * Input for a configuration of a filter

package/src/core/common/inputs/sort.input.ts

@@ -1,10 +1,10 @@
 import { InputType } from '@nestjs/graphql';
 
-import { Restricted } from '../decorators/restricted.decorator';
-import { UnifiedField } from '../decorators/unified-field.decorator';
-import { RoleEnum } from '../enums/role.enum';
-import { SortOrderEnum } from '../enums/sort-order.emum';
-import { CoreInput } from './core-input.input';
+import { Restricted } from '../decorators/restricted.decorator.js';
+import { UnifiedField } from '../decorators/unified-field.decorator.js';
+import { RoleEnum } from '../enums/role.enum.js';
+import { SortOrderEnum } from '../enums/sort-order.emum.js';
+import { CoreInput } from './core-input.input.js';
 
 /**
  * Sorting the returned elements

package/src/core/common/interceptors/check-response.interceptor.ts

@@ -2,9 +2,9 @@ import { CallHandler, ExecutionContext, Injectable, NestInterceptor } from '@nes
 import { Observable } from 'rxjs';
 import { map } from 'rxjs/operators';
 
-import { checkRestricted } from '../decorators/restricted.decorator';
-import { getContextData } from '../helpers/context.helper';
-import { ConfigService } from '../services/config.service';
+import { checkRestricted } from '../decorators/restricted.decorator.js';
+import { getContextData } from '../helpers/context.helper.js';
+import { ConfigService } from '../services/config.service.js';
 
 /**
  * Interceptor to check the response data for current user

package/src/core/common/interceptors/check-security.interceptor.ts

@@ -2,11 +2,11 @@ import { CallHandler, ExecutionContext, Injectable, NestInterceptor } from '@nes
 import { Observable } from 'rxjs';
 import { map } from 'rxjs/operators';
 
-import { getContextData } from '../helpers/context.helper';
-import { hasRestrictionsCheckedMarker } from '../decorators/restrictions-checked.marker';
-import { getStringIds } from '../helpers/db.helper';
-import { processDeep } from '../helpers/input.helper';
-import { ConfigService } from '../services/config.service';
+import { getContextData } from '../helpers/context.helper.js';
+import { hasRestrictionsCheckedMarker } from '../decorators/restrictions-checked.marker.js';
+import { getStringIds } from '../helpers/db.helper.js';
+import { processDeep } from '../helpers/input.helper.js';
+import { ConfigService } from '../services/config.service.js';
 
 /**
  * Verification of all outgoing data via securityCheck

package/src/core/common/interceptors/response-model.interceptor.ts

@@ -2,11 +2,11 @@ import { CallHandler, ExecutionContext, Injectable, Logger, NestInterceptor } fr
 import { Observable } from 'rxjs';
 import { map } from 'rxjs/operators';
 
-import { resolveResponseModelClass } from '../helpers/interceptor.helper';
-import { CoreModel } from '../models/core-model.model';
-import { ConfigService } from '../services/config.service';
-import { ModelRegistry } from '../services/model-registry.service';
-import { hasRestrictionsCheckedMarker } from '../decorators/restrictions-checked.marker';
+import { resolveResponseModelClass } from '../helpers/interceptor.helper.js';
+import { CoreModel } from '../models/core-model.model.js';
+import { ConfigService } from '../services/config.service.js';
+import { ModelRegistry } from '../services/model-registry.service.js';
+import { hasRestrictionsCheckedMarker } from '../decorators/restrictions-checked.marker.js';
 
 /**
  * Interceptor that automatically converts plain objects and Mongoose documents

package/src/core/common/interceptors/translate-response.interceptor.ts

@@ -3,7 +3,7 @@ import { GqlContextType, GqlExecutionContext } from '@nestjs/graphql';
 import { Observable } from 'rxjs';
 import { map } from 'rxjs/operators';
 
-import { applyTranslationsRecursively } from '../helpers/service.helper';
+import { applyTranslationsRecursively } from '../helpers/service.helper.js';
 
 /**
  * Interceptor that automatically applies translations from _translations

package/src/core/common/interfaces/core-persistence-model.interface.ts

@@ -1,4 +1,4 @@
-import { CorePersistenceModel } from '../../..';
+import { CorePersistenceModel } from '../../../index.js';
 
 export interface ICorePersistenceModel<T extends CorePersistenceModel = any> {
   [key: string]: any;

package/src/core/common/interfaces/cron-job-config-with-time-zone.interface.ts

@@ -1,6 +1,6 @@
 import { CronJobParams, CronOnCompleteCommand } from 'cron';
 
-import { CronJobConfig } from './cron-job-config.interface';
+import { CronJobConfig } from './cron-job-config.interface.js';
 
 /**
  * Interface for cron job configuration

package/src/core/common/interfaces/cron-job-config-with-utc-offset.interface.ts

@@ -1,6 +1,6 @@
 import { CronJobParams, CronOnCompleteCommand } from 'cron';
 
-import { CronJobConfig } from './cron-job-config.interface';
+import { CronJobConfig } from './cron-job-config.interface.js';
 
 /**
  * Interface for cron job configuration

package/src/core/common/interfaces/scim-array-filter-node.interface.ts

@@ -1,4 +1,4 @@
-import { ScimNode } from '../types/scim-node.type';
+import { ScimNode } from '../types/scim-node.type.js';
 
 /** Represents a SCIM array filter node, e.g. emails[type eq "work"] */
 export interface ArrayFilterNode {

package/src/core/common/interfaces/scim-condition-node.interface.ts

@@ -1,4 +1,4 @@
-import { Comparator } from '../types/scim-comparator.type';
+import { Comparator } from '../types/scim-comparator.type.js';
 
 /** Represents a single SCIM condition such as userName eq "Joe" */
 export interface ConditionNode {

package/src/core/common/interfaces/scim-logical-node.interface.ts

@@ -1,5 +1,5 @@
-import { LogicalOperator } from '../types/scim-logical-operator.type';
-import { ScimNode } from '../types/scim-node.type';
+import { LogicalOperator } from '../types/scim-logical-operator.type.js';
+import { ScimNode } from '../types/scim-node.type.js';
 
 /** Represents a logical operator node (e.g., X and Y, A or B) */
 export interface LogicalNode {

package/src/core/common/interfaces/server-options.interface.ts

@@ -2,12 +2,11 @@ import { ApolloDriverConfig } from '@nestjs/apollo';
 import { Type } from '@nestjs/common';
 import { GqlModuleAsyncOptions } from '@nestjs/graphql';
 import { JwtModuleOptions } from '@nestjs/jwt';
-import type { JwtSignOptions } from '@nestjs/jwt/dist/interfaces/index.js';
+import type { JwtSignOptions } from '@nestjs/jwt';
 import { MongooseModuleOptions } from '@nestjs/mongoose';
 import { ServeStaticOptions } from '@nestjs/platform-express/interfaces/serve-static-options.interface';
 import { CronExpression } from '@nestjs/schedule';
-import type { MongoosePingCheckSettings } from '@nestjs/terminus/dist/health-indicator/database/mongoose.health.js';
-import type { DiskHealthIndicatorOptions } from '@nestjs/terminus/dist/health-indicator/disk/disk-health-options.type.js';
+import type { DiskHealthIndicatorOptions, MongoosePingCheckSettings } from '@nestjs/terminus';
 import compression from 'compression';
 import { CollationOptions } from 'mongodb';
 import type { Connection } from 'mongoose';
@@ -18,12 +17,12 @@ import type * as SMTPPool from 'nodemailer/lib/smtp-pool';
 import * as SMTPTransport from 'nodemailer/lib/smtp-transport';
 import type * as StreamTransport from 'nodemailer/lib/stream-transport';
 
-import { Falsy } from '../types/falsy.type';
-import { IHubConfig } from '../../modules/hub/interfaces/hub-config.interface';
-import { IPermissions } from '../../modules/permissions/interfaces/permissions.interface';
-import { CronJobConfigWithTimeZone } from './cron-job-config-with-time-zone.interface';
-import { CronJobConfigWithUtcOffset } from './cron-job-config-with-utc-offset.interface';
-import { MailjetOptions } from './mailjet-options.interface';
+import { Falsy } from '../types/falsy.type.js';
+import { IHubConfig } from '../../modules/hub/interfaces/hub-config.interface.js';
+import { IPermissions } from '../../modules/permissions/interfaces/permissions.interface.js';
+import { CronJobConfigWithTimeZone } from './cron-job-config-with-time-zone.interface.js';
+import { CronJobConfigWithUtcOffset } from './cron-job-config-with-utc-offset.interface.js';
+import { MailjetOptions } from './mailjet-options.interface.js';
 
 /**
  * Better-Auth field type definition
@@ -2900,10 +2899,15 @@ export interface IServerOptions {
     };
 
   /**
-   * Load local configuration
-   * false: no local configuration is loaded,
-   * true: it tries to load ./config.json or ../config.json,
-   * string: path to configuration
+   * Load a local configuration file and merge it over this environment's configuration
+   * - `false` / unset: nothing is loaded
+   * - `true`: `config.json` in the working directory, else `src/config.json`
+   * - string: path to the file, relative to the working directory. `.json` is read as JSON, anything else is loaded
+   *   as a module and its default export used
+   *
+   * Read synchronously, merged before `getEnvironmentConfig()` returns. Until 12.0.0 the file was searched next to
+   * nest-server's own config helper and merged asynchronously, so it never reached the configuration.
+   * @default false
    */
   loadLocalConfig?: boolean | string;
 

package/src/core/common/interfaces/service-options.interface.ts

@@ -1,9 +1,9 @@
 import { CollationOptions } from 'mongodb';
 import { Model, PopulateOptions } from 'mongoose';
 
-import { FieldSelection } from '../types/field-selection.type';
-import { PrepareInputOptions } from './prepare-input-options.interface';
-import { PrepareOutputOptions } from './prepare-output-options.interface';
+import { FieldSelection } from '../types/field-selection.type.js';
+import { PrepareInputOptions } from './prepare-input-options.interface.js';
+import { PrepareOutputOptions } from './prepare-output-options.interface.js';
 
 /**
  * General service options

package/src/core/common/middleware/request-context.middleware.ts

@@ -1,7 +1,7 @@
 import { Injectable, NestMiddleware } from '@nestjs/common';
 import { NextFunction, Request, Response } from 'express';
 
-import { IRequestContext, RequestContext } from '../services/request-context.service';
+import { IRequestContext, RequestContext } from '../services/request-context.service.js';
 
 /**
  * Middleware that wraps each request in a RequestContext (AsyncLocalStorage).

package/src/core/common/middlewares/security-headers.middleware.ts

@@ -1,8 +1,8 @@
 import { Injectable, NestMiddleware } from '@nestjs/common';
 import { Response as ExpressResponse, NextFunction, Request } from 'express';
 
-import { ISecurityHeaders } from '../interfaces/server-options.interface';
-import { ConfigService } from '../services/config.service';
+import { ISecurityHeaders } from '../interfaces/server-options.interface.js';
+import { ConfigService } from '../services/config.service.js';
 
 /**
  * Sets the standard browser security headers on every response.

package/src/core/common/models/core-model.model.ts

@@ -1,4 +1,4 @@
-import { map } from '../helpers/model.helper';
+import { map } from '../helpers/model.helper.js';
 
 /**
  * Core Model

package/src/core/common/models/core-persistence.model.ts

@@ -2,11 +2,11 @@ import { ObjectType } from '@nestjs/graphql';
 import { Schema } from '@nestjs/mongoose';
 import { Types } from 'mongoose';
 
-import { Restricted } from '../decorators/restricted.decorator';
-import { UnifiedField } from '../decorators/unified-field.decorator';
-import { RoleEnum } from '../enums/role.enum';
-import { getStringIds } from '../helpers/db.helper';
-import { CoreModel } from './core-model.model';
+import { Restricted } from '../decorators/restricted.decorator.js';
+import { UnifiedField } from '../decorators/unified-field.decorator.js';
+import { RoleEnum } from '../enums/role.enum.js';
+import { getStringIds } from '../helpers/db.helper.js';
+import { CoreModel } from './core-model.model.js';
 
 /**
  * Metadata for persistent objects

package/src/core/common/models/pagination-info.model.ts

@@ -1,6 +1,6 @@
 import { ObjectType } from '@nestjs/graphql';
 
-import { UnifiedField } from '../decorators/unified-field.decorator';
+import { UnifiedField } from '../decorators/unified-field.decorator.js';
 
 /**
  * Pagination information for paginated queries

package/src/core/common/pipes/check-input.pipe.ts

@@ -1,8 +1,8 @@
 import { ArgumentMetadata, Inject, Injectable, PipeTransform } from '@nestjs/common';
 import { CONTEXT } from '@nestjs/graphql';
 
-import { getContextData } from '../helpers/context.helper';
-import { check } from '../helpers/input.helper';
+import { getContextData } from '../helpers/context.helper.js';
+import { check } from '../helpers/input.helper.js';
 
 /**
  * The CheckInputPipe checks the permissibility of individual properties of inputs for the resolvers

package/src/core/common/pipes/map-and-validate.pipe.ts

@@ -23,14 +23,14 @@ import {
   ValidationArguments,
   ValidationError,
 } from 'class-validator';
-import { ValidationMetadata } from 'class-validator/types/metadata/ValidationMetadata';
+import type { ValidationMetadata } from 'class-validator/types/metadata/ValidationMetadata.js';
 import { inspect } from 'util';
 
-import { getUnifiedFieldKeys, nestedTypeRegistry } from '../decorators/unified-field.decorator';
-import { isBasicType } from '../helpers/input.helper';
-import { replaceMessageSpecialTokens } from '../helpers/validation-message.helper';
-import { ConfigService } from '../services/config.service';
-import { ErrorCode } from '../../modules/error-code/error-codes';
+import { getUnifiedFieldKeys, nestedTypeRegistry } from '../decorators/unified-field.decorator.js';
+import { isBasicType } from '../helpers/input.helper.js';
+import { replaceMessageSpecialTokens } from '../helpers/validation-message.helper.js';
+import { ConfigService } from '../services/config.service.js';
+import { ErrorCode } from '../../modules/error-code/error-codes.js';
 
 // Debug mode can be enabled via environment variable: DEBUG_VALIDATION=true
 const DEBUG_VALIDATION = process.env.DEBUG_VALIDATION === 'true';

package/src/core/common/plugins/complexity.plugin.ts

@@ -4,7 +4,7 @@ import type { ApolloServerPlugin, BaseContext, GraphQLRequestListener } from '@a
 import { GraphQLError } from 'graphql';
 import { fieldExtensionsEstimator, getComplexity, simpleEstimator } from 'graphql-query-complexity';
 
-import { ConfigService } from '../services/config.service';
+import { ConfigService } from '../services/config.service.js';
 
 @Plugin()
 export class ComplexityPlugin implements ApolloServerPlugin {

package/src/core/common/plugins/mongoose-audit-fields.plugin.ts

@@ -1,4 +1,4 @@
-import { RequestContext } from '../services/request-context.service';
+import { RequestContext } from '../services/request-context.service.js';
 
 /**
  * Mongoose plugin that automatically sets createdBy/updatedBy fields.

package/src/core/common/plugins/mongoose-password.plugin.ts

@@ -1,7 +1,7 @@
-import bcrypt = require('bcrypt');
+import bcrypt from 'bcrypt';
 import { sha256 } from 'js-sha256';
 
-import { ConfigService } from '../services/config.service';
+import { ConfigService } from '../services/config.service.js';
 
 /**
  * Mongoose plugin that automatically hashes passwords before saving to the database.

package/src/core/common/plugins/mongoose-role-guard.plugin.ts

@@ -1,8 +1,8 @@
 import { Logger } from '@nestjs/common';
 
-import { RoleEnum } from '../enums/role.enum';
-import { ConfigService } from '../services/config.service';
-import { RequestContext } from '../services/request-context.service';
+import { RoleEnum } from '../enums/role.enum.js';
+import { ConfigService } from '../services/config.service.js';
+import { RequestContext } from '../services/request-context.service.js';
 
 const logger = new Logger('mongooseRoleGuardPlugin');
 

package/src/core/common/plugins/mongoose-system-role.plugin.ts

@@ -1,6 +1,6 @@
 import { BadRequestException } from '@nestjs/common';
 
-import { looksLikeSystemRole, SYSTEM_ROLE_PREFIX } from '../enums/role.enum';
+import { looksLikeSystemRole, SYSTEM_ROLE_PREFIX } from '../enums/role.enum.js';
 
 /**
  * Mongoose plugin that refuses to STORE system roles (`s_*`) in a `roles` array.

package/src/core/common/plugins/mongoose-tenant.plugin.ts

@@ -1,7 +1,7 @@
 import { ForbiddenException, Logger } from '@nestjs/common';
 
-import { ConfigService } from '../services/config.service';
-import { RequestContext } from '../services/request-context.service';
+import { ConfigService } from '../services/config.service.js';
+import { RequestContext } from '../services/request-context.service.js';
 
 /** Models already warned about, so the message appears once per process rather than per query. */
 const isolationDisabledWarned = new Set<string>();

package/src/core/common/scalars/date-timestamp.scalar.ts

@@ -1,6 +1,6 @@
 import { CustomScalar, Scalar } from '@nestjs/graphql';
 
-import { checkAndGetDate, getDateFromGraphQL } from '../helpers/input.helper';
+import { checkAndGetDate, getDateFromGraphQL } from '../helpers/input.helper.js';
 
 /**
  * Date-Timestamp-Scalar to convert timestamp to date and vice versa

package/src/core/common/scalars/date.scalar.ts

@@ -1,6 +1,6 @@
 import { CustomScalar, Scalar } from '@nestjs/graphql';
 
-import { checkAndGetDate, getDateFromGraphQL } from '../helpers/input.helper';
+import { checkAndGetDate, getDateFromGraphQL } from '../helpers/input.helper.js';
 
 /**
  * Date scalar to convert string into date